os-autoinst-distri-opensuse
os-autoinst-distri-opensuse copied to clipboard
os-autoinst
sssd: Setup support for GPO enforcement
GPO stands for Global Policy Objects which is a fancy acronym for an ACL, in general we want to ensure that users that are explicitly denied access to services (or have other kind of permissions on their profile) can't login, and that sssd honors such options.
Prior to enabling the following settings, user bernhard (from geeko.com domain) would be able to login via ssh to the SUT.
+access_provider = ad +ad_gpo_access_control = enforcing
VR:
- samba_adcli: Export relevant logs on failure
- Support getting journal files for enabled services
- opensusebasetest: Update the flow of error detection mechanism
- consoletest: Use serial terminal after parent's post_fail_hook
- Run parent post_fail_hooks to get better logging
At the moment, if the SUT is using a serial terminal, we simply return, and let the rest of the post-fail-hook to do the work, so if the child (e.g consoletest) doesn't call export_logs() or doesn't do any specific actions, export_logs_basic will be called, and these logs aren't really providing much.
VR:
- sle-15-SP1-Server-DVD-Updates-aarch64-Build20210729-1-mau-extratests2@aarch64-virtio
- sle-15-SP1-Server-DVD-Updates-x86_64-Build20210729-1-mau-extratests2@64bit
- sle-15-SP2-Server-DVD-Updates-x86_64-Build20210729-1-mau-extratests2@64bit
- sle-15-SP3-Server-DVD-Updates-aarch64-Build20210729-1-mau-extratests2@aarch64-virtio
- sle-15-SP3-Server-DVD-Updates-x86_64-Build20210729-1-mau-extratests2@64bit
@mloviska can you check the changes I've done to journalctl? nothing huge, but I´d like your blessing :)