Fedora Server AD Integration Testing
------------------------------------
**NOTE: The tools and docs in this repo are known to be incomplete and are not likely to be needed any more**
  * It was recently proposed that we drop the AD tests from Fedora's release blocking tests
  * If those tests no longer block release, there is no need for any of the contents of this repo.
  * If the AD tests are no longer blocking the release of Fedora Server, these tools and docs will not be completed and the repo will be marked as archive.
This repo is a set of playbooks and scripts designed to test the Fedora Server AD integration tests.
 * https://fedoraproject.org/wiki/Test_Results:Current_Server_Test#Domain_joining_tests:_Active_Directory
The exact tests run are:
 * https://fedoraproject.org/wiki/QA:Testcase_realmd_join_kickstart
 * https://fedoraproject.org/wiki/QA:Testcase_realmd_join_sssd
 * https://fedoraproject.org/wiki/QA:Testcase_realmd_join_cockpit
Setup Notes : libvirt
---------------------
These are notes to set up a Windows Server for AD testing - only Windows Server 2019 was ever tested with this.
Host Prep
=========
  - firewall-cmd --zone=libvirt --add-port 5986/tcp # the port used by WinRM
  - firewall-cmd --zone=libvirt --add-port 8000/tcp # only if you're transferring files over http
Create Windows Server VM
========================
Make sure that the disk is big enough. 20G with graphical is not enough (~18G used).
The windows server trial isos will work with this
General Notes
-------------
The DC must be specified as the primary DNS server on the SUT for AD auth to workwork
Some automation for setup of a Windows DC for testing
-----------------------------------------------------
Pretty much follow the information at
  - https://docs.ansible.com/ansible/latest/os_guide/windows_setup.html
  - WS19 seems to have new enough powershell, doesn't need all the setup
If you're using libvirt, make sure you open ports
  - firewall-cmd --zone=libvirt --add-port 5986/tcp
  - firewall-cmd --zone=libvirt --add-port 8000/tcp # only if you're transferring files over http
After downloading the ps1 script:
  .\Setup-WinRM-Listener.ps1
For the life of me, I can't find another way to set a one-time (or any time)
password for adding a computer to the domain. The only way seems to be adcli
on a machine that can see the domain, which means another VM.