Cascadia Readiness Testing

TEST 1: Cascadia IDP Failed Login Message

This test makes sure the Cascadia pages give reasonable error messages.

1. Login with a valid username and an invalid password.

2. Enter an invalid username and password. (this should look the same as the first)

3. Enter a valid username and password and then wait at least 4 minutes before logging in. This is testing the error message that happens when there is a timeout.

RESULTS:

· Cascadia IDP login failed screen did not include banner or help information. Our recommendation is to include them.

· Cascadia IDP did not appear to timeout after 4 minutes. Our recommendation is to review timeout.

TEST 2: Bad form data

This test makes sure the UW NetID creation pages properly check form data.

1. Login with a valid Cascadia ID and password.

2. When prompted to choose a UW NetID specify the following UW NetIDs:

a. zephyrmc (one that is already taken)

b. 1foo (one that is available but illegal)

c. foobar123 (one that is two long)

3. Now enter a valid UW NetID 'cas123'.

4. Attempt to use an invalid password:

a. $sdfa$1 (one that is too short)

b. Population (one that is a dictionary word and doesn't contain multiple character classes)

5. Remove this UW NetID so the account can be reused:

a. /usr/local/web/avf/uwndel cas123

RESULTS: This test generated no unexpected results.

TEST 3: Not Authorized

Check to see what happens when the sign up pages gets a Cascadia ID that does not have an AVF record.

1. Modify the AVF account ID of a Cascadia record to be something different then the Cascadia ID.

2. Login with the corresponding Cascadia NetID and Password.

3. Modify the AVF account ID back to the Cascadia ID.

4. Login with the Cascadia NetID and Password. Confirm this works.

RESULTS: NetID sign-up page did not immediately give an error, instead it gave the “What Is a UW NetID page”. Then when we hit next the sign-up page displayed the following error:

Tell us about yourself

We do not seem to have your validation information in our records. Please contact the Cascadia Open Learning Center, Room CC1-060, 425-352-8229 to find out why.

Validation Code: 000000001

Our recommendation is to give an error the first page stating the individual is not eligible, and it should display the contact information. Additionally it should not display the text “Validation Code” or Cascadia ID.

TEST 4: Library Access

Test to see that Cascadia AVF records with a current Cascadia affiliation get access to the Library Resources.

1. Using test Cascadia UW NetID verify test record has current affiliation.

2. Login to http://offcampus.lib.washington.edu/.

3. After authenticating the Library's proxy page should appear.

RESULTS: This test generated no unexpected results.

TEST 5: Library Access Canceled

Test to see that Cascadia AVF records with a former Cascadia affiliation record do not get access.

1. Using test Cascadia UW NetID verify test record has former affiliation. If not Modify AVF record to "Former" status.

2. Login to http://offcampus.lib.washington.edu/.

3. After authenticating the Library's proxy page give a not-authorized message.

RESULTS: This test generated no unexpected results.

TEST 6: No Longer Authorized

Test to see that Cascadia AVF records with a former affiliation and a UW NetID are not allowed to re-create a Kerberos password.

1. Modify the AVF account status to former.

2. Remove Kerberos principle of UW NetID in ManID.

3. Attempt to setup a UW NetID.

4. UW NetID password setup should fail.

RESULTS: NetID sign-up page did not immediately give an error, instead it gave the “What Is a UW NetID page”. Then when we hit next the sign-up page displayed the following error:

Get your UW NetID: Stopped

Your entry in the UW records system indicates you are not eligible to establish a password with this UW NetID at this time. Contact Computing and Communications (C&C) at 206-543-5970 if you have further questions.

Our recommendation is to give an error the first page stating the individual is not eligible, and it should display the contact information for Cascadia computing support.

TEST 7: NetID access canceled

Test to see that user's with a former Cascadia affiliation can not re-create their password after its been deleted/expired.

1. Using a test Cascadia login with a UW NetID assigned. Delete Kerberos principle in ManID.

1. Goto uwnetid.washington.edu/reset/

2. Enter UW NetID of test Cascadia user.

3. The reset process should not allow the user to create a new Kerberos principle.

RESULTS: The password reset page displayed the following error:

Reset a Forgotten Password: Stopped

Our recommendation is to give an error page stating the individual is not eligible, and it should display the contact information for Cascadia computing support.

TEST 8: Verify manage page doesn't show Supplemental/Listproc options for this population.

1. Using UW NetID and password of a test Cascadia user login to uwnetid.washington.edu/manage/

2. The "Request other services" option should not be visible or should not offer additional services.

RESULTS: Mailman and Newsgroup setup appears in “Request other services” screen.

Our recommendation is that “Request other services” should either not appear or should display information stating that their UW NetID is not eligible for other services.

TEST 9: Test Partial NetID Sign-up

1. Using a test Cascadia login with no UW NetID assigned, goto NetID sign-up page.

2. Create a UW NetID.

3. At the password creation screen cancel the process.

4. Close all browser windows.

5. Return to the UW NetID sign-up process. The page should confirm the test user has already setup a NetID and then resume the process at password creation.

RESULTS: This test generated no unexpected results.

TEST 10: Password reset doesn’t allow IDP authentication of another user

When attempting to reset the UW NetID password the reset tool should not allow a different Cascadia user to login and reset that NetID’s password.

1. Visit the general UW NetID password reset page.

2. Enter UW NetID of “test100” in NetID field. Hit next.

3. Login with a second test user’s Cascadia information.

4. Verify an error is given by password reset tool.

RESULTS: This test generated no unexpected results.