<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
It works fine, but it kills SSO as user...<br>
<br>
Poking in the windows logs I see a failed login as:<br>
<br>
<a class="moz-txt-link-abbreviated" href="mailto:myuser@mydomain.tld-authz">myuser@mydomain.tld-authz</a> !!<br>
<br>
<div class="moz-cite-prefix">Il 27/10/2015 11:51, Shahar Havivi ha
scritto:<br>
</div>
<blockquote cite="mid:20151027105144.GA16392@redhat.com" type="cite">
<pre wrap="">On 27.10.15 05:25, Alon Bar-Lev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">yes, you should probably only customize: $JoinDomain$, $DomainAdminPassword$, $DomainAdmin$
maybe, not sure: $JoinDomain$, $MachineObjectOU$
the rest should be the same as any other.
</pre>
</blockquote>
<pre wrap="">Please make sure that the file is the full sysprep file such as you can find
in /packaging/conf/sysprep/sysprep.w7 which is a windows 7 sysprep file.
You can leave the variables such as $OrgName$ which will be replaces (exept
from the variables that Alon mentioned which where the original problem).
</pre>
<blockquote type="cite">
<pre wrap="">
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "Cristian Mammoli" <a class="moz-txt-link-rfc2396E" href="mailto:c.mammoli@apra.it"><c.mammoli@apra.it></a>
To: "Shahar Havivi" <a class="moz-txt-link-rfc2396E" href="mailto:shaharh@redhat.com"><shaharh@redhat.com></a>, "Alon Bar-Lev" <a class="moz-txt-link-rfc2396E" href="mailto:alonbl@redhat.com"><alonbl@redhat.com></a>
Cc: "users" <a class="moz-txt-link-rfc2396E" href="mailto:users@ovirt.org"><users@ovirt.org></a>
Sent: Tuesday, October 27, 2015 11:19:02 AM
Subject: Re: [ovirt-users] ovirt-engine-extension-aaa-ldap and sysprep domain join
So just pasting there the contents of a modified
/usr/share/ovirt-engine/conf/sysprep/sysprep.w7x64 (for example) should
work right?
The variables like '![CDATA[$OrgName$' will be replaced?
Il 26/10/2015 12:43, Shahar Havivi ha scritto:
</pre>
<blockquote type="cite">
<pre wrap="">On 26.10.15 06:23, Alon Bar-Lev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
The usage of the engine-manage-domain user to anything else but ldap
searches is something that is unexpected and insecure.
As a solution, you may either paste a modified sysprep file into the pool
at UI or set up a different osinfo profile with modified sysprep file,
this modified sysprep file can contain the credentials of the user that
is being used for joining the domain.
CCing Shahar which may assist farther.
</pre>
</blockquote>
<pre wrap="">Hi,
You can paste a modified sysprep file to "new Pool"->"Initial run"->"Custom
Script"
As Alon mentioned.
</pre>
<blockquote type="cite">
<pre wrap="">
</pre>
</blockquote>
</blockquote>
<pre wrap="">
--
Mammoli Cristian
System administrator
T. +39 0731 22911
Via Brodolini 6 | 60035 Jesi (an)
</pre>
</blockquote>
</blockquote>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<span style=" font-family:'Helvetica Neue', Helvetica, Arial,
sans-serif; font-size:16px; font-weight:bold; color:#000;
margin-left:10px;">Mammoli Cristian</span><br>
<span style=" font-family:'Helvetica Neue', Helvetica, Arial,
sans-serif; font-size:12px;color:#000;margin-left:10px;">System
administrator</span><br>
<span style=" font-family:'Helvetica Neue', Helvetica, Arial,
sans-serif; font-size:12px;color:#000;margin-left:10px;">T. +39
0731 22911</span><br>
<span style=" font-family:'Helvetica Neue', Helvetica, Arial,
sans-serif; font-size:12px;color:#000;margin-left:10px;">Via
Brodolini 6 | 60035 Jesi (an)</span><br>
<br>
<img src="cid:part1.00060709.09020100@apra.it" alt=""
usemap="#Map">
<map name="Map">
<area shape="rect" coords="9,4,27,24"
href="https://www.facebook.com/aprainformatica" style="
cursor:pointer" title="Facebook">
<area shape="rect" coords="40,4,60,22"
href="https://twitter.com/ApraInformatica" style="
cursor:pointer" title="Twitter">
<area shape="rect" coords="75,3,94,25"
href="https://plus.google.com/u/0/+ApraIt/posts" style="
cursor:pointer" title="Google Plus">
<area shape="rect" coords="106,4,126,22"
href="http://www.linkedin.com/company/apra_2" style="
cursor:pointer" title="Linkedin">
<area shape="rect" coords="7,60,182,117"
href="http://www.apra.it/" style=" cursor:pointer"
title="Apra">
</map>
</div>
</body>
</html>