<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hey,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m running into an issue which I’m not sure where to go from here. I’m trying to use LDAP authentication and am following the setup guide from here
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><a href="https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD">https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have tested the ldap credentials manually using ldapsearch, and I get results as expected with the user I’m binding with - but when I use ovirt I run into problems.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I hope someone can provide me some guidance, or other things to try!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">DNS resolves;<o:p></o:p></p>
<p class="MsoNormal">Can manually do ldap lookups using ldapsearch<o:p></o:p></p>
<p class="MsoNormal">Can telnet to hostname 389 successfully<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Below are the steps taken;<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"># ovirt-engine-extension-aaa-ldap-setup<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Initializing<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Environment setup<o:p></o:p></p>
<p class="MsoNormal"> Configuration files: ['/etc/ovirt-engine-extension-aaa-ldap-setup.conf.d/10-packaging.conf']<o:p></o:p></p>
<p class="MsoNormal"> Log file: /tmp/ovirt-engine-extension-aaa-ldap-setup-20160115151231-o0d7hp.log<o:p></o:p></p>
<p class="MsoNormal"> Version: otopi-1.4.0 (otopi-1.4.0-1.el7.centos)<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Environment packages setup<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Programs detection<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Environment customization<o:p></o:p></p>
<p class="MsoNormal"> Welcome to LDAP extension configuration program<o:p></o:p></p>
<p class="MsoNormal"> Please specify profile name that will be visible to users: LDAP<o:p></o:p></p>
<p class="MsoNormal"> Available LDAP implementations:<o:p></o:p></p>
<p class="MsoNormal"> 1 - 389ds<o:p></o:p></p>
<p class="MsoNormal"> 2 - 389ds RFC-2307 Schema<o:p></o:p></p>
<p class="MsoNormal"> 3 - Active Directory<o:p></o:p></p>
<p class="MsoNormal"> 4 - IPA<o:p></o:p></p>
<p class="MsoNormal"> 5 - Novell eDirectory RFC-2307 Schema<o:p></o:p></p>
<p class="MsoNormal"> 6 - OpenLDAP RFC-2307 Schema<o:p></o:p></p>
<p class="MsoNormal"> 7 - OpenLDAP Standard Schema<o:p></o:p></p>
<p class="MsoNormal"> 8 - Oracle Unified Directory RFC-2307 Schema<o:p></o:p></p>
<p class="MsoNormal"> 9 - RFC-2307 Schema (Generic)<o:p></o:p></p>
<p class="MsoNormal"> 10 - RHDS<o:p></o:p></p>
<p class="MsoNormal"> 11 - RHDS RFC-2307 Schema<o:p></o:p></p>
<p class="MsoNormal"> 12 - iPlanet<o:p></o:p></p>
<p class="MsoNormal"> Please select: 1<o:p></o:p></p>
<p class="MsoNormal"> NOTE:<o:p></o:p></p>
<p class="MsoNormal"> It is highly recommended to use DNS resolution for LDAP server.<o:p></o:p></p>
<p class="MsoNormal"> If for some reason you intend to use hosts or plain address disable DNS usage.<o:p></o:p></p>
<p class="MsoNormal"> Use DNS (Yes, No) [Yes]:<o:p></o:p></p>
<p class="MsoNormal"> Available policy method:<o:p></o:p></p>
<p class="MsoNormal"> 1 - Single server<o:p></o:p></p>
<p class="MsoNormal"> 2 - DNS domain LDAP SRV record<o:p></o:p></p>
<p class="MsoNormal"> 3 - Round-robin between multiple hosts<o:p></o:p></p>
<p class="MsoNormal"> 4 - Failover between multiple hosts<o:p></o:p></p>
<p class="MsoNormal"> Please select: 1<o:p></o:p></p>
<p class="MsoNormal"> Please enter host address: ldap-test-server<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Trying to resolve host 'ldap-test-server'<o:p></o:p></p>
<p class="MsoNormal"> NOTE:<o:p></o:p></p>
<p class="MsoNormal"> It is highly recommended to use secure protocol to access the LDAP server.<o:p></o:p></p>
<p class="MsoNormal"> Protocol startTLS is the standard recommended method to do so.<o:p></o:p></p>
<p class="MsoNormal"> Only in cases in which the startTLS is not supported, fallback to non standard ldaps protocol.<o:p></o:p></p>
<p class="MsoNormal"> Use plain for test environments only.<o:p></o:p></p>
<p class="MsoNormal"> Please select protocol to use (startTLS, ldaps, plain) [startTLS]: plain<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Connecting to LDAP using 'ldap://ldap-test-server:389'<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Connection succeeded<o:p></o:p></p>
<p class="MsoNormal"> Enter search user DN (empty for anonymous): uid=ovirt-test,ou=Special Users,dc=test<o:p></o:p></p>
<p class="MsoNormal"> Enter search user password:<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Attempting to bind using 'uid=ovirt-test,ou=Special Users,dc=test'<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Setup validation<o:p></o:p></p>
<p class="MsoNormal"> NOTE:<o:p></o:p></p>
<p class="MsoNormal"> It is highly recommended to test drive the configuration before applying it into engine.<o:p></o:p></p>
<p class="MsoNormal"> Perform at least one Login sequence and one Search sequence.<o:p></o:p></p>
<p class="MsoNormal"> Select test sequence to execute (Done, Abort, Login, Search) [Abort]: Login<o:p></o:p></p>
<p class="MsoNormal"> Enter search user name: uid=ovirt-test,ou=Special Users,dc=test<o:p></o:p></p>
<p class="MsoNormal"> Enter search user password:<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Executing login sequence...<o:p></o:p></p>
<p class="MsoNormal"> Login output:<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ========================================================================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ============================ Initialization ============================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ========================================================================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Loading extension 'LDAP-authn'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Extension 'LDAP-authn' loaded<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Loading extension 'LDAP-authz'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Extension 'LDAP-authz' loaded<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Initializing extension 'LDAP-authn'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO [ovirt-engine-extension-aaa-ldap.authn::LDAP-authn] Creating LDAP pool 'authz'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 WARNING [ovirt-engine-extension-aaa-ldap.authn::LDAP-authn] Cannot initialize LDAP framework, deferring initialization. Error: An error occurred while attempting to connect to server ldap-test-server:389:
java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')
caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')LDAPException(resultCode=91
(connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server') caused by java.net.UnknownHostException: ldap-test-server<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Extension 'LDAP-authn' initialized<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Initializing extension 'LDAP-authz'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO [ovirt-engine-extension-aaa-ldap.authz::LDAP-authz] Creating LDAP pool 'authz'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 WARNING [ovirt-engine-extension-aaa-ldap.authz::LDAP-authz] Cannot initialize LDAP framework, deferring initialization. Error: An error occurred while attempting to connect to server ldap-test-server:389:
java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')
caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')LDAPException(resultCode=91
(connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server') caused by java.net.UnknownHostException: ldap-test-server<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Extension 'LDAP-authz' initialized<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Start of enabled extensions list<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Instance name: 'LDAP-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.1.2', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.1.2-1.el7.centos', License: 'ASL 2.0',
Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpM8fPs4/extensions.d/LDAP-authn.properties', Initialized: 'true'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Instance name: 'LDAP-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.1.2', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.1.2-1.el7.centos', License: 'ASL 2.0',
Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpM8fPs4/extensions.d/LDAP-authz.properties', Initialized: 'true'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO End of enabled extensions list<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ========================================================================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ============================== Execution ===============================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO ========================================================================<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO Profile='LDAP' authn='LDAP-authn' authz='LDAP-authz' mapping='null'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS user='uid=ovirt-test,ou=Special Users,dc=test'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 INFO [ovirt-engine-extension-aaa-ldap.authn::LDAP-authn] Creating LDAP pool 'authz'<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 WARNING [ovirt-engine-extension-aaa-ldap.authn::LDAP-authn] Cannot initialize LDAP framework, deferring initialization. Error: An error occurred while attempting to connect to server ldap-test-server:389:
java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')
caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')LDAPException(resultCode=91
(connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server') caused by java.net.UnknownHostException: ldap-test-server<o:p></o:p></p>
<p class="MsoNormal"> 2016-01-15 15:13:25 SEVERE An error occurred while attempting to connect to server ldap-test-server:389: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish
a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server') caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection
to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389: java.net.UnknownHostException: ldap-test-server')LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-test-server/xxxx:xxxx:xxx:x:xxxx:xx:xx48:dcc0:389:
java.net.UnknownHostException: ldap-test-server') caused by java.net.UnknownHostException: ldap-test-server<o:p></o:p></p>
<p class="MsoNormal">[ ERROR ] Sequence failed<o:p></o:p></p>
<p class="MsoNormal"> Select test sequence to execute (Done, Abort, Login, Search) [Abort]:<o:p></o:p></p>
<p class="MsoNormal">[ ERROR ] Failed to execute stage 'Setup validation': Aborted by user<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Clean up<o:p></o:p></p>
<p class="MsoNormal"> Log file is available at /tmp/ovirt-engine-extension-aaa-ldap-setup-20160115151231-o0d7hp.log:<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Pre-termination<o:p></o:p></p>
<p class="MsoNormal">[ INFO ] Stage: Termination<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
This email and any attachments may contain confidential and proprietary information of Blackboard that is for the sole use of the intended recipient. If you are not the intended recipient, disclosure, copying, re-distribution or other use of any of this information
is strictly prohibited. Please immediately notify the sender and delete this transmission if you received this email in error.
</body>
</html>