<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
mso-fareast-language:EN-IN;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DA" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Re. FQDN:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">The full username is a combination of the full username from your AD, e.g.
<a href="mailto:ban-mg01@BANONE......net">ban-mg01@BANONE......net</a>, and the internal domain which was configured during LDAP setup, e.g. “@internal” or in this case “@<domain>”. During the setup you were asked to put a name or something and here you could
put whatever – it has no real effect as far as I can tell. It could have been “@banone” for all oVirt cared, I believe.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Re. user login:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">oVirt differs between being able to log in that is being authorized and logging
<i>into the portals</i>. If you make sure your user account has admin privileges, you should be able to log into the administration portal, too. Check the permissions.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">// Mike <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="mso-fareast-language:DA">From:</span></b><span lang="EN-US" style="mso-fareast-language:DA"> users-bounces@ovirt.org [mailto:users-bounces@ovirt.org]
<b>On Behalf Of </b>G, Maghesh Kumar (Nokia - IN/Bangalore)<br>
<b>Sent:</b> 18. april 2018 11:27<br>
<b>To:</b> users@ovirt.org<br>
<b>Subject:</b> [ovirt-users] oVirt - AD authentication Issues.<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-IN">Hi</span><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";mso-fareast-language:EN-IN">,<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span lang="EN-IN"><o:p> </o:p></span></p>
<pre><span lang="EN-IN" style="font-size:12.0pt;color:black">Description of problem:<o:p></o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt">Not able to perform operations like Administration portal or VM Portal.<o:p></o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt">Also not sure why FQDN appears twice!...<o:p></o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt">ERROR: The user <b><a href="mailto:ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net"><span style="font-weight:normal">ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net</span></a></b> is not authorized to perform login<o:p></o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt">oVirt Engine <span style="color:black">Version: Ovirt-4.2</span>.2<span style="color:black"><o:p></o:p></span></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt;color:black">Host is installed with RHEL 7.4<o:p></o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:11.0pt;font-family:"Calibri",sans-serif"><o:p> </o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt;color:black"><o:p> </o:p></span></pre>
<pre><span lang="EN-IN" style="font-size:12.0pt;color:black">Actual results:<o:p></o:p></span></pre>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN">2018-04-18 14:35:51,388+05 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-55) [27275ec2] Running command: CreateUserSessionCommand internal: false.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN">2018-04-18 14:35:51,412+05 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-55) [27275ec2] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
<a href="mailto:ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net">ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net</a> connecting from '10.136.189.117' failed to log in.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN">2018-04-18 14:35:51,413+05 ERROR [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-55) [] The user
<a href="mailto:ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net">ban-mg01@BANONE.nsn-rdnet.net@BANONE.nsn-rdnet.net</a> is not authorized to perform login<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN"><img border="0" width="1561" height="719" style="width:16.2604in;height:7.4895in" id="Picture_x0020_1" src="cid:image001.png@01D3D730.41E6E790"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-IN">Please guide us how to proceed</span><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";mso-fareast-language:EN-IN">!..<span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";mso-fareast-language:EN-IN">Thank you!.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";mso-fareast-language:EN-IN"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-IN">Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN" style="font-size:12.0pt;font-family:"Courier New";color:black;mso-fareast-language:EN-IN">Maghesh<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-IN"><o:p> </o:p></span></p>
</div>
</body>
</html>