<div dir="ltr"><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Kristian Petersen</b> <span dir="ltr"><<a href="mailto:nesretep@chem.byu.edu">nesretep@chem.byu.edu</a>></span><br>Date: Tue, Apr 24, 2018 at 12:38 PM<br>Subject: Re: [ovirt-users] FreeIPA authentication broken<br>To: Ondra Machacek <<a href="mailto:omachace@redhat.com">omachace@redhat.com</a>><br><br><br><div dir="ltr">That directory only contains internal.properties. So I copied the IPA.properties, IPA-authn.properties, and IPA.jks files all into the 'aaa' subdirectory and set ownership and permissions as you directed. I reran the command you gave me initially and it prompted me for a password for the user when entered the process exited with status 0. However, the web interface still isn't letting me log in. Do I need to restart a service for the changes to be effective in the web UI?</div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Mon, Apr 23, 2018 at 11:59 PM, Ondra Machacek <span dir="ltr"><<a href="mailto:omachace@redhat.com" target="_blank">omachace@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Right, you are missing file /etc/ovirt-engine/aaa/IPA.prop<wbr>erties<br>
<br>
It's not subdirectory of /etc/ovirt-engine/extensions.d<wbr>, but it's in<br>
/etc/ovirt-engine/ in 'aaa' subdirectory, can you check what's there?<br>
Please check also the correct permissions of that file, it should be<br>
'600' and owned by ovirt user.<div class="m_3138385774333611459HOEnZb"><div class="m_3138385774333611459h5"><br>
<br>
On 04/23/2018 10:25 PM, Kristian Petersen wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Looks like it can't find the IPA.properties file. I tried following the path it is complaining about but there are only files in /etc/ovirt-engine/extensions.d on the engine VM. No subdirectories. However, that directory appears to contain the files it is looking for. Both IPA-authn.properties and IPA.properties are there as are the internal properties files. Is there a config file we can edit to tell it to look in the right place?<br>
<br>
</blockquote>
</div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="">-- <br><div class="m_3138385774333611459gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Kristian Petersen<div>System Administrator</div><div>BYU Dept. of Chemistry and Biochemistry</div></div></div></div></div></div></div>
</span></div>
</div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr">Kristian Petersen<div>System Administrator</div><div>BYU Dept. of Chemistry and Biochemistry</div></div></div></div></div></div></div>
</div>