[ovirt-devel] Re: ovirt-engine-extension-aaa-ldap broken, if using CNAME for LDAP server DNS

Hy! 2021. 09. 09. 14:33 keltezéssel, Yedidyah Bar David írta: We've tried it, but no luck... [root@virt ~]# cat /etc/ovirt-engine/aaa/NIIFLdap.properties include = <rfc2307-generic.properties> vars.user = ... vars.password = ... pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} pool.default.serverset.type= failover pool.default.serverset.failover.00.server = ldap.niif.hu pool.default.serverset.failover.00.port = 636pool.default.serverset.failover.01.server = ldap-master.niif.hu pool.default.serverset.failover.01.port = 636pool.default.ssl.enable = truepool.default.socketfactory.resolver.detectIPVersion = false After that, the engine was restarted, and we still got this error on GUI: server_error: An error occurred whileattempting toconnect toserver ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91(connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb')) Could you please validate this CNAME issue with this new behaviour of IPv4/6 detection? Thanks:  Peter -- *Erdősi Péter * /Informatikus, IKT Fejlesztési Főosztály / *Kormányzati Informatikai Fejlesztési Ügynökség * cím: 1134 Budapest, Váci út 35. tel: +36 1 450 3080 e-mail: erdosi.peter(a)kifu.gov.hu <mailto:erdosi.peter@kifu.gov.hu> KIFÜ - www.kifu.gov.hu <http://kifu.gov.hu/kifu/>