Hy!

2021. 09. 09. 14:33 keltezéssel, Yedidyah Bar David írta:

From very casual skimming of the patch, it seems to me like you should be able to restore the previous behavior by setting in your conf file 'pool.default.socketfactory.resolver.detectIPVersion = false'. Can you please try that?

We've tried it, but no luck...

[root@virt ~]# cat /etc/ovirt-engine/aaa/NIIFLdap.properties include = <rfc2307-generic.properties> vars.user = ... vars.password = ... pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} pool.default.serverset.type = failover pool.default.serverset.failover.00.server = ldap.niif.hu pool.default.serverset.failover.00.port = 636 pool.default.serverset.failover.01.server = ldap-master.niif.hu pool.default.serverset.failover.01.port = 636 pool.default.ssl.enable = true pool.default.socketfactory.resolver.detectIPVersion = false

After that, the engine was restarted, and we still got this error on GUI:

server_error: An error occurred while attempting to connect to server ldap-master.niif.hu:636: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap-master.niif.hu/193.225.14.175:636: UnknownHostException(ldap-master.niif.hu), ldapSDKVersion=4.0.14, revision=c0fb784eebf9d36a67c736d0428fb3577f2e25bb'))

Could you please validate this CNAME issue with this new behaviour of IPv4/6 detection?

Thanks:
Peter

Erdősi Péter
Informatikus, IKT Fejlesztési Főosztály

Kormányzati Informatikai Fejlesztési Ügynökség
cím: 1134 Budapest, Váci út 35.
tel: +36 1 450 3080 e-mail: erdosi.peter@kifu.gov.hu