On Wed, Jun 1, 2016 at 11:54 AM, Alexis HAUSER <
alexis.hauser(a)telecom-bretagne.eu> wrote:
Hi,
I'm trying to find what are the different ways / approaches to automated
users/groups creation, based on a LDAP/AD database.
This is my first problematic : when a LDAP/AD provider is joined, and a
user is created in ovirt from this provider, the user heritates a part of
the attributes from this LDAP database. Now if I change one attribute on
the LDAP side (for example "first name"), it isn't updated on the ovirt
user.
Would there be other way to update this information than creating /
deleting the user ?
Those informations should be updated after next login of the user. We did
synchronization in the past, but we decided not to do that any more due to
performance/sync issues.
My second problematic is what should I use to automate creation of users.
It seems possible with :
- shell scripting : using ovirt-aaa-jdbc-tool
This is usable only for users/groups in database
provided by aaa-jdbc extension
- python SDK
- java SDK
- rest API
Which one of these approaches would be the most simple ? I'm more familiar
with shell scripting than other languages. That would be nice to find a way
with it.
Concerning ovirt-aaa-jdbc-tool, I've heard it was only adding/deleting
users from the internal DB, not the others. In that case, is there a way in
shell scripting to interact with other profiles than internal ?
You can create as many aaa-jdbc profiles as needed, please take a look at
README.administrator inside aaa-jdbc package
Is there files somewhere containing users and their informations I could
modify ?
What would happen if a user is in use and it is modified/deleted at the
same time ?
I know it makes a lot of questions, but I can't really get started before
having those answers.
We do not support modifying content of LDAP server, to do that you need to
use tools provided by your LDAP provider.
Martin Perina
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users