been trying to get a configuration working with ovirt 4.5.4 and keycloak and windows
Active Directory
I have had partial success in that i can with a little fiddling use ldap authentication
for users. The fiddling involves going in and adding specific permissions to each ID after
the first attempt has been made.
I am now trying to get groups working such that I can have an AD user group automatically
determine a users capabilities dependent on inclusion in specific groups.
I have keycloak configured where, from within keycloak I can list users, And i can see
which groups a user is a member of. It looks like is should be working. However, in Ovirt
im getting invalid data error in the web and logs print the following
==> error_log <==
[Thu Oct 05 09:22:58.037130 2023] [proxy_ajp:error] [pid 75583:tid 140622648301312]
AH03229: ajp_msg_append_cvt_string(): BufferOverflowException 4 5694
==> ssl_error_log <==
[Thu Oct 05 09:22:58.037162 2023] [proxy_ajp:error] [pid 75583:tid 140622648301312]
[client 172.28.96.180:43980] AH00971: ajp_marshal_into_msgb: Error appending the header
value, referer:
https://ov2ctl01-mn.internal.shutterfly.com/ovirt-engine/
[Thu Oct 05 09:22:58.037171 2023] [proxy_ajp:error] [pid 75583:tid 140622648301312]
[client 172.28.96.180:43980] AH00988: ajp_send_header: ajp_marshal_into_msgb failed,
referer:
https://ov2ctl01-mn.internal.shutterfly.com/ovirt-engine/
[Thu Oct 05 09:22:58.037176 2023] [proxy_ajp:error] [pid 75583:tid 140622648301312]
(120001)APR does not understand this error code: [client 172.28.96.180:43980] AH00868:
request failed to 127.0.0.1:8702 (127.0.0.1), referer:
https://ov2ctl01-mn.internal.shutterfly.com/ovirt-engine/
Pretty sure i need to be able to adjust a buffer size between keycloak and ajp module but
am clueless how to proceed. Any help would be appreciated