Re: [Users] Testing LDAP support.

----- Original Message ----- If you are working with an installed oVirt environment, you can use engine-manage-domains utility in order to add/remove/edit domains. It will create the krb5.conf file, update database entries, add permissions for the user you use, and etc. If, however, you are in a development environment, then currently it is not easy to run this utility, as it requires some configuration files and jars that are there when you install the engine, but not there in a development environment. So, in that case you'll need to run the following (change the domain name, user name and user guid): update vdc_options set option_value = '<your domain>' where option_name = 'DomainName'; update vdc_options set option_value = '<your domain>:<your user>@<your domain>' where option_name= 'AdUserName'; update vdc_options set option_value = '<your domain>:<user guid>' where option_name='AdUserId'; update vdc_options set option_value = '<your domain>:<your password>' where option_name='AdUserPassword'; insert into permissions (id,role_id,ad_element_id,object_id,object_type_id) values ('<choose a random guid>','00000000-0000-0000-0000-000000000001','<user guid>','aaa00000-0000-0000-0000-123456789aaa',1); Also, you'll have to create a krb5.conf file, and place it in $JBOSS_HOME/standalone/configuration An example for the contents of this file: [libdefaults] default_realm = EXAMPLE.COM dns_lookup_realm = false dns_lookup_kdc = false ticket_lifetime = 24h renew_lifetime = 7d forwardable = no default_tkt_enctypes = arcfour-hmac-md5 udp_preference_limit = 1 [realms] EXAMPLE.COM = { kdc = my_host.example.com.:88 } [domain_realm] example.com = EXAMPLE.COM Note that you need to have the following records for your LDAP server, defined in the DNS: * LDAP SRV record * Kerberos SRV record * PTR record (You can use "dnsmasq" if you wish to create those records by yourself - if you need help with this let me know). Oved