From raghav at exzatechconsulting.com Wed Sep 28 03:57:44 2016 Content-Type: multipart/mixed; boundary="===============6743589440531252418==" MIME-Version: 1.0 From: Anantha Raghava To: users at ovirt.org Subject: Re: [ovirt-users] oVirt Active Directory Integration Date: Wed, 28 Sep 2016 13:27:39 +0530 Message-ID: <1b662056-65fa-259a-05bf-aa1b64b87868@exzatechconsulting.com> In-Reply-To: 542985227.69761.1475049229101.JavaMail.zimbra@redhat.com --===============6743589440531252418== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable This is a multi-part message in MIME format. --------------876ED9474170EFDFF2C93EAC Content-Type: text/plain; charset=3Dutf-8; format=3Dflowed Content-Transfer-Encoding: 7bit Thanks for quick response Ondra. Before I make another attempt to properly configure, can I re-execute = the ovirt aaa ldap setup again without disturbing the current setup? = Will that help me to correct the problem? -- = Thanks & Regards, Anantha Raghava eXza Technology Consulting & Services Do not print this e-mail unless required. Save Paper & trees. On Wednesday 28 September 2016 01:23 PM, Ondra Machacek wrote: > ----- Anantha Raghava wrote: >> Hello Ondra >> >> Please find the attached file. I have also attached the setup log file. >> I find the errors & warnings there too. But I am unable to figure out >> what really went wrong. >> >> One more thing, while setting aaa-ldap extension, since it threw error >> on user DN, did not properly recognise, I used "anonymous", also did not >> perform the Login Test. Are these the root cause? > Yes, it is root cause. Active directory usually has anonymous bind disabl= ed. You can enter UPN instead of DN, if you want. In your case it will be s= omething like vdiadmin(a)rvce.in. Please note that AD usually use CN attrib= ute in DN, not uid attribute, that may be the problem in your DN. >> -- = >> >> Thanks & Regards, >> >> >> Anantha Raghava >> >> eXza Technology Consulting & Services >> >> >> >> Do not print this e-mail unless required. Save Paper & trees. >> >> On Wednesday 28 September 2016 12:18 PM, Ondra Machacek wrote: >>> On 09/28/2016 05:25 AM, Anantha Raghava wrote: >>>> Hi, >>>> >>>> I am trying to integrate the oVirt Engine with Active Directory to >>>> enable user logins. I installed the ovirt ldap extension and executed >>>> the setup. The process completed successfully and the profile is visib= le >>>> in engine log in page. >>> Most probably it wasn't successful, because as you can see in >>> screenshot there is no 'namespace', you should see there something, if >>> configuration is correct. >>> >>> Can you please send output of the following command? >>> >>> $ ovirt-engine-extensions-tool --log-level=3DFINEST >>> --log-file=3D/tmp/aaa.log aaa search --extension-name=3Ddomain-authz >>> >>> There should be some ERROR or WARN. >>> >>> Thanks. >>> >>>> Now, when I try to add the user and assign the roles, it is not allowi= ng >>>> me to browse through the profile & the user list. Infact the "GO" butt= on >>>> gets deactivated as shown in the screenshot. >>>> >>>> How do I set this right and get the user list? >>>> >>>> -- = >>>> >>>> Thanks & Regards, >>>> >>>> >>>> Anantha Raghava >>>> >>>> eXza Technology Consulting & Services >>>> >>>> >>>> Do not print this e-mail unless required. Save Paper & trees. >>>> >>>> >>>> >>>> _______________________________________________ >>>> Users mailing list >>>> Users(a)ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users >>>> --------------876ED9474170EFDFF2C93EAC Content-Type: text/html; charset=3Dutf-8 Content-Transfer-Encoding: 7bit

Thanks for quick response Ondra.

Before I make another attempt to properly configure, can I re-execute the ovirt aaa ldap setup again without disturbing the current setup? Will that help me to correct the problem?

--

Thanks & Regards,


Anantha Raghava
eXza Technology Consulting & Services

Do not print this e-mail unless required. Save Paper & trees.

On Wednesday 28 September 2016 01:23 PM, Ondra Machacek wrote:
----- Anantha Raghava <raghav(a)exzatechconsulting.com> w=
rote:

Hello Ondra

Please find the attached file. I have also attached the setup log file. =

I find the errors & warnings there too. But I am unable to figure out =

what really went wrong.

One more thing, while setting aaa-ldap extension, since it threw error =

on user DN, did not properly recognise, I used "anonymous", also did not =

perform the Login Test. Are these the root cause?

Yes, it is root cause. Active directory usually has anonymous bind disabled=
. You can enter UPN instead of DN, if you want. In your case it will be som=
ething like vdiadmin(a)rvce.in. Please note that AD usually use CN attrib=
ute in DN, not uid attribute, that may be the problem in your DN.

-- =


Thanks & Regards,


Anantha Raghava

eXza Technology Consulting & Services



Do not print this e-mail unless required. Save Paper & trees.

On Wednesday 28 September 2016 12:18 PM, Ondra Machacek wrote:

On 09/28/2016 05:25 AM, Anantha Raghava wrote:

Hi,

I am trying to integrate the oVirt Engine with Active Directory to
enable user logins. I installed the ovirt ldap extension and executed
the setup. The process completed successfully and the profile is visible
in engine log in page.

Most probably it wasn't successful, because as you can see in =

screenshot there is no 'namespace', you should see there something, if =

configuration is correct.

Can you please send output of the following command?

 $ ovirt-engine-extensions-tool --log-level=3DFINEST =

--log-file=3D/tmp/aaa.log aaa search --extension-name=3Ddomain-authz

There should be some ERROR or WARN.

Thanks.


Now, when I try to add the user and assign the roles, it is not allowing
me to browse through the profile & the user list. Infact the "GO" button
gets deactivated as shown in the screenshot.

How do I set this right and get the user list?

-- =


Thanks & Regards,


Anantha Raghava

eXza Technology Consulting & Services


Do not print this e-mail unless required. Save Paper & trees.



_______________________________________________
Users mailing list
Use=
rs(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



      

      

    

    

  


--------------876ED9474170EFDFF2C93EAC--

--===============6743589440531252418==
Content-Type: multipart/alternative
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.bin"
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--===============6743589440531252418==--