From midnightsteel at msn.com Wed Mar 26 13:04:33 2014 Content-Type: multipart/mixed; boundary="===============4079080193735209427==" MIME-Version: 1.0 From: Maurice James To: users at ovirt.org Subject: [Users] External user issues Date: Wed, 26 Mar 2014 13:04:32 -0400 Message-ID: --===============4079080193735209427== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable --_1573e63a-7fda-477d-b863-7eed5445248d_ Content-Type: text/plain; charset=3D"iso-8859-1" Content-Transfer-Encoding: quoted-printable I may have to open a bug for this one=3D2C but im going to throw it out her= e =3D anyway to see if anyone else has run in to it 3.4.0-0.13.rc.el6Connected to Active DirectoryGroups added to UI in: = =3D System >> UsersGroup VMadmins added User Joe Smith is a member of group VMadmins in Active DIrectory User Joe Smith can now login to the user portal. If I look at the User tab in the admin portal I can see: addomain.com/OU/VMadmins @addomain.com and Joe Smith = =3D jsmith(a)addomain.com All is well. After a several minutes I see the following change with the us= =3D er jsmith Smith = =3D jsmith(a)addomain.com When that change happens that user can no longer login until I delete that = =3D entry within the UI. Then the user can log in again and the entry look like= =3D : Joe Smith = =3D jsmith(a)addomain.com=3D20 What gives? =3D --_1573e63a-7fda-477d-b863-7eed5445248d_ Content-Type: text/html; charset=3D"iso-8859-1" Content-Transfer-Encoding: quoted-printable
I may have to open a bug for= thi=3D s one=3D2C but im going to throw it out here anyway to see if anyone else h= as=3D run in to it

3.4.0-0.= 13=3D .rc.el6
Connected to Act= iv=3D e Directory
Groups added to UI in:
 =3D3B &n= bs=3D p=3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B &n= bsp=3D3B System =3D >=3D3B>=3D3B Users
Group VMadmins added

<= div>=3D User Joe Smith is a member of group VMadmins in Active DIrectory
= =3D
User Joe Smith can now login to the user portal.
<= =3D br>
If I look at the User tab in the admin portal I can see:

addomain.com/OU/VMadmins  =3D3B  =3D3B  = =3D3B &n=3D bsp=3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B =  =3D3B  =3D =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B @ad= domain.com

and

Joe  =3D3B  =3D3= B &n=3D bsp=3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B =  =3D3B  =3D =3D3B Smith  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D= 3B  =3D3B &n=3D bsp=3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B =  =3D3B  =3D =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B &nb= sp=3D3B  =3D3B=3D jsmith(a)addomain.com

All is well. After a severa= l =3D minutes I see the following change with the user

<= =3D br>
jsmith  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B=  =3D3B =3D  =3D3B  =3D3B  =3D3B Smith  =3D3B  =3D3B  =3D3B &nb= sp=3D3B  =3D =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B &nb= sp=3D3B  =3D3B=3D  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D= 3B  =3D3B &n=3D bsp=3D3B  =3D3B jsmith(a)addomain.com


When that change happens that user can no longer login until I delete that= =3D entry within the UI. Then the user can log in again and the entry look lik= =3D e:

Joe  =3D3B  =3D3B  =3D3B  =3D3B=  =3D =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B Smi= th  =3D3B &n=3D bsp=3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B =  =3D3B  =3D =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B &nb= sp=3D3B  =3D3B=3D  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B  =3D3B jsmith(a= )addomain.com<=3D /div>
 =3D3B

What gives?
= =3D --_1573e63a-7fda-477d-b863-7eed5445248d_-- --===============4079080193735209427== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" LS1fMTU3M2U2M2EtN2ZkYS00NzdkLWI4NjMtN2VlZDU0NDUyNDhkXwpDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9Imlzby04ODU5LTEiCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6 IHF1b3RlZC1wcmludGFibGUKCkkgbWF5IGhhdmUgdG8gb3BlbiBhIGJ1ZyBmb3IgdGhpcyBvbmU9 MkMgYnV0IGltIGdvaW5nIHRvIHRocm93IGl0IG91dCBoZXJlID0KYW55d2F5IHRvIHNlZSBpZiBh bnlvbmUgZWxzZSBoYXMgcnVuIGluIHRvIGl0CjMuNC4wLTAuMTMucmMuZWw2Q29ubmVjdGVkIHRv IEFjdGl2ZSBEaXJlY3RvcnlHcm91cHMgYWRkZWQgdG8gVUkgaW46ICAgICAgID0KICAgICAgICAg ICBTeXN0ZW0gPj4gVXNlcnNHcm91cCBWTWFkbWlucyBhZGRlZApVc2VyIEpvZSBTbWl0aCBpcyBh IG1lbWJlciBvZiBncm91cCBWTWFkbWlucyBpbiBBY3RpdmUgRElyZWN0b3J5ClVzZXIgSm9lIFNt aXRoIGNhbiBub3cgbG9naW4gdG8gdGhlIHVzZXIgcG9ydGFsLgpJZiBJIGxvb2sgYXQgdGhlIFVz ZXIgdGFiIGluIHRoZSBhZG1pbiBwb3J0YWwgSSBjYW4gc2VlOgphZGRvbWFpbi5jb20vT1UvVk1h ZG1pbnMgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQGFkZG9tYWluLmNvbQph bmQKSm9lICAgICAgICAgICAgICAgICAgICAgICBTbWl0aCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgPQogICAgIGpzbWl0aEBhZGRvbWFpbi5jb20KQWxsIGlzIHdl bGwuIEFmdGVyIGEgc2V2ZXJhbCBtaW51dGVzIEkgc2VlIHRoZSBmb2xsb3dpbmcgY2hhbmdlIHdp dGggdGhlIHVzPQplcgoKanNtaXRoICAgICAgICAgICAgICAgICAgIFNtaXRoICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgPQogIGpzbWl0aEBhZGRvbWFpbi5jb20K CldoZW4gdGhhdCBjaGFuZ2UgaGFwcGVucyB0aGF0IHVzZXIgY2FuIG5vIGxvbmdlciBsb2dpbiB1 bnRpbCBJIGRlbGV0ZSB0aGF0ID0KZW50cnkgd2l0aGluIHRoZSBVSS4gVGhlbiB0aGUgdXNlciBj YW4gbG9nIGluIGFnYWluIGFuZCB0aGUgZW50cnkgbG9vayBsaWtlPQo6CkpvZSAgICAgICAgICAg ICAgICAgICAgICAgU21pdGggICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgID0KICAgICBqc21pdGhAYWRkb21haW4uY29tPTIwCldoYXQgZ2l2ZXM/IAkJIAkgICAJCSAg PQoKLS1fMTU3M2U2M2EtN2ZkYS00NzdkLWI4NjMtN2VlZDU0NDUyNDhkXwpDb250ZW50LVR5cGU6 IHRleHQvaHRtbDsgY2hhcnNldD0iaXNvLTg4NTktMSIKQ29udGVudC1UcmFuc2Zlci1FbmNvZGlu ZzogcXVvdGVkLXByaW50YWJsZQoKPGh0bWw+CjxoZWFkPgo8c3R5bGU+PCEtLQouaG1tZXNzYWdl IFAKewptYXJnaW46MHB4PTNCCnBhZGRpbmc6MHB4Cn0KYm9keS5obW1lc3NhZ2UKewpmb250LXNp emU6IDEycHQ9M0IKZm9udC1mYW1pbHk6Q2FsaWJyaQp9Ci0tPjwvc3R5bGU+PC9oZWFkPgo8Ym9k eSBjbGFzcz0zRCdobW1lc3NhZ2UnPjxkaXYgZGlyPTNEJ2x0cic+SSBtYXkgaGF2ZSB0byBvcGVu IGEgYnVnIGZvciB0aGk9CnMgb25lPTJDIGJ1dCBpbSBnb2luZyB0byB0aHJvdyBpdCBvdXQgaGVy ZSBhbnl3YXkgdG8gc2VlIGlmIGFueW9uZSBlbHNlIGhhcz0KIHJ1biBpbiB0byBpdDxkaXY+PGJy PjwvZGl2PjxkaXY+PHNwYW4gY2xhc3M9M0QiZ3d0LUlubGluZUxhYmVsIj4zLjQuMC0wLjEzPQou cmMuZWw2PC9zcGFuPjwvZGl2PjxkaXY+PHNwYW4gY2xhc3M9M0QiZ3d0LUlubGluZUxhYmVsIj5D b25uZWN0ZWQgdG8gQWN0aXY9CmUgRGlyZWN0b3J5PC9zcGFuPjwvZGl2PjxkaXY+R3JvdXBzIGFk ZGVkIHRvIFVJIGluOjwvZGl2PjxkaXY+Jm5ic3A9M0IgJm5icz0KcD0zQiAmbmJzcD0zQiAmbmJz cD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiBTeXN0ZW0g PQomZ3Q9M0ImZ3Q9M0IgVXNlcnM8L2Rpdj48ZGl2Pkdyb3VwIFZNYWRtaW5zIGFkZGVkPC9kaXY+ PGRpdj48YnI+PC9kaXY+PGRpdj49ClVzZXIgSm9lIFNtaXRoIGlzIGEgbWVtYmVyIG9mIGdyb3Vw IFZNYWRtaW5zIGluIEFjdGl2ZSBESXJlY3Rvcnk8L2Rpdj48ZGl2Pj0KPGJyPjwvZGl2PjxkaXY+ VXNlciBKb2UgU21pdGggY2FuIG5vdyBsb2dpbiB0byB0aGUgdXNlciBwb3J0YWwuPC9kaXY+PGRp dj48PQpicj48L2Rpdj48ZGl2PklmIEkgbG9vayBhdCB0aGUgVXNlciB0YWIgaW4gdGhlIGFkbWlu IHBvcnRhbCBJIGNhbiBzZWU6PC9kaXY9Cj48ZGl2Pjxicj48L2Rpdj48ZGl2PmFkZG9tYWluLmNv bS9PVS9WTWFkbWlucyAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbj0KYnNwPTNCICZuYnNw PTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNC ICZuYnNwPQo9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0Ig Jm5ic3A9M0IgQGFkZG9tYWluLmNvbTwvZGk9CnY+PGRpdj48YnI+PC9kaXY+PGRpdj5hbmQ8L2Rp dj48ZGl2Pjxicj48L2Rpdj48ZGl2PkpvZSAmbmJzcD0zQiAmbmJzcD0zQiAmbj0KYnNwPTNCICZu YnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNw PTNCICZuYnNwPQo9M0IgU21pdGggJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0Ig Jm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm49CmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAm bmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0KPTNCICZu YnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNw PTNCICZuYnNwPTNCPQoganNtaXRoQGFkZG9tYWluLmNvbTwvZGl2PjxkaXY+PGJyPjwvZGl2Pjxk aXY+QWxsIGlzIHdlbGwuIEFmdGVyIGEgc2V2ZXJhbCA9Cm1pbnV0ZXMgSSBzZWUgdGhlIGZvbGxv d2luZyBjaGFuZ2Ugd2l0aCB0aGUgdXNlcjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PD0KYnI+ PC9kaXY+PGRpdj5qc21pdGggJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5i c3A9M0IgJm5ic3A9M0IgPQombmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiBTbWl0aCAmbmJzcD0z QiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0KPTNCICZuYnNwPTNCICZuYnNwPTNC ICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCPQog Jm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5i c3A9M0IgJm5ic3A9M0IgJm49CmJzcD0zQiAmbmJzcD0zQiBqc21pdGhAYWRkb21haW4uY29tPC9k aXY+PGRpdj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj0KPldoZW4gdGhhdCBjaGFuZ2Ug aGFwcGVucyB0aGF0IHVzZXIgY2FuIG5vIGxvbmdlciBsb2dpbiB1bnRpbCBJIGRlbGV0ZSB0aGF0 PQogZW50cnkgd2l0aGluIHRoZSBVSS4gVGhlbiB0aGUgdXNlciBjYW4gbG9nIGluIGFnYWluIGFu ZCB0aGUgZW50cnkgbG9vayBsaWs9CmU6PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5Kb2UgJm5i c3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9Cj0zQiAmbmJzcD0zQiAmbmJz cD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiBTbWl0aCAmbmJzcD0zQiAm bj0KYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZuYnNwPTNCICZu YnNwPTNCICZuYnNwPTNCICZuYnNwPQo9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5i c3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0IgJm5ic3A9M0I9CiAmbmJzcD0zQiAmbmJz cD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiAmbmJzcD0zQiBqc21pdGhAYWRkb21haW4u Y29tPD0KL2Rpdj48ZGl2PiZuYnNwPTNCPC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj5XaGF0IGdp dmVzPzwvZGl2PiAJCSAJICAgCQkgIDwvPQpkaXY+PC9ib2R5Pgo8L2h0bWw+PQoKLS1fMTU3M2U2 M2EtN2ZkYS00NzdkLWI4NjMtN2VlZDU0NDUyNDhkXy0tCg== --===============4079080193735209427==--