Re: [Users] LDAP
On Fri, 24 Feb 2012, Yair Zaslavsky wrote:
Hi Nathan,
I think you're using the wrong query with IPA.
Yep, but so far I have not found how to fix ovirt to use the correct one.
the part of samaccounttype=805306368 should be replaced with
objectClass=krbPrincipalAux
the part of userprincipalname should be replaced with -
krbPrincipalName=nathan(a)BBLINKMIND.NET
So I guess the filter should look like -
(&(objectClass=krbPrincipalAux)(krbPrincipalName=nathan(a)BBLINKMIND.NET))
Yes, I understand the query is wrong, what I don't understand is how to
make ovirt use the correct query. I started working trying to get LDAP to
work with my OpenLDAP system and was told that ovirt does not yet support
it. I asked what was supported and was told to try 389, but ran into
issues with that so then I was asked to try IPA and now have this issue.
I did not develop the IPA support, however, I checked the file -
LdapQueryMetadataFactoryImpl.java and found definitions of the queries
for the different providers - what you will see there is that each LDAP
provider has its own map of keys to queries - the relevant key is
LdapQueryType.getUserByPrincipalName - so you can see how it is defined
in adHashMap and how it is defined in ipaHashMap, and other maps (dsMap
, for instance).
I don't have that .java file, I do have the .class. I am new to Java, how
do I go about modifying ovirt to use the correct query?
<>
Nathan Stratton CTO,
BlinkMind, Inc.
nathan at robotics.net nathan at blinkmind.com
http://www.robotics.net http://www.blinkmind.com