Re: [ovirt-users] oVirt AD integration problems

Hi Ondra, That is good to know that we don't need Kerberos - it complicates things a lot. I think the errors might be the options I'd selected during the setup. I was thrown a bit that it passed all the internal tests provided by the setup script, but failed on the web GUI. When I've seen 'unspecified GSS failure' and 'peer not authenticated' it's usually been due to Kerberos (though admittedly these are just generic errors). So I tried the Redhat guide for SSO at: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtuali... which uses Kerberos (in ovirt-sso.conf) I had to remove the symlink to the Apache config it says to create, as it results in internal server errors in Apache. It uses an SPN for Apache in the keytab. Now that you've confirmed that it can actually work without any need for the Kerberos stuff, I will start afresh from a clean setup and apply what I've learnt during this process. I'll try it out and let you know either way. Many thanks for all the help! Kind regards, Cam