Dear Lucie, 

Thanks for your help.

You can find my configuration file below :


sudo nano /etc/ovirt-engine/extensions.d/ldap.mydomain.fr-authn.properties


ovirt.engine.extension.name = ldap.mydomain.fr-authn

ovirt.engine.extension.bindings.method = jbossmodule

ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap

ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension

ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn

ovirt.engine.aaa.authn.profile.name = ldap.mydomain.fr

ovirt.engine.aaa.authn.authz.plugin = ldap.mydomain.fr

config.profile.file.1 = ../aaa/ldap.mydomain.fr.properties

config.globals.baseDN.simple_baseDN = ou=people,dc=mydomain,dc=fr


sudo nano /etc/ovirt-engine/extensions.d/ldap.mydomain.fr-authz.properties


ovirt.engine.extension.name = ldap.mydomain.fr

ovirt.engine.extension.bindings.method = jbossmodule

ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap

ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension

ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz

config.profile.file.1 = ../aaa/ldap.mydomain.fr.properties

config.globals.baseDN.simple_baseDN = ou=people,dc=mydomain,dc=fr


sudo nano /etc/ovirt-engine/aaa/ldap.mydomain.fr.properties


include = <isds.properties>


vars.server = ldap.mydomain.fr


pool.authz.auth.type = none

pool.default.serverset.type = single

pool.default.serverset.single.server = ${global:vars.server}

pool.default.serverset.single.port = 636

pool.default.ssl.enable = true

pool.default.ssl.truststore.file = ${local:_basedir}/ldap.mydomain.fr.jks

pool.default.ssl.truststore.password = changeit



Thank you beforehand,

Best Regards,

LAMY Lucas



Le 19 févr. 2020 à 8:31 AM, Lucie Leistnerova <lleistne@redhat.com> a écrit :

Hi Lucas,

how is your ldap set? Can you please share settings in /etc/ovirt-engine/extensions.d
Is the driver properly set? I've found similar issue here
https://users.ovirt.narkive.com/FveKIVCV/ovirt-users-adding-users-through-ldap-fails-on-external-id

Thank you.

Lucie

On 2/18/20 4:14 PM, Lucas Lamy wrote:
Hello everyone.

I have previously configured LDAP connexion though ovirt-engine-extension-aaa-ldap-setup.

The only working configuration was IBM Security Directory Server (the IBM Security Directory Server RFC-2307 Schema doesn't work), ladps and anonymous search user. But the LDAP server I’m testing is OpenLDAP and not IBM.

Indeed with IBM  the search and login are working fine when I test them with ovirt-engine-extensions-tool aaa.

But when I try to add a LDAP User in the User Administration Panel I get this Error message : "Error while executing action AddUser : Internal Engine Error".

None of the solutions I've found on previous threads seems to works.

Does someone have an idea please ?
Please find the logs attached.
Thank you beforehand.


  Caused by: org.postgresql.util.PSQLException: ERROR: null value in column "external_id" violates not-null constraint Detail: Failing row contains (**user info**). Where: SQL statement "INSERT INTO users ( department, domain, email, name, note, surname, user_id, username, external_id, namespace ) VALUES ( v_department, v_domain, v_email, v_name, v_note, v_surname, v_user_id, v_username, v_external_id, v_namespace )" PL/pgSQL function insertuser(character varying,character varying,character varying,character varying,character varying,character varying,uuid,character varying,text,character varying) line 3 at SQL state$ at org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2433) at org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:2178) at org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:306) at org.postgresql.jdbc.PgStatement.executeInternal(PgStatement.java:441) at org.postgresql.jdbc.PgStatement.execute(PgStatement.java:365) at org.postgresql.jdbc.PgPreparedStatement.executeWithFlags(PgPreparedStatement.java:155) at org.postgresql.jdbc.PgCallableStatement.executeWithFlags(PgCallableStatement.java:78) at org.postgresql.jdbc.PgPreparedStatement.execute(PgPreparedStatement.java:144) at org.jboss.jca.adapters.jdbc.CachedPreparedStatement.execute(CachedPreparedStatement.java:303) at org.jboss.jca.adapters.jdbc.WrappedPreparedStatement.execute(WrappedPreparedStatement.java:442) at org.springframework.jdbc.core.JdbcTemplate.lambda$call$4(JdbcTemplate.java:1105) [spring-jdbc.jar:5.0.4.RELEASE] at org.springframework.jdbc.core.JdbcTemplate.execute(JdbcTemplate.java:1050) [spring-jdbc.jar:5.0.4.RELEASE] ... 162 more  2020-02-15 10:16:53,337+01 ERROR [org.ovirt.engine.core.bll.aaa.AddUserCommand] (default task-4) [222f7ca7-b669-40e0-b152-2ca898ebde09] Transaction rolled-back for command 'org.ovirt.engine.core.bll.aaa.$ 2020-02-15 10:16:53,341+01 WARN  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4) [222f7ca7-b669-40e0-b152-2ca898ebde09] EVENT_ID: USER_FAILED_ADD_ADUSER(327), Fail, Failed to add User 'user' to the system.
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PLCLWVJUD7KNOTG7HQ7Y4PDWYEJVG5JJ/

--
Lucie Leistnerova
Senior Quality Engineer, QE Cloud, RHVM
Red Hat EMEA

IRC: lleistne @ #rhev-qe