Re: [ovirt-users] LDAP
----- Original Message -----
From: "Koen Vanoppen" <vanoppen.koen(a)gmail.com>
To: users(a)ovirt.org
Sent: Thursday, November 20, 2014 11:11:57 AM
Subject: Re: [ovirt-users] LDAP
Is it stable? Because it is for production environment on the Brussels
Airport... Can't be messed around with :-)
Well, it is new... as any new component first should be tested in semi-production, if it
meets your needs you can promote.
From my tests it is more stable than the legacy implementation as it
is much simpler, it does not relay on dns records, kerberos nor static configuration that
assumed to suit all.
It also provide much better performance.
I could release this now, but I am waiting to one first of ovirt-engine-3.5.1 to make it
easier to deploy,
And of course I would like more people to test this and report back results.
2014-11-20 10:10 GMT+01:00 Alon Bar-Lev < alonbl(a)redhat.com > :
----- Original Message -----
> From: "Koen Vanoppen" < vanoppen.koen(a)gmail.com >
> To: users(a)ovirt.org
> Sent: Thursday, November 20, 2014 10:51:06 AM
> Subject: [ovirt-users] LDAP
>
> Hello everybody,
>
> We updated our ovirt to 3.5, but now we see some errors concerning LDAP. I
> already searched oonline for a guide for the AAA config, but can't seem to
> find something...
> Does anybody already has a clear how-to for the AAA config?
>
> This is the error we get sometimes in our engine.log (we are still able to
> login with ldap btw):
>
> 2014-11-20 06:42:06,539 ERROR
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> (ajp--127.0.0.1-8702-32) Failed ldap search server
> ldap://***.brussels.airport:*** using user ****(a)BRUSSELS.AIRPORT due to :
> [LDAP: error code 34 - 0000208F: LdapErr: DSID-0C09074B, comment: Error
> processing name, data 0, v23f0]; nested exception is
> javax.naming.InvalidNameException: : [LDAP: error code 34 - 0000208F:
> LdapErr: DSID-0C09074B, comment: Error processing name, data 0, v23f0];
> remaining name ''. We should try the next server
CCing Yair he might have a clue.
Would you like to test the next generation of LDAP provider? It should be
much simpler than current provider, it uses only LDAP protocol, and enable
you to customize almost everything.
It is available in ovirt-engine-3.5-snapshots repository, package name is
ovirt-engine-extension-aaa-ldap, documentation is available within package
and here[1], I will be glad to help if you decide to check it out.
Regards,
Alon Bar-Lev.
[1]
http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=bl...
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users