Re: [ovirt-users] Disable admin@internal account

15 Apr 2015

      This is a multi-part message in MIME format.
--------------030008080802090601070001
Content-Type: text/plain;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On 04/15/2015 12=3A08 PM=2C =D0=9D=D0=B8=D0=BA=D0=BE=D0=BB=D0=B0=D0=B5=
=D0=B2 =D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B5=D0=B9 wrote=3A
=3E Hi community!
=3E =20
=3E The Red=5FHat=5FEnterprise=5FVirtualization-3=2E5-Administration=5FGuid=
e says
=3E how to add users from external directory=2E
=3E But now i want to disable admin=40internal
=3E =3Cmailto=3Aadmin=40internal=3E account for security reasons and use it=
 only
=3E for disaster recovery situations =28or then ldaps servers not
=3E available=29=2E Can i do it=3F
=3E =20
=3E What are best practises for use only external directory=3F
=3E If i delete admin=40internal =3Cmailto=3Aadmin=40internal=3E account ca=
n i add
=3E it again=3F
=3E
=3E
=3E =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
=3E Users mailing list
=3E Users=40ovirt=2Eorg
=3E http=3A//lists=2Eovirt=2Eorg/mailman/listinfo/users
Should be possible last time I asked=2C see response below=3A

Subject=3A =09Re=3A =5Bovirt-users=5D oVirt 3=2E5 and FreeIpa
Date=3A =09Thu=2C 22 Jan 2015 06=3A59=3A52 -0500 =28EST=29
From=3A =09Alon Bar-Lev =3Calonbl=40redhat=2Ecom=3E
To=3A =09Jorick Astrego =3Cj=2Eastrego=40netbulae=2Eeu=3E
CC=3A =09users=40ovirt=2Eorg

=3Csnip=3E

Also can we get rid of the internal admin or better just disable
internal authenticationt without problems=3F As we have ipa we don=27t want=

local login enabled=2C but in emergency situations we might need to turn
it on quickly=2E

Yes=2C you can disable the internal by creating /etc/ovirt-engine/engine=2E=
conf=2Ed/50-disable-internal=2Econf
---
ENGINE=5FEXTENSION=5FENABLED=5Fbuiltin-authn-internal =3D false
---

Hmmm=2E=2E=2E=2E we have a bug in this case=2E=2E=2E will fix=2C so let=27s=
 just disable the authz for now=2E
---
ENGINE=5FEXTENSION=5FENABLED=5Finternal =3D false

Met vriendelijke groet=2C With kind regards=2C

Jorick Astrego

Netbulae Virtualization Experts=20

----------------

=09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK=
 08198180
 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW=
 NL821234584B01

----------------

--------------030008080802090601070001
Content-Type: text/html;
	charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=3Chtml=3E
  =3Chead=3E
    =3Cmeta content=3D=22text/html=3B charset=3DUTF-8=22 http-equiv=3D=22Co=
ntent-Type=22=3E
  =3C/head=3E
  =3Cbody bgcolor=3D=22=23FFFFFF=22 text=3D=22=23000000=22=3E
    =3Cbr=3E
    =3Cbr=3E
    =3Cdiv class=3D=22moz-cite-prefix=22=3EOn 04/15/2015 12=3A08 PM=2C=20=
=D0=9D=D0=B8=D0=BA=D0=BE=D0=BB=D0=B0=D0=B5=D0=B2
      =D0=90=D0=BB=D0=B5=D0=BA=D1=81=D0=B5=D0=B9 wrote=3A=3Cbr=3E
    =3C/div=3E
    =3Cblockquote cite=3D=22mid=3A2853701429092492=40web25j=2Eyandex=2Eru=
=22 type=3D=22cite=22=3E
      =3Cdiv=3EHi community!=3C/div=3E
      =3Cdiv=3E=C2=A0=3C/div=3E
      =3Cdiv=3EThe
        Red=5FHat=5FEnterprise=5FVirtualization-3=2E5-Administration=5FGuid=
e says
        how to add users from external directory=2E=3C/div=3E
      =3Cdiv=3EBut now i want to disable =3Ca moz-do-not-send=3D=22true=22=

          href=3D=22mailto=3Aadmin=40internal=22=3Eadmin=40internal=3C/a=3E=
=C2=A0account for
        security reasons and use it only for disaster recovery
        situations =28or then ldaps servers not available=29=2E Can i do it=
=3F=3C/div=3E
      =3Cdiv=3E=C2=A0=3C/div=3E
      =3Cdiv=3EWhat are best practises for use only external directory=3F=
=3C/div=3E
      =3Cdiv=3EIf i delete =3Ca moz-do-not-send=3D=22true=22
          href=3D=22mailto=3Aadmin=40internal=22=3Eadmin=40internal=3C/a=3E=
=C2=A0account can i
        add it again=3F=3C/div=3E
      =3Cbr=3E
      =3Cfieldset class=3D=22mimeAttachmentHeader=22=3E=3C/fieldset=3E
      =3Cbr=3E
      =3Cpre wrap=3D=22=22=3E=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F
Users mailing list
=3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22mailto=3AUsers=40ovir=
t=2Eorg=22=3EUsers=40ovirt=2Eorg=3C/a=3E
=3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22http=3A//lists=2Eovirt=
=2Eorg/mailman/listinfo/users=22=3Ehttp=3A//lists=2Eovirt=2Eorg/mailman/lis=
tinfo/users=3C/a=3E
=3C/pre=3E
    =3C/blockquote=3E
    Should be possible last time I asked=2C see response below=3A=3Cbr=3E=

    =3Cbr=3E
    =3Cbr=3E
    =3Cbr=3E
    =3Ctable class=3D=22moz-email-headers-table=22 border=3D=220=22 cellpad=
ding=3D=220=22
      cellspacing=3D=220=22=3E
      =3Ctbody=3E
        =3Ctr=3E
          =3Cth align=3D=22RIGHT=22 nowrap=3D=22nowrap=22 valign=3D=22BASEL=
INE=22=3ESubject=3A =3C/th=3E
          =3Ctd=3ERe=3A =5Bovirt-users=5D oVirt 3=2E5 and FreeIpa=3C/td=3E=

        =3C/tr=3E
        =3Ctr=3E
          =3Cth align=3D=22RIGHT=22 nowrap=3D=22nowrap=22 valign=3D=22BASEL=
INE=22=3EDate=3A =3C/th=3E
          =3Ctd=3EThu=2C 22 Jan 2015 06=3A59=3A52 -0500 =28EST=29=3C/td=3E=

        =3C/tr=3E
        =3Ctr=3E
          =3Cth align=3D=22RIGHT=22 nowrap=3D=22nowrap=22 valign=3D=22BASEL=
INE=22=3EFrom=3A =3C/th=3E
          =3Ctd=3EAlon Bar-Lev =3Ca class=3D=22moz-txt-link-rfc2396E=22 hre=
f=3D=22mailto=3Aalonbl=40redhat=2Ecom=22=3E=26lt=3Balonbl=40redhat=2Ecom=26=
gt=3B=3C/a=3E=3C/td=3E
        =3C/tr=3E
        =3Ctr=3E
          =3Cth align=3D=22RIGHT=22 nowrap=3D=22nowrap=22 valign=3D=22BASEL=
INE=22=3ETo=3A =3C/th=3E
          =3Ctd=3EJorick Astrego =3Ca class=3D=22moz-txt-link-rfc2396E=22 h=
ref=3D=22mailto=3Aj=2Eastrego=40netbulae=2Eeu=22=3E=26lt=3Bj=2Eastrego=40ne=
tbulae=2Eeu=26gt=3B=3C/a=3E=3C/td=3E
        =3C/tr=3E
        =3Ctr=3E
          =3Cth align=3D=22RIGHT=22 nowrap=3D=22nowrap=22 valign=3D=22BASEL=
INE=22=3ECC=3A =3C/th=3E
          =3Ctd=3E=3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22mai=
lto=3Ausers=40ovirt=2Eorg=22=3Eusers=40ovirt=2Eorg=3C/a=3E=3C/td=3E
        =3C/tr=3E
      =3C/tbody=3E
    =3C/table=3E
    =3Cbr=3E
    =26lt=3Bsnip=26gt=3B=3Cbr=3E
    =3Cbr=3E
    Also can we get rid of the internal admin or better just disable
    internal
    authenticationt without problems=3F As we have ipa we don=27t want loca=
l
    login
    enabled=2C but in emergency situations we might need to turn it on
    quickly=2E=3Cbr=3E
    =3Cbr=3E
    =3Cpre wrap=3D=22=22=3EYes=2C you can disable the internal by creating=
 /etc/ovirt-engine/engine=2Econf=2Ed/50-disable-internal=2Econf
---
ENGINE=5FEXTENSION=5FENABLED=5Fbuiltin-authn-internal =3D false
---

Hmmm=2E=2E=2E=2E we have a bug in this case=2E=2E=2E will fix=2C so let=27s=
 just disable the authz for now=2E
---
ENGINE=5FEXTENSION=5FENABLED=5Finternal =3D false=3C/pre=3E
    =3Cbr=3E
    =3Cbr=3E
 =20=
=3CBR /=3E
=3CBR /=3E
=3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cspan style=3D=22c=
olor=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan style=3D=22=
mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelijke groet=
=2C With kind regards=2C=3Cbr=3E=3Cbr=3E=3C/span=3EJorick Astrego=3C/font=
=3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=3Cbr=3ENetbul=
ae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3B=
border-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 522px=22=
=3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=
=22=3ETel=3A  053 20 30 270=3C/td=3E    =3Ctd style=3D=22width=3A 130px=3Bf=
ont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E    =3Ctd style=3D=22wid=
th=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E    =3Ctd sty=
le=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=3E=3C/tr=
=3E=3Ctr=3E    =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EFax=
=3A 053 20 30 271=3C/td=3E    =3Ctd style=3D=22width=3A 130px=3Bfont-size=
=3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E    =3Ctd style=3D=22width=3A 130=
px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E    =3Ctd style=3D=22w=
idth=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=3C/tr=3E=
=3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bborder-top=
=3A1px solid =23ccc=3B=22=3E=3CBR /=3E
=3C/body=3E
=3C/html=3E

--------------030008080802090601070001--