[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

An update, I was able to complete the setup. It says it was successful but I still can't login using the engine web interface. I selected the newly created profile using the dropdown arrow and entered my admin user and password. I get an error "Unable to login. Verify your login information or contact the system administrator." I attached my log showing the setup completion. ________________________________ From: Jeremy Tourville <jeremy_tourville(a)hotmail.com&gt; Sent: Monday, November 5, 2018 2:58 PM To: Ondra Machacek Cc: users(a)ovirt.org Subject: Re: [ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed Here is the result of the command: [root@ldap ~]# ldapsearch -x -H ldap://ldap.cyber-range.lan -b 'dc=cyber-range,dc=lan' -D 'uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot' -W uid=admin Enter LDAP Password: # extended LDIF # # LDAPv3 # base <dc=cyber-range,dc=lan> with scope subtree # filter: uid=admin # requesting: ALL # # search result search: 2 result: 0 Success # numResponses: 1 Basically, I did not create any users except for the ones that were "created" during the setup-ds-admin.pl script run. https://www.unixmen.com/install-and-configure-ldap-server-in-centos-7/ I ran the script just like the article did to include names, I did however change the server and domain names to match mine. I didn't create any users using the GUI or ldapmodify after the initial setup. Do I need to create a user with the needed bind privileges or is my problem somewhere else? ________________________________ From: Ondra Machacek <omachace(a)redhat.com&gt; Sent: Monday, November 5, 2018 4:15 AM To: Jeremy Tourville; Donny Davis Cc: users(a)ovirt.org Subject: Re: [ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed Looking at logs you may see: 2018-10-31 16:48:09,331-05 FINE Performing SearchRequest 'SearchRequest(baseDN='dc=cyber-range,dc=lan', scope=SUB, deref=NEVER, sizeLimit=0, timeLimit=0, filter='&(objectClass=organizationalPerson)(uid=*)(uid=admin)', attrs={nsuniqueid, uid, cn, displayName, department, givenName, sn, title, mail})' request on server 'ldap.cyber-range.lan' 2018-10-31 16:48:09,333-05 FINE SearchResult: SearchResult(resultCode=0 (success), messageID=3, entriesReturned=0, referencesReturned=0) So the AAA is trying to search user uid=admin in namespace dc=cyber-range,dc=lan. But the 389ds return nothing. Can you try to run that on command line[1], or can you double check that such user exists? Seems like admin which you use in vars.user, from namespace o=NetscapeRoot, can't search in namespace dc=cyber-range,dc=lan. Try to use as vars.use user from namespace dc=cyber-range,dc=lan. [1] ldapsearch -x -H ldap://ldap.cyber-range.lan -b 'dc=cyber-range,dc=lan' -D 'uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot' -W uid=admin On 11/2/18 2:01 PM, Jeremy Tourville wrote: