10:36 a.m.
Is the feature Local Authentication abandoned in 3.3?
If not, what should I do to use it?
10:46 a.m.
----- Original Message -----
From: "lofyer" <lofyer(a)gmail.com>
To: users(a)ovirt.org
Sent: Saturday, August 24, 2013 10:36:12 AM
Subject: [Users] Is the feature Local Authentication abandoned?
Is the feature Local Authentication abandoned in 3.3?
If not, what should I do to use it?
Question is unclear.
What do you call "Local Authentication", after setup can't you login using
admin user?
10:47 a.m.
On 2013/8/24 15:46, Alon Bar-Lev wrote:
----- Original Message -----
> From: "lofyer" <lofyer(a)gmail.com>
> To: users(a)ovirt.org
> Sent: Saturday, August 24, 2013 10:36:12 AM
> Subject: [Users] Is the feature Local Authentication abandoned?
>
> Is the feature Local Authentication abandoned in 3.3?
> If not, what should I do to use it?
Question is unclear.
What do you call "Local Authentication", after setup can't you login using
admin user?
Sorry for that.
I mean, use users in /etc/passwd to login.
10:56 a.m.
----- Original Message -----
From: "lofyer" <lofyer(a)gmail.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: users(a)ovirt.org
Sent: Saturday, August 24, 2013 10:47:21 AM
Subject: Re: [Users] Is the feature Local Authentication abandoned?
On 2013/8/24 15:46, Alon Bar-Lev wrote:
>
> ----- Original Message -----
>> From: "lofyer" <lofyer(a)gmail.com>
>> To: users(a)ovirt.org
>> Sent: Saturday, August 24, 2013 10:36:12 AM
>> Subject: [Users] Is the feature Local Authentication abandoned?
>>
>> Is the feature Local Authentication abandoned in 3.3?
>> If not, what should I do to use it?
> Question is unclear.
>
> What do you call "Local Authentication", after setup can't you login
using
> admin user?
Sorry for that.
I mean, use users in /etc/passwd to login.
I never knew this is was an option.
Or you mean something new that was planned somewhere?
I am against of using native authentication for applications, as it enables more
privileges that users should have.
The proper way to do that is to use directory services, such as LDAP and integrate the nss
of system and application to use that directory.
Regards,
Alon
11:07 a.m.
This is a multi-part message in MIME format.
--------------080108040600030100020807
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
On 2013/8/24 15:56, Alon Bar-Lev wrote:
----- Original Message -----
> From: "lofyer" <lofyer(a)gmail.com>
> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> Cc: users(a)ovirt.org
> Sent: Saturday, August 24, 2013 10:47:21 AM
> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>
> On 2013/8/24 15:46, Alon Bar-Lev wrote:
>> ----- Original Message -----
>>> From: "lofyer" <lofyer(a)gmail.com>
>>> To: users(a)ovirt.org
>>> Sent: Saturday, August 24, 2013 10:36:12 AM
>>> Subject: [Users] Is the feature Local Authentication abandoned?
>>>
>>> Is the feature Local Authentication abandoned in 3.3?
>>> If not, what should I do to use it?
>> Question is unclear.
>>
>> What do you call "Local Authentication", after setup can't you
login using
>> admin user?
> Sorry for that.
> I mean, use users in /etc/passwd to login.
>
I never knew this is was an option.
Or you mean something new that was planned somewhere?
I am against of using native authentication for applications, as it enables more
privileges that users should have.
The proper way to do that is to use directory services, such as LDAP and integrate the
nss of system and application to use that directory.
Regards,
Alon
I saw this from**http://www.ovirt.org/Features/Local_Authentication%E2%80%8E
So I thought it would be available now..
It seems that I have to use ldap now.
--------------080108040600030100020807
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=UTF-8"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2013/8/24 15:56, Alon Bar-Lev
wrote:<br>
</div>
<blockquote
cite="mid:1880730062.1954243.1377330965140.JavaMail.root@redhat.com"
type="cite">
<pre wrap="">
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "lofyer" <a
class="moz-txt-link-rfc2396E"
href="mailto:lofyer@gmail.com"><lofyer@gmail.com></a>
To: "Alon Bar-Lev" <a class="moz-txt-link-rfc2396E"
href="mailto:alonbl@redhat.com"><alonbl@redhat.com></a>
Cc: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Saturday, August 24, 2013 10:47:21 AM
Subject: Re: [Users] Is the feature Local Authentication abandoned?
On 2013/8/24 15:46, Alon Bar-Lev wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
----- Original Message -----
</pre>
<blockquote type="cite">
<pre wrap="">From: "lofyer" <a
class="moz-txt-link-rfc2396E"
href="mailto:lofyer@gmail.com"><lofyer@gmail.com></a>
To: <a class="moz-txt-link-abbreviated"
href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Saturday, August 24, 2013 10:36:12 AM
Subject: [Users] Is the feature Local Authentication abandoned?
Is the feature Local Authentication abandoned in 3.3?
If not, what should I do to use it?
</pre>
</blockquote>
<pre wrap="">Question is unclear.
What do you call "Local Authentication", after setup can't you login using
admin user?
</pre>
</blockquote>
<pre wrap="">Sorry for that.
I mean, use users in /etc/passwd to login.
</pre>
</blockquote>
<pre wrap="">
I never knew this is was an option.
Or you mean something new that was planned somewhere?
I am against of using native authentication for applications, as it enables more
privileges that users should have.
The proper way to do that is to use directory services, such as LDAP and integrate the nss
of system and application to use that directory.
Regards,
Alon
</pre>
</blockquote>
I saw this from<cite><b> </b></cite><a
href="http://www.ovirt.org/Features/Local_Authentication%E2%80%8E&qu...
So I thought it would be available now..<br>
<br>
It seems that I have to use ldap now.<br>
<span style="color: rgb(102, 102, 102); font-family: arial,
sans-serif; font-size: small; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal; line-height:
20px; orphans: auto; text-align: left; text-indent: 0px;
text-transform: none; white-space: nowrap; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); display: inline !important;
float: none;"></span>
</body>
</html>
--------------080108040600030100020807--
11:44 a.m.
----- Original Message -----
From: "lofyer" <lofyer(a)gmail.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: users(a)ovirt.org
Sent: Saturday, August 24, 2013 11:07:10 AM
Subject: Re: [Users] Is the feature Local Authentication abandoned?
On 2013/8/24 15:56, Alon Bar-Lev wrote:
>
> ----- Original Message -----
>> From: "lofyer" <lofyer(a)gmail.com>
>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>> Cc: users(a)ovirt.org
>> Sent: Saturday, August 24, 2013 10:47:21 AM
>> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>>
>> On 2013/8/24 15:46, Alon Bar-Lev wrote:
>>> ----- Original Message -----
>>>> From: "lofyer" <lofyer(a)gmail.com>
>>>> To: users(a)ovirt.org
>>>> Sent: Saturday, August 24, 2013 10:36:12 AM
>>>> Subject: [Users] Is the feature Local Authentication abandoned?
>>>>
>>>> Is the feature Local Authentication abandoned in 3.3?
>>>> If not, what should I do to use it?
>>> Question is unclear.
>>>
>>> What do you call "Local Authentication", after setup can't you
login
>>> using
>>> admin user?
>> Sorry for that.
>> I mean, use users in /etc/passwd to login.
>>
> I never knew this is was an option.
>
> Or you mean something new that was planned somewhere?
>
> I am against of using native authentication for applications, as it enables
> more privileges that users should have.
>
> The proper way to do that is to use directory services, such as LDAP and
> integrate the nss of system and application to use that directory.
>
> Regards,
> Alon
I saw this from**http://www.ovirt.org/Features/Local_Authentication%E2%80%8E
So I thought it would be available now..
It seems that I have to use ldap now.
In future you will be able to write plugin for authentication and authorization to do
whatever you like.
This is still work in progress as far as I can see[1].
Alon
[1]
http://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine+branch:maste...
11:52 a.m.
On 2013/8/24 16:44, Alon Bar-Lev wrote:
----- Original Message -----
> From: "lofyer" <lofyer(a)gmail.com>
> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> Cc: users(a)ovirt.org
> Sent: Saturday, August 24, 2013 11:07:10 AM
> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>
> On 2013/8/24 15:56, Alon Bar-Lev wrote:
>> ----- Original Message -----
>>> From: "lofyer" <lofyer(a)gmail.com>
>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> Cc: users(a)ovirt.org
>>> Sent: Saturday, August 24, 2013 10:47:21 AM
>>> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>>>
>>> On 2013/8/24 15:46, Alon Bar-Lev wrote:
>>>> ----- Original Message -----
>>>>> From: "lofyer" <lofyer(a)gmail.com>
>>>>> To: users(a)ovirt.org
>>>>> Sent: Saturday, August 24, 2013 10:36:12 AM
>>>>> Subject: [Users] Is the feature Local Authentication abandoned?
>>>>>
>>>>> Is the feature Local Authentication abandoned in 3.3?
>>>>> If not, what should I do to use it?
>>>> Question is unclear.
>>>>
>>>> What do you call "Local Authentication", after setup can't
you login
>>>> using
>>>> admin user?
>>> Sorry for that.
>>> I mean, use users in /etc/passwd to login.
>>>
>> I never knew this is was an option.
>>
>> Or you mean something new that was planned somewhere?
>>
>> I am against of using native authentication for applications, as it enables
>> more privileges that users should have.
>>
>> The proper way to do that is to use directory services, such as LDAP and
>> integrate the nss of system and application to use that directory.
>>
>> Regards,
>> Alon
> I saw this from**http://www.ovirt.org/Features/Local_Authentication%E2%80%8E
> So I thought it would be available now..
>
> It seems that I have to use ldap now.
>
In future you will be able to write plugin for authentication and authorization to do
whatever you like.
This is still work in progress as far as I can see[1].
Alon
[1]
http://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine+branch:maste...
I see. Thank you very much.
3:49 p.m.
On 08/24/2013 04:44 AM, Alon Bar-Lev wrote:
----- Original Message -----
> From: "lofyer" <lofyer(a)gmail.com>
> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
> Cc: users(a)ovirt.org
> Sent: Saturday, August 24, 2013 11:07:10 AM
> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>
> On 2013/8/24 15:56, Alon Bar-Lev wrote:
>> ----- Original Message -----
>>> From: "lofyer" <lofyer(a)gmail.com>
>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>> Cc: users(a)ovirt.org
>>> Sent: Saturday, August 24, 2013 10:47:21 AM
>>> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>>>
>>> On 2013/8/24 15:46, Alon Bar-Lev wrote:
>>>> ----- Original Message -----
>>>>> From: "lofyer" <lofyer(a)gmail.com>
>>>>> To: users(a)ovirt.org
>>>>> Sent: Saturday, August 24, 2013 10:36:12 AM
>>>>> Subject: [Users] Is the feature Local Authentication abandoned?
>>>>>
>>>>> Is the feature Local Authentication abandoned in 3.3?
>>>>> If not, what should I do to use it?
>>>> Question is unclear.
>>>>
>>>> What do you call "Local Authentication", after setup can't
you login
>>>> using
>>>> admin user?
>>> Sorry for that.
>>> I mean, use users in /etc/passwd to login.
>>>
>> I never knew this is was an option.
>>
>> Or you mean something new that was planned somewhere?
>>
>> I am against of using native authentication for applications, as it enables
>> more privileges that users should have.
>>
>> The proper way to do that is to use directory services, such as LDAP and
>> integrate the nss of system and application to use that directory.
>>
>> Regards,
>> Alon
> I saw this from**http://www.ovirt.org/Features/Local_Authentication%E2%80%8E
> So I thought it would be available now..
>
> It seems that I have to use ldap now.
>
In future you will be able to write plugin for authentication and authorization to do
whatever you like.
This is still work in progress as far as I can see[1].
Alon
[1]
http://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine+branch:maste...
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
While I think this is a great future addition, I really believe that the
default oVirt installation should include some form of integrated basic
authentication using the integrated DB! I was really surprised to see
this functionality missing. With the integrated DB, I have no idea why
the functionality isn't there. I know - it's all about priorities.
While LDAP is common, still - not everyone uses it! If I was buying
RHEV, the lack of the basic built in authentication would have been a
show stopper for me. Do I *really* need to use LDAP when I've got a
total of about 4 people maintaining everything? In fact, even if I
*was* using LDAP, the virtualization infrastructure has enough of its
own complexity that I'd rather separate it from LDAP - one less thing to
go wrong. If I was buying RHEV, the lack of basic authentication would
have been a showstopper for me.
Jason.
3:52 p.m.
----- Original Message -----
From: "Jason Keltz" <jas(a)cse.yorku.ca>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>
Cc: "users(a)ovirt.org >> users" <users(a)ovirt.org>
Sent: Monday, August 26, 2013 3:49:52 PM
Subject: Re: [Users] Is the feature Local Authentication abandoned?
On 08/24/2013 04:44 AM, Alon Bar-Lev wrote:
>
> ----- Original Message -----
>> From: "lofyer" <lofyer(a)gmail.com>
>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>> Cc: users(a)ovirt.org
>> Sent: Saturday, August 24, 2013 11:07:10 AM
>> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>>
>> On 2013/8/24 15:56, Alon Bar-Lev wrote:
>>> ----- Original Message -----
>>>> From: "lofyer" <lofyer(a)gmail.com>
>>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com>
>>>> Cc: users(a)ovirt.org
>>>> Sent: Saturday, August 24, 2013 10:47:21 AM
>>>> Subject: Re: [Users] Is the feature Local Authentication abandoned?
>>>>
>>>> On 2013/8/24 15:46, Alon Bar-Lev wrote:
>>>>> ----- Original Message -----
>>>>>> From: "lofyer" <lofyer(a)gmail.com>
>>>>>> To: users(a)ovirt.org
>>>>>> Sent: Saturday, August 24, 2013 10:36:12 AM
>>>>>> Subject: [Users] Is the feature Local Authentication abandoned?
>>>>>>
>>>>>> Is the feature Local Authentication abandoned in 3.3?
>>>>>> If not, what should I do to use it?
>>>>> Question is unclear.
>>>>>
>>>>> What do you call "Local Authentication", after setup
can't you login
>>>>> using
>>>>> admin user?
>>>> Sorry for that.
>>>> I mean, use users in /etc/passwd to login.
>>>>
>>> I never knew this is was an option.
>>>
>>> Or you mean something new that was planned somewhere?
>>>
>>> I am against of using native authentication for applications, as it
>>> enables
>>> more privileges that users should have.
>>>
>>> The proper way to do that is to use directory services, such as LDAP and
>>> integrate the nss of system and application to use that directory.
>>>
>>> Regards,
>>> Alon
>> I saw this
>> from**http://www.ovirt.org/Features/Local_Authentication%E2%80%8E
>> So I thought it would be available now..
>>
>> It seems that I have to use ldap now.
>>
> In future you will be able to write plugin for authentication and
> authorization to do whatever you like.
>
> This is still work in progress as far as I can see[1].
>
> Alon
>
> [1]
>
http://gerrit.ovirt.org/#/q/status:open+project:ovirt-engine+branch:maste...
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
While I think this is a great future addition, I really believe that the
default oVirt installation should include some form of integrated basic
authentication using the integrated DB! I was really surprised to see
this functionality missing. With the integrated DB, I have no idea why
the functionality isn't there. I know - it's all about priorities.
I fully agree with you.
I was also surprised that LDAP was developed before simple database.
While LDAP is common, still - not everyone uses it! If I was buying
RHEV, the lack of the basic built in authentication would have been a
show stopper for me. Do I *really* need to use LDAP when I've got a
total of about 4 people maintaining everything? In fact, even if I
*was* using LDAP, the virtualization infrastructure has enough of its
own complexity that I'd rather separate it from LDAP - one less thing to
go wrong. If I was buying RHEV, the lack of basic authentication would
have been a showstopper for me.
Jason.
4113
days inactive
4115
days old
8 comments
3 participants
participants (3)
-
Alon Bar-Lev -
Jason Keltz -
lofyer