3:37 a.m.
Hi,
We're running oVirt 4.0.1.1, and we're trying to grant a permission to a
user on a VM. Thing is when we open the 'Permissions' subtab on that VM,
we click on Add, the LDAP backend shows up but any value entered into
the search box returns nothing, even when I know the values exist.
This has been working on oVirt 3.x, we actually migrated to 4.x last
week and didn't notice this issue.
Additionally, there's no combobox to choose the permission to grant?
All this is done with the admin@internal user, so I guess this is not a
self-permission issue.
Interesting thing is that I can successfully log-in to the user portal
with a LDAP based user and manage all the VMs assigned to them.
Just to see if there's been any configuration change, we also run the
ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns
is pretty similar to ours, and even the test commands (Login, Search)
work successfully (I can see search returning user's data like name,
surname, ...). We even applied this configuration to engine to see if it
makes a difference but the result is the same, the search dialog returns
nothing and neither I can see the permission to grant.
Any hint about this?
Thanks
3:58 a.m.
On 08/10/2016 09:37 AM, Nicolás wrote:
Hi,
We're running oVirt 4.0.1.1, and we're trying to grant a permission to a
user on a VM. Thing is when we open the 'Permissions' subtab on that VM,
we click on Add, the LDAP backend shows up but any value entered into
the search box returns nothing, even when I know the values exist.
This has been working on oVirt 3.x, we actually migrated to 4.x last
week and didn't notice this issue.
Additionally, there's no combobox to choose the permission to grant?
There should be combo box to choose a role.
All this is done with the admin@internal user, so I guess this is not a
self-permission issue.
Interesting thing is that I can successfully log-in to the user portal
with a LDAP based user and manage all the VMs assigned to them.
Just to see if there's been any configuration change, we also run the
ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns
is pretty similar to ours, and even the test commands (Login, Search)
work successfully (I can see search returning user's data like name,
surname, ...). We even applied this configuration to engine to see if it
makes a difference but the result is the same, the search dialog returns
nothing and neither I can see the permission to grant.
Any hint about this?
Maybe you hit similar issue to this one[1].
Can you please share engine.log, while you hit search button?
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
Thanks
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
4:10 a.m.
--=_3bd4807380444da89f7b6ed947d4d506
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8;
format=flowed
El 2016-08-10 08:58, Ondra Machacek escribió:
On 08/10/2016 09:37 AM, Nicolás wrote:
> Hi,
>
> We're running oVirt 4.0.1.1, and we're trying to grant a permission to
> a
> user on a VM. Thing is when we open the 'Permissions' subtab on that
> VM,
> we click on Add, the LDAP backend shows up but any value entered into
> the search box returns nothing, even when I know the values exist.
>
> This has been working on oVirt 3.x, we actually migrated to 4.x last
> week and didn't notice this issue.
>
> Additionally, there's no combobox to choose the permission to grant?
There should be combo box to choose a role.
I've attached a screenshot, seems there's not.
>
> All this is done with the admin@internal user, so I guess this is not
> a
> self-permission issue.
>
> Interesting thing is that I can successfully log-in to the user portal
> with a LDAP based user and manage all the VMs assigned to them.
>
> Just to see if there's been any configuration change, we also run the
> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it
> returns
> is pretty similar to ours, and even the test commands (Login, Search)
> work successfully (I can see search returning user's data like name,
> surname, ...). We even applied this configuration to engine to see if
> it
> makes a difference but the result is the same, the search dialog
> returns
> nothing and neither I can see the permission to grant.
>
> Any hint about this?
Maybe you hit similar issue to this one[1].
Can you please share engine.log, while you hit search button?
I'm also attaching the log at the time I hit the search button, but I'm
afraid there's no entry about that.
Thanks.
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>
> Thanks
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
--=_3bd4807380444da89f7b6ed947d4d506
Content-Transfer-Encoding: base64
Content-Type: image/png;
name="Captura de pantalla de 2016-08-10 09-02-19.png"
Content-Disposition: attachment;
filename="Captura de pantalla de 2016-08-10 09-02-19.png";
size=12734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--=_3bd4807380444da89f7b6ed947d4d506
Content-Transfer-Encoding: base64
Content-Type: application/x-gzip;
name=engine.tar.gz
Content-Disposition: attachment;
filename=engine.tar.gz;
size=588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--=_3bd4807380444da89f7b6ed947d4d506--
4:32 a.m.
On 08/10/2016 10:10 AM, nicolas(a)devels.es wrote:
El 2016-08-10 08:58, Ondra Machacek escribió:
> On 08/10/2016 09:37 AM, Nicolás wrote:
>> Hi,
>>
>> We're running oVirt 4.0.1.1, and we're trying to grant a permission to a
>> user on a VM. Thing is when we open the 'Permissions' subtab on that VM,
>> we click on Add, the LDAP backend shows up but any value entered into
>> the search box returns nothing, even when I know the values exist.
>>
>> This has been working on oVirt 3.x, we actually migrated to 4.x last
>> week and didn't notice this issue.
>>
>> Additionally, there's no combobox to choose the permission to grant?
>
> There should be combo box to choose a role.
>
I've attached a screenshot, seems there's not.
OK, it seems like some UI issue. Can you please force reload or clear
browser cache?
Maybe try different browser.
>>
>> All this is done with the admin@internal user, so I guess this is not a
>> self-permission issue.
>>
>> Interesting thing is that I can successfully log-in to the user portal
>> with a LDAP based user and manage all the VMs assigned to them.
>>
>> Just to see if there's been any configuration change, we also run the
>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it returns
>> is pretty similar to ours, and even the test commands (Login, Search)
>> work successfully (I can see search returning user's data like name,
>> surname, ...). We even applied this configuration to engine to see if it
>> makes a difference but the result is the same, the search dialog returns
>> nothing and neither I can see the permission to grant.
>>
>> Any hint about this?
>
> Maybe you hit similar issue to this one[1].
>
> Can you please share engine.log, while you hit search button?
>
I'm also attaching the log at the time I hit the search button, but I'm
afraid there's no entry about that.
Thanks.
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>
>>
>> Thanks
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
8:36 a.m.
El 2016-08-10 09:32, Ondra Machacek escribió:
On 08/10/2016 10:10 AM, nicolas(a)devels.es wrote:
> El 2016-08-10 08:58, Ondra Machacek escribió:
>> On 08/10/2016 09:37 AM, Nicolás wrote:
>>> Hi,
>>>
>>> We're running oVirt 4.0.1.1, and we're trying to grant a permission
>>> to a
>>> user on a VM. Thing is when we open the 'Permissions' subtab on that
>>> VM,
>>> we click on Add, the LDAP backend shows up but any value entered
>>> into
>>> the search box returns nothing, even when I know the values exist.
>>>
>>> This has been working on oVirt 3.x, we actually migrated to 4.x last
>>> week and didn't notice this issue.
>>>
>>> Additionally, there's no combobox to choose the permission to grant?
>>
>> There should be combo box to choose a role.
>>
>
> I've attached a screenshot, seems there's not.
OK, it seems like some UI issue. Can you please force reload or clear
browser cache?
Maybe try different browser.
Nope... Cleaned cache from Chrome, Firefox, same result. Even private
windows have the same behaviour. By the way, we have 2 independent oVirt
infrastructures, both upgraded from 3.6.7 and both have the same issue,
I just had a look at the second and the same happens here (no log in
engine.log either). This second is 4.0.0 instead of 4.0.0, FWIW.
>
>>>
>>> All this is done with the admin@internal user, so I guess this is
>>> not a
>>> self-permission issue.
>>>
>>> Interesting thing is that I can successfully log-in to the user
>>> portal
>>> with a LDAP based user and manage all the VMs assigned to them.
>>>
>>> Just to see if there's been any configuration change, we also run
>>> the
>>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it
>>> returns
>>> is pretty similar to ours, and even the test commands (Login,
>>> Search)
>>> work successfully (I can see search returning user's data like name,
>>> surname, ...). We even applied this configuration to engine to see
>>> if it
>>> makes a difference but the result is the same, the search dialog
>>> returns
>>> nothing and neither I can see the permission to grant.
>>>
>>> Any hint about this?
>>
>> Maybe you hit similar issue to this one[1].
>>
>> Can you please share engine.log, while you hit search button?
>>
>
> I'm also attaching the log at the time I hit the search button, but
> I'm
> afraid there's no entry about that.
>
> Thanks.
>
>
>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>
>>>
>>> Thanks
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
8:39 a.m.
El 2016-08-10 13:36, nicolas(a)devels.es escribió:
El 2016-08-10 09:32, Ondra Machacek escribió:
> On 08/10/2016 10:10 AM, nicolas(a)devels.es wrote:
>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>> On 08/10/2016 09:37 AM, Nicolás wrote:
>>>> Hi,
>>>>
>>>> We're running oVirt 4.0.1.1, and we're trying to grant a
permission
>>>> to a
>>>> user on a VM. Thing is when we open the 'Permissions' subtab on
>>>> that VM,
>>>> we click on Add, the LDAP backend shows up but any value entered
>>>> into
>>>> the search box returns nothing, even when I know the values exist.
>>>>
>>>> This has been working on oVirt 3.x, we actually migrated to 4.x
>>>> last
>>>> week and didn't notice this issue.
>>>>
>>>> Additionally, there's no combobox to choose the permission to
>>>> grant?
>>>
>>> There should be combo box to choose a role.
>>>
>>
>> I've attached a screenshot, seems there's not.
>
> OK, it seems like some UI issue. Can you please force reload or clear
> browser cache?
> Maybe try different browser.
>
Nope... Cleaned cache from Chrome, Firefox, same result. Even private
windows have the same behaviour. By the way, we have 2 independent
oVirt infrastructures, both upgraded from 3.6.7 and both have the same
issue, I just had a look at the second and the same happens here (no
log in engine.log either). This second is 4.0.0 instead of 4.0.0,
FWIW.
I meant: This second is 4.0.0 instead of 4.0.1
>>
>>>>
>>>> All this is done with the admin@internal user, so I guess this is
>>>> not a
>>>> self-permission issue.
>>>>
>>>> Interesting thing is that I can successfully log-in to the user
>>>> portal
>>>> with a LDAP based user and manage all the VMs assigned to them.
>>>>
>>>> Just to see if there's been any configuration change, we also run
>>>> the
>>>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it
>>>> returns
>>>> is pretty similar to ours, and even the test commands (Login,
>>>> Search)
>>>> work successfully (I can see search returning user's data like
>>>> name,
>>>> surname, ...). We even applied this configuration to engine to see
>>>> if it
>>>> makes a difference but the result is the same, the search dialog
>>>> returns
>>>> nothing and neither I can see the permission to grant.
>>>>
>>>> Any hint about this?
>>>
>>> Maybe you hit similar issue to this one[1].
>>>
>>> Can you please share engine.log, while you hit search button?
>>>
>>
>> I'm also attaching the log at the time I hit the search button, but
>> I'm
>> afraid there's no entry about that.
>>
>> Thanks.
>>
>>
>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>>
>>>>
>>>> Thanks
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users(a)ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
9:02 a.m.
On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es wrote:
El 2016-08-10 08:58, Ondra Machacek escribió:
> On 08/10/2016 09:37 AM, Nicolás wrote:
>> Hi,
>>
>> We're running oVirt 4.0.1.1, and we're trying to grant a permission to
>> a
>> user on a VM. Thing is when we open the 'Permissions' subtab on that
>> VM,
>> we click on Add, the LDAP backend shows up but any value entered into
>> the search box returns nothing, even when I know the values exist.
>>
>> This has been working on oVirt 3.x, we actually migrated to 4.x last
>> week and didn't notice this issue.
>>
>> Additionally, there's no combobox to choose the permission to grant?
>
> There should be combo box to choose a role.
I've attached a screenshot, seems there's not.
Its highly likely the dropdown is there, but its scrolled below the bottom of
the dialog and thus you can't see it. I thought I made sure all the dialogs
were working, seems like I missed one. Let me check it out and see what is
going on.
>> All this is done with the admin@internal user, so I guess
this is not
>> a
>> self-permission issue.
>>
>> Interesting thing is that I can successfully log-in to the user portal
>> with a LDAP based user and manage all the VMs assigned to them.
>>
>> Just to see if there's been any configuration change, we also run the
>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it
>> returns
>> is pretty similar to ours, and even the test commands (Login, Search)
>> work successfully (I can see search returning user's data like name,
>> surname, ...). We even applied this configuration to engine to see if
>> it
>> makes a difference but the result is the same, the search dialog
>> returns
>> nothing and neither I can see the permission to grant.
>>
>> Any hint about this?
>
> Maybe you hit similar issue to this one[1].
>
> Can you please share engine.log, while you hit search button?
I'm also attaching the log at the time I hit the search button, but I'm
afraid there's no entry about that.
Thanks.
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>
>> Thanks
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
9:29 a.m.
On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
wrote:
> El 2016-08-10 08:58, Ondra Machacek escribió:
> > On 08/10/2016 09:37 AM, Nicolás wrote:
> >> Hi,
> >>
> >> We're running oVirt 4.0.1.1, and we're trying to grant a permission
to
> >> a
> >> user on a VM. Thing is when we open the 'Permissions' subtab on
that
> >> VM,
> >> we click on Add, the LDAP backend shows up but any value entered into
> >> the search box returns nothing, even when I know the values exist.
> >>
> >> This has been working on oVirt 3.x, we actually migrated to 4.x last
> >> week and didn't notice this issue.
> >>
> >> Additionally, there's no combobox to choose the permission to grant?
> >
> > There should be combo box to choose a role.
>
> I've attached a screenshot, seems there's not.
Its highly likely the dropdown is there, but its scrolled below the bottom
of the dialog and thus you can't see it. I thought I made sure all the
dialogs were working, seems like I missed one. Let me check it out and see
what is going on.
Okay I double checked, I went to the VMs main tab, selected a VM, then went to
the permissions sub tab. Clicked add. The dialog that popped up looks like the
one attached, which is what I was expecting. The one you attached appears to
be missing some styling, which is likely what caused the Role to Assign part
to be scrolled below the bottom of the page.
Can you complete clear your cache (not shift reload, but settings->clear
cache). If that doesn't work can you tell us the version of the patternfly rpm
installed on your engine?
Alexander
> >> All this is done with the admin@internal user, so I
guess this is not
> >> a
> >> self-permission issue.
> >>
> >> Interesting thing is that I can successfully log-in to the user portal
> >> with a LDAP based user and manage all the VMs assigned to them.
> >>
> >> Just to see if there's been any configuration change, we also run the
> >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it
> >> returns
> >> is pretty similar to ours, and even the test commands (Login, Search)
> >> work successfully (I can see search returning user's data like name,
> >> surname, ...). We even applied this configuration to engine to see if
> >> it
> >> makes a difference but the result is the same, the search dialog
> >> returns
> >> nothing and neither I can see the permission to grant.
> >>
> >> Any hint about this?
> >
> > Maybe you hit similar issue to this one[1].
> >
> > Can you please share engine.log, while you hit search button?
>
> I'm also attaching the log at the time I hit the search button, but I'm
> afraid there's no entry about that.
>
> Thanks.
>
> > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
> >
> >> Thanks
> >> _______________________________________________
> >> Users mailing list
> >> Users(a)ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
12:31 p.m.
--=_c4730d24f09a9670f95c37952b502f09
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8;
format=flowed
El 2016-08-10 14:46, Nicolás escribió:
En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com>
escribió:
> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
> wrote:
>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>>> >> Hi,
>>> >>
>>> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant
a
> permission to
>>> >> a
>>> >> user on a VM. Thing is when we open the 'Permissions'
subtab
> on that
>>> >> VM,
>>> >> we click on Add, the LDAP backend shows up but any value
> entered into
>>> >> the search box returns nothing, even when I know the values
> exist.
>>> >>
>>> >> This has been working on oVirt 3.x, we actually migrated to
> 4.x last
>>> >> week and didn't notice this issue.
>>> >>
>>> >> Additionally, there's no combobox to choose the permission to
> grant?
>>> >
>>> > There should be combo box to choose a role.
>>>
>>> I've attached a screenshot, seems there's not.
>>
>> Its highly likely the dropdown is there, but its scrolled below
> the bottom
>> of the dialog and thus you can't see it. I thought I made sure all
> the
>> dialogs were working, seems like I missed one. Let me check it out
> and see
>> what is going on.
>>
>
> Okay I double checked, I went to the VMs main tab, selected a VM,
> then went to
> the permissions sub tab. Clicked add. The dialog that popped up
> looks like the
> one attached, which is what I was expecting. The one you attached
> appears to
> be missing some styling, which is likely what caused the Role to
> Assign part
> to be scrolled below the bottom of the page.
>
> Can you complete clear your cache (not shift reload, but
> settings->clear
> cache). If that doesn't work can you tell us the version of the
> patternfly rpm
> installed on your engine?
>
> Yes, I already did that, also opened the engine on different clients
> and the behavior is the same, I believe this is not a client issue.
> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
>
> Anyhow, I see there are lots of packages to update so I'll do so
> within a few days and report results.
So I was able to update all packages, restart run engine-setup just in
case, restart ovirt-engine and the situation is the same. I remembered
we also have a dev. environment oVirt installation which we upgraded
from 3.6.7 to 4.0.1 and same happens here, so finally we have 3
independent oVirt installations with the same problem. There's something
not working as intended.
I'm attaching a list of packages on oVirt engine and their versions if
you want to check if there's something wrong with versioning, although
everything seems to be ok.
Thanks!
>
>>> >> All this is done with the admin@internal user, so I guess
> this is not
>>> >> a
>>> >> self-permission issue.
>>> >>
>>> >> Interesting thing is that I can successfully log-in to the
> user portal
>>> >> with a LDAP based user and manage all the VMs assigned to
> them.
>>> >>
>>> >> Just to see if there's been any configuration change, we also
> run the
>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration
> it
>>> >> returns
>>> >> is pretty similar to ours, and even the test commands (Login,
> Search)
>>> >> work successfully (I can see search returning user's data
> like name,
>>> >> surname, ...). We even applied this configuration to engine
> to see if
>>> >> it
>>> >> makes a difference but the result is the same, the search
> dialog
>>> >> returns
>>> >> nothing and neither I can see the permission to grant.
>>> >>
>>> >> Any hint about this?
>>> >
>>> > Maybe you hit similar issue to this one[1].
>>> >
>>> > Can you please share engine.log, while you hit search button?
>>>
>>> I'm also attaching the log at the time I hit the search button,
> but I'm
>>> afraid there's no entry about that.
>>>
>>> Thanks.
>>>
>>> > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
> [2]
>>> >
>>> >> Thanks
>>> >> _______________________________________________
>>> >> Users mailing list
>>> >> Users(a)ovirt.org
>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
>
Links:
------
[1] http://4.0.1.1
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
[3] http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--=_c4730d24f09a9670f95c37952b502f09
Content-Transfer-Encoding: base64
Content-Type: text/plain;
name=packages.txt
Content-Disposition: attachment;
filename=packages.txt;
size=2154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--=_c4730d24f09a9670f95c37952b502f09--
11:53 a.m.
El 2016-08-10 14:46, Nicolás escribió:
En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com>
escribió:
> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
> wrote:
>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>>> >> Hi,
>>> >>
>>> >> We're running oVirt 4.0.1.1 [1], and we're trying to grant
a
> permission to
>>> >> a
>>> >> user on a VM. Thing is when we open the 'Permissions'
subtab
> on that
>>> >> VM,
>>> >> we click on Add, the LDAP backend shows up but any value
> entered into
>>> >> the search box returns nothing, even when I know the values
> exist.
>>> >>
>>> >> This has been working on oVirt 3.x, we actually migrated to
> 4.x last
>>> >> week and didn't notice this issue.
>>> >>
>>> >> Additionally, there's no combobox to choose the permission to
> grant?
>>> >
>>> > There should be combo box to choose a role.
>>>
>>> I've attached a screenshot, seems there's not.
>>
>> Its highly likely the dropdown is there, but its scrolled below
> the bottom
>> of the dialog and thus you can't see it. I thought I made sure all
> the
>> dialogs were working, seems like I missed one. Let me check it out
> and see
>> what is going on.
>>
>
> Okay I double checked, I went to the VMs main tab, selected a VM,
> then went to
> the permissions sub tab. Clicked add. The dialog that popped up
> looks like the
> one attached, which is what I was expecting. The one you attached
> appears to
> be missing some styling, which is likely what caused the Role to
> Assign part
> to be scrolled below the bottom of the page.
>
> Can you complete clear your cache (not shift reload, but
> settings->clear
> cache). If that doesn't work can you tell us the version of the
> patternfly rpm
> installed on your engine?
>
> Yes, I already did that, also opened the engine on different clients
> and the behavior is the same, I believe this is not a client issue.
> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
Ok, this indeed seems like a graphics problem since I am seeing this
connecting to a machine through a VNC server and the Role combobox is
moved down out of the dialog.
However, the LDAP issue persists. When I choose the 'internal' domain, I
can search the 'admin' user successfully, however, if I set it to be the
LDAP domain, any search returns nothing.
Any hints or ideas how to debug this?
Thanks.
>
> Anyhow, I see there are lots of packages to update so I'll do so
> within a few days and report results.
>
>>> >> All this is done with the admin@internal user, so I guess
> this is not
>>> >> a
>>> >> self-permission issue.
>>> >>
>>> >> Interesting thing is that I can successfully log-in to the
> user portal
>>> >> with a LDAP based user and manage all the VMs assigned to
> them.
>>> >>
>>> >> Just to see if there's been any configuration change, we also
> run the
>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration
> it
>>> >> returns
>>> >> is pretty similar to ours, and even the test commands (Login,
> Search)
>>> >> work successfully (I can see search returning user's data
> like name,
>>> >> surname, ...). We even applied this configuration to engine
> to see if
>>> >> it
>>> >> makes a difference but the result is the same, the search
> dialog
>>> >> returns
>>> >> nothing and neither I can see the permission to grant.
>>> >>
>>> >> Any hint about this?
>>> >
>>> > Maybe you hit similar issue to this one[1].
>>> >
>>> > Can you please share engine.log, while you hit search button?
>>>
>>> I'm also attaching the log at the time I hit the search button,
> but I'm
>>> afraid there's no entry about that.
>>>
>>> Thanks.
>>>
>>> > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
> [2]
>>> >
>>> >> Thanks
>>> >> _______________________________________________
>>> >> Users mailing list
>>> >> Users(a)ovirt.org
>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
> [3]users [3]
>
Links:
------
[1] http://4.0.1.1
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
[3] http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
3:38 p.m.
On 08/12/2016 05:53 PM, nicolas(a)devels.es wrote:
El 2016-08-10 14:46, Nicolás escribió:
> En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com> escribió:
>
>> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>
>>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
>> wrote:
>
>>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>
>>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>
>>>> >> Hi,
>
>>>> >>
>
>>>> >> We're running oVirt 4.0.1.1 [1], and we're trying to
grant a
>> permission to
>
>>>> >> a
>
>>>> >> user on a VM. Thing is when we open the 'Permissions'
subtab
>> on that
>
>>>> >> VM,
>
>>>> >> we click on Add, the LDAP backend shows up but any value
>> entered into
>
>>>> >> the search box returns nothing, even when I know the values
>> exist.
>
>>>> >>
>
>>>> >> This has been working on oVirt 3.x, we actually migrated to
>> 4.x last
>
>>>> >> week and didn't notice this issue.
>
>>>> >>
>
>>>> >> Additionally, there's no combobox to choose the permission
to
>> grant?
>
>>>> >
>
>>>> > There should be combo box to choose a role.
>
>>>>
>
>>>> I've attached a screenshot, seems there's not.
>
>>>
>
>>> Its highly likely the dropdown is there, but its scrolled below
>> the bottom
>
>>> of the dialog and thus you can't see it. I thought I made sure all
>> the
>
>>> dialogs were working, seems like I missed one. Let me check it out
>> and see
>
>>> what is going on.
>
>>>
>
>>
>
>> Okay I double checked, I went to the VMs main tab, selected a VM,
>> then went to
>
>> the permissions sub tab. Clicked add. The dialog that popped up
>> looks like the
>
>> one attached, which is what I was expecting. The one you attached
>> appears to
>
>> be missing some styling, which is likely what caused the Role to
>> Assign part
>
>> to be scrolled below the bottom of the page.
>
>>
>
>> Can you complete clear your cache (not shift reload, but
>> settings->clear
>
>> cache). If that doesn't work can you tell us the version of the
>> patternfly rpm
>
>> installed on your engine?
>
>>
>
>> Yes, I already did that, also opened the engine on different clients
>> and the behavior is the same, I believe this is not a client issue.
>> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
>
Ok, this indeed seems like a graphics problem since I am seeing this
connecting to a machine through a VNC server and the Role combobox is
moved down out of the dialog.
However, the LDAP issue persists. When I choose the 'internal' domain, I
can search the 'admin' user successfully, however, if I set it to be the
LDAP domain, any search returns nothing.
Any hints or ideas how to debug this?
Can you please enable debug log[1] and send it here?
[1]
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/READ...
Thanks.
>>
>
>> Anyhow, I see there are lots of packages to update so I'll do so
>> within a few days and report results.
>
>>
>
>>>> >> All this is done with the admin@internal user, so I guess
>> this is not
>
>>>> >> a
>
>>>> >> self-permission issue.
>
>>>> >>
>
>>>> >> Interesting thing is that I can successfully log-in to the
>> user portal
>
>>>> >> with a LDAP based user and manage all the VMs assigned to
>> them.
>
>>>> >>
>
>>>> >> Just to see if there's been any configuration change, we
also
>> run the
>
>>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the configuration
>> it
>
>>>> >> returns
>
>>>> >> is pretty similar to ours, and even the test commands (Login,
>> Search)
>
>>>> >> work successfully (I can see search returning user's data
>> like name,
>
>>>> >> surname, ...). We even applied this configuration to engine
>> to see if
>
>>>> >> it
>
>>>> >> makes a difference but the result is the same, the search
>> dialog
>
>>>> >> returns
>
>>>> >> nothing and neither I can see the permission to grant.
>
>>>> >>
>
>>>> >> Any hint about this?
>
>>>> >
>
>>>> > Maybe you hit similar issue to this one[1].
>
>>>> >
>
>>>> > Can you please share engine.log, while you hit search button?
>
>>>>
>
>>>> I'm also attaching the log at the time I hit the search button,
>> but I'm
>
>>>> afraid there's no entry about that.
>
>>>>
>
>>>> Thanks.
>
>>>>
>
>>>> > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
>> [2]
>
>>>> >
>
>>>> >> Thanks
>
>>>> >> _______________________________________________
>
>>>> >> Users mailing list
>
>>>> >> Users(a)ovirt.org
>
>>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>> [3]users [3]
>
>>>
>
>>> _______________________________________________
>
>>> Users mailing list
>
>>> Users(a)ovirt.org
>
>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>> [3]users [3]
>
>> _______________________________________________
>
>> Users mailing list
>
>> Users(a)ovirt.org
>
>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>> [3]users [3]
>
>>
>
>
>
> Links:
> ------
> [1] http://4.0.1.1
> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
> [3] http://lists.ovirt.org/mailman/listinfo/users
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
6:44 p.m.
El 2016-08-12 20:38, Ondra Machacek escribió:
On 08/12/2016 05:53 PM, nicolas(a)devels.es wrote:
> El 2016-08-10 14:46, Nicolás escribió:
>> En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com> escribió:
>>
>>> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>>
>>>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
>>> wrote:
>>
>>>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>
>>>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>>
>>>>> >> Hi,
>>
>>>>> >>
>>
>>>>> >> We're running oVirt 4.0.1.1 [1], and we're trying to
grant a
>>> permission to
>>
>>>>> >> a
>>
>>>>> >> user on a VM. Thing is when we open the
'Permissions' subtab
>>> on that
>>
>>>>> >> VM,
>>
>>>>> >> we click on Add, the LDAP backend shows up but any value
>>> entered into
>>
>>>>> >> the search box returns nothing, even when I know the values
>>> exist.
>>
>>>>> >>
>>
>>>>> >> This has been working on oVirt 3.x, we actually migrated to
>>> 4.x last
>>
>>>>> >> week and didn't notice this issue.
>>
>>>>> >>
>>
>>>>> >> Additionally, there's no combobox to choose the
permission to
>>> grant?
>>
>>>>> >
>>
>>>>> > There should be combo box to choose a role.
>>
>>>>>
>>
>>>>> I've attached a screenshot, seems there's not.
>>
>>>>
>>
>>>> Its highly likely the dropdown is there, but its scrolled below
>>> the bottom
>>
>>>> of the dialog and thus you can't see it. I thought I made sure all
>>> the
>>
>>>> dialogs were working, seems like I missed one. Let me check it out
>>> and see
>>
>>>> what is going on.
>>
>>>>
>>
>>>
>>
>>> Okay I double checked, I went to the VMs main tab, selected a VM,
>>> then went to
>>
>>> the permissions sub tab. Clicked add. The dialog that popped up
>>> looks like the
>>
>>> one attached, which is what I was expecting. The one you attached
>>> appears to
>>
>>> be missing some styling, which is likely what caused the Role to
>>> Assign part
>>
>>> to be scrolled below the bottom of the page.
>>
>>>
>>
>>> Can you complete clear your cache (not shift reload, but
>>> settings->clear
>>
>>> cache). If that doesn't work can you tell us the version of the
>>> patternfly rpm
>>
>>> installed on your engine?
>>
>>>
>>
>>> Yes, I already did that, also opened the engine on different clients
>>> and the behavior is the same, I believe this is not a client issue.
>>> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
>>
>
> Ok, this indeed seems like a graphics problem since I am seeing this
> connecting to a machine through a VNC server and the Role combobox is
> moved down out of the dialog.
>
> However, the LDAP issue persists. When I choose the 'internal' domain,
> I
> can search the 'admin' user successfully, however, if I set it to be
> the
> LDAP domain, any search returns nothing.
>
> Any hints or ideas how to debug this?
Can you please enable debug log[1] and send it here?
[1]
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/READ...
Thanks. I was now able to see why it is failing:
TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13)
[] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin
limit exceeded), numEntries=0, numReferences=0, errorMessage='admin
limit exceeded')
Indeed, if I run that query using the ldapsearch command I can clearly
see it is returning an "admin limit exceeded" error.
The applied filter is:
(&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username)))
Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not
changed our LDAP configuration. Has the filter been changed in 4.x by
default?
If so, is there a way to override the filter to make it simpler? (In our
case we'll always seek by username, so no need to search by givenName,
sn or displayName).
Thanks.
>
> Thanks.
>
>
>>>
>>
>>> Anyhow, I see there are lots of packages to update so I'll do so
>>> within a few days and report results.
>>
>>>
>>
>>>>> >> All this is done with the admin@internal user, so I guess
>>> this is not
>>
>>>>> >> a
>>
>>>>> >> self-permission issue.
>>
>>>>> >>
>>
>>>>> >> Interesting thing is that I can successfully log-in to the
>>> user portal
>>
>>>>> >> with a LDAP based user and manage all the VMs assigned to
>>> them.
>>
>>>>> >>
>>
>>>>> >> Just to see if there's been any configuration change, we
also
>>> run the
>>
>>>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the
configuration
>>> it
>>
>>>>> >> returns
>>
>>>>> >> is pretty similar to ours, and even the test commands
(Login,
>>> Search)
>>
>>>>> >> work successfully (I can see search returning user's
data
>>> like name,
>>
>>>>> >> surname, ...). We even applied this configuration to engine
>>> to see if
>>
>>>>> >> it
>>
>>>>> >> makes a difference but the result is the same, the search
>>> dialog
>>
>>>>> >> returns
>>
>>>>> >> nothing and neither I can see the permission to grant.
>>
>>>>> >>
>>
>>>>> >> Any hint about this?
>>
>>>>> >
>>
>>>>> > Maybe you hit similar issue to this one[1].
>>
>>>>> >
>>
>>>>> > Can you please share engine.log, while you hit search button?
>>
>>>>>
>>
>>>>> I'm also attaching the log at the time I hit the search button,
>>> but I'm
>>
>>>>> afraid there's no entry about that.
>>
>>>>>
>>
>>>>> Thanks.
>>
>>>>>
>>
>>>>> > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>> [2]
>>
>>>>> >
>>
>>>>> >> Thanks
>>
>>>>> >> _______________________________________________
>>
>>>>> >> Users mailing list
>>
>>>>> >> Users(a)ovirt.org
>>
>>>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo
[3]/
>>> [3]users [3]
>>
>>>>
>>
>>>> _______________________________________________
>>
>>>> Users mailing list
>>
>>>> Users(a)ovirt.org
>>
>>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>> [3]users [3]
>>
>>> _______________________________________________
>>
>>> Users mailing list
>>
>>> Users(a)ovirt.org
>>
>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>> [3]users [3]
>>
>>>
>>
>>
>>
>> Links:
>> ------
>> [1] http://4.0.1.1
>> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
8:28 a.m.
On 08/13/2016 12:44 AM, nicolas(a)devels.es wrote:
El 2016-08-12 20:38, Ondra Machacek escribió:
> On 08/12/2016 05:53 PM, nicolas(a)devels.es wrote:
>> El 2016-08-10 14:46, Nicolás escribió:
>>> En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com> escribió:
>>>
>>>> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>>>
>>>>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
>>>> wrote:
>>>
>>>>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>>
>>>>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>>>
>>>>>> >> Hi,
>>>
>>>>>> >>
>>>
>>>>>> >> We're running oVirt 4.0.1.1 [1], and we're
trying to grant a
>>>> permission to
>>>
>>>>>> >> a
>>>
>>>>>> >> user on a VM. Thing is when we open the
'Permissions' subtab
>>>> on that
>>>
>>>>>> >> VM,
>>>
>>>>>> >> we click on Add, the LDAP backend shows up but any
value
>>>> entered into
>>>
>>>>>> >> the search box returns nothing, even when I know the
values
>>>> exist.
>>>
>>>>>> >>
>>>
>>>>>> >> This has been working on oVirt 3.x, we actually migrated
to
>>>> 4.x last
>>>
>>>>>> >> week and didn't notice this issue.
>>>
>>>>>> >>
>>>
>>>>>> >> Additionally, there's no combobox to choose the
permission to
>>>> grant?
>>>
>>>>>> >
>>>
>>>>>> > There should be combo box to choose a role.
>>>
>>>>>>
>>>
>>>>>> I've attached a screenshot, seems there's not.
>>>
>>>>>
>>>
>>>>> Its highly likely the dropdown is there, but its scrolled below
>>>> the bottom
>>>
>>>>> of the dialog and thus you can't see it. I thought I made sure
all
>>>> the
>>>
>>>>> dialogs were working, seems like I missed one. Let me check it out
>>>> and see
>>>
>>>>> what is going on.
>>>
>>>>>
>>>
>>>>
>>>
>>>> Okay I double checked, I went to the VMs main tab, selected a VM,
>>>> then went to
>>>
>>>> the permissions sub tab. Clicked add. The dialog that popped up
>>>> looks like the
>>>
>>>> one attached, which is what I was expecting. The one you attached
>>>> appears to
>>>
>>>> be missing some styling, which is likely what caused the Role to
>>>> Assign part
>>>
>>>> to be scrolled below the bottom of the page.
>>>
>>>>
>>>
>>>> Can you complete clear your cache (not shift reload, but
>>>> settings->clear
>>>
>>>> cache). If that doesn't work can you tell us the version of the
>>>> patternfly rpm
>>>
>>>> installed on your engine?
>>>
>>>>
>>>
>>>> Yes, I already did that, also opened the engine on different clients
>>>> and the behavior is the same, I believe this is not a client issue.
>>>> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
>>>
>>
>> Ok, this indeed seems like a graphics problem since I am seeing this
>> connecting to a machine through a VNC server and the Role combobox is
>> moved down out of the dialog.
>>
>> However, the LDAP issue persists. When I choose the 'internal' domain, I
>> can search the 'admin' user successfully, however, if I set it to be the
>> LDAP domain, any search returns nothing.
>>
>> Any hints or ideas how to debug this?
>
> Can you please enable debug log[1] and send it here?
>
> [1]
> https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/READ...
>
>
Thanks. I was now able to see why it is failing:
TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13)
[] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin
limit exceeded), numEntries=0, numReferences=0, errorMessage='admin
limit exceeded')
This is server error, that number of entries to be returned is higher,
than the limit set on server.
You should either increase that limit server side, or don't use '*', but
use some filter. ( ie. user* )
Indeed, if I run that query using the ldapsearch command I can clearly
see it is returning an "admin limit exceeded" error.
The applied filter is:
(&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username)))
Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not
changed our LDAP configuration. Has the filter been changed in 4.x by
default?
It didn't.
If so, is there a way to override the filter to make it simpler? (In our
case we'll always seek by username, so no need to search by givenName,
sn or displayName).
Filtering is constructed on client side, in this case ovirt-engine backend,
so unfortunatelly it's not easilly modifiable.
Thanks.
>>
>> Thanks.
>>
>>
>>>>
>>>
>>>> Anyhow, I see there are lots of packages to update so I'll do so
>>>> within a few days and report results.
>>>
>>>>
>>>
>>>>>> >> All this is done with the admin@internal user, so I
guess
>>>> this is not
>>>
>>>>>> >> a
>>>
>>>>>> >> self-permission issue.
>>>
>>>>>> >>
>>>
>>>>>> >> Interesting thing is that I can successfully log-in to
the
>>>> user portal
>>>
>>>>>> >> with a LDAP based user and manage all the VMs assigned
to
>>>> them.
>>>
>>>>>> >>
>>>
>>>>>> >> Just to see if there's been any configuration
change, we also
>>>> run the
>>>
>>>>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the
configuration
>>>> it
>>>
>>>>>> >> returns
>>>
>>>>>> >> is pretty similar to ours, and even the test commands
(Login,
>>>> Search)
>>>
>>>>>> >> work successfully (I can see search returning user's
data
>>>> like name,
>>>
>>>>>> >> surname, ...). We even applied this configuration to
engine
>>>> to see if
>>>
>>>>>> >> it
>>>
>>>>>> >> makes a difference but the result is the same, the
search
>>>> dialog
>>>
>>>>>> >> returns
>>>
>>>>>> >> nothing and neither I can see the permission to grant.
>>>
>>>>>> >>
>>>
>>>>>> >> Any hint about this?
>>>
>>>>>> >
>>>
>>>>>> > Maybe you hit similar issue to this one[1].
>>>
>>>>>> >
>>>
>>>>>> > Can you please share engine.log, while you hit search
button?
>>>
>>>>>>
>>>
>>>>>> I'm also attaching the log at the time I hit the search
button,
>>>> but I'm
>>>
>>>>>> afraid there's no entry about that.
>>>
>>>>>>
>>>
>>>>>> Thanks.
>>>
>>>>>>
>>>
>>>>>> > [1] https [2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>>> [2]
>>>
>>>>>> >
>>>
>>>>>> >> Thanks
>>>
>>>>>> >> _______________________________________________
>>>
>>>>>> >> Users mailing list
>>>
>>>>>> >> Users(a)ovirt.org
>>>
>>>>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo
[3]/
>>>> [3]users [3]
>>>
>>>>>
>>>
>>>>> _______________________________________________
>>>
>>>>> Users mailing list
>>>
>>>>> Users(a)ovirt.org
>>>
>>>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>>> [3]users [3]
>>>
>>>> _______________________________________________
>>>
>>>> Users mailing list
>>>
>>>> Users(a)ovirt.org
>>>
>>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>>> [3]users [3]
>>>
>>>>
>>>
>>>
>>>
>>> Links:
>>> ------
>>> [1] http://4.0.1.1
>>> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>>
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
8:59 a.m.
El 15/08/16 a las 13:28, Ondra Machacek escribió:
On 08/13/2016 12:44 AM, nicolas(a)devels.es wrote:
> El 2016-08-12 20:38, Ondra Machacek escribió:
>> On 08/12/2016 05:53 PM, nicolas(a)devels.es wrote:
>>> El 2016-08-10 14:46, Nicolás escribió:
>>>> En 10/8/2016 2:29 p. m., Alexander Wels <awels(a)redhat.com>
escribió:
>>>>
>>>>> On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:
>>>>
>>>>>> On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas(a)devels.es
>>>>> wrote:
>>>>
>>>>>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>>>
>>>>>>> > On 08/10/2016 09:37 AM, Nicolás wrote:
>>>>
>>>>>>> >> Hi,
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> We're running oVirt 4.0.1.1 [1], and we're
trying to grant a
>>>>> permission to
>>>>
>>>>>>> >> a
>>>>
>>>>>>> >> user on a VM. Thing is when we open the
'Permissions' subtab
>>>>> on that
>>>>
>>>>>>> >> VM,
>>>>
>>>>>>> >> we click on Add, the LDAP backend shows up but any
value
>>>>> entered into
>>>>
>>>>>>> >> the search box returns nothing, even when I know the
values
>>>>> exist.
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> This has been working on oVirt 3.x, we actually
migrated to
>>>>> 4.x last
>>>>
>>>>>>> >> week and didn't notice this issue.
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> Additionally, there's no combobox to choose the
permission to
>>>>> grant?
>>>>
>>>>>>> >
>>>>
>>>>>>> > There should be combo box to choose a role.
>>>>
>>>>>>>
>>>>
>>>>>>> I've attached a screenshot, seems there's not.
>>>>
>>>>>>
>>>>
>>>>>> Its highly likely the dropdown is there, but its scrolled below
>>>>> the bottom
>>>>
>>>>>> of the dialog and thus you can't see it. I thought I made
sure all
>>>>> the
>>>>
>>>>>> dialogs were working, seems like I missed one. Let me check it
out
>>>>> and see
>>>>
>>>>>> what is going on.
>>>>
>>>>>>
>>>>
>>>>>
>>>>
>>>>> Okay I double checked, I went to the VMs main tab, selected a VM,
>>>>> then went to
>>>>
>>>>> the permissions sub tab. Clicked add. The dialog that popped up
>>>>> looks like the
>>>>
>>>>> one attached, which is what I was expecting. The one you attached
>>>>> appears to
>>>>
>>>>> be missing some styling, which is likely what caused the Role to
>>>>> Assign part
>>>>
>>>>> to be scrolled below the bottom of the page.
>>>>
>>>>>
>>>>
>>>>> Can you complete clear your cache (not shift reload, but
>>>>> settings->clear
>>>>
>>>>> cache). If that doesn't work can you tell us the version of the
>>>>> patternfly rpm
>>>>
>>>>> installed on your engine?
>>>>
>>>>>
>>>>
>>>>> Yes, I already did that, also opened the engine on different clients
>>>>> and the behavior is the same, I believe this is not a client issue.
>>>>> Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch
>>>>
>>>
>>> Ok, this indeed seems like a graphics problem since I am seeing this
>>> connecting to a machine through a VNC server and the Role combobox is
>>> moved down out of the dialog.
>>>
>>> However, the LDAP issue persists. When I choose the 'internal'
>>> domain, I
>>> can search the 'admin' user successfully, however, if I set it to
>>> be the
>>> LDAP domain, any search returns nothing.
>>>
>>> Any hints or ideas how to debug this?
>>
>> Can you please enable debug log[1] and send it here?
>>
>> [1]
>> https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/READ...
>>
>>
>>
>
> Thanks. I was now able to see why it is failing:
>
> TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13)
> [] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin
> limit exceeded), numEntries=0, numReferences=0, errorMessage='admin
> limit exceeded')
This is server error, that number of entries to be returned is higher,
than the limit set on server.
You should either increase that limit server side, or don't use '*',
but use some filter. ( ie. user* )
That's the problem, the patterns we enter in the search box are specific
usernames that usually return only one or 2 results at most from the
LDAP directory, that's why I think this filter is needlessly too broad
in our case. I've been making the query more specific on the command
line (i.e., using ldapsearch) and removing some of the OR (|) clauses
seems to return a lower number of entries below the limit, that's why I
asked if it's possible to manually specify the filter.
Do you think it would be useful to open a RFE on BZ asking for a feature
to allow the user specify the filter?
I'll see what's the best way to workaround this problem as is, either
defining a user and allowing them a higher number of returned results or
increasing the limit on the server side.
Thanks.
>
> Indeed, if I run that query using the ldapsearch command I can clearly
> see it is returning an "admin limit exceeded" error.
>
> The applied filter is:
>
(&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username)))
>
>
>
> Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not
> changed our LDAP configuration. Has the filter been changed in 4.x by
> default?
It didn't.
>
> If so, is there a way to override the filter to make it simpler? (In our
> case we'll always seek by username, so no need to search by givenName,
> sn or displayName).
>
Filtering is constructed on client side, in this case ovirt-engine
backend,
so unfortunatelly it's not easilly modifiable.
> Thanks.
>
>>>
>>> Thanks.
>>>
>>>
>>>>>
>>>>
>>>>> Anyhow, I see there are lots of packages to update so I'll do so
>>>>> within a few days and report results.
>>>>
>>>>>
>>>>
>>>>>>> >> All this is done with the admin@internal user, so I
guess
>>>>> this is not
>>>>
>>>>>>> >> a
>>>>
>>>>>>> >> self-permission issue.
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> Interesting thing is that I can successfully log-in
to the
>>>>> user portal
>>>>
>>>>>>> >> with a LDAP based user and manage all the VMs
assigned to
>>>>> them.
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> Just to see if there's been any configuration
change, we also
>>>>> run the
>>>>
>>>>>>> >> ovirt-engine-extension-aaa-ldap-setup tool, the
configuration
>>>>> it
>>>>
>>>>>>> >> returns
>>>>
>>>>>>> >> is pretty similar to ours, and even the test
commands (Login,
>>>>> Search)
>>>>
>>>>>>> >> work successfully (I can see search returning
user's data
>>>>> like name,
>>>>
>>>>>>> >> surname, ...). We even applied this configuration to
engine
>>>>> to see if
>>>>
>>>>>>> >> it
>>>>
>>>>>>> >> makes a difference but the result is the same, the
search
>>>>> dialog
>>>>
>>>>>>> >> returns
>>>>
>>>>>>> >> nothing and neither I can see the permission to
grant.
>>>>
>>>>>>> >>
>>>>
>>>>>>> >> Any hint about this?
>>>>
>>>>>>> >
>>>>
>>>>>>> > Maybe you hit similar issue to this one[1].
>>>>
>>>>>>> >
>>>>
>>>>>>> > Can you please share engine.log, while you hit search
button?
>>>>
>>>>>>>
>>>>
>>>>>>> I'm also attaching the log at the time I hit the search
button,
>>>>> but I'm
>>>>
>>>>>>> afraid there's no entry about that.
>>>>
>>>>>>>
>>>>
>>>>>>> Thanks.
>>>>
>>>>>>>
>>>>
>>>>>>> > [1] https
[2]://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>>>> [2]
>>>>
>>>>>>> >
>>>>
>>>>>>> >> Thanks
>>>>
>>>>>>> >> _______________________________________________
>>>>
>>>>>>> >> Users mailing list
>>>>
>>>>>>> >> Users(a)ovirt.org
>>>>
>>>>>>> >> http [3]://lists.ovirt.org/ [3]mailman [3]/
[3]listinfo [3]/
>>>>> [3]users [3]
>>>>
>>>>>>
>>>>
>>>>>> _______________________________________________
>>>>
>>>>>> Users mailing list
>>>>
>>>>>> Users(a)ovirt.org
>>>>
>>>>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>>>> [3]users [3]
>>>>
>>>>> _______________________________________________
>>>>
>>>>> Users mailing list
>>>>
>>>>> Users(a)ovirt.org
>>>>
>>>>> http [3]://lists.ovirt.org/ [3]mailman [3]/ [3]listinfo [3]/
>>>>> [3]users [3]
>>>>
>>>>>
>>>>
>>>>
>>>>
>>>> Links:
>>>> ------
>>>> [1] http://4.0.1.1
>>>> [2] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>>> [3] http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users(a)ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>> _______________________________________________
>>> Users mailing list
>>> Users(a)ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
3051
days inactive
3056
days old
14 comments
4 participants
participants (4)
-
Alexander Wels -
nicolas＠devels.es -
Nicolás
-
Ondra Machacek