From: "Yair Zaslavsky" <yzaslavs(a)redhat.com&gt; To: "Peter Harris" <doilooksensible(a)gmail.com&gt; Cc: Users(a)ovirt.org, "Sven Kieske" <s.kieske(a)mittwald.de&gt; Sent: Wednesday, April 30, 2014 12:19:57 PM Subject: Re: [ovirt-users] ovirt 3.4 and FreeIPA authentication As mentioned by Sven, As far as I know all these bugs were solved for 3.4.1 However, if possible, I would like to get the following information - a. select user_id, username, group_ids from users where username = '<THE_USER_YOU_TRIED_TO_LOGIN_WITH>'; b. select id, name from ad_groups;

----- Original Message ----- > From: "Peter Harris" <doilooksensible(a)gmail.com&gt; > To: Users(a)ovirt.org > Sent: Wednesday, April 30, 2014 11:55:04 AM > Subject: [ovirt-users] ovirt 3.4 and FreeIPA authentication > > I have just create an oVirt 3.4 server as part of my test environment prior > to moving from my production 3.3 environment. > > I authenticate against FreeIPA 3.0.0 > > I generally add a group in IPA, add the permissions in ovirt against the > group, and then add/remove users from the groups in IPA. > > With oVirt3.4, I have justed added my vmadmin IPA group to ovirt, and given > it the SuperUser role. > > I try to log in to oVirt 3.4 as myself (I am in the vmadmin group), and I > can authenticate fine, but I do not have SuperUser privileges. If I log in > to my live Ovirt (3.3), I do have SuperUser privileges. > > Has something changed? Or is there an extra step I have to take that I have > missed to propogate privileges. > > Thanks > > Peter > > P.S. All work done in the ovirt Admin portal gui so far, not tried the CLI > yet. > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users >