[Users] External group permissions

------=_NextPart_000_004C_01CF48B6.FF24C000 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I used engine-manage-domains to allow external authentication from active directory to my ovirt management ui. I assigned and ad group super user and power user permissions on the DC. I cant get any user to login to the webadmin portal. In the log says that they have no permission. Which right do I have to assign to the group in order for its member to be able to login to the web ui? ------=_NextPart_000_004C_01CF48B6.FF24C000 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:#0563C1; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri","sans-serif"; color:windowtext;} .MsoChpDefault {mso-style-type:export-only; font-family:"Calibri","sans-serif";} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1><p = class=3DMsoNormal>I used engine-manage-domains to allow external = authentication from active directory to my ovirt management ui. I = assigned and ad group super user and power user permissions on the DC. I = cant get any user to login to the webadmin portal. In the log says that = they have no permission. Which right do I have to assign to the group in = order for its member to be able to login to the web = ui?<o:p></o:p></p></div></body></html> ------=_NextPart_000_004C_01CF48B6.FF24C000--

----- Original Message -----
From: "Maurice James" <midnightsteel@msn.com> To: users@ovirt.org Sent: Wednesday, March 26, 2014 11:48:21 AM Subject: [Users] External group permissions
I used engine-manage-domains to allow external authentication from active directory to my ovirt management ui. I assigned and ad group super user and power user permissions on the DC. I cant get any user to login to the webadmin portal. In the log says that they have no permission. Which right do I have to assign to the group in order for its member to be able to login to the web ui?
1. Which ovirt version are you using? 2. May I get the following results from postgresql ? a. select user_id, name, group_ids from users; b. select id from ad_groups; c. select select * from permissions; Many thanks, Yair
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

----- Original Message -----
From: "Yair Zaslavsky" <yzaslavs@redhat.com> To: "Maurice James" <midnightsteel@msn.com> Cc: users@ovirt.org Sent: Wednesday, March 26, 2014 12:20:02 PM Subject: Re: [Users] External group permissions
----- Original Message -----
From: "Maurice James" <midnightsteel@msn.com> To: users@ovirt.org Sent: Wednesday, March 26, 2014 11:48:21 AM Subject: [Users] External group permissions
I used engine-manage-domains to allow external authentication from active directory to my ovirt management ui. I assigned and ad group super user and power user permissions on the DC. I cant get any user to login to the webadmin portal. In the log says that they have no permission. Which right do I have to assign to the group in order for its member to be able to login to the web ui?
1. Which ovirt version are you using? 2. May I get the following results from postgresql ?
a. select user_id, name, group_ids from users; b. select id from ad_groups;
Actually select id,name from ad_groups;
c. select select * from permissions;
Typo - I meant select * from permissions of course.
Many thanks, Yair
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (2)
-
Maurice James
-
Yair Zaslavsky