[ovirt-users] ovirt 3.4 and FreeIPA authentication

Yair Zaslavsky yzaslavs at redhat.com
Wed Apr 30 09:19:57 UTC 2014


As mentioned by Sven,
As far as I know all these bugs were solved for 3.4.1
However,

if possible, I would like to get the following information -

a. select user_id, username, group_ids from users where username = '<THE_USER_YOU_TRIED_TO_LOGIN_WITH>';
b. select id, name from ad_groups;



----- Original Message -----
> From: "Peter Harris" <doilooksensible at gmail.com>
> To: Users at ovirt.org
> Sent: Wednesday, April 30, 2014 11:55:04 AM
> Subject: [ovirt-users] ovirt 3.4 and FreeIPA authentication
> 
> I have just create an oVirt 3.4 server as part of my test environment prior
> to moving from my production 3.3 environment.
> 
> I authenticate against FreeIPA 3.0.0
> 
> I generally add a group in IPA, add the permissions in ovirt against the
> group, and then add/remove users from the groups in IPA.
> 
> With oVirt3.4, I have justed added my vmadmin IPA group to ovirt, and given
> it the SuperUser role.
> 
> I try to log in to oVirt 3.4 as myself (I am in the vmadmin group), and I
> can authenticate fine, but I do not have SuperUser privileges. If I log in
> to my live Ovirt (3.3), I do have SuperUser privileges.
> 
> Has something changed? Or is there an extra step I have to take that I have
> missed to propogate privileges.
> 
> Thanks
> 
> Peter
> 
> P.S. All work done in the ovirt Admin portal gui so far, not tried the CLI
> yet.
> 
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 



More information about the Users mailing list