[ovirt-users] ovirt 3.4 and FreeIPA authentication

[Yair Zaslavsky]

----- Original Message -----
> From: "Yair Zaslavsky" <yzaslavs at redhat.com>
> To: "Peter Harris" <doilooksensible at gmail.com>
> Cc: Users at ovirt.org, "Sven Kieske" <s.kieske at mittwald.de>
> Sent: Wednesday, April 30, 2014 12:19:57 PM
> Subject: Re: [ovirt-users] ovirt 3.4 and FreeIPA authentication
> 
> 
> As mentioned by Sven,
> As far as I know all these bugs were solved for 3.4.1
> However,
> 
> if possible, I would like to get the following information -
> 
> a. select user_id, username, group_ids from users where username =
> '<THE_USER_YOU_TRIED_TO_LOGIN_WITH>';
> b. select id, name from ad_groups;

of course this should be collected from the database.

> 
> 
> 
> ----- Original Message -----
> > From: "Peter Harris" <doilooksensible at gmail.com>
> > To: Users at ovirt.org
> > Sent: Wednesday, April 30, 2014 11:55:04 AM
> > Subject: [ovirt-users] ovirt 3.4 and FreeIPA authentication
> > 
> > I have just create an oVirt 3.4 server as part of my test environment prior
> > to moving from my production 3.3 environment.
> > 
> > I authenticate against FreeIPA 3.0.0
> > 
> > I generally add a group in IPA, add the permissions in ovirt against the
> > group, and then add/remove users from the groups in IPA.
> > 
> > With oVirt3.4, I have justed added my vmadmin IPA group to ovirt, and given
> > it the SuperUser role.
> > 
> > I try to log in to oVirt 3.4 as myself (I am in the vmadmin group), and I
> > can authenticate fine, but I do not have SuperUser privileges. If I log in
> > to my live Ovirt (3.3), I do have SuperUser privileges.
> > 
> > Has something changed? Or is there an extra step I have to take that I have
> > missed to propogate privileges.
> > 
> > Thanks
> > 
> > Peter
> > 
> > P.S. All work done in the ovirt Admin portal gui so far, not tried the CLI
> > yet.
> > 
> > _______________________________________________
> > Users mailing list
> > Users at ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> > 
>