[ovirt-users] Upgrade to Ovirt 3.5.0 Authentication Fails to IPA

[Alon Bar-Lev]

----- Original Message -----
> From: "Cameron Christensen" <cameron.christensen at uk2group.com>
> To: users at ovirt.org
> Sent: Friday, November 14, 2014 5:39:54 PM
> Subject: [ovirt-users] Upgrade to Ovirt 3.5.0 Authentication Fails to IPA
> 
> Hello,
> 
> I upgraded to ovirt 3.5.0 and can no longer authenticate to IPA.
> Starting up ovrit-engine the extension manager fails to properly load
> the service that handles Kerberos/LDAP.

This is probably a bug, can you please execute the following and paste result:

# PGPASSWORD="@PASSWORD@" psql -U engine -d engine -c "select * from vdc_options where option_name='LDAPSecurityAuthentication'"

Replace @PASSWORD@ and probably other parameters based on /etc/ovirt-engine/engine.conf.d/10-setup-database.conf

It is probably empty and we should file a bug.

If you are interested there is a new ldap provider in 3.5 available in snapshots repository (ovirt-engine-extension-aaa-ldap package), documentation is available here[1], this provider should be simpler and robust as it uses only ldap protocol and is fully customizable.

Regards,
Alon

[1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD