[ovirt-users] Adding users through LDAP fails on "external_id"

Zach La Celle lacelle at roboticresearch.com
Mon Jun 15 19:04:47 UTC 2015


Hello,

We have a small oVirt cluster set up, and are trying to get it
integrated with our LDAP server.

I've changed some configuration values in order to try and make it
function, and it seems to communicate correctly with the LDAP server. 
However, when trying to add the user, I get the following error upon SQL
entry add:

2015-06-15 14:44:49,439 ERROR
[org.ovirt.engine.core.bll.aaa.AddUserCommand] (ajp--127.0.0.1-8702-6)
[3b15cbfe] Command org.ovirt.engine.core.bll.aaa.AddUserCommand throw
exception: org.springframework.da\
o.DataIntegrityViolationException: CallableStatementCallback; SQL [{call
insertuser(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)}]; ERROR: null
value in column "external_id" violates not-null constraint
  Where: SQL statement "INSERT INTO users(department, domain, email,
groups, name, note, role, active, surname, user_id, username, group_ids,
external_id,namespace) VALUES( $1 ,  $2 ,  $3 ,  $4 ,  $5 ,  $\
6 ,  $7 ,  $8 ,  $9 ,  $10 ,  $11 ,  $12 ,  $13 ,  $14 )"
PL/pgSQL function "insertuser" line 2 at SQL statement; nested exception
is org.postgresql.util.PSQLException: ERROR: null value in column
"external_id" violates not-null constraint
  Where: SQL statement "INSERT INTO users(department, domain, email,
groups, name, note, role, active, surname, user_id, username, group_ids,
external_id,namespace) VALUES( $1 ,  $2 ,  $3 ,  $4 ,  $5 ,  $\
6 ,  $7 ,  $8 ,  $9 ,  $10 ,  $11 ,  $12 ,  $13 ,  $14 )"

I can't figure out what maps from the LDAP user to "external_id" for the
SQL table entry.

Here are the changes I made to profile1.properties:

#Mapping changes
attrmap.map-principal-record.attr.PrincipalRecord_DISPLAY_NAME.map = cn
attrmap.map-principal-record.attr.PrincipalRecord_EMAIL.map = Email
attrmap.map-group-record.attr.GroupRecord_DISPLAY_NAME.map = cn

#LDAP value changes
sequence.openldap-init-vars.030.var-set.value = entryUUID, uid, cn,
givenName, sn, Email
sequence.openldap-init-vars.040.var-set.value =
(objectClass=posixAccount)(uid=*)
sequence.openldap-init-vars.050.var-set.value = entryUUID, cn
sequence.openldap-init-vars.060.var-set.value = (objectClass=posixGroup)
sequence.openldap-init-vars.070.var-set.value = memberUid

Any help is appreciated!



More information about the Users mailing list