[ovirt-users] LDAP-based domain not working after upgrade?

[nicolas at devels.es]

El 2016-08-10 09:32, Ondra Machacek escribió:
> On 08/10/2016 10:10 AM, nicolas at devels.es wrote:
>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>> On 08/10/2016 09:37 AM, Nicolás wrote:
>>>> Hi,
>>>> 
>>>> We're running oVirt 4.0.1.1, and we're trying to grant a permission 
>>>> to a
>>>> user on a VM. Thing is when we open the 'Permissions' subtab on that 
>>>> VM,
>>>> we click on Add, the LDAP backend shows up but any value entered 
>>>> into
>>>> the search box returns nothing, even when I know the values exist.
>>>> 
>>>> This has been working on oVirt 3.x, we actually migrated to 4.x last
>>>> week and didn't notice this issue.
>>>> 
>>>> Additionally, there's no combobox to choose the permission to grant?
>>> 
>>> There should be combo box to choose a role.
>>> 
>> 
>> I've attached a screenshot, seems there's not.
> 
> OK, it seems like some UI issue. Can you please force reload or clear
> browser cache?
> Maybe try different browser.
> 

Nope... Cleaned cache from Chrome, Firefox, same result. Even private 
windows have the same behaviour. By the way, we have 2 independent oVirt 
infrastructures, both upgraded from 3.6.7 and both have the same issue, 
I just had a look at the second and the same happens here (no log in 
engine.log either). This second is 4.0.0 instead of 4.0.0, FWIW.

>> 
>>>> 
>>>> All this is done with the admin at internal user, so I guess this is 
>>>> not a
>>>> self-permission issue.
>>>> 
>>>> Interesting thing is that I can successfully log-in to the user 
>>>> portal
>>>> with a LDAP based user and manage all the VMs assigned to them.
>>>> 
>>>> Just to see if there's been any configuration change, we also run 
>>>> the
>>>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it 
>>>> returns
>>>> is pretty similar to ours, and even the test commands (Login, 
>>>> Search)
>>>> work successfully (I can see search returning user's data like name,
>>>> surname, ...). We even applied this configuration to engine to see 
>>>> if it
>>>> makes a difference but the result is the same, the search dialog 
>>>> returns
>>>> nothing and neither I can see the permission to grant.
>>>> 
>>>> Any hint about this?
>>> 
>>> Maybe you hit similar issue to this one[1].
>>> 
>>> Can you please share engine.log, while you hit search button?
>>> 
>> 
>> I'm also attaching the log at the time I hit the search button, but 
>> I'm
>> afraid there's no entry about that.
>> 
>> Thanks.
>> 
>> 
>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>> 
>>>> 
>>>> Thanks
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users