[ovirt-users] LDAP-based domain not working after upgrade?

[nicolas at devels.es]

El 2016-08-10 13:36, nicolas at devels.es escribió:
> El 2016-08-10 09:32, Ondra Machacek escribió:
>> On 08/10/2016 10:10 AM, nicolas at devels.es wrote:
>>> El 2016-08-10 08:58, Ondra Machacek escribió:
>>>> On 08/10/2016 09:37 AM, Nicolás wrote:
>>>>> Hi,
>>>>> 
>>>>> We're running oVirt 4.0.1.1, and we're trying to grant a permission 
>>>>> to a
>>>>> user on a VM. Thing is when we open the 'Permissions' subtab on 
>>>>> that VM,
>>>>> we click on Add, the LDAP backend shows up but any value entered 
>>>>> into
>>>>> the search box returns nothing, even when I know the values exist.
>>>>> 
>>>>> This has been working on oVirt 3.x, we actually migrated to 4.x 
>>>>> last
>>>>> week and didn't notice this issue.
>>>>> 
>>>>> Additionally, there's no combobox to choose the permission to 
>>>>> grant?
>>>> 
>>>> There should be combo box to choose a role.
>>>> 
>>> 
>>> I've attached a screenshot, seems there's not.
>> 
>> OK, it seems like some UI issue. Can you please force reload or clear
>> browser cache?
>> Maybe try different browser.
>> 
> 
> Nope... Cleaned cache from Chrome, Firefox, same result. Even private
> windows have the same behaviour. By the way, we have 2 independent
> oVirt infrastructures, both upgraded from 3.6.7 and both have the same
> issue, I just had a look at the second and the same happens here (no
> log in engine.log either). This second is 4.0.0 instead of 4.0.0,
> FWIW.
> 

I meant: This second is 4.0.0 instead of 4.0.1

>>> 
>>>>> 
>>>>> All this is done with the admin at internal user, so I guess this is 
>>>>> not a
>>>>> self-permission issue.
>>>>> 
>>>>> Interesting thing is that I can successfully log-in to the user 
>>>>> portal
>>>>> with a LDAP based user and manage all the VMs assigned to them.
>>>>> 
>>>>> Just to see if there's been any configuration change, we also run 
>>>>> the
>>>>> ovirt-engine-extension-aaa-ldap-setup tool, the configuration it 
>>>>> returns
>>>>> is pretty similar to ours, and even the test commands (Login, 
>>>>> Search)
>>>>> work successfully (I can see search returning user's data like 
>>>>> name,
>>>>> surname, ...). We even applied this configuration to engine to see 
>>>>> if it
>>>>> makes a difference but the result is the same, the search dialog 
>>>>> returns
>>>>> nothing and neither I can see the permission to grant.
>>>>> 
>>>>> Any hint about this?
>>>> 
>>>> Maybe you hit similar issue to this one[1].
>>>> 
>>>> Can you please share engine.log, while you hit search button?
>>>> 
>>> 
>>> I'm also attaching the log at the time I hit the search button, but 
>>> I'm
>>> afraid there's no entry about that.
>>> 
>>> Thanks.
>>> 
>>> 
>>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1356675
>>>> 
>>>>> 
>>>>> Thanks
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users