[ovirt-users] ovirt-engine-extension-aaa-ldap active directory

[Martin Perina]

Hi,

most probably you are affected by [1], so could you please check
certificates on all your AD servers?
You can verify using following command:

  ovirt-engine-extensions-tool --log-level=FINEST aaa login-user
--user-name=<USERNAME> --profile=<PROFILE NAME>


Thanks

Martin

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1465463


On Tue, Oct 10, 2017 at 6:13 PM, Luca 'remix_tj' Lorenzetto <
lorenzetto.luca at gmail.com> wrote:

> On Tue, Oct 10, 2017 at 4:41 PM, nicola gentile
> <nicola.gentile.to at gmail.com> wrote:
> > I run the command you suggest
> > ldapsearch -h domaincontroller.dom.it -b "dc=dom,dc=it" -D user at dom.it
> > -W -x sAMAccountName=user_to_search userPrincipalName | grep
> > userPrincipalName
> >
> > This is the result:
> >
> > Enter LDAP Password:
> > # requesting: userPrincipalName
> >
>
> Supposing you're using all the right parameters in ldapsearch command,
> it seems that the user you were looking up is not a valid user in that
> directory server.
>
> Please check with someone that can access to AD and verify the status
> of the user with ADSI Edit.
>
> Luca
>
>
> --
> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
> calcoli che potrebbero essere affidati a chiunque se si usassero delle
> macchine"
> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>
> "Internet è la più grande biblioteca del mondo.
> Ma il problema è che i libri sono tutti sparsi sul pavimento"
> John Allen Paulos, Matematico (1945-vivente)
>
> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <
> lorenzetto.luca at gmail.com>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20171010/4e2a3f3d/attachment.html>