[ovirt-users] LDAP auth and group members

2022-10-21 Thread Jiří Sléžka
Hi, I have configured oVirt authentication against our MicroFocus/Novell eDirectory (edir) ldap. It is working fine on per user base. Now I am tried to set permissions per group but it seems does not work. My CRO.properties --- include = vars.server = ldap. vars.port = 389 vars.use

[ovirt-users] LDAP auth error "server_error: Cannot locate principal"

2021-07-21 Thread tbural
Trying to configure LDAP auth on engine. After adding user from LDAP i cannot login with this error "server_error: Cannot locate principal" Errors from engine.log 2021-06-30 17:24:23,830+05 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-5) [686f77b] Internal Serv

[ovirt-users] ldap auth problem after upgrade from 4.4.1 to 4.4.2

2020-10-01 Thread Jiří Sléžka
Hi, I just upgraded my HE to 4.4.2 but now I cannot login using my ldap aaa profile anymore. We are using Novell/NetIQ E-directory (load ballanced by haproxy, probably not important...) In 4.4.1 I was hit by removed TLSv1 (which is the newest protocol supported by our edir) from default crypto p

[ovirt-users] LDAP/AD issue

2020-08-26 Thread kim . kargaard
Hi all, We have had our ovirt instance connected to our internal AD for users to log into the VM portal for the last year, linked to studentdomene.noroff.no. This has been working without any problems. We had it set up and the DNS server had a forward record to the DC's. All good. Then, of co

[ovirt-users] LDAP setup fails on 4.4 reading PEM file

2020-06-11 Thread Stack Korora
Greetings, I'm having some issues getting LDAP working on CentOS 8 with oVirt 4.4. I would appreciate some help please. When I run ovirt-engine-extension-aaa-ldap-setup I choose "11 - RFC-2307 Schema (Generic)" because that's what my LDAP guy said I should do. :-) Next I select the default Yes fo

[ovirt-users] LDAP

2020-03-20 Thread Nicholas Emmerling
Would you please provide any documentation you have regarding configuring oVirt to work with LDAP. Preferably the guest VMs as well as the Hosts/Nodes themselves. Thank you. nicholas.emmerl...@me.com Sent from my iPhone ___ Users mailing list -- user

[ovirt-users] LDAP Users constatly can't login on Ovirt Portal

2019-10-25 Thread rubennunes12
Hello, So we have LDAP Authentication configured on Ovirt with aaa-extension, but the users of LDAP are constantly not being able to login, but when i restart ovirt-engine they can login again, but after some time they can't again bellow i will leave some logs: 2019-10-25 13:38:20,287+01 ERROR

[ovirt-users] LDAP Group issue with rfc2307bis

2019-07-17 Thread Timmi
Hi oVirt List, I'm currently working on my new oVirt setup and want to integrate it into our LDAP server. Accounts are working fine but I have problems to get the groups working correctly. The LDAP server is base on ClearOS which is using the rfc2307bis setup. Means I don't have MemberOf ins

[ovirt-users] LDAP - not able to find members of groups

2019-05-08 Thread Timmi
Hi oVirt List, I manage to connect oVirt to my LDAP and I'm able to search for users and groups. I'm using openLDAP within a ClearOS installation and it looks like this is a bit different to the standard openLDAP. Inside the LDAP groups there is an attribute with is calls "member". Example

[ovirt-users] LDAP Bind failing because of SSLHandshakeException after Virtualization Manager was rebooted

2018-11-13 Thread wbhegedus
After moving and rebooting our Red Hat Virtualization Manager box to another node in our cluster, we are unable to make LDAP login work using StartTLS. No networking or configuration changes were made, but the logs indicate that the TLS negotiation is failing with our Active Directory domain con

[ovirt-users] LDAP-Error

2018-09-26 Thread Budur Nagaraju
Hi Have configured LDAP authentication in oVirt4.2, but unable to login facing issues below is the error log and configuration, able to search the users in the UI at same time unable to search the Group. Can someone help on the same? Error : https://pastebin.com/76cZdV7d Configuration: https

[ovirt-users] Ldap-configure

2018-09-26 Thread Budur Nagaraju
Hi Can you please let us know how to configure LDAP authentication in oVirt 4.2 ? Thanks, Nagaraju ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-poli

[ovirt-users] LDAP authentication does not work after engine upgrade to ovirt 4.6

2018-09-11 Thread Michael Watters
I've just upgraded our ovirt engine server to ovirt 4.6 and it appears that LDAP logins no longer work.  When I attempt to log in using an AD account the following errors are shown in the engine log. 2018-09-11 10:03:44,610-04 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (defa

[ovirt-users] LDAP login extension

2018-07-01 Thread Mariusz Kozakowski
Hello, We managed to setup oVirt Engine with your help, now we're facing other issue. I'm trying to configure AD auth for web portal, but unfortunately I got error during ovirt-engine-extension-aaa-ldap-setup: 2018-06-27 09:06:21,926+02 INFO ==

[ovirt-users] LDAP logins do not work

2018-06-13 Thread Michael Watters
I've ran the ovirt-engine-extension-aaa-ldap-setup command to configure LDAP authentication using Active Directory however I am unable to authenticate using valid credentials.  Here is the output show while testing the login flow. [ INFO  ] Executing login sequence...   Login output:  

[ovirt-users] LDAP Authentication issues

2018-05-25 Thread Callum Smith
Dear All, I'm having problems getting LDAP running, login works, but I'm getting "user is not authorised to perform login" - this is even if i specify the UserRole specifically to the LDAP group the user is in. 2018-05-25 08:56:16,212+01 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUti

Re: [ovirt-users] LDAP sources

2017-11-15 Thread Ondra Machacek
Hello, On Wed, Nov 15, 2017 at 9:03 AM, Magnus Isaksson wrote: > Hello, > > I have tried googling and searching in the documentation, but i can't seem > to find any instructions on how to remove a authentication source. > > The background is that i did set up an FreeIPA server for auth, worked >

[ovirt-users] LDAP sources

2017-11-15 Thread Magnus Isaksson
Hello, I have tried googling and searching in the documentation, but i can't seem to find any instructions on how to remove a authentication source. The background is that i did set up an FreeIPA server for auth, worked perfectly, but i ran into some problems using that to auth other systems

[ovirt-users] Ldap authentification filtering with custom attribute

2017-08-16 Thread Jean-mathieu CHANTREIN
Hello. Here is a way to filtering a group of ldap user by one of custom attribute and not by groups ? By example, I tryed (without success) to put this entry in /etc/ovirt-engine/extensions.d/my-ldap-authz.properties : search.simple-resolve-groups-memberOf.search-request.filter = &(myCustomA

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-15 Thread Nicolás
El 15/08/16 a las 13:28, Ondra Machacek escribió: On 08/13/2016 12:44 AM, nico...@devels.es wrote: El 2016-08-12 20:38, Ondra Machacek escribió: On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On We

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-15 Thread Ondra Machacek
On 08/13/2016 12:44 AM, nico...@devels.es wrote: El 2016-08-12 20:38, Ondra Machacek escribió: On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wel

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-12 Thread nicolas
El 2016-08-12 20:38, Ondra Machacek escribió: On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-12 Thread Ondra Machacek
On 08/12/2016 05:53 PM, nico...@devels.es wrote: El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-12 Thread nicolas
El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread nicolas
El 2016-08-10 14:46, Nicolás escribió: En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: > On 08/10/2

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Nicolás
En 10/8/2016 2:29 p. m., Alexander Wels escribió: On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: > On Wednesday, August 10, 2016 9:10:25 AM EDT nicolas@devels.es wrote: > > El 2016-08-10 08:58, Ondra Machacek escribió: > > > On 08/10/2016 09:37 AM, Nicolás

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Alexander Wels
On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote: > On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: > > El 2016-08-10 08:58, Ondra Machacek escribió: > > > On 08/10/2016 09:37 AM, Nicolás wrote: > > >> Hi, > > >> > > >> We're running oVirt 4.0.1.1, and we're

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Alexander Wels
On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es wrote: > El 2016-08-10 08:58, Ondra Machacek escribió: > > On 08/10/2016 09:37 AM, Nicolás wrote: > >> Hi, > >> > >> We're running oVirt 4.0.1.1, and we're trying to grant a permission to > >> a > >> user on a VM. Thing is when we open

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread nicolas
El 2016-08-10 13:36, nico...@devels.es escribió: El 2016-08-10 09:32, Ondra Machacek escribió: On 08/10/2016 10:10 AM, nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a pe

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread nicolas
El 2016-08-10 09:32, Ondra Machacek escribió: On 08/10/2016 10:10 AM, nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Ondra Machacek
On 08/10/2016 10:10 AM, nico...@devels.es wrote: El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click o

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread nicolas
El 2016-08-10 08:58, Ondra Machacek escribió: On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value

Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Ondra Machacek
On 08/10/2016 09:37 AM, Nicolás wrote: Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even

[ovirt-users] LDAP-based domain not working after upgrade?

2016-08-10 Thread Nicolás
Hi, We're running oVirt 4.0.1.1, and we're trying to grant a permission to a user on a VM. Thing is when we open the 'Permissions' subtab on that VM, we click on Add, the LDAP backend shows up but any value entered into the search box returns nothing, even when I know the values exist. This

Re: [ovirt-users] ldap and multiple profiles

2016-07-11 Thread Ondra Machacek
On 07/04/2016 04:13 PM, Fabrice Bacchella wrote: I want to setup two LDAP base profile. One is backed using an active directory (for real users) One is backed using an openldap (for service account). I have to problem with this setup. One it's that in the log I see many "Creating LDAP pool 'au

[ovirt-users] ldap and multiple profiles

2016-07-04 Thread Fabrice Bacchella
I want to setup two LDAP base profile. One is backed using an active directory (for real users) One is backed using an openldap (for service account). I have to problem with this setup. One it's that in the log I see many "Creating LDAP pool 'authz'" and "Creating LDAP pool 'authn'". If I have

Re: [ovirt-users] ldap servers configuration can be misleading with AD

2016-04-20 Thread Ondra Machacek
On 04/20/2016 10:33 AM, Fabrice Bacchella wrote: Le 20 avr. 2016 à 10:16, Ondra Machacek a écrit : On 04/19/2016 07:46 PM, Fabrice Bacchella wrote: Le 19 avr. 2016 à 17:35, Ondra Machacek a écrit : On 04/19/2016 04:37 PM, Fabrice Bacchella wrote: I tried to plug ovirt using my company A

Re: [ovirt-users] ldap servers configuration can be misleading with AD

2016-04-20 Thread Fabrice Bacchella
> Le 20 avr. 2016 à 10:16, Ondra Machacek a écrit : > > On 04/19/2016 07:46 PM, Fabrice Bacchella wrote: >> >>> Le 19 avr. 2016 à 17:35, Ondra Machacek a écrit : >>> >>> On 04/19/2016 04:37 PM, Fabrice Bacchella wrote: I tried to plug ovirt using my company AD. But I have a pr

Re: [ovirt-users] ldap servers configuration can be misleading with AD

2016-04-20 Thread Ondra Machacek
On 04/19/2016 07:46 PM, Fabrice Bacchella wrote: Le 19 avr. 2016 à 17:35, Ondra Machacek a écrit : On 04/19/2016 04:37 PM, Fabrice Bacchella wrote: I tried to plug ovirt using my company AD. But I have a problem, the DNS srv records are not well managed and I can't use them so I changed po

Re: [ovirt-users] ldap servers configuration can be misleading with AD

2016-04-19 Thread Fabrice Bacchella
> Le 19 avr. 2016 à 17:35, Ondra Machacek a écrit : > > On 04/19/2016 04:37 PM, Fabrice Bacchella wrote: >> I tried to plug ovirt using my company AD. >> >> But I have a problem, the DNS srv records are not well managed and I can't >> use them so I changed pool.default.serverset.type from srvr

Re: [ovirt-users] ldap servers configuration can be misleading with AD

2016-04-19 Thread Ondra Machacek
On 04/19/2016 04:37 PM, Fabrice Bacchella wrote: I tried to plug ovirt using my company AD. But I have a problem, the DNS srv records are not well managed and I can't use them so I changed pool.default.serverset.type from srvrecord to failover. With AD you should use srvrecord, unless you hav

[ovirt-users] ldap servers configuration can be misleading with AD

2016-04-19 Thread Fabrice Bacchella
I tried to plug ovirt using my company AD. But I have a problem, the DNS srv records are not well managed and I can't use them so I changed pool.default.serverset.type from srvrecord to failover. But it was not enough, it was still using those invalid records. It was used by pool.default.dc-res

Re: [ovirt-users] LDAP Authentication

2015-11-05 Thread Alon Bar-Lev
- Original Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: "users" > Sent: Thursday, November 5, 2015 8:28:43 AM > Subject: Re: [ovirt-users] LDAP Authentication > > But am using ovirt 3.5 version ,after restarting e

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Budur Nagaraju
> From: "Budur Nagaraju" > > To: "Alon Bar-Lev" > > Cc: "users" > > Sent: Thursday, November 5, 2015 8:17:46 AM > > Subject: Re: [ovirt-users] LDAP Authentication > > > > Getting below error ,tried installing extension tools but

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Alon Bar-Lev
Extension tool is available since 3.6, will be handy in these cases. - Original Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: "users" > Sent: Thursday, November 5, 2015 8:17:46 AM > Subject: Re: [ovirt-users] LDAP A

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Budur Nagaraju
uot; > > Cc: "users" > > Sent: Thursday, November 5, 2015 8:01:54 AM > > Subject: Re: [ovirt-users] LDAP Authentication > > > > Below are the details, > > > > > > rpm -qa |grep ovirt-engine-extension-aaa-ldap > > ovirt

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Alon Bar-Lev
t;Alon Bar-Lev" > Cc: "users" > Sent: Thursday, November 5, 2015 8:01:54 AM > Subject: Re: [ovirt-users] LDAP Authentication > > Below are the details, > > > rpm -qa |grep ovirt-engine-extension-aaa-ldap > ovirt-engine-extension-aaa-ldap-1.0.2-1.el6.noa

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Budur Nagaraju
ersion of ovirt-engine-extension-aaa-ldap? > Do you have a domain that span multiple sites? > Regards, > Alon > > - Original Message - > > From: "Budur Nagaraju" > > To: "users" > > Sent: Thursday, November 5, 2015 5:34:18 AM > >

Re: [ovirt-users] LDAP Authentication

2015-11-04 Thread Alon Bar-Lev
Hi, What version of ovirt? What version of ovirt-engine-extension-aaa-ldap? Do you have a domain that span multiple sites? Regards, Alon - Original Message - > From: "Budur Nagaraju" > To: "users" > Sent: Thursday, November 5, 2015 5:34:18 AM > Subject: [

[ovirt-users] LDAP Authentication

2015-11-04 Thread Budur Nagaraju
HI LDAP Authentication is taking 5minutes is there any way to resolve this issue ? Thanks, Nagaraju ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] LDAP authentication with TLS

2015-10-07 Thread Donny Davis
ate was retrieved. > Two different identities via the two interfaces which should have returned > a single identity. > > - Original Message - > > From: "Alon Bar-Lev" > > To: "Steve Dainard" > > Cc: "users" > > Sent: Wednesday,

Re: [ovirt-users] LDAP authentication with TLS

2015-10-07 Thread Alon Bar-Lev
m: "Alon Bar-Lev" > To: "Steve Dainard" > Cc: "users" > Sent: Wednesday, October 7, 2015 12:01:59 AM > Subject: Re: [ovirt-users] LDAP authentication with TLS > > Hi, > > Can you please send me the profile, the keystore you created and the out

Re: [ovirt-users] LDAP

2015-10-07 Thread Fernando Fuentes
6:46:38 PM Subject: [ovirt-users] LDAP I migrated from 3.4 to 3.5 and I see that my kerberos/ldap is no longer working and looking further now I see that 3.5 uses AAA. Is there a migration process to move my kerberos/ldap to AAA or a guide to this? TIA! ___

Re: [ovirt-users] LDAP

2015-10-07 Thread Alon Bar-Lev
Yes, see[1] [1] https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases - Original Message - > From: "Fernando Fuentes" > To: users@ovirt.org > Sent: Wednesday, October 7, 2015 6:46:38 PM > Subject: [ovirt-users] LDAP > > I migrated from

[ovirt-users] LDAP

2015-10-07 Thread Fernando Fuentes
I migrated from 3.4 to 3.5 and I see that my kerberos/ldap is no longer working and looking further now I see that 3.5 uses AAA. Is there a migration process to move my kerberos/ldap to AAA or a guide to this? TIA! ___ Users mailing list Users@ovirt.o

Re: [ovirt-users] LDAP authentication with TLS

2015-10-06 Thread Alon Bar-Lev
Hi, Can you please send me the profile, the keystore you created and the output of: openssl s_client -connect server:636 -showcerts < /dev/null Thanks! - Original Message - > From: "Steve Dainard" > To: "users" > Sent: Tuesday, October 6, 2015 11:

[ovirt-users] LDAP authentication with TLS

2015-10-06 Thread Steve Dainard
Hello, Trying to configure Ovirt 3.5.3.1-1.el7.centos for LDAP authentication. I've configured the appropriate aaa profile but I'm getting TLS errors when I search for users to add via ovirt: The connection reader was unable to successfully complete TLS negotiation: javax_net_ssl_SSLHandshakeEx

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Alon Bar-Lev
; > # > > # Server > > # > > vars.server = my.abc.net < http://my.abc.net > > > > > # > > # Search user and its password. > > # > > vars.user = > > uid=search,cn=nbudoor,cn=Departments,cn=Corporate,cn=Bangalore,cn=users,dc=nbudoor,dc=net

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Alon Bar-Lev
- Original Message - > From: "Daniel Helgenberger" > To: "Budur Nagaraju" , "Alon Bar-Lev" > Cc: users@ovirt.org > Sent: Tuesday, September 22, 2015 6:14:50 PM > Subject: Re: [ovirt-users] LDAP Authentication > > Hello Budur, >

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Budur Nagaraju
>>>>> > [root@cstlb2 extensions.d]# cat profile1-authz.properties >>>>> > ovirt.engine.extension.name < <http://ovirt.engine.extension.name> >>>>> http://ovirt.engine.extension.name> = cloudspin-authz >>>>> > ovirt.engine.extens

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
mailto:alo...@redhat.com> > <mailto:alo...@redhat.com <mailto:alo...@redhat.com>>> wrote: > > > > - Original Message - >

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Budur Nagaraju
od = jbossmodule >>>> > ovirt.engine.extension.binding.jbossmodule.module = >>>> > org.ovirt.engine-extensions.aaa.ldap >>>> > ovirt.engine.extension.binding.jbossmodule.class = >>>> > org.ovirt.engineextensions.aaa.ldap.AuthzExtension >>

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
15 at 8:07 PM, Alon Bar-Lev mailto:alo...@redhat.com> > <mailto:alo...@redhat.com <mailto:alo...@redhat.com>>> wrote: > > > > - Original Message ----- >

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Budur Nagaraju
t-engine/aaa/ldap1.properties >>> > [root@cstlb2 extensions.d]# >>> > >>> > >>> > >>> > [root@cstlb2 aaa]# pwd >>> > /etc/ovirt-engine/aaa >>> > [root@cstlb2 aaa]# ls >>> > ldap1.properties >>> >

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
On Tue, Sep 22, 2015 at 8:07 PM, Alon Bar-Lev mailto:alo...@redhat.com> > <mailto:alo...@redhat.com <mailto:alo...@redhat.com>>> wrote: > > > > ----- Original Message - > > From: "Budur Na

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Budur Nagaraju
et <http://my.abc.net> >> > >> > # >> > # Search user and its password. >> > # >> > vars.user = >> > >> uid=search,cn=nbudoor,cn=Departments,cn=Corporate,cn=Bangalore,cn=users,dc=nbudoor,dc=net >> > vars.password = company >>

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Ondra Machacek
; > > > > On Tue, Sep 22, 2015 at 8:07 PM, Alon Bar-Lev mailto:alo...@redhat.com> > <mailto:alo...@redhat.com <mailto:alo...@redhat.com>>> wrote: > > > > - Original Message - > > From: "Budur Na

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
> > # >> > # Server >> > # >> > vars.server = my.abc.net <http://my.abc.net> >> > >> > # >> > # Search user and its password. >> > # >> > vars.user = >> > >> uid=search,cn=nbudoor,cn=Departments,cn=Corpor

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
orate,cn=Bangalore,cn=users,dc=nbudoor,dc=net > > vars.password = company > > > > pool.default.serverset.single.server = ${global:vars.server} > > pool.default.auth.simple.bindDN = ${global:vars.user} > > pool.default.auth.simple.password = ${global:vars.password} > > > &

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Daniel Helgenberger
cp -r /usr/share/ovirt-engine/examples/simple/. /etc/ovirt-engine/ > > this is written in the README. > > then customize files at /etc/ovirt-engine/extnesions.d/* > /etc/ovirt-engine/aaa/* to match your setup > > > > > >

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Alon Bar-Lev
al Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: users@ovirt.org > Sent: Tuesday, September 22, 2015 5:53:10 PM > Subject: Re: [ovirt-users] LDAP Authentication > > Below is the log I have got, > > > __

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
.vdsbroker.irsbroker.IrsProxyData] (DefaultQuartzScheduler_Worker-22) [759b2abb] Initialize Irs proxy from vds: 10.204.206.7 2015-09-22 20:22:02,006 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-22) [759b2abb] Correlation ID:

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Alon Bar-Lev
looks ok, now restart engine and see if you have any error at /var/log/ovirt-engine/engine.log - Original Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: users@ovirt.org > Sent: Tuesday, September 22, 2015 5:45:42 PM > Subject: Re

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
ssword = changeit [root@cstlb2 aaa]# On Tue, Sep 22, 2015 at 8:07 PM, Alon Bar-Lev wrote: > > > - Original Message - > > From: "Budur Nagaraju" > > To: "Alon Bar-Lev" > > Cc: users@ovirt.org > > Sent: Tuesday, September 22, 2015 5:

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Alon Bar-Lev
- Original Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: users@ovirt.org > Sent: Tuesday, September 22, 2015 5:35:16 PM > Subject: Re: [ovirt-users] LDAP Authentication > > its too complicated ,you have any script or video ? in

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
> > > > # Create keystore, import certificate chain and uncomment > > # if using ssl/tls. > > #pool.default.ssl.startTLS = true > > #pool.default.ssl.truststore.file = > > ${local:_basedir}/${global:vars.server}.jks > > #pool.default.ssl.truststore.password = cha

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Alon Bar-Lev
- Original Message - > From: "Budur Nagaraju" > To: "Alon Bar-Lev" > Cc: users@ovirt.org > Sent: Tuesday, September 22, 2015 5:24:36 PM > Subject: Re: [ovirt-users] LDAP Authentication > > HI Alon, > > Below is the configuration which I

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
[root@cstlb2 aaa]# On Tue, Sep 22, 2015 at 7:25 PM, Alon Bar-Lev wrote: > > > - Original Message - > > From: "Budur Nagaraju" > > To: users@ovirt.org > > Sent: Tuesday, September 22, 2015 4:34:46 PM > > Subject: [ovirt-users] LDAP Authenticati

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Alon Bar-Lev
- Original Message - > From: "Budur Nagaraju" > To: users@ovirt.org > Sent: Tuesday, September 22, 2015 4:34:46 PM > Subject: [ovirt-users] LDAP Authentication > > HI All, > > Can someone help me in configuring LDAP authentication for Ovirt ? P

[ovirt-users] LDAP Authentication

2015-09-22 Thread Budur Nagaraju
HI All, Can someone help me in configuring LDAP authentication for Ovirt ? Thanks,, Nagaraju ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-19 Thread Mitja Mihelič
On 18/06/15 14:49, Ondra Machacek wrote: On 06/18/2015 02:07 PM, Mitja Mihelič wrote: Hi! Hi We just upgaded oVirt from 3.4 to 3.5 and now users cannot select the LDAP domain on the login screen. Only internal is available. Our LDAP server is actually a 389DS instance and we are using for a

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-19 Thread Alon Bar-Lev
- Original Message - > From: "Mitja Mihelič" > To: "Alon Bar-Lev" > Cc: "Ondra Machacek" , users@ovirt.org > Sent: Friday, June 19, 2015 4:54:32 PM > Subject: Re: [ovirt-users] LDAP bind DN generation problem > > > On 19. 06.

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-19 Thread Mitja Mihelič
On 19. 06. 2015 12:44, Alon Bar-Lev wrote: - Original Message - From: "Mitja Mihelič" To: "Ondra Machacek" , users@ovirt.org Sent: Friday, June 19, 2015 1:39:14 PM Subject: Re: [ovirt-users] LDAP bind DN generation problem On 18/06/15 14:49, Ondra Machacek wrote

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-19 Thread Alon Bar-Lev
- Original Message - > From: "Mitja Mihelič" > To: "Ondra Machacek" , users@ovirt.org > Sent: Friday, June 19, 2015 1:39:14 PM > Subject: Re: [ovirt-users] LDAP bind DN generation problem > > On 18/06/15 14:49, Ondra Machacek wrote: > > &

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-19 Thread Mitja Mihelič
On 18/06/15 14:49, Ondra Machacek wrote: On 06/18/2015 02:07 PM, Mitja Mihelič wrote: Hi! Hi We just upgaded oVirt from 3.4 to 3.5 and now users cannot select the LDAP domain on the login screen. Only internal is available. Our LDAP server is actually a 389DS instance and we are using for a

Re: [ovirt-users] LDAP bind DN generation problem

2015-06-18 Thread Ondra Machacek
On 06/18/2015 02:07 PM, Mitja Mihelič wrote: Hi! Hi We just upgaded oVirt from 3.4 to 3.5 and now users cannot select the LDAP domain on the login screen. Only internal is available. Our LDAP server is actually a 389DS instance and we are using for authentication in oVirt without Kerberos. T

[ovirt-users] LDAP bind DN generation problem

2015-06-18 Thread Mitja Mihelič
Hi! We just upgaded oVirt from 3.4 to 3.5 and now users cannot select the LDAP domain on the login screen. Only internal is available. Our LDAP server is actually a 389DS instance and we are using for authentication in oVirt without Kerberos. The existing setup has worked since the days of 3.2

Re: [ovirt-users] LDAP Certificate Location?

2015-01-06 Thread Alon Bar-Lev
://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l147 - Original Message - > From: "Donny Davis" > To: "Sandvik Agustin" , users@ovirt.org > Sent: Wednesday, January 7, 2015 12:12:23 AM > Subject: Re: [ovirt-users] LDAP Cer

Re: [ovirt-users] LDAP Certificate Location?

2015-01-06 Thread Donny Davis
In the article you referenced you didn't setup tls On Jan 6, 2015 2:04 PM, Sandvik Agustin wrote:Hi Donny,Sorry to bother you at this time, I installed the 389ds by following this http://www.unixmen.com/setup-directory-serverldap-in-centos-6-4-rhel-6-4/ and now I'm following your documentation at 

Re: [ovirt-users] LDAP

2014-11-20 Thread Alon Bar-Lev
- Original Message - > From: "Koen Vanoppen" > To: users@ovirt.org > Sent: Thursday, November 20, 2014 11:22:46 AM > Subject: Re: [ovirt-users] LDAP > > If it get's to ovirt 3.5.1 that indeed would be great. We don't have any > issues for th

Re: [ovirt-users] LDAP

2014-11-20 Thread Koen Vanoppen
> > From: "Koen Vanoppen" > > To: users@ovirt.org > > Sent: Thursday, November 20, 2014 11:11:57 AM > > Subject: Re: [ovirt-users] LDAP > > > > Is it stable? Because it is for production environment on the Brussels > > Airport... Can't be messed a

Re: [ovirt-users] LDAP

2014-11-20 Thread Alon Bar-Lev
- Original Message - > From: "Koen Vanoppen" > To: users@ovirt.org > Sent: Thursday, November 20, 2014 11:11:57 AM > Subject: Re: [ovirt-users] LDAP > > Is it stable? Because it is for production environment on the Brussels > Airport... Can't be mes

Re: [ovirt-users] LDAP

2014-11-20 Thread Koen Vanoppen
Zaslavsky : > > > - Original Message - > > From: "Koen Vanoppen" > > To: users@ovirt.org > > Sent: Thursday, November 20, 2014 10:51:06 AM > > Subject: [ovirt-users] LDAP > > > > Hello everybody, > > > > We updated our ovirt to 3.5,

Re: [ovirt-users] LDAP

2014-11-20 Thread Koen Vanoppen
t: Thursday, November 20, 2014 10:51:06 AM > > Subject: [ovirt-users] LDAP > > > > Hello everybody, > > > > We updated our ovirt to 3.5, but now we see some errors concerning LDAP. > I > > already searched oonline for a guide for the AAA config, but can't s

Re: [ovirt-users] LDAP

2014-11-20 Thread Yair Zaslavsky
- Original Message - > From: "Koen Vanoppen" > To: users@ovirt.org > Sent: Thursday, November 20, 2014 10:51:06 AM > Subject: [ovirt-users] LDAP > > Hello everybody, > > We updated our ovirt to 3.5, but now we see some errors concerning LDAP. I >

Re: [ovirt-users] LDAP

2014-11-20 Thread Alon Bar-Lev
- Original Message - > From: "Koen Vanoppen" > To: users@ovirt.org > Sent: Thursday, November 20, 2014 10:51:06 AM > Subject: [ovirt-users] LDAP > > Hello everybody, > > We updated our ovirt to 3.5, but now we see some errors concerning LDAP. I >

[ovirt-users] LDAP

2014-11-20 Thread Koen Vanoppen
Hello everybody, We updated our ovirt to 3.5, but now we see some errors concerning LDAP. I already searched oonline for a guide for the AAA config, but can't seem to find something... Does anybody already has a clear how-to for the AAA config? This is the error we get sometimes in our engine.log