Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread Donny Davis
Can you assign a specific user the power user role that has no VMS assigned to them? Can that user login? On Jun 30, 2015 6:32 PM, "David Smith" wrote: > The users are attempting to log in via the user portal when they get the > error. > > > On Tue, Jun 30, 2015 at 3:28 PM, Donny Davis wrote: >

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread David Smith
In that link, the referenced permissions don't exist under "configure" when logged in to the admin portal; I must be missing some finer detail. Also the system permissions section in "Configure" doesn't allow you to add the user "everyone"-- and since we're not using LDAP groups, that complicates t

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread Donny Davis
http://lists.ovirt.org/pipermail/users/2015-January/030981.html On Jun 30, 2015 6:16 PM, "Donny Davis" wrote: > Add login permissions only at the data center for the group. This allows > them to login, but not view anything. You have to create custom permission > to do what you are looking for.

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread Donny Davis
Add login permissions only at the data center for the group. This allows them to login, but not view anything. You have to create custom permission to do what you are looking for. On Jun 30, 2015 6:13 PM, "David Smith" wrote: > Correct, each user has their own VMs. Only a few share VMs (those >

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread David Smith
Correct, each user has their own VMs. Only a few share VMs (those permissions are assigned manually) The issue is that when they have 0 VMs assigned to them, the system throws the login error that they're not authorized, at least until I add a placeholder VM so they can log in and set themselves u

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread Donny Davis
You are looking for this to look like its multi tenant? I setup CloudSpin to do exactly that. Each user can only see their own VMS. Do I have your question correct? Donny D On Jun 30, 2015 5:27 PM, "David Smith" wrote: > version 3.5.2-1.el6 > using ldap authz; this piece is working OK, and veri

[ovirt-users] User is not authorized, ldap OK, but no user VM

2015-06-30 Thread David Smith
version 3.5.2-1.el6 using ldap authz; this piece is working OK, and verified OK. I use the "Everyone" user to provide default permissions; that includes PowerUserRole for the data center, a bunch of usertemplatebasedVMs, some VnicProfileUser, DiskProfileUser, etc. I add a new user in LDAP; and ve