Re: [ovirt-users] RESTAPI and kerberos authentication

2016-04-14 Thread Marcel Galke
Hi, I've managed to get it work. What I've done is to first run "engine-manage-domains delete" to remove the domain and add it again using the new aaa extension tool "ovirt-engine-extension-aaa-ldap-setup". It's not a good idea to mix these two methods, I guess. Restart the engine after each

Re: [ovirt-users] RESTAPI and kerberos authentication

2016-04-14 Thread Ondra Machacek
The issue is most probably that your user don't have permissions to login/see vms in oVirt. Just login as admin@internal to webadmin and assign user 'aaa' some permissions. Here[1] is example how to work with virtual machine permissions. [1]

Re: [ovirt-users] RESTAPI and kerberos authentication

2016-04-14 Thread Marcel Galke
Hi, I'm using curl and I followed steps in [1] and double checked the permissions. I've tested API access vs. webadmin access (see below). $ curl -v --negotiate -X GET -H "Accept: application/xml" -k https://server8.funfurt.de/ovirt-engine/webadmin/?locale=de_DE # Result: HTTP 401 $ kinit $ curl

Re: [ovirt-users] RESTAPI and kerberos authentication

2016-04-14 Thread Ondra Machacek
On 04/13/2016 10:43 PM, Marcel Galke wrote: Hello, I need to automatically create a list of all the VMs and the storage path to their disks in the data center for offline storage for desaster recovery. We have oVirt 3.6 and IPA 4.2.0. To achieve this my idea was to query the API using Kerberos

[ovirt-users] RESTAPI and kerberos authentication

2016-04-13 Thread Marcel Galke
Hello, I need to automatically create a list of all the VMs and the storage path to their disks in the data center for offline storage for desaster recovery. We have oVirt 3.6 and IPA 4.2.0. To achieve this my idea was to query the API using Kerberos authentication and a keytab. This could then