[ovirt-users] Re: KeyCloak Integration

2020-09-07 Thread Artur Socha
Hi Anton, Just to let you know. I investigated this issue. If you want to use keycloak in version >=10 you would need to define all additional scopes as 'optional client scopes' in your client configuration. In my case, on my test environment, I only had to add

[ovirt-users] Re: KeyCloak Integration

2020-06-22 Thread Artur Socha
On Mon, 2020-06-22 at 15:14 +0200, Artur Socha wrote: > Anton, > I managed to re-create the issue on my local environment. > Previously I tested it against Keycloak 8.0.1 with users loaded from LDAP. > Currently I have users/groups created via Keycloak management panel. I need to > investigate it

[ovirt-users] Re: KeyCloak Integration

2020-06-22 Thread Artur Socha
Anton,I managed to re-create the issue on my local environment. Previously I tested it against Keycloak 8.0.1 with users loaded from LDAP. Currently I have users/groups created via Keycloak management panel. I need to investigate it further which of the two changes is the root cause (it works fine

[ovirt-users] Re: KeyCloak Integration

2020-06-22 Thread Artur Socha
Hi Anton,Thanks for the specs. I have create BZ issue for tracking: https://bugzilla.redhat.com/show_bug.cgi?id=1849569Feel free to add comments/change it when needed. Artur On Fri, 2020-06-19 at 10:57 +, Anton Louw wrote: > > > > Hi Artur, > > Please see below: > >

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Anton Louw via Users
Hi Artur, Please see below: ovirt-engine.noarch 4.3.10.4-1.el7@ovirt-4.3 ovirt-engine-extension-aaa-misc.noarch 1.0.4-1.el7 @ovirt-4.3 mod_auth_openidc.x86_64 1.8.8-5.el7 @base [root@virt ~]# cat /etc/*elease CentOS Linux release 7.7.1908

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Artur Socha
On Fri, 2020-06-19 at 10:21 +, Anton Louw wrote: > > > > Yes I didn’t get to the OVN part yet, as I first wanted to test the if the > token can be obtained. > > > > This is the first time we are testing KeyCloak in any environment, so we have > never been able to obtain a token

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Artur Socha
On Fri, 2020-06-19 at 10:03 +, Anton Louw wrote: > > > > Hi Artur, > > > > Sure, please see below output: > > > > [root@virt ~]# curl -vvv -H "Accept:application/json" ' >

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Anton Louw via Users
Yes I didn’t get to the OVN part yet, as I first wanted to test the if the token can be obtained. This is the first time we are testing KeyCloak in any environment, so we have never been able to obtain a token for API access. Thanks From: Artur Socha Sent: 19 June 2020 12:16 To: Anton Louw ;

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Anton Louw via Users
Hi Artur, Sure, please see below output: [root@virt ~]# curl -vvv -H "Accept:application/json" 'https://virt.example.co.za/ovirt-engine/sso/oauth/token?grant_type=password=myuser=mypass=ovirt-app-api' * About to connect() to virt.example.co.za port 443 (#0) * Trying 127.0.0.1... * Connected

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Artur Socha
On Fri, 2020-06-19 at 08:34 +, Anton Louw wrote: > > > > Hi Artur, > > > > Thank you for the quick response. > > > > I have actually tried creating another user, but I still get the same error. I > have attached the output of curl -vvv as well as the logs the engine and >

[ovirt-users] Re: KeyCloak Integration

2020-06-19 Thread Artur Socha
On Fri, 2020-06-19 at 07:35 +, Anton Louw via Users wrote: > > > > Hi Everybody, Hi Anton, > > > So I have implemented KeyCloak into our oVirt environment, which works, up > until a point. So WebUI access works, but when calling the API, using: > > > curl -k -H "Accept: