Bug 1117502

Summary: [RFE][AAA] Display authz namespace at user/group add dialog
Product: [Retired] oVirt Reporter: Ondra Machacek <omachace>
Component: ovirt-engine-webadminAssignee: Yair Zaslavsky <yzaslavs>
Status: CLOSED CURRENTRELEASE QA Contact: Ondra Machacek <omachace>
Severity: low Docs Contact:
Priority: unspecified    
Version: 3.5CC: alonbl, bugs, ecohen, gklein, iheim, mgoldboi, oourfali, rbalakri, yeylon, yzaslavs
Target Milestone: ---Keywords: Improvement
Target Release: 3.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: infra
Fixed In Version: ovirt-3.5.0_rc1 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-10-17 12:30:45 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1076964    
Attachments:
Description Flags
multiZ.properties
none
multi.properties none

Description Ondra Machacek 2014-07-08 19:53:18 UTC
Created attachment 916547 [details]
multiZ.properties

Description of problem:


Version-Release number of selected component (if applicable):
ovirt-engine-extension-aaa-ldap-0.0.0-0.0.master.el6_5.noarch
unboundid-ldapsdk-2.3.7-0.0.snap.r530.el6_5.noarch
ovirt-engine-3.5.0-0.0.master.20140629172257.git0b16ed7.el6.noarch

How reproducible:
always

Steps to Reproduce:
1) install:
 * ovirt-engine-extension-aaa-ldap-0.0.0-0.0.master.el6_5.noarch
 * unboundid-ldapsdk-2.3.7-0.0.snap.r530.el6_5.noarch

2) add files from attachment to /etc/ovirt-engine/extensions.d/
3) service ovirt-engine restart
4) In webadmin search for group which is in all domains. (ie. Guests)

Actual results:
Guests
Guests

Expected results:
ad-w2k12r2p.rhev.lab.eng.brq.redhat.com/Builtin/Guests
ad-w2k12r2.rhev.lab.eng.brq.redhat.com/Builtin/Guests

Additional info:

Comment 1 Ondra Machacek 2014-07-08 19:54:24 UTC
Created attachment 916548 [details]
multi.properties

Comment 2 Ondra Machacek 2014-07-09 09:29:11 UTC
Noticed that this is not valid for kerberos, just for simple.

Comment 3 Alon Bar-Lev 2014-07-10 12:02:14 UTC
engine does not support namespace via ui.

we will add this if we have time.

Comment 4 Oved Ourfali 2014-07-13 08:21:19 UTC
Currently targeting to 3.6, as I don't think it will make it to 3.5.

Comment 5 Alon Bar-Lev 2014-07-13 08:28:54 UTC
(In reply to Oved Ourfali from comment #4)
> Currently targeting to 3.6, as I don't think it will make it to 3.5.

it should be trivial for rnori to do that when we finish with all functional issues.

Comment 6 Alon Bar-Lev 2014-07-14 11:52:58 UTC
Hi Ravi,

Currently at the "Add User/Group" we have the following dialog:


  Search: ______________V    ___________________ [GO]
              Authz                 Term

It would be nice to add the new field of "namespace", each authz extension supports a collection of namespaces, a search should be limited to a specific namespace.

Currently, to keep UI as it is we just iterate through all namespaces, which may take a lot of unneeded time.

New search should be:

  Search: ______________V _____________V    ___________________ [GO]
              Authz         Namespace             Term

Please note that namespace can be long term, so although dropbox should be width enough, the dropbox caption should be at fixed size, overflow should be hidden.

Thanks!

Comment 7 Ondra Machacek 2014-08-07 10:52:27 UTC
ok in ovirt-3.5.0_rc1

Comment 8 Sandro Bonazzola 2014-10-17 12:30:45 UTC
oVirt 3.5 has been released and should include the fix for this issue.