Bug 1328435

Summary:	[Doc RFE] Document configuration steps for the AD integration with RGW
Product:	[Red Hat Storage] Red Hat Ceph Storage	Reporter:	Anjana Suparna Sriram <asriram>
Component:	Documentation	Assignee:	John Wilkins <jowilkin>
Status:	CLOSED CURRENTRELEASE	QA Contact:	shylesh <shmohan>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	2.0	CC:	hnallurv, kdreyer, kurs, nlevine
Target Milestone:	rc
Target Release:	2.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-09-30 17:21:01 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Anjana Suparna Sriram 2016-04-19 11:46:16 UTC

Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 3 John Wilkins 2016-07-12 20:12:05 UTC

https://access.qa.redhat.com/documentation/en/red-hat-ceph-storage/2/ceph-object-gateway-with-ldap-ad-guide/

Comment 4 shylesh 2016-07-30 08:14:38 UTC

@John,

Some correction required in the doc https://access.qa.redhat.com/documentation/en/red-hat-ceph-storage/2/ceph-object-gateway-with-ldap-ad-guide.


1) In section 2.5  'rgw_ldap_dnattr = "uid" ' this should be replaced with 
'rgw_ldap_dnattr = "cn"' . Because "uid" is for LDAP and "cn" is for AD.

2) In section 3.3 doc talks about using SECRET_KEY for boto. This is not required. Only access_key is required in the s3 scripts. secret_key='' will work.

Comment 5 John Wilkins 2016-08-11 18:11:59 UTC

1. Changed the uid to cn. https://access.qa.redhat.com/documentation/en/red-hat-ceph-storage/2/single/ceph-object-gateway-with-ldap-ad-guide#configuring_civetweb_to_use_active_directory

2. Removed mention of secret key. https://access.qa.redhat.com/documentation/en/red-hat-ceph-storage/2/single/ceph-object-gateway-with-ldap-ad-guide#test_the_configuration_with_an_s3_client

Comment 6 Tanay Ganguly 2016-08-12 10:24:19 UTC

Small Correction required:

[Section]
2.4. Adding a Gateway User

# ldapsearch -x -D "uid=ceph,ou=People,dc=example dc=com" -W -H ldaps://example.com -b "ou=People,dc=example,dc=com" -s sub 'uid=ceph'

A Comma should be required to separate "dc=example dc=com"

Correct Command should be:

# ldapsearch -x -D "uid=ceph,ou=People,dc=example,dc=com" -W -H ldaps://example.com -b "ou=People,dc=example,dc=com" -s sub 'uid=ceph'

Comment 7 John Wilkins 2016-08-12 16:40:16 UTC

Fixed. https://access.qa.redhat.com/documentation/en/red-hat-ceph-storage/2/single/ceph-object-gateway-with-ldap-ad-guide#adding_a_gateway_user_2

Comment 8 shylesh 2016-08-12 16:47:15 UTC

Marking as verified, as the required changes are made in the doc.