Bug 1330742

Summary: [AAA] After AAA configuration, users unable to login via scripts
Product: Red Hat Enterprise Virtualization Manager Reporter: Anitha Udgiri <audgiri>
Component: ovirt-engineAssignee: Ondra Machacek <omachace>
Status: CLOSED ERRATA QA Contact: Gonza <grafuls>
Severity: high Docs Contact:
Priority: high    
Version: 3.6.0CC: bazulay, juan.hernandez, lsurette, mgoldboi, mperina, omachace, pbrilla, pstehlik, rbalakri, Rhev-m-bugs, srevivo, ykaul
Target Milestone: ovirt-3.6.6Keywords: ZStream
Target Release: 3.6.6   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-05-25 12:08:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Anitha Udgiri 2016-04-26 20:44:57 UTC
Created attachment 1151069 [details]
script used

Description of problem:
When using REST API after moving to using AAA plugin for user integration, users are unable to login via the scripts.

The following error is logged :

2016-04-21 07:44:59,076 ERROR [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] (ajp-/127.0.0.1:8702-8) User <abcde> authentication failed. profile is <xyz> Invocation Result code is 0. Authn result code is CREDENTIALS_INCORRECT
2016-04-21 07:45:11,058 ERROR [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] (ajp-/127.0.0.1:8702-3) User <abcde> authentication failed. profile is <xyz> Invocation Result code is 0. Authn result code is CREDENTIALS_INCORRECT

Comment 6 Martin Perina 2016-05-02 11:39:24 UTC
Changing component to ovirt-engine, because engine part needs to be fixed, aaa-* extension part if OK.

Comment 7 Gonza 2016-05-10 08:59:06 UTC
Verified with:
rhevm-3.6.6.2-0.1.el6.noarch
rhevm-restapi-3.6.6.2-0.1.el6.noarch

User is able to login via REST API with mapping set to default suffix.

Comment 9 errata-xmlrpc 2016-05-25 12:08:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-1119.html