Bug 1351217

Summary:	FQDN checking introduced by SSO should be case-insensitive or engine-setup should lower-case Host FQDN
Product:	[oVirt] ovirt-engine	Reporter:	Ralf Schenk <rs>
Component:	AAA	Assignee:	Ravi Nori <rnori>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Gonza <grafuls>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	4.0.0	CC:	bugs, mperina, pstehlik
Target Milestone:	ovirt-4.0.1	Flags:	mperina: ovirt-4.0.z? rule-engine: planning_ack+ mperina: devel_ack+ rule-engine: testing_ack?
Target Release:	4.0.1.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-08-18 07:07:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ralf Schenk 2016-06-29 13:41:15 UTC

Description of problem:
After upgrading ovirt-engine to 4.0 I wasn't able to log into web-ui via URL 
https://engine-mciii.mydomain.com

Error page stated: "The client is not authorized to request an authorization. It's required to access the system using FQDN."


Version-Release number of selected component (if applicable): 4.0.0.6

How reproducible: Try to access web UI where Hosted Engine Configuration contains case-mixed Host FQDN which is fully resolvable by DNS i.e.: engine-mcIII.mydomain.com

Steps to Reproduce:
1. Setup Engine with case-mixed or upper-case characters in Host FQDN
2. Try to login via URL

Actual results:
No login possible, Error page states "The client is not authorized to request an authorization. It's required to access the system using FQDN."

Expected results:
Login possible

Additional info:
1. Could be solved by a case-insensitive check of Engine Host FQDN to URL Hostname.
2. As an alternative lowercase user input in setup for Host FQDN

Comment 1 Pavel Stehlik 2016-08-18 07:07:11 UTC

Closing due to capacity, if still happens, please reopen.