Bug 1373225

Summary:	[DOCS] Configuring LDAP and Kerberos for Single Sign-on - Bad conf files
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Gonza <grafuls>
Component:	Documentation	Assignee:	Tahlia Richardson <trichard>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Julie <juwu>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	4.0.0	CC:	gklein, grafuls, lbopf, lsurette, omachace, pstehlik, rbalakri, srevivo, ykaul
Target Milestone:	ovirt-4.0.5
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-10-27 06:21:39 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Docs	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Gonza 2016-09-05 14:17:12 UTC

Description of problem:
On the documentation the example configuration file for "Administration_Guide/Configuring_LDAP_and_Kerberos_for_Single_Sign-on.html" under "Example 14.8. Example authentication configuration file" has incorrect value for ovirt.engine.extension.binding.jbossmodule.class

Version-Release number of selected component (if applicable):
rhevm-4.0.4-0.1.el7ev.noarch

Actual results:
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension

Expected results:
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.misc.http.AuthnExtension

Comment 1 Pavel Stehlik 2016-09-07 07:15:39 UTC

Setting Severity - based on time which this keeps busy QE & DEV engineers it's really desirable to be fixed soon.

Comment 2 Lucy Bopf 2016-09-23 06:59:01 UTC

Assigning to Tahlia for review.

Comment 3 Tahlia Richardson 2016-09-27 06:19:28 UTC

Does the 'Example authorization configuration file' in step 9 also need to change?

It has:
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension

Is that correct, or should it be changed to:
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.misc.http.AuthzExtension

Comment 4 Tahlia Richardson 2016-09-27 06:26:41 UTC

And is the same fix required in https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/single/administration-guide/#Configuring_an_External_LDAP_Provider_ManualMethod ?

Comment 5 Ondra Machacek 2016-09-27 11:35:20 UTC

No, just the one which is described in description.

Comment 6 Tahlia Richardson 2016-09-28 00:08:25 UTC

Thanks Ondra. I've made that change, and it will be included in a group merge request with a few other bug fixes for that section.

Comment 8 Julie 2016-10-27 05:26:12 UTC

Checked that the change is in place. Moving to VERIFIED.

Cheers,
Julie

Comment 9 Julie 2016-10-27 06:21:39 UTC

Documentation Link:
https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/single/administration-guide/#Configuring_LDAP_and_Kerberos_for_Single_Sign-on