Bug 1390473

Summary: [DOCS] Fix issues in Advanced LDAP Configuration section
Product: OpenShift Container Platform Reporter: Vikram Goyal <vigoyal>
Component: DocumentationAssignee: brice <bfallonf>
Status: CLOSED CURRENTRELEASE QA Contact: Chuan Yu <chuyu>
Severity: medium Docs Contact: Vikram Goyal <vigoyal>
Priority: medium    
Version: 3.2.0CC: aos-bugs, jialiu, jokerman, mmccomas
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-11-22 00:59:18 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Comment 1 brice 2016-11-03 04:55:26 UTC
PR made:

https://github.com/openshift/openshift-docs/pull/3154

However, as this is with using proxies, I can't test to see if this is accurate, so I'll put this onto QA.

Johnny, because this is from a comment from a customer on the portal (see link above), I'd like to check that that PR change is accurate. I don't have access to a test machine with a proxy.

Please let me know if there needs to be a change. Thanks!

Comment 3 Chuan Yu 2016-11-04 07:39:24 UTC
As the comments https://access.redhat.com/documentation/en/openshift-enterprise/3.2/paged/installation-and-configuration/chapter-11-advanced-ldap-configuration#comment-1100061, still need two modify:

11.2.3. Phase 1: Certificate Generation

Step 2.is missing the code examples:

oadm create-api-client-config \ --certificate-authority='/etc/origin/proxy/proxyca.crt' \ --client-dir='/etc/origin/proxy' \ --signer-cert='/etc/origin/proxy/proxyca.crt' \ --signer-key='/etc/origin/proxy/proxyca.key' \ --signer-serial='/etc/origin/proxy/proxyca.serial.txt' \ --user='system:proxy'

cat /etc/origin/proxy/system:proxy.crt /etc/origin/proxy/system:proxy.key > /etc/origin/proxy/authproxy.pem


11.2.4.2. Step 2: SSSD Configuration

Missing any reference to editing /etc/httpd/conf.modules.d/55-authnz_pam.conf and removing the comment from:

LoadModule authnz_pam_module modules/mod_authnz_pam.so

Comment 4 Chuan Yu 2016-11-04 08:51:23 UTC
The first comments fixs are availabled on the guide https://docs.openshift.com/enterprise/3.2/install_config/advanced_ldap_configuration/sssd_for_ldap_failover.html

Verified on:
openshift v3.2.1.15
kubernetes v1.2.0-36-g4a3f9c5
etcd 2.2.5

Comment 5 brice 2016-11-07 00:12:25 UTC
Chuan Yu

Sorry, I should have mentioned that the fixes from the first comment were already in the docs from a previous PR.

Thanks, and I'll merge the PR.

Comment 6 openshift-github-bot 2016-11-07 00:15:44 UTC
Commit pushed to master at https://github.com/openshift/openshift-docs

https://github.com/openshift/openshift-docs/commit/790e7161728c513d457872e1328459408dd816cd
Merge pull request #3154 from bfallonf/filechange_1390473

Bug 1390473 fixed file location in example