Bug 1445939

Summary: Auth - MIQLDAP - FreeIPA - Can't switch groups in SSUI
Product: Red Hat CloudForms Management Engine Reporter: Matt Pusateri <mpusater>
Component: UI - ServiceAssignee: Chris Hale <chhale>
Status: CLOSED CURRENTRELEASE QA Contact: Matt Pusateri <mpusater>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.8.0CC: abellott, chhale, cpelland, dajohnso, dclarizi, jhardy, mpusater, myoder, obarenbo, simaishi
Target Milestone: GAKeywords: TestOnly, ZStream
Target Release: 5.9.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: auth:externalauth:miqldap:ssui
Fixed In Version: 5.9.0.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1459257 (view as bug list) Environment:
Last Closed: 2018-03-06 15:52:00 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1459257    

Description Matt Pusateri 2017-04-26 20:50:10 UTC
Description of problem:
Auth - SSUI - Can't switch groups in SSUI.   User is a member of two valid groups, but can't switch groups.  Also I'm not sure but since we just fixed this bug https://bugzilla.redhat.com/show_bug.cgi?id=1443800 I'm not sure what happens when you have one valid group and one invalid group and you try to change groups.  I think we witness the same behavior of not seeing anything happen in the UI.




Version-Release number of selected component (if applicable):
5.8.0.12-rc1

How reproducible:


Steps to Reproduce:
1. Setup MIQLDAP - I witnessed this in FreeIPA, but that may just be the user make up.
2. User should have two groups in this case my user has two custom groups "ipausers" which maps to evmrole-User and "problemgroup2" which maps to evmrole-Administrator
3. Log into SSUI as the user and you'll get whatever the current group is. Trying to change to the other valid group fails.
4. Changing the current group in classic ui and logging out let's the the user log into the SSUI with the other valid group, but still can't switch groups.

Actual results:
Can't switch groups - Screen does nothing. Looks like it refreshes, but the group doesn't change. 

Expected results:
You should be able to switch groups

Additional info:

Related bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1443800
https://bugzilla.redhat.com/show_bug.cgi?id=1437682
https://bugzilla.redhat.com/show_bug.cgi?id=1435468 <-- This bugs description got changed to special attributes, from not being able to log into SSUI. I think we had several problems manifesting themselves.

Comment 3 Chris Hale 2017-05-01 14:07:41 UTC
GP PR https://github.com/ManageIQ/manageiq-ui-service/pull/724

Comment 4 Chris Hale 2017-05-01 14:29:35 UTC
Do you have a IP for this manageiq instance you are testing against?  Can you email me the IP and the user credentials to test with???

Thank you in advance,

Chris H.

Comment 6 Chris Hale 2017-05-01 16:19:37 UTC
Tried the credentials you specified and they did not work.  Are we sure those are the correct credentials ?

Comment 8 Chris Hale 2017-05-02 13:51:07 UTC
GH PR https://github.com/ManageIQ/manageiq-ui-service/pull/730

Comment 9 Chris Kacerguis 2017-05-05 13:38:23 UTC
Moving to ON_QA per Shevta request in Gitter.

Comment 13 Matt Pusateri 2017-12-06 20:35:58 UTC
https://bugzilla.redhat.com/show_bug.cgi?id=1466514

Comment 14 Matt Pusateri 2017-12-06 20:37:53 UTC
Sorry copy paste fail in comment 13 Should be: 

Verified on 5.9.0.11 Ext Auth FreeIPA/AD/OpenLDAP

Comment 15 Matt Pusateri 2018-01-22 21:15:06 UTC
Verified: 5.9.0.17