Bug 1450007
| Summary: | Long DN string for LDAP authentication provider in ansible hosts file causes incorrect master-config.yaml to be created | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Javier Ramirez <javier.ramirez> |
| Component: | Installer | Assignee: | Tim Bielawa <tbielawa> |
| Status: | CLOSED ERRATA | QA Contact: | Gan Huang <ghuang> |
| Severity: | high | Docs Contact: | |
| Priority: | high | ||
| Version: | 3.5.0 | CC: | aos-bugs, jokerman, mmccomas |
| Target Milestone: | --- | ||
| Target Release: | 3.5.z | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: |
Cause: YAML Library wrapping long lines
Consequence: LDAP config parameters are parsed incorrectly
Fix: Configure YAML library dumper with longer line length
Result: LDAP config parameters are written without line wraps and can be parsed correctly
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2017-07-27 18:02:01 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Just needs a backport of https://github.com/openshift/openshift-ansible/pull/3914 to 3.5 Working on backport in https://github.com/openshift/openshift-ansible/pull/4424 Verified with openshift-ansible-3.5.95-1.git.0.a2b30e3.el7.noarch
Inventory host file:
openshift_master_identity_providers=[{'name': 'LDAP_auth', 'login': 'true', 'challenge': 'true', 'kind': 'LDAPPasswordIdentityProvider', 'attributes': {'id': ['dn'], 'email': ['mail'], 'name': ['uid'], 'preferredUsername': ['uid']}, 'bindDN': '', 'bindPassword': '', 'ca': '', 'insecure': 'true', 'url': 'ldap://10.66.xx.xx:389/DC=blah,DC=foo,DC=bar?uid??(memberof=CN=UserGroupForPaaS,OU=Groups,OU=Unit With Spaces For Some Reason,OU=Also With - In Case,DC=blah,DC=foo,DC=bar)'}]
Installation succeed
Correct last comment, verified with openshift-ansible-3.5.94-1 Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1810 |
Description of problem: What problem/issue/behavior are you having trouble with? What do you expect to see? We are using the LDAPPasswordIdentityProvider, and have a rather long DN string for the url parameter when setting the openshift_master_identity_providers config in our ansible hosts file. This causes a line feed to be inserted into the master-config.yaml resulting in a broken login provider. Investigating we found an upstream issue[1] that describes the same problem and seems to addresses it. The file in that fix is in a different place with OCP 3.3 but adding the "width=float("inf")" to the command has helped get passed the issue. Is there any update on when the fix will be available in product. [1]https://github.com/openshift/openshift-ansible/issues/3912