Bug 1707537

Summary: [RFE] Move authentication configuration from authconfig to authselect
Product: Red Hat CloudForms Management Engine Reporter: Joe Vlcek <jvlcek>
Component: ApplianceAssignee: Joe Vlcek <jvlcek>
Status: CLOSED ERRATA QA Contact: Sudhir Mallamprabhakara <smallamp>
Severity: medium Docs Contact: Red Hat CloudForms Documentation <cloudforms-docs>
Priority: medium    
Version: 5.4.0CC: abellott, dmetzger, mshriver, obarenbo, simaishi
Target Milestone: GA   
Target Release: 5.11.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 5.11.0.6 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-12-12 13:36:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Joe Vlcek 2019-05-07 18:08:14 UTC
Description of problem:
Starting with RHEL8 authconfig will be replace by authselect

This RFE is to track the work needed to make the transition for the appliance.

See also: https://www.pivotaltracker.com/story/show/160297325

This will require changes as follows, Where we use authconfig:
      - manageiq_docs/auth/ldap.adoc
      - manageiq/tools/miqldap_to_sssd

Comment 5 CFME Bot 2019-05-15 18:30:55 UTC
New commit detected on ManageIQ/manageiq-appliance/master:

https://github.com/ManageIQ/manageiq-appliance/commit/3fb5b25e8efc7a2f9de922933b6202f15fd3135d
commit 3fb5b25e8efc7a2f9de922933b6202f15fd3135d
Author:     Joe VLcek <jvlcek>
AuthorDate: Thu May  9 13:52:27 2019 -0400
Commit:     Joe VLcek <jvlcek>
CommitDate: Thu May  9 13:52:27 2019 -0400

    Add sssd.conf.erb to TEMPLATE directory for authselect support

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1707537

 TEMPLATE/etc/sssd/sssd.conf.erb | 35 +
 1 file changed, 35 insertions(+)

Comment 7 CFME Bot 2019-05-16 14:01:47 UTC
New commit detected on ManageIQ/manageiq_docs/master:

811cbee
commit f321e21821a611cf22194663b12e59e2c57815c3
Author:     Joe VLcek <jvlcek>
AuthorDate: Mon May 13 17:04:52 2019 -0400
Commit:     Joe VLcek <jvlcek>
CommitDate: Mon May 13 17:04:52 2019 -0400

    Support LDAP authentication configuration with authselect or authconfig

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1707537

 auth/ldap.adoc | 51 +-
 1 file changed, 49 insertions(+), 2 deletions(-)

Comment 8 CFME Bot 2019-05-21 14:45:47 UTC
New commit detected on ManageIQ/manageiq/master:

https://github.com/ManageIQ/manageiq/commit/a46373eb08a0f6eaf8039ea1087e12a80c90f09d
commit a46373eb08a0f6eaf8039ea1087e12a80c90f09d
Author:     Joe VLcek <jvlcek>
AuthorDate: Tue May  7 17:58:19 2019 -0400
Commit:     Joe VLcek <jvlcek>
CommitDate: Tue May  7 17:58:19 2019 -0400

    Move authentication configuration from authselect in place of authconfig

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1707537

 spec/tools/miqldap_to_sssd/auth_establish_spec.rb | 63 +
 spec/tools/miqldap_to_sssd/authconfig_spec.rb | 36 -
 spec/tools/miqldap_to_sssd/configure_apache_spec.rb | 7 +-
 spec/tools/miqldap_to_sssd/sssd_conf_spec.rb | 83 +
 tools/miqldap_to_sssd.rb | 6 +-
 tools/miqldap_to_sssd/auth_establish.rb | 65 +
 tools/miqldap_to_sssd/auth_template_files.rb | 23 +
 tools/miqldap_to_sssd/authconfig.rb | 42 -
 tools/miqldap_to_sssd/configure_apache.rb | 14 +-
 tools/miqldap_to_sssd/converter.rb | 2 +-
 tools/miqldap_to_sssd/sssd_conf.rb | 32 +-
 11 files changed, 273 insertions(+), 100 deletions(-)

Comment 9 Antonin Pagac 2019-07-02 08:06:58 UTC
Verified with 5.10.6.1 and 5.11.0.11.

From authconfig in 5.10 based on RHEL 7.6 we moved to authselect in 5.11 based on RHEL 8.0.

Comment 12 errata-xmlrpc 2019-12-12 13:36:27 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:4199