Bug 1113937 – [RFE][AAA] Single sign-on into web applications

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1113937 - [RFE][AAA] Single sign-on into web applications

Summary:	[RFE][AAA] Single sign-on into web applications

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Virtualization Manager
Classification:	Red Hat
Component:	RFEs (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	---
Target Release:	3.5.0
Assigned To:	Alon Bar-Lev
QA Contact:	Ondra Machacek
Docs Contact:

URL:
Whiteboard:	infra
Keywords:	FutureFeature, TechPreview

Duplicates:	1125224 1170209 (view as bug list)
Depends On:	570191 884653 1112404 1125224 1161734
Blocks:	oVirt-AAA-rewrite 1121762 rhev3.5beta 1156165
	Show dependency tree / graph

Reported:	2014-06-27 05:38 EDT by Alon Bar-Lev
Modified:	2016-02-10 14:01 EST (History)
CC List:	17 users (show)

See Also:
Fixed In Version:	vt2.2
Doc Type:	Technology Preview
Doc Text:	With this update, the engine can now integrate with Apache authentication, for example mod_auth_kerb, to accept users already authenticated by Apache and enable single sign-on to the User and Administration Portals. Note that this feature conflicts with the password delegation feature in 3.4 (also known as the single sign-on to virtual machine feature) as the engine does not have access to user passwords anymore, the password cannot be delegated to virtual machines. Also note that when this feature is used, the sign out button in the User Portal and Administration Portal will not work. The user will remain logged in even after clicking the sign out button. To sign out, the user needs to sign out from the single sign-on provider. For more information on configuring this feature, see the ovirt-engine-extension-aaa-ldap package documentation[1]. [1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l141
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-02-11 13:04:19 EST
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	Infra
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2015:0158	normal	SHIPPED_LIVE	Important: Red Hat Enterprise Virtualization Manager 3.5.0	2015-02-11 17:38:50 EST

Groups: None (edit)

Description Alon Bar-Lev 2014-06-27 05:38:19 EDT

This will be released as technology preview for rhevm-3.5.0.

Documentation[1].
Known UX issues: bug#1112404.
Packages required:
 - ovirt-engine-extension-aaa-misc(bug#1113648)
 - ovirt-engine-extension-aaa-ldap(bug#1110765)

Component is RFEs as it relates to entire product: backend, frontend, extensions.

[1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l103

Comment 1 Alon Bar-Lev 2014-06-27 08:48:52 EDT

Core limitation: SSO into virtual machine will not work, as password is unknown to engine.

Comment 2 Alon Bar-Lev 2014-08-22 02:26:37 EDT

*** Bug 1125224 has been marked as a duplicate of this bug. ***

Comment 4 Alon Bar-Lev 2014-12-04 08:54:16 EST

*** Bug 1170209 has been marked as a duplicate of this bug. ***

Comment 6 errata-xmlrpc 2015-02-11 13:04:19 EST

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0158.html

Note You need to log in before you can comment on or make changes to this bug.