Hide Forgot
Description of problem: During starting process skyring tries to create "admin" user in DB. This is wrong according PRD, because skyring should support LDAP authentication. Cite: System will not support both locally managed and AD/LDAP users concurrently. Specifically if AD/LDAP is configured, System will only use AD/LDAP for authentication and authorization and all local users will be disabled. When AD/LDAP is configured, a privileged (superuser) must be configured at that time. Version-Release number of selected component (if applicable): rhscon-core-0.0.7-0.1.alpha1.el7.x86_64 rhscon-ui-0.0.6-0.1.alpha1.el7.noarch rhscon-ceph-0.0.5-0.1.alpha1.el7.x86_64 How reproducible: 100% Steps to Reproduce: 1. start skyring binary Actual results: Skyring binary tries to create "admin" user during start. Expected results: Skyring binary will not try to create "admin" user during start. Additional info: 2016-01-26T16:02:03.683+01:00 ERROR auth.go:197 AddUser] Username already exists 2016-01-26T16:02:03.683+01:00 ERROR auth.go:38 AddDefaultUser] Unable to create default User:user already exists
admin user is allowed always regardless of whether the system is configured with LDAP or not. 'admin' is the so called superuser. If ldap is configured and the local users other than admin is allowed to login, then it is a bug. Is that happening?
Adding current version of the log message to make this BZ easier to find. Here are few first lines found in the log when skyring service was started: ~~~ 2016-06-07T18:54:09.442+02:00 ERROR auth.go:197 AddUser] Username: admin already exists 2016-06-07T18:54:09.442+02:00 ERROR auth.go:41 AddDefaultUser] Unable to create default User:user already exists 2016-06-07T18:54:09.449+02:00 INFO main.go:214 start] Starting the providers 2016-06-07T18:54:09.45+02:00 DEBUG provider-conf.go:57 LoadProviderConfig] File Name: ceph.conf 2016-06-07T18:54:09.45+02:00 DEBUG provider-conf.go:57 LoadProviderConfig] File Name: ceph.dat 2016-06-07T18:54:09.45+02:00 DEBUG provider-conf.go:57 LoadProviderConfig] File Name: ceph.evt ~~~
Tested with ceph-ansible-1.0.5-25.el7scon.noarch ceph-installer-1.0.12-4.el7scon.noarch rhscon-ceph-0.0.32-1.el7scon.x86_64 rhscon-core-0.0.33-1.el7scon.x86_64 rhscon-core-selinux-0.0.33-1.el7scon.noarch rhscon-ui-0.0.47-1.el7scon.noarch and there is no error message in logs about creating user. Agreement is that admin will be created if there is no account like that in USM. --> VERIFIED