Bug 1313583 - aaa-ldap setup tool shouldn't offer advanced option to specify custom DNS servers as it cannot be verified
Summary: aaa-ldap setup tool shouldn't offer advanced option to specify custom DNS ser...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine-extension-aaa-ldap
Classification: oVirt
Component: Profile.ad
Version: 1.1.2
Hardware: x86_64
OS: Linux
low
low
Target Milestone: ovirt-3.6.5
: 1.1.3
Assignee: Ondra Machacek
QA Contact: Gonza
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-02 00:23 UTC by Badalyan Vyacheslav
Modified: 2016-04-21 14:41 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-04-21 14:41:39 UTC
oVirt Team: Infra
Embargoed:
rule-engine: ovirt-3.6.z+
mgoldboi: planning_ack+
mperina: devel_ack+
pstehlik: testing_ack+


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 55134 0 None None None 2016-03-24 15:21:54 UTC

Description Badalyan Vyacheslav 2016-03-02 00:23:17 UTC
Description of problem:
setup was need DNS servers in resolve conf to resolve domain. Entered in setup DNS dont used,


Version-Release number of selected component (if applicable):


How reproducible:
1. echo "8.8.8.8" > /etc/resolv.conf
2. Try add AD with local DNS

Expected results:
Resolving in setup must use entered DNS.

Comment 1 Ondra Machacek 2016-03-02 08:51:03 UTC
When it's not resolved by server in resolv.conf, you should be asked a question:
"Please enter space seperated list of Active Directory DNS Servers names"
Where you specify additional AD DNS servers, which are used.
This question you won't get or using that servers it doesnt' work?

Can you please send a log? Thanks.

Comment 2 Badalyan Vyacheslav 2016-03-13 17:01:47 UTC
I don't have logs. I was setup its few weeks ago.

Yes. it's ask but check for login or search user does not woek without adding DNS to resolv.conf. After install i remove dns from resolve conf and all work. 
It's look that setup don't use DNS what i posted to "Please enter space seperated list of Active Directory DNS Servers names".

Errors was look like "Can't resolve SERVERDC.local". Setup Found AD tree. It's found main DC server name in AD, but can't connect to it, becouse can't resolve its IP.

Comment 3 Martin Perina 2016-03-24 15:21:54 UTC
aaa-ldap currently provides an option to specify DNS servers to resolve LDAP server name which cannot be resolved by DNS configuration of the host. This is pretty non standard (it's supported only by unboundid-ldapsdk library used by aaa-ldap) and it bypasses standard host DNS configuration which could lead to issues. oVirt relies on valid DNS configuration and this specific advanced configuration shouldn't be available in aaa-ldap setup tool, which offers only basic configuration of aaa-ldap. That's why we decided to remove this option from aaa-ldap setup tool.

Comment 4 Mike McCune 2016-03-28 23:15:27 UTC
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions

Comment 5 Martin Perina 2016-03-31 12:21:30 UTC
Fix will be contained in ovirt-engine-extension-aaa-ldap-1.1.3

Comment 6 Gonza 2016-04-11 07:07:19 UTC
Verified with:
ovirt-engine-extension-aaa-ldap-setup-1.1.3-1.el6ev.noarch

No option for custom DNS during aaa-ldap-setup.


Note You need to log in before you can comment on or make changes to this bug.