Bug 1325746 - [RFE] - Provide option to access engine not only by engine FQDN but also using alternate host names
Summary: [RFE] - Provide option to access engine not only by engine FQDN but also usin...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: BLL.Infra
Version: 4.0.0
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ovirt-4.0.4
: 4.0.4
Assignee: Ravi Nori
QA Contact: Petr Kubica
URL:
Whiteboard:
: 1431262 (view as bug list)
Depends On:
Blocks: 1353093 1376329 1431721
TreeView+ depends on / blocked
 
Reported: 2016-04-11 05:18 UTC by Michael Burman
Modified: 2017-06-20 05:32 UTC (History)
11 users (show)

Fixed In Version:
Clone Of:
: 1376329 (view as bug list)
Environment:
Last Closed: 2016-09-26 12:41:22 UTC
oVirt Team: Infra
Embargoed:
rule-engine: ovirt-4.0.z+
pkubica: testing_plan_complete+
ykaul: planning_ack+
mperina: devel_ack+
lsvaty: testing_ack+

Attachments (Terms of Use)
engine logs (719.61 KB, application/x-gzip)
2016-04-11 05:18 UTC, Michael Burman 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 56411 0 'None' ABANDONED engine : Add ip to hostname redirection filter 2021-02-13 05:25:12 UTC
oVirt gerrit 56428 0 'None' MERGED engine : Add alternate engine FQDNs 2021-02-13 05:25:12 UTC
oVirt gerrit 61845 0 'None' MERGED engine : Add alternate engine FQDNs 2021-02-13 05:25:12 UTC

Internal Links: 1431721

Description Michael Burman 2016-04-11 05:18:14 UTC 
Created attachment 1145831 [details]
engine logs

Description of problem:
[oVirt UI] - IP to FQDN redirection isn't working properly and UI isn't accessible when trying to enter first with IP.

If trying to access the oVirt UI 4.0 using IP, it's redirecting to the FQDN, but after that it is just not possible to enter the UI. 

Only when i will enter the full FQDN in the browser i will able to log in the UI. 

Version-Release number of selected component (if applicable):
4.0.0-0.0.master.20160404161620.git4ffd5a4.el7.centos

How reproducible:
100

Steps to Reproduce:
1. Try to enter the oVirt UI 4.0 using IP

Actual results:
Redirection to the FQDN just not working and we need to enter the FQDN in the browser if we want to log in the UI.

Expected results:
IP to FQDN should work properly.
If i'm entering an IP in the browser it should redirect me to the FQDN and i should be able to log in to the UI.
Comment 1 Oved Ourfali 2016-04-11 06:11:25 UTC 
Not sure it is an interesting use-case.
However, might be annoying to some.
Ravi - thoughts?
Comment 2 Red Hat Bugzilla Rules Engine 2016-04-11 06:11:31 UTC 
Bug tickets must have version flags set prior to targeting them to a release. Please ask maintainer to set the correct version flags and only then set the target milestone.
Comment 3 Martin Perina 2016-04-11 10:00:08 UTC 
Well, everyone should be using only FQDN to access the engine and of course redirect URL validation is part of OAUTH spec. That's why we made this error message more understandable in https://gerrit.ovirt.org/54741 and only FQDN can be used to access engine.
Comment 4 Michael Burman 2016-04-11 10:37:04 UTC 
But isn't the redirection of the IP to the FQDN should work as well?
Comment 5 Martin Perina 2016-04-11 11:46:07 UTC 
Here's current flow after SSO introduction (Ravi please correct me if I miss anything):

1. You are accessing engine using IP address
2. You request is not authenticated, so you are redirected to SSO module using engine FQDN and login dialog is displayed
3. After you enter username and password, user authentication is executed
4. After user is authenticated successfully, client redirect URL is validated and here validation fails, because SSO module allows as a client service only FQDN of engine and not its IP address
Comment 6 Sandro Bonazzola 2016-05-02 10:09:50 UTC 
Moving from 4.0 alpha to 4.0 beta since 4.0 alpha has been already released and bug is not ON_QA.
Comment 7 Yaniv Lavi 2016-05-23 13:25:31 UTC 
oVirt 4.0 beta has been released, moving to RC milestone.
Comment 8 Yaniv Lavi 2016-05-23 13:26:14 UTC 
oVirt 4.0 beta has been released, moving to RC milestone.
Comment 9 Martin Perina 2016-06-06 11:10:33 UTC 
Retargeting not for 4.1, as we won't be able to finish that befor oVirt 4.0.0 GA. When merged to master, we can reconsider backporting to 4.0.z
Comment 11 Petr Kubica 2016-09-14 11:30:58 UTC 
Verified in rhevm-4.0.4.1-0.1.el7ev.noarch
Comment 12 Martin Perina 2017-03-12 21:03:06 UTC 
*** Bug 1431262 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.