Description of problem: hammer user-group external create requires auth_source_id which is not available when configuring IPA/IdM integration with katello-installer --foreman-ipa-authentication=true Version-Release number of selected component (if applicable): 6.1.8 How reproducible: Always Steps to Reproduce: 1. ipa-client-install 2. katello-installer --foreman-ipa-authentication=true 3. hammer user-group create --name=dummy --role-ids=1,2,3,4 User group [dummy] created 4. hammer user-group external create --name=dummy --user-group=dummy Actual results: Could not create external user group: Missing arguments for 'auth_source_id' --- No value of auth_source_id works Expected results: External group [dummy] created Additional info: [root@sat6 /]# hammer auth-source ldap list ---|------|--------|------|------------ ID | NAME | LDAPS? | PORT | SERVER TYPE ---|------|--------|------|------------
Created redmine issue http://projects.theforeman.org/issues/15286 from this bug
Upstream bug component is Provisioning
Upstream bug component is Users & Roles
Upstream bug assigned to jmagen
Upstream bug assigned to dhlavacd
Did this magically appear somewhere along the road?? [root@sat6 parmstro]# hammer user-group external --help Usage: hammer user-group external [OPTIONS] SUBCOMMAND [ARG] ... Parameters: SUBCOMMAND subcommand [ARG] ... subcommand arguments Subcommands: create Create an external user group linked to a user group delete Delete an external user group info Show an external user group for user group list List all external user groups for user group refresh Refresh external user group update Update external user group Options: -h, --help print help
Hi Paul, I believe this BZ is its way to be fulfilled, however it doesn't fully work in 6.2.12 as of today. When you issue something like : % hammer user-group external create --name IDM-Group --user-group Satellite-Group --auth-source-id 3 ... you still have no means to check what your auth-source-id should be. Currently API does not expose non-LDAP auth sources (and thus hammer).
Hi All, I think that you were typing "on its way to being fulfilled" and had a typing skip. Thanks! Is there any way to prioritize this? We need this for automation when building environments that integrate IdM. I really would hate to have to run a sql query to get this - it is just wrong. (External id = 4 in my DB today) Cheers, Paul
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/15286 has been resolved.
Build: Satellite 6.4.0 snap9 -bash-4.2$ psql -d foreman -c "select id,name,type from auth_sources;" id | name | type ----+-------------+-------------------- 1 | Internal | AuthSourceInternal 2 | Hidden | AuthSourceHidden 3 | win2012R2AD | AuthSourceLdap 5 | External | AuthSourceExternal (4 rows) [root@sgi-uv20-01 ~]# hammer auth-source list ---|-------------|-------------------- ID | NAME | TYPE OF AUTH SOURCE ---|-------------|-------------------- 1 | Internal | AuthSourceInternal 3 | win2012R2AD | AuthSourceLdap 5 | External | AuthSourceExternal ---|-------------|-------------------- hammer> user-group create --name foobar User group [foobar] created. hammer> user-group external create --auth-source-id 5 --name foobargroup --user-group foobar External user group created. hammer> user-group external list --user-group foobar ---|-------------|------------ ID | NAME | AUTH SOURCE ---|-------------|------------ 1 | foobargroup | External ---|-------------|------------
*** Bug 1448179 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2018:2927