Bug 1336236 - hammer can't create external groups based on IPA/IdM integration
hammer can't create external groups based on IPA/IdM integration
Status: POST
Product: Red Hat Satellite 6
Classification: Red Hat
Component: Users & Roles (Show other bugs)
Unspecified Unspecified
medium Severity high (vote)
: Unspecified
: --
Assigned To: Dominik Hlavac Duran
Katello QA List
: Triaged
Depends On:
  Show dependency treegraph
Reported: 2016-05-15 19:37 EDT by Paul Armstrong
Modified: 2018-03-20 08:07 EDT (History)
3 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

External Trackers
Tracker ID Priority Status Summary Last Updated
Foreman Issue Tracker 15286 None None None 2016-06-03 11:48 EDT

  None (edit)
Description Paul Armstrong 2016-05-15 19:37:18 EDT
Description of problem:
hammer user-group external create requires auth_source_id which is not available when configuring IPA/IdM integration with 
katello-installer --foreman-ipa-authentication=true

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. ipa-client-install
2. katello-installer --foreman-ipa-authentication=true
3. hammer user-group create --name=dummy --role-ids=1,2,3,4
User group [dummy] created
4. hammer user-group external create --name=dummy --user-group=dummy

Actual results:

Could not create external user group:
  Missing arguments for 'auth_source_id'

--- No value of auth_source_id works

Expected results:

External group [dummy] created

Additional info:

[root@sat6 /]# hammer auth-source ldap list
Comment 1 Bryan Kearney 2016-06-03 11:48:51 EDT
Created redmine issue http://projects.theforeman.org/issues/15286 from this bug
Comment 2 Bryan Kearney 2016-06-03 12:17:47 EDT
Upstream bug component is Provisioning
Comment 4 Bryan Kearney 2016-06-06 04:15:31 EDT
Upstream bug component is Users & Roles
Comment 5 pm-sat@redhat.com 2017-04-25 06:07:01 EDT
Upstream bug assigned to jmagen@redhat.com
Comment 6 pm-sat@redhat.com 2017-07-13 10:06:58 EDT
Upstream bug assigned to dhlavacd@redhat.com
Comment 7 pm-sat@redhat.com 2017-07-13 10:07:02 EDT
Upstream bug assigned to dhlavacd@redhat.com
Comment 8 Paul Armstrong 2017-11-24 11:08:16 EST
Did this magically appear somewhere along the road??

[root@sat6 parmstro]# hammer user-group external --help
    hammer user-group external [OPTIONS] SUBCOMMAND [ARG] ...

 SUBCOMMAND                    subcommand
 [ARG] ...                     subcommand arguments

 create                        Create an external user group linked to a user group
 delete                        Delete an external user group
 info                          Show an external user group for user group
 list                          List all external user groups for user group
 refresh                       Refresh external user group
 update                        Update external user group

 -h, --help                    print help
Comment 9 Francisco Garcia 2017-11-24 21:43:03 EST
Hi Paul,

I believe this BZ is its way to be fulfilled, however it doesn't fully work in 6.2.12 as of today. When you issue something like :

% hammer user-group external create --name IDM-Group --user-group Satellite-Group --auth-source-id 3

... you still have no means to check what your auth-source-id should be. Currently API does not expose non-LDAP auth sources (and thus hammer).
Comment 10 Paul Armstrong 2017-11-27 09:02:16 EST
Hi All,

I think that you were typing "on its way to being fulfilled" and had a typing skip. Thanks! Is there any way to prioritize this? We need this for automation when building environments that integrate IdM. I really would hate to have to run a sql query to get this - it is just wrong. (External id = 4 in my DB today)


Comment 11 pm-sat@redhat.com 2018-03-20 08:07:42 EDT
Moving this bug to POST for triage into Satellite 6 since the upstream issue http://projects.theforeman.org/issues/15286 has been resolved.

Note You need to log in before you can comment on or make changes to this bug.