Bug 1390473 - [DOCS] Fix issues in Advanced LDAP Configuration section
Summary: [DOCS] Fix issues in Advanced LDAP Configuration section
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Documentation
Version: 3.2.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: ---
Assignee: brice
QA Contact: Chuan Yu
Vikram Goyal
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-01 07:27 UTC by Vikram Goyal
Modified: 2017-03-08 18:43 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-22 00:59:18 UTC
Target Upstream Version:


Attachments (Terms of Use)

Comment 1 brice 2016-11-03 04:55:26 UTC
PR made:

https://github.com/openshift/openshift-docs/pull/3154

However, as this is with using proxies, I can't test to see if this is accurate, so I'll put this onto QA.

Johnny, because this is from a comment from a customer on the portal (see link above), I'd like to check that that PR change is accurate. I don't have access to a test machine with a proxy.

Please let me know if there needs to be a change. Thanks!

Comment 3 Chuan Yu 2016-11-04 07:39:24 UTC
As the comments https://access.redhat.com/documentation/en/openshift-enterprise/3.2/paged/installation-and-configuration/chapter-11-advanced-ldap-configuration#comment-1100061, still need two modify:

11.2.3. Phase 1: Certificate Generation

Step 2.is missing the code examples:

oadm create-api-client-config \ --certificate-authority='/etc/origin/proxy/proxyca.crt' \ --client-dir='/etc/origin/proxy' \ --signer-cert='/etc/origin/proxy/proxyca.crt' \ --signer-key='/etc/origin/proxy/proxyca.key' \ --signer-serial='/etc/origin/proxy/proxyca.serial.txt' \ --user='system:proxy'

cat /etc/origin/proxy/system:proxy.crt /etc/origin/proxy/system:proxy.key > /etc/origin/proxy/authproxy.pem


11.2.4.2. Step 2: SSSD Configuration

Missing any reference to editing /etc/httpd/conf.modules.d/55-authnz_pam.conf and removing the comment from:

LoadModule authnz_pam_module modules/mod_authnz_pam.so

Comment 4 Chuan Yu 2016-11-04 08:51:23 UTC
The first comments fixs are availabled on the guide https://docs.openshift.com/enterprise/3.2/install_config/advanced_ldap_configuration/sssd_for_ldap_failover.html

Verified on:
openshift v3.2.1.15
kubernetes v1.2.0-36-g4a3f9c5
etcd 2.2.5

Comment 5 brice 2016-11-07 00:12:25 UTC
Chuan Yu

Sorry, I should have mentioned that the fixes from the first comment were already in the docs from a previous PR.

Thanks, and I'll merge the PR.

Comment 6 openshift-github-bot 2016-11-07 00:15:44 UTC
Commit pushed to master at https://github.com/openshift/openshift-docs

https://github.com/openshift/openshift-docs/commit/790e7161728c513d457872e1328459408dd816cd
Merge pull request #3154 from bfallonf/filechange_1390473

Bug 1390473 fixed file location in example


Note You need to log in before you can comment on or make changes to this bug.