Bug 1468285 - [CFME4.5]Configuring Multi-Region, Single LDAP Authentication, Synchronized RBAC/Resource.
Summary: [CFME4.5]Configuring Multi-Region, Single LDAP Authentication, Synchronized R...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat CloudForms Management Engine
Classification: Red Hat
Component: Appliance
Version: 5.8.0
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: GA
: 5.8.1
Assignee: Joe Vlcek
QA Contact: Matt Pusateri
URL:
Whiteboard: auth:miqldap
Depends On: 1467529
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-07-06 14:56 UTC by Satoe Imaishi
Modified: 2022-07-09 08:42 UTC (History)
14 users (show)

Fixed In Version: 5.8.1.2
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1467529
Environment:
Last Closed: 2017-08-02 17:33:18 UTC
Category: ---
Cloudforms Team: CFME Core
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2017:1758 0 normal SHIPPED_LIVE Important: Red Hat CloudForms security, bug fix, and enhancement update 2017-08-02 21:23:43 UTC

Comment 5 Neha Chugh 2017-07-13 12:05:11 UTC
Hello Joe,

After applying the above patch, The catalog items are not visible to user in Global UI but it is visible in remote appliances.

Can you please quickly check the patch again and see if that is the impacting the visibility. If so, kindly rectify it and provide the latest patch.

Regards,
Neha Chugh

Comment 6 Joe Vlcek 2017-07-13 15:07:41 UTC
(In reply to Neha Chugh from comment #5)
> Hello Joe,
> 
> After applying the above patch, The catalog items are not visible to user in
> Global UI but it is visible in remote appliances.
> 
> Can you please quickly check the patch again and see if that is the
> impacting the visibility. If so, kindly rectify it and provide the latest
> patch.
> 
> Regards,
> Neha Chugh

Hello Neha,

Your comment seems like it might be for a different issue. This BZ was for a failure to login to the global region, where the hot fix was verified. Are you sure you are commenting on the correct BZ?

Comment 7 Matt Pusateri 2017-07-13 19:23:04 UTC
Verified in 5.8.1.2 (5.8.1.2.20170712143358_461cde4)

Comment 8 tachoi 2017-07-13 23:42:43 UTC
Hi Joe

Neha's update is valid for this case.

Customer has applied hotfix on global-ui appliance(LDAP client) then now they are able to login with LDAP authentication.

However, end user is not able to see catalog item from global ui which is available to see from regional ui. And they are visible if they are using local database login.

User can login to global-ui and manage their VMs but can't order new service from the catalog as they can't see any catalog items which are presented to them

Before they applied the patch user was able to see presented the Catalog Items, but now it is not.

If they change the authentication from LDAP to Database on global-UI cloudforms Appliances and created a test user and presented a catalog item and logged in with that user and they are able to see the presented Catalog Item.

Regards,
Taeho

Comment 19 Joe Vlcek 2017-07-14 13:41:54 UTC
Moving back to on-dev as the fix does enable the login with LDAP authentication

However, the end user is no longer able to see catalog item from global ui/

Comment 20 Joe Vlcek 2017-07-14 13:57:08 UTC
(In reply to Joe Vlcek from comment #19)
> Moving back to on-dev as the fix does enable the login with LDAP
> authentication
> 
> However, the end user is no longer able to see catalog item from global ui/

It turns out there is already a different BZ that describes the inability to
see catalog items in the global region:
https://bugzilla.redhat.com/show_bug.cgi?id=1464610

Let's track the new "user is not able to see catalog item from global ui"
in BZ:  https://bugzilla.redhat.com/show_bug.cgi?id=1464610

And move this BZ for the `inability to login to global region` back to verified.

JoeV

Comment 26 errata-xmlrpc 2017-08-02 17:33:18 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2017:1758


Note You need to log in before you can comment on or make changes to this bug.