1489402 – Provide an example for kerberos authentication between aaa-ldap and LDAP server

Bug 1489402 - Provide an example for kerberos authentication between aaa-ldap and LDAP server

Summary: Provide an example for kerberos authentication between aaa-ldap and LDAP server

Keywords:
Status:	CLOSED CURRENTRELEASE
Alias:	None
Product:	ovirt-engine-extension-aaa-ldap
Classification:	oVirt
Component:	Documentation
Sub Component:
Version:	master
Hardware:	Unspecified
OS:	Unspecified
Priority:	unspecified
Severity:	medium
Target Milestone:	ovirt-4.1.8
Target Release:	1.3.5
Assignee:	Ondra Machacek
QA Contact:	Gonza
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:	1464498
TreeView+	depends on / blocked

Reported:	2017-09-07 11:38 UTC by Martin Perina
Modified:	2017-12-11 16:32 UTC (History)
CC List:	1 user (show)
Fixed In Version:	ovirt-engine-extension-aaa-ldap-1.3.5
Clone Of:
Environment:
Last Closed:	2017-12-11 16:32:05 UTC
oVirt Team:	Infra
Embargoed:
Flags:	rule-engine: ovirt-4.1+

Attachments	(Terms of Use)

Links
System	ID	Private	Priority	Status	Summary	Last Updated
oVirt gerrit	83182	0	None	None	None	2017-10-25 15:05:59 UTC

Description Martin Perina 2017-09-07 11:38:49 UTC

Description of problem:

Please add complete example how to setup aaa-ldap to use kerberos to authenticate against LDAP server instead of standard username/password authentication to the examples included in the ovirt-engine-extension-aaa-ldap package


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Martin Perina 2017-10-27 08:54:00 UTC

Fix is included in ovirt-engine-extension-aaa-ldap-1.3.5

Comment 2 Gonza 2017-11-20 16:33:44 UTC

Verified with:
ovirt-engine-extension-aaa-ldap-1.3.6-0.0.master.git91cfb7f.el7.centos.noarch

# rpm -ql ovirt-engine-extension-aaa-ldap | egrep "ipa-gssapi|ipa-ticketcache"
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/aaa
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/aaa/krb5.conf
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/aaa/profile1.properties
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/extensions.d
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/extensions.d/profile1-authn.properties
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-gssapi/extensions.d/profile1-authz.properties
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/aaa
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/aaa/99-jaas.conf
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/aaa/krb5.conf
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/aaa/profile1.properties
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/extensions.d
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/extensions.d/profile1-authn.properties
/usr/share/ovirt-engine-extension-aaa-ldap/examples/ipa-ticketcache-gssapi/extensions.d/profile1-authz.properties

Note You need to log in before you can comment on or make changes to this bug.