Bug 1490041 - [RFE] Provide IdM client software in RHVH
Summary: [RFE] Provide IdM client software in RHVH
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-host
Version: 4.2.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ovirt-4.2.0
: 4.2.0
Assignee: Sandro Bonazzola
QA Contact: Pavol Brilla
URL:
Whiteboard:
Depends On:
Blocks: 1516194
TreeView+ depends on / blocked
 
Reported: 2017-09-09 15:25 UTC by Paul Armstrong
Modified: 2021-03-11 17:23 UTC (History)
24 users (show)

Fixed In Version: ovirt-host-4.2.0-1.el7ev
Doc Type: Enhancement
Doc Text:
The ipa-client package is now installed on hosts by default and is included in Red Hat Virtualization Host. IPA Client allows integration of Cockpit certificate signing and SSO with Red Hat IdM, and adds the host to the IdM realm.
Clone Of:
: 1516194 (view as bug list)
Environment:
Last Closed: 2018-05-15 17:59:45 UTC
oVirt Team: Node
Target Upstream Version:
Embargoed:
rbarry: needinfo-
lsvaty: testing_plan_complete+

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2018:1533 0 None None None 2018-05-15 18:00:18 UTC
oVirt gerrit 84479 0 'None' MERGED add ipa-client to hosts 2020-10-02 11:34:31 UTC

Description Paul Armstrong 2017-09-09 15:25:21 UTC 
Description of problem: To integrate cockpit certificate signing and SSO with Red Hat IdM RHVH needs to include ipa-client rpms. Also, looking to apply ansible playbook to generate certificate and need ansible user to kinit on host with keytab. These require that the rhvh host be part of the IdM realm. This is not simple without the IdM client. I am not aware of a restriction in the implementation of rhv that prevents this.  


Version-Release number of selected component (if applicable): 4.2.0


How reproducible: Always.


Steps to Reproduce:
1. Install hypervisor
2. Try to install ipa-client
3. Fail

Actual results:
Package not available

Expected results:
Package installs
Run and configure ipa-client using ipa-client-install


Additional info:
Comment 1 Yaniv Kaul 2017-09-09 17:48:10 UTC 
Is this a bug or feature request? Is it upstream or comes from a customer? What's the severity?
Comment 4 cshao 2017-09-21 06:45:38 UTC 
Test steps:
rhvh-4.1-0.20170914.0+1

Test steps:
1. Install hypervisor
2. Register to RHSM
3. Try to install ipa-client

Test result:
ipa-client package not available.
Comment 5 Ryan Barry 2017-09-26 09:41:08 UTC 
We'll target this as a multi product errata shipped in the RHVH channel rather than including it as part of the image.
Comment 6 Ryan Barry 2017-09-26 23:39:36 UTC 
Yuval - can you please take care of a multi-product errata for this?
Comment 7 Sandro Bonazzola 2017-10-12 12:09:45 UTC 
Waiting for PM approval since this will pull in more than 60 packages.
I'm conditionally nacking this bug on design, since I don't think it's a good design to tag so many packages into rhv-h channel.
Comment 13 Sandro Bonazzola 2017-11-22 08:52:37 UTC 
ipa-client is shipped within rhel-7-server-rpms channel so we can just include it.
Comment 16 Pavol Brilla 2018-01-08 16:09:15 UTC 
RHEL # yum deplist ovirt-host  | grep ipa-client
  dependency: ipa-client
   provider: ipa-client.x86_64 4.5.0-22.el7_4
# yum list ipa-client
Loaded plugins: product-id, search-disabled-repos, versionlock
Installed Packages
ipa-client.x86_64                                                   4.5.0-22.el7_4                                                   @rhel-7-server-rpms

RHVH# #imgbase w
You are on rhvh-4.2.0.6-0.20171218.0+1
# yum list ipa-client
Installed Packages
ipa-client.x86_64          4.5.0-22.el7_4          installed
Comment 21 errata-xmlrpc 2018-05-15 17:59:45 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:1533
Comment 22 Franta Kust 2019-05-16 13:03:08 UTC 
BZ<2>Jira Resync
Note You need to log in before you can comment on or make changes to this bug.