Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1490041 - [RFE] Provide IdM client software in RHVH
[RFE] Provide IdM client software in RHVH
Status: CLOSED ERRATA
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-host (Show other bugs)
4.2.0
Unspecified Unspecified
medium Severity medium
: ovirt-4.2.0
: 4.2.0
Assigned To: Sandro Bonazzola
Pavol Brilla
: FutureFeature, ZStream
Depends On:
Blocks: 1516194
  Show dependency treegraph
 
Reported: 2017-09-09 11:25 EDT by Paul Armstrong
Modified: 2018-05-15 14:00 EDT (History)
25 users (show)

See Also:
Fixed In Version: ovirt-host-4.2.0-1.el7ev
Doc Type: Enhancement
Doc Text:
The ipa-client package is now installed on hosts by default and is included in Red Hat Virtualization Host. IPA Client allows integration of Cockpit certificate signing and SSO with Red Hat IdM, and adds the host to the IdM realm.
Story Points: ---
Clone Of:
: 1516194 (view as bug list)
Environment:
Last Closed: 2018-05-15 13:59:45 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: Node
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
rbarry: needinfo-
lsvaty: testing_plan_complete+


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
oVirt gerrit 84479 None None None 2017-11-22 04:30 EST
Red Hat Product Errata RHEA-2018:1533 None None None 2018-05-15 14:00 EDT

  None (edit)
Description Paul Armstrong 2017-09-09 11:25:21 EDT
Description of problem: To integrate cockpit certificate signing and SSO with Red Hat IdM RHVH needs to include ipa-client rpms. Also, looking to apply ansible playbook to generate certificate and need ansible user to kinit on host with keytab. These require that the rhvh host be part of the IdM realm. This is not simple without the IdM client. I am not aware of a restriction in the implementation of rhv that prevents this.  


Version-Release number of selected component (if applicable): 4.2.0


How reproducible: Always.


Steps to Reproduce:
1. Install hypervisor
2. Try to install ipa-client
3. Fail

Actual results:
Package not available

Expected results:
Package installs
Run and configure ipa-client using ipa-client-install


Additional info:
Comment 1 Yaniv Kaul 2017-09-09 13:48:10 EDT
Is this a bug or feature request? Is it upstream or comes from a customer? What's the severity?
Comment 4 cshao 2017-09-21 02:45:38 EDT
Test steps:
rhvh-4.1-0.20170914.0+1

Test steps:
1. Install hypervisor
2. Register to RHSM
3. Try to install ipa-client

Test result:
ipa-client package not available.
Comment 5 Ryan Barry 2017-09-26 05:41:08 EDT
We'll target this as a multi product errata shipped in the RHVH channel rather than including it as part of the image.
Comment 6 Ryan Barry 2017-09-26 19:39:36 EDT
Yuval - can you please take care of a multi-product errata for this?
Comment 7 Sandro Bonazzola 2017-10-12 08:09:45 EDT
Waiting for PM approval since this will pull in more than 60 packages.
I'm conditionally nacking this bug on design, since I don't think it's a good design to tag so many packages into rhv-h channel.
Comment 13 Sandro Bonazzola 2017-11-22 03:52:37 EST
ipa-client is shipped within rhel-7-server-rpms channel so we can just include it.
Comment 16 Pavol Brilla 2018-01-08 11:09:15 EST
RHEL # yum deplist ovirt-host  | grep ipa-client
  dependency: ipa-client
   provider: ipa-client.x86_64 4.5.0-22.el7_4
# yum list ipa-client
Loaded plugins: product-id, search-disabled-repos, versionlock
Installed Packages
ipa-client.x86_64                                                   4.5.0-22.el7_4                                                   @rhel-7-server-rpms

RHVH# #imgbase w
You are on rhvh-4.2.0.6-0.20171218.0+1
# yum list ipa-client
Installed Packages
ipa-client.x86_64          4.5.0-22.el7_4          installed
Comment 21 errata-xmlrpc 2018-05-15 13:59:45 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:1533

Note You need to log in before you can comment on or make changes to this bug.