Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1516194 - [downstream clone - 4.1.8] [RFE] Provide IdM client software in RHVH
[downstream clone - 4.1.8] [RFE] Provide IdM client software in RHVH
Status: CLOSED ERRATA
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-host (Show other bugs)
4.2.0
Unspecified Unspecified
medium Severity medium
: ovirt-4.1.8
: ---
Assigned To: Sandro Bonazzola
Pavol Brilla
: FutureFeature, ZStream
Depends On: 1490041
Blocks:
  Show dependency treegraph
 
Reported: 2017-11-22 04:09 EST by rhev-integ
Modified: 2017-12-12 04:24 EST (History)
24 users (show)

See Also:
Fixed In Version:
Doc Type: Enhancement
Doc Text:
The ipa-client package is now installed on hosts, and is included in the Red Hat Virtualization Host image. This enables Cockpit certificate signing and SSO with Red Hat IdM, and adding the host to an IdM realm.
Story Points: ---
Clone Of: 1490041
Environment:
Last Closed: 2017-12-12 04:24:45 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: Node
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
oVirt gerrit 84484 None None None 2017-11-22 04:29 EST
oVirt gerrit 84498 ovirt-4.1 MERGED node: add ipa-client dependency 2017-11-22 05:20 EST
Red Hat Product Errata RHBA-2017:3431 normal SHIPPED_LIVE redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.8 2017-12-12 09:17:28 EST

  None (edit)
Description rhev-integ 2017-11-22 04:09:25 EST
+++ This bug is a downstream clone. The original bug is: +++
+++   bug 1490041 +++
======================================================================

Description of problem: To integrate cockpit certificate signing and SSO with Red Hat IdM RHVH needs to include ipa-client rpms. Also, looking to apply ansible playbook to generate certificate and need ansible user to kinit on host with keytab. These require that the rhvh host be part of the IdM realm. This is not simple without the IdM client. I am not aware of a restriction in the implementation of rhv that prevents this.  


Version-Release number of selected component (if applicable): 4.2.0


How reproducible: Always.


Steps to Reproduce:
1. Install hypervisor
2. Try to install ipa-client
3. Fail

Actual results:
Package not available

Expected results:
Package installs
Run and configure ipa-client using ipa-client-install


Additional info:

(Originally by Paul Armstrong)
Comment 1 rhev-integ 2017-11-22 04:09:37 EST
Is this a bug or feature request? Is it upstream or comes from a customer? What's the severity?

(Originally by Yaniv Kaul)
Comment 5 rhev-integ 2017-11-22 04:09:57 EST
Test steps:
rhvh-4.1-0.20170914.0+1

Test steps:
1. Install hypervisor
2. Register to RHSM
3. Try to install ipa-client

Test result:
ipa-client package not available.

(Originally by Chen Shao)
Comment 6 rhev-integ 2017-11-22 04:10:04 EST
We'll target this as a multi product errata shipped in the RHVH channel rather than including it as part of the image.

(Originally by Ryan Barry)
Comment 7 rhev-integ 2017-11-22 04:10:13 EST
Yuval - can you please take care of a multi-product errata for this?

(Originally by Ryan Barry)
Comment 8 rhev-integ 2017-11-22 04:10:20 EST
Waiting for PM approval since this will pull in more than 60 packages.
I'm conditionally nacking this bug on design, since I don't think it's a good design to tag so many packages into rhv-h channel.

(Originally by Sandro Bonazzola)
Comment 14 rhev-integ 2017-11-22 04:11:03 EST
ipa-client is shipped within rhel-7-server-rpms channel so we can just include it.

(Originally by Sandro Bonazzola)
Comment 15 Pavol Brilla 2017-11-30 02:35:19 EST
# yum list redhat-release-virtualization-host ipa-client 
Installed Packages
ipa-client.x86_64                                         4.5.0-21.el7_4.2.2                  installed
redhat-release-virtualization-host.x86_64                 4.1-8.1.el7                         installed
Comment 18 errata-xmlrpc 2017-12-12 04:24:45 EST
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:3431

Note You need to log in before you can comment on or make changes to this bug.