Bug 1539551 - [Docs][RFE][Admin] Authenticating ovirt-provider-ovn against Active Directory
Summary: [Docs][RFE][Admin] Authenticating ovirt-provider-ovn against Active Directory
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: Documentation
Version: 4.2.0
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ovirt-4.2.2
: ---
Assignee: Tahlia Richardson
QA Contact: Avital Pinnick
URL:
Whiteboard: docs-accepted
Depends On: 1472747
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-01-29 07:53 UTC by Tahlia Richardson
Modified: 2019-05-07 12:49 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-04-04 05:14:47 UTC
oVirt Team: Docs
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Tahlia Richardson 2018-01-29 07:53:04 UTC
From comment 2 in BZ#1472747:

For Active Directory we need to use the following username format: <admin_username>@<ad_domain>@<auth_profile> when saving the settings in the provider window.

I used the following ovirt-provider-ovn.conf settings:

[AUTH]
auth-plugin=auth.plugins.ovirt:AuthorizationByGroup

[OVIRT]
ovirt-admin-role-id=def00005-0000-0000-0000-def000000005
ovirt-admin-group-attribute-name=AAA_AUTHZ_GROUP_NAME;java.lang.String;0eebe54f-b429-44f3-aa80-4704cbb16835
ovirt-admin-group-attribute-value=ovn_admins

This scenario needs to be documented.


Additional details can be found in the draft doc text of BZ#1472747.

Comment 1 Lucy Bopf 2018-02-15 06:27:17 UTC
Accepting into Beta 3 program and assigning to Tahlia for review.


Note You need to log in before you can comment on or make changes to this bug.