Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 994205

Summary: Cannot join AD using rhevm-manage-domains with error "No user information was found for user"
Product: Red Hat Enterprise Virtualization Manager Reporter: Marina Kalinin <mkalinin>
Component: ovirt-engine-configAssignee: Yair Zaslavsky <yzaslavs>
Status: CLOSED NOTABUG QA Contact: Pavel Stehlik <pstehlik>
Severity: high Docs Contact:
Priority: high    
Version: 3.2.0CC: acathrow, alonbl, bazulay, iheim, lpeer, mkalinin, oourfali, Rhev-m-bugs, yeylon
Target Milestone: ---Keywords: Regression, Triaged
Target Release: 3.2.4   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: infra
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-08-28 08:01:33 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
kerberos traffic pcap - port 88
none
ldap traffic pcap - port 389
none
patch
none
utils.jar none

Description Marina Kalinin 2013-08-06 17:55:40 UTC 
Weird - I cannot find *manage-domains component under RHEV-M. So opening it under engine-backend. Feel free to move to more appropriate.

Cannot join AD using rhevm-manage-domains with error "No user information was found for user":

# rhevm-manage-domains -action=add -domain=example.domain -user=rhevadmin -interactive -provider=ActiveDirectory
From engine-manage-domains.log:
~~~
2013-07-26 13:28:09,023 INFO  [org.ovirt.engine.core.utils.kerberos.ManageDomains] Creating kerberos configuration for domain(s): example.domain
2013-07-26 13:28:09,117 INFO  [org.ovirt.engine.core.utils.kerberos.ManageDomains] Successfully created kerberos configuration for domain(s): example.domain
2013-07-26 13:28:09,118 INFO  [org.ovirt.engine.core.utils.kerberos.ManageDomains] Testing kerberos configuration for domain: example.domain
2013-07-26 13:28:11,282 ERROR [org.ovirt.engine.core.utils.kerberos.ManageDomains] Failure while testing domain example.domain. Details: No user information was found for user
~~~

RHEV-M version: rhevm-3.2.0-11.33.el6ev.noarch
Comment 2 Marina Kalinin 2013-08-06 18:18:26 UTC 
Created attachment 783459 [details]
kerberos traffic pcap - port 88
Comment 3 Marina Kalinin 2013-08-06 18:19:06 UTC 
Created attachment 783460 [details]
ldap traffic pcap - port 389
Comment 16 Yair Zaslavsky 2013-08-13 12:51:20 UTC 
Created attachment 786138 [details]
patch
Comment 17 Yair Zaslavsky 2013-08-13 12:53:39 UTC 
Created attachment 786139 [details]
utils.jar

copy this to /usr/share/java/ovirt-engine/utils.jar
Comment 21 Alon Bar-Lev 2013-08-19 11:39:44 UTC 
What is the windows version of the DC? What is the forest function level? Special security configuration?

[1] http://blogs.technet.com/b/instan/archive/2009/10/12/changes-in-default-encryption-type-for-kerberos-pre-authentication-on-vista-and-windows-7-clients-cause-security-audit-events-675-and-680-on-windows-server-2003-dc-s.aspx
Comment 25 Yair Zaslavsky 2013-08-28 08:01:33 UTC 
Marina, improving logging sounds good- but we need to understand/decide where.
Regarding host <fqnd> - sounds like a good idea, I'll open a bug for it.
We will do that not from the script but from the java code.
I am closing this as CLOSED NOT_A_BUG, but I will state this bug in the new bug.