search

Katello / katello-client-bootstrap

Bootstrap Script for migrating systems to Foreman & Katello
GNU General Public License v2.0
52 stars 63 forks source link

Works only with local users #110

Open pgera opened 7 years ago

pgera commented 7 years ago

I think the call_api needs a local foreman user to work. I got a permission denied error with a freeipa user, although the user had admin privileges.

bergsjoh commented 7 years ago

I'm using it with external LDAP users, no problem.

Rocco83 commented 7 years ago

I am using LDAP user as well. I will share my current grants given at satellite level. Anyway would be interesting to share something more about user detail that you are using, to replicate the problem.

itewk commented 7 years ago

I ran into this same issue using IdM. So maybe this is a difference between using the LDAP provider and using the IdM integration?

I followed: https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.1/html/User_Guide/sect-Red_Hat_Satellite-User_Guide-Configuring_External_Authentication-Using_Identity_Management.html

Maybe @bergsjoh and @Rocco83 were using https://access.redhat.com/documentation/en-US/Red_Hat_Satellite/6.1/html/User_Guide/chap-Red_Hat_Satellite-User_Guide-Configuring_External_Authentication.html#sect-Red_Hat_Satellite-User_Guide-Using_LDAP and that is why it is working for them and not me and @pgera

pgera commented 7 years ago

Yes, I used something like katello-installer --foreman-ipa-authentication=true during the setup

evgeni commented 7 years ago

Thanks to @itewk I had access to a machine where this happens, had a lovely date with the @theforeman code have at least three more grey hairs…

The underlying issue is http://projects.theforeman.org/issues/11317 aka https://bugzilla.redhat.com/show_bug.cgi?id=1266407 and I fear there is not much we can do about this at the moment.