search

oVirt / ovirt-engine

The oVirt Engine virtualization manager
Other
519 stars 271 forks source link

LDAP Configuration on oVirt 4.5.6 #959

Closed kandadeepak closed 3 months ago

kandadeepak commented 3 months ago

Hi,

We are testing the following version of the oVirt and fails with LDAP integration extension to initialize because of which oVirt Web GUI fails to load.

oVirt Manager OS : Redhat 9.4(Plow)

LDAP: rpm -qa | grep ovirt centos-release-ovirt45-9.2-1.el9s.noarch ovirt-openvswitch-ovn-2.17-1.el9.noarch python3-ovirt-setup-lib-1.3.3-1.el9.noarch ovirt-vmconsole-1.0.9-3.el9.noarch ovirt-engine-wildfly-24.0.1-1.el9.x86_64 ovirt-engine-wildfly-overlay-24.0.1-1.el9.noarch ovirt-vmconsole-proxy-1.0.9-3.el9.noarch ovirt-openvswitch-ovn-common-2.17-1.el9.noarch ovirt-openvswitch-ovn-central-2.17-1.el9.noarch python3-ovirt-engine-lib-4.5.6-1.el9.noarch python3.11-ovirt-imageio-common-2.5.0-1.el9.x86_64 python3.11-ovirt-engine-sdk4-4.6.2-1.el9.x86_64 python3.11-ovirt-imageio-client-2.5.0-1.el9.x86_64 ovirt-engine-extensions-api-1.0.1-1.el9.noarch ovirt-engine-extension-aaa-misc-1.1.1-1.el9.noarch ovirt-engine-extension-aaa-jdbc-1.3.0-1.el9.noarch ovirt-dependencies-4.5.3-1.el9.noarch ovirt-web-ui-1.9.3-1.el9.noarch ovirt-imageio-common-2.5.0-1.el9.x86_64 ovirt-imageio-daemon-2.5.0-1.el9.x86_64 ovirt-cockpit-sso-0.1.4-2.el9.noarch ovirt-ansible-collection-3.2.0-1.el9.noarch ovirt-engine-metrics-1.6.2-1.el9.noarch ovirt-engine-setup-base-4.5.6-1.el9.noarch ovirt-engine-setup-plugin-ovirt-engine-common-4.5.6-1.el9.noarch ovirt-engine-dwh-4.5.8-1.el9.noarch ovirt-engine-dwh-grafana-integration-setup-4.5.8-1.el9.noarch ovirt-engine-dwh-setup-4.5.8-1.el9.noarch ovirt-engine-setup-plugin-websocket-proxy-4.5.6-1.el9.noarch ovirt-engine-tools-backup-4.5.6-1.el9.noarch ovirt-python-openvswitch-2.17-1.el9.noarch ovirt-openvswitch-2.17-1.el9.noarch ovirt-provider-ovn-1.2.36-1.el9.noarch ovirt-engine-websocket-proxy-4.5.6-1.el9.noarch ovirt-engine-backend-4.5.6-1.el9.noarch ovirt-engine-dbscripts-4.5.6-1.el9.noarch ovirt-engine-restapi-4.5.6-1.el9.noarch ovirt-engine-keycloak-15.0.2-6.el9.noarch ovirt-engine-keycloak-setup-15.0.2-6.el9.noarch ovirt-engine-setup-4.5.6-1.el9.noarch ovirt-engine-setup-plugin-cinderlib-4.5.6-1.el9.noarch ovirt-engine-setup-plugin-imageio-4.5.6-1.el9.noarch ovirt-engine-vmconsole-proxy-helper-4.5.6-1.el9.noarch ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.5.6-1.el9.noarch ovirt-engine-setup-plugin-ovirt-engine-4.5.6-1.el9.noarch ovirt-engine-tools-4.5.6-1.el9.noarch ovirt-engine-ui-extensions-1.3.7-1.el9.noarch ovirt-engine-webadmin-portal-4.5.6-1.el9.noarch ovirt-engine-4.5.6-1.el9.noarch ovirt-engine-extension-aaa-ldap-1.4.6-1.el9.noarch ovirt-engine-extension-aaa-ldap-setup-1.4.6-1.el9.noarch

Logs message from LDAP

2024-08-13 02:19:16,602+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 57) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:19:16,745+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:19:17,755+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 52) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:20:27,459+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:20:27,460+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn' 2024-08-13 02:20:59,218+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:20:59,229+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:20:59,235+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:20:59,241+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:20:59,274+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:20:59,276+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:20:59,411+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:21:00,380+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:21:35,370+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:21:35,371+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn' 2024-08-13 02:21:35,715+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:21:35,716+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn' 2024-08-13 02:22:06,125+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null' 2024-08-13 02:22:06,187+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com' 2024-08-13 02:22:38,745+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:22:38,749+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:22:38,755+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:22:38,769+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:22:38,781+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'. 2024-08-13 02:22:38,788+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'. 2024-08-13 02:22:38,944+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:22:40,022+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz' 2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn' 2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn' 2024-08-13 02:23:24,920+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null' 2024-08-13 02:23:24,939+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com' 2024-08-13 02:23:50,579+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null' 2024-08-13 02:23:50,582+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com' 2024-08-13 02:24:00,580+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null' 2024-08-13 02:24:00,634+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'authz' 2024-08-13 02:24:36,130+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'authz' information: vendor='null' version='null' 2024-08-13 02:24:36,131+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'gc' 2024-08-13 02:25:11,255+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null' 2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true' 2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'false' 2024-08-13 02:25:11,801+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'gc' information: vendor='null' version='null' 2024-08-13 02:25:11,855+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'authz@xspartan.com' 2024-08-13 02:26:02,669+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null' 2024-08-13 02:26:02,999+08 INFO [org.ovirt.engine.extension.aaa.ldap.AuthzExtension] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Available Namespaces: [DC=xspartan,DC=com] 2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true' 2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'true'

AAA/profile configuration include =

vars.domain = xspartan.com vars.user = CN=tesla,OU=Service Accounts,DC=xspartan,DC=com vars.password = random

pool.default.serverset.type = failover pool.default.serverset.failover.01.server = mars.xspartan.com pool.default.serverset.failover.02.server = sun.xspartan.com pool.default.serverset.failover.01.port = 389 pool.default.serverset.failover.02.port = 389 pool.default.dc-resolve.default.serverset.type = failover pool.default.dc-resolve.serverset.failover.01.server = mars.xspartan.com pool.default.dc-resolve.serverset.failover.02.server = sn.xspartan.com pool.gc.serverset.failover.01.port = 3268 pool.gc.serverset.failover.02.port = 3268

pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} pool.default.serverset.type = srvrecord pool.default.serverset.srvrecord.domain = ${global:vars.domain}

kandadeepak commented 3 months ago

Mix up of pool.default.serverset.type = srvrecord and pool.default.serverset.type = failover cause the failure.