oVirt/ovirt-engine

LDAP Configuration on oVirt 4.5.6

Closed this issue · 1 comments

kandadeepak commented

Hi,

We are testing the following version of the oVirt and fails with LDAP integration extension to initialize because of which oVirt Web GUI fails to load.

oVirt Manager OS : Redhat 9.4(Plow)

LDAP: rpm -qa | grep ovirt
centos-release-ovirt45-9.2-1.el9s.noarch
ovirt-openvswitch-ovn-2.17-1.el9.noarch
python3-ovirt-setup-lib-1.3.3-1.el9.noarch
ovirt-vmconsole-1.0.9-3.el9.noarch
ovirt-engine-wildfly-24.0.1-1.el9.x86_64
ovirt-engine-wildfly-overlay-24.0.1-1.el9.noarch
ovirt-vmconsole-proxy-1.0.9-3.el9.noarch
ovirt-openvswitch-ovn-common-2.17-1.el9.noarch
ovirt-openvswitch-ovn-central-2.17-1.el9.noarch
python3-ovirt-engine-lib-4.5.6-1.el9.noarch
python3.11-ovirt-imageio-common-2.5.0-1.el9.x86_64
python3.11-ovirt-engine-sdk4-4.6.2-1.el9.x86_64
python3.11-ovirt-imageio-client-2.5.0-1.el9.x86_64
ovirt-engine-extensions-api-1.0.1-1.el9.noarch
ovirt-engine-extension-aaa-misc-1.1.1-1.el9.noarch
ovirt-engine-extension-aaa-jdbc-1.3.0-1.el9.noarch
ovirt-dependencies-4.5.3-1.el9.noarch
ovirt-web-ui-1.9.3-1.el9.noarch
ovirt-imageio-common-2.5.0-1.el9.x86_64
ovirt-imageio-daemon-2.5.0-1.el9.x86_64
ovirt-cockpit-sso-0.1.4-2.el9.noarch
ovirt-ansible-collection-3.2.0-1.el9.noarch
ovirt-engine-metrics-1.6.2-1.el9.noarch
ovirt-engine-setup-base-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-4.5.6-1.el9.noarch
ovirt-engine-dwh-4.5.8-1.el9.noarch
ovirt-engine-dwh-grafana-integration-setup-4.5.8-1.el9.noarch
ovirt-engine-dwh-setup-4.5.8-1.el9.noarch
ovirt-engine-setup-plugin-websocket-proxy-4.5.6-1.el9.noarch
ovirt-engine-tools-backup-4.5.6-1.el9.noarch
ovirt-python-openvswitch-2.17-1.el9.noarch
ovirt-openvswitch-2.17-1.el9.noarch
ovirt-provider-ovn-1.2.36-1.el9.noarch
ovirt-engine-websocket-proxy-4.5.6-1.el9.noarch
ovirt-engine-backend-4.5.6-1.el9.noarch
ovirt-engine-dbscripts-4.5.6-1.el9.noarch
ovirt-engine-restapi-4.5.6-1.el9.noarch
ovirt-engine-keycloak-15.0.2-6.el9.noarch
ovirt-engine-keycloak-setup-15.0.2-6.el9.noarch
ovirt-engine-setup-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-cinderlib-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-imageio-4.5.6-1.el9.noarch
ovirt-engine-vmconsole-proxy-helper-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-ovirt-engine-4.5.6-1.el9.noarch
ovirt-engine-tools-4.5.6-1.el9.noarch
ovirt-engine-ui-extensions-1.3.7-1.el9.noarch
ovirt-engine-webadmin-portal-4.5.6-1.el9.noarch
ovirt-engine-4.5.6-1.el9.noarch
ovirt-engine-extension-aaa-ldap-1.4.6-1.el9.noarch
ovirt-engine-extension-aaa-ldap-setup-1.4.6-1.el9.noarch

Logs message from LDAP

2024-08-13 02:19:16,602+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 57) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:19:16,745+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:19:17,755+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 52) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:20:27,459+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:20:27,460+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:20:59,218+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,229+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,235+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,241+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,274+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,276+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,411+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:21:00,380+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:21:35,370+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:21:35,371+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:21:35,715+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:21:35,716+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:22:06,125+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:22:06,187+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com'
2024-08-13 02:22:38,745+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,749+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,755+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,769+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,781+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,788+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,944+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:22:40,022+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:23:24,920+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:23:24,939+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com'
2024-08-13 02:23:50,579+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:23:50,582+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz@xspartan.com'
2024-08-13 02:24:00,580+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null'
2024-08-13 02:24:00,634+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'authz'
2024-08-13 02:24:36,130+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:24:36,131+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'gc'
2024-08-13 02:25:11,255+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null'
2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true'
2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'false'
2024-08-13 02:25:11,801+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'gc' information: vendor='null' version='null'
2024-08-13 02:25:11,855+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'authz@xspartan.com'
2024-08-13 02:26:02,669+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'authz@xspartan.com' information: vendor='null' version='null'
2024-08-13 02:26:02,999+08 INFO [org.ovirt.engine.extension.aaa.ldap.AuthzExtension] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Available Namespaces: [DC=xspartan,DC=com]
2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true'
2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'true'

AAA/profile configuration
include = <ad.properties>

vars.domain = xspartan.com
vars.user = CN=tesla,OU=Service Accounts,DC=xspartan,DC=com
vars.password = random

pool.default.serverset.type = failover
pool.default.serverset.failover.01.server = mars.xspartan.com
pool.default.serverset.failover.02.server = sun.xspartan.com
pool.default.serverset.failover.01.port = 389
pool.default.serverset.failover.02.port = 389
pool.default.dc-resolve.default.serverset.type = failover
pool.default.dc-resolve.serverset.failover.01.server = mars.xspartan.com
pool.default.dc-resolve.serverset.failover.02.server = sn.xspartan.com
pool.gc.serverset.failover.01.port = 3268
pool.gc.serverset.failover.02.port = 3268

pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
pool.default.serverset.type = srvrecord
pool.default.serverset.srvrecord.domain = ${global:vars.domain}

kandadeepak commented

Mix up of pool.default.serverset.type = srvrecord and pool.default.serverset.type = failover cause the failure.