Cannot list IPA users from RHEVM v3 console
Hi ,
Suddenly I see that I cannot list/find IPA users within the RHEVM web console .
Although I do may list users via command line either from IPA server or RHEVM
# ipa user-find helpdesk
--------------
1 user matched
--------------
User login: helpdesk
First name: IT
Last name: Helpdesk
Home directory: /home/helpdesk
Login shell: /bin/sh
Account disabled: False
Member of groups: ipausers
----------------------------
Number of entries returned 1
In the /var/log/rhevm/rhevm.log on RHEVM I see this :
2012-02-01 17:56:55,589 ERROR [org.ovirt.engine.core.bll.adbroker.GSSAPIDirContextAuthenticationStrategy] (pool-11-thread-1) Error from Kerberos: rh6-ipa.example.com.
2012-02-01 17:56:55,589 ERROR [org.ovirt.engine.core.bll.adbroker.LdapAuthenticateUserCommand] (http-0.0.0.0-8443-7) Failed authenticating user: helpdesk to domain example.com. Ldap Query Type is getUserByName
2012-02-01 17:56:55,590 ERROR [org.ovirt.engine.core.bll.LoginBaseCommand] (http-0.0.0.0-8443-7) USER_FAILED_TO_AUTHENTICATE : helpdesk
time synced on all nodes correctly .
/Vlad .
Responses
Could it be that you have changes the user password?
When you added the domain to RHEV Manager you've provided a user and password. RHEV Manager uses this user to query IPA for the other users. If you've changed this password (by default passwords expire in IPA is set to 90 days) then you have to change it for in RHEV Manager as well
You have to let RHEV Manager know the password.
Otherwise RHEV Manager will not be able to query the domain for the rest of the users. RHEV Manager uses the user&password provided when adding the domain to RHEV Manager in order to be able to access the domain and do queries.
The user provided to RHEV Manager does not have to be the IPA admin user, but it has to be a user that has permissions to query about other users in the domain.
If at any time you are changing this user's password in IPA then you have to change the password in RHEV Manager database as well using rhevm-manage-domains
I hope it is clear now.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
