LDAP Configuration on oVirt 4.5.6

[kandadeepak]

Hi,

We are testing the following version of the oVirt and fails with LDAP integration extension to initialize because of which oVirt Web GUI fails to load.

oVirt Manager OS : Redhat 9.4(Plow)

LDAP: rpm -qa | grep ovirt
centos-release-ovirt45-9.2-1.el9s.noarch
ovirt-openvswitch-ovn-2.17-1.el9.noarch
python3-ovirt-setup-lib-1.3.3-1.el9.noarch
ovirt-vmconsole-1.0.9-3.el9.noarch
ovirt-engine-wildfly-24.0.1-1.el9.x86_64
ovirt-engine-wildfly-overlay-24.0.1-1.el9.noarch
ovirt-vmconsole-proxy-1.0.9-3.el9.noarch
ovirt-openvswitch-ovn-common-2.17-1.el9.noarch
ovirt-openvswitch-ovn-central-2.17-1.el9.noarch
python3-ovirt-engine-lib-4.5.6-1.el9.noarch
python3.11-ovirt-imageio-common-2.5.0-1.el9.x86_64
python3.11-ovirt-engine-sdk4-4.6.2-1.el9.x86_64
python3.11-ovirt-imageio-client-2.5.0-1.el9.x86_64
ovirt-engine-extensions-api-1.0.1-1.el9.noarch
ovirt-engine-extension-aaa-misc-1.1.1-1.el9.noarch
ovirt-engine-extension-aaa-jdbc-1.3.0-1.el9.noarch
ovirt-dependencies-4.5.3-1.el9.noarch
ovirt-web-ui-1.9.3-1.el9.noarch
ovirt-imageio-common-2.5.0-1.el9.x86_64
ovirt-imageio-daemon-2.5.0-1.el9.x86_64
ovirt-cockpit-sso-0.1.4-2.el9.noarch
ovirt-ansible-collection-3.2.0-1.el9.noarch
ovirt-engine-metrics-1.6.2-1.el9.noarch
ovirt-engine-setup-base-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-4.5.6-1.el9.noarch
ovirt-engine-dwh-4.5.8-1.el9.noarch
ovirt-engine-dwh-grafana-integration-setup-4.5.8-1.el9.noarch
ovirt-engine-dwh-setup-4.5.8-1.el9.noarch
ovirt-engine-setup-plugin-websocket-proxy-4.5.6-1.el9.noarch
ovirt-engine-tools-backup-4.5.6-1.el9.noarch
ovirt-python-openvswitch-2.17-1.el9.noarch
ovirt-openvswitch-2.17-1.el9.noarch
ovirt-provider-ovn-1.2.36-1.el9.noarch
ovirt-engine-websocket-proxy-4.5.6-1.el9.noarch
ovirt-engine-backend-4.5.6-1.el9.noarch
ovirt-engine-dbscripts-4.5.6-1.el9.noarch
ovirt-engine-restapi-4.5.6-1.el9.noarch
ovirt-engine-keycloak-15.0.2-6.el9.noarch
ovirt-engine-keycloak-setup-15.0.2-6.el9.noarch
ovirt-engine-setup-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-cinderlib-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-imageio-4.5.6-1.el9.noarch
ovirt-engine-vmconsole-proxy-helper-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.5.6-1.el9.noarch
ovirt-engine-setup-plugin-ovirt-engine-4.5.6-1.el9.noarch
ovirt-engine-tools-4.5.6-1.el9.noarch
ovirt-engine-ui-extensions-1.3.7-1.el9.noarch
ovirt-engine-webadmin-portal-4.5.6-1.el9.noarch
ovirt-engine-4.5.6-1.el9.noarch
ovirt-engine-extension-aaa-ldap-1.4.6-1.el9.noarch
ovirt-engine-extension-aaa-ldap-setup-1.4.6-1.el9.noarch

Logs message from LDAP

2024-08-13 02:19:16,602+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 57) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:19:16,745+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:19:17,755+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 52) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:20:27,459+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:20:27,460+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 57) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:20:59,218+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,229+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,235+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,241+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 46) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,274+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:20:59,276+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 48) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:20:59,411+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:21:00,380+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:21:35,370+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:21:35,371+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:21:35,715+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:21:35,716+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 43) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:22:06,125+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:22:06,187+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 48) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool '[email protected]'
2024-08-13 02:22:38,745+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,749+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 45) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,755+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,769+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,781+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Loaded file '/etc/ovirt-engine/engine.conf.d/50-ovirt-engine-extension-aaa-ldap.conf'.
2024-08-13 02:22:38,788+08 INFO [org.ovirt.engine.core.uutils.config.ShellLikeConfd] (ServerService Thread Pool -- 47) [] Value of property 'ENGINE_JAVA_MODULEPATH' is '/usr/share/ovirt-engine-wildfly-overlay/modules:/usr/share/ovirt-engine/modules/common:/usr/share/ovirt-engine-extension-aaa-jdbc/modules:/usr/share/ovirt-engine-extension-aaa-ldap/modules:/usr/share/ovirt-engine-extension-aaa-misc/modules'.
2024-08-13 02:22:38,944+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:22:40,022+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authz'
2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:22:45,247+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:23:14,390+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool 'authn'
2024-08-13 02:23:24,920+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:23:24,939+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool '[email protected]'
2024-08-13 02:23:50,579+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool 'authn' information: vendor='null' version='null'
2024-08-13 02:23:50,582+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] Creating LDAP pool '[email protected]'
2024-08-13 02:24:00,580+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool '[email protected]' information: vendor='null' version='null'
2024-08-13 02:24:00,634+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'authz'
2024-08-13 02:24:36,130+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'authz' information: vendor='null' version='null'
2024-08-13 02:24:36,131+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool 'gc'
2024-08-13 02:25:11,255+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 42) [] [ovirt-engine-extension-aaa-ldap.authn::xspartan.com-authn] LDAP pool '[email protected]' information: vendor='null' version='null'
2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true'
2024-08-13 02:25:11,258+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 42) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'false'
2024-08-13 02:25:11,801+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool 'gc' information: vendor='null' version='null'
2024-08-13 02:25:11,855+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Creating LDAP pool '[email protected]'
2024-08-13 02:26:02,669+08 INFO [org.ovirt.engine.extension.aaa.ldap.Framework] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] LDAP pool '[email protected]' information: vendor='null' version='null'
2024-08-13 02:26:02,999+08 INFO [org.ovirt.engine.extension.aaa.ldap.AuthzExtension] (ServerService Thread Pool -- 47) [] [ovirt-engine-extension-aaa-ldap.authz::xspartan.com] Available Namespaces: [DC=xspartan,DC=com]
2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com-authn.properties', Initialized: 'true'
2024-08-13 02:26:03,000+08 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (ServerService Thread Pool -- 47) [] Instance name: 'xspartan.com', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.4.6', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.4.6-1', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/xspartan.com.properties', Initialized: 'true'

AAA/profile configuration
include = <ad.properties>

vars.domain = xspartan.com
vars.user = CN=tesla,OU=Service Accounts,DC=xspartan,DC=com
vars.password = random

pool.default.serverset.type = failover
pool.default.serverset.failover.01.server = mars.xspartan.com
pool.default.serverset.failover.02.server = sun.xspartan.com
pool.default.serverset.failover.01.port = 389
pool.default.serverset.failover.02.port = 389
pool.default.dc-resolve.default.serverset.type = failover
pool.default.dc-resolve.serverset.failover.01.server = mars.xspartan.com
pool.default.dc-resolve.serverset.failover.02.server = sn.xspartan.com
pool.gc.serverset.failover.01.port = 3268
pool.gc.serverset.failover.02.port = 3268

pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
pool.default.serverset.type = srvrecord
pool.default.serverset.srvrecord.domain = ${global:vars.domain}

[kandadeepak]

Mix up of pool.default.serverset.type = srvrecord and pool.default.serverset.type = failover cause the failure.