Re: [one-users] ldap auth without automatic user creation

2014-02-14 Thread Javier Fontan
Creating manually a user with driver ldap, username the same as the one in ldap and a dummy password (for example -) should do the trick. That's what the driver does. On Thu, Feb 6, 2014 at 1:01 PM, Nicolas Bélan wrote: > Thank you for the explanation. > > I am trying to detail more the steps I a

Re: [one-users] ldap auth without automatic user creation

2014-02-06 Thread Nicolas Bélan
Thank you for the explanation. I am trying to detail more the steps I am using. I have a LDAP tree with users (eg foobar user). I will setup a VM in one-4.4 and I would like to assign it to foobar. But, foobar does not exists yet in one (especially sunstone) until foobar logged in, right ? So, I

Re: [one-users] ldap auth without automatic user creation

2014-02-06 Thread Javier Fontan
I'm not sure I've understood the problem. Maybe this explanation helps. The user name of a user with ldap driver is used to find it in ldap. It first searches for an ldap user with a DN equal to the OpenNebula user name. This way you can set the OpenNebula user name to a full dn of a user. In cas

[one-users] ldap auth without automatic user creation

2014-02-05 Thread Nicolas Bélan
Hello, I tried successfully the LDAP auth using one 4.4, with the 'default' auth engine. So, I am able to log on Sunstone with a user in the right LDAP group, if it is not created on the one user DB. But, I am trying to answer this use case, and I can't achieve it: 1) create a user through suns

Re: [one-users] LDAP auth documentation

2012-09-05 Thread Javier Fontan
I think that the auth method should be simple, ssl is the transport layer. I have to make more tests before making changes to the driver. On Mon, Aug 13, 2012 at 11:16 PM, Shantanu Pavgi wrote: > > On Aug 7, 2012, at 2:12 AM, Daniel Molina wrote: > > Hi, > > On 6 August 2012 16:35, Shantanu Pavgi

Re: [one-users] LDAP Auth

2012-09-04 Thread Javier Fontan
Add default to the list of allowed auth methods in oned.conf. Something like: AUTH_MAD = [ executable = "one_auth_mad", authn = "default,ssh,x509,ldap,server_cipher,server_x509" ] On Wed, Aug 29, 2012 at 2:59 AM, Derek Yarnell wrote: > On 8/28/12 11:13 AM, Javier Fontan wrote: >> Ca

Re: [one-users] LDAP Auth

2012-08-28 Thread Derek Yarnell
On 8/28/12 11:13 AM, Javier Fontan wrote: > Can you use the CLI? > > $ echo ":" > /tmp/auth_file > $ export ONE_AUTH=/tmp/auth_file > $ onevm list > > Check oned.log if you are not allowed to execute the last command. Hi, Thanks, I did try this. # printenv ONE_AUTH /tmp/auth_file # onevm list

Re: [one-users] LDAP Auth

2012-08-28 Thread Javier Fontan
Can you use the CLI? $ echo ":" > /tmp/auth_file $ export ONE_AUTH=/tmp/auth_file $ onevm list Check oned.log if you are not allowed to execute the last command. On Sun, Aug 26, 2012 at 1:30 AM, Derek Yarnell wrote: > Hi, > > I am trying to debug LDAP authentication but I am coming up short. I

[one-users] LDAP Auth

2012-08-25 Thread Derek Yarnell
Hi, I am trying to debug LDAP authentication but I am coming up short. I have followed, http://opennebula.org/documentation:rel3.6:ldap and patched, http://dev.opennebula.org/issues/1171 I have set sunstone to use opennebula authentication, :auth: opennebula But I get only the error,

Re: [one-users] LDAP auth documentation

2012-08-13 Thread Shantanu Pavgi
On Aug 7, 2012, at 2:12 AM, Daniel Molina wrote: Hi, On 6 August 2012 16:35, Shantanu Pavgi mailto:pa...@uab.edu>> wrote: I have a suggestion about LDAP authentication documentation. The LDAP authentication driver has a bug as mentioned here [1]. The bug report link in the documentation is use

Re: [one-users] LDAP auth documentation

2012-08-07 Thread Daniel Molina
Hi, On 6 August 2012 16:35, Shantanu Pavgi wrote: > > I have a suggestion about LDAP authentication documentation. The LDAP > authentication driver has a bug as mentioned here [1]. The bug report link > in the documentation is useful, but it would be better if 'auth_method' in > the documentation

[one-users] LDAP auth documentation

2012-08-06 Thread Shantanu Pavgi
I have a suggestion about LDAP authentication documentation. The LDAP authentication driver has a bug as mentioned here [1]. The bug report link in the documentation is useful, but it would be better if 'au