Issued:

2018-05-15

Updated:

2018-05-15

RHEA-2018:1485 - ovirt-engine-extension-aaa-ldap bug fix and enhancement update for RHV 4.2

Synopsis

ovirt-engine-extension-aaa-ldap bug fix and enhancement update for RHV 4.2

Type/Severity

Product Enhancement Advisory None

Topic

Updated ovirt-engine-extension-aaa-ldap packages that fix several bugs and add various enhancements are now available.

Description

The ovirt-engine-extension-aaa-ldap extension allows users to customize their external directory setup easily. The ovirt-engine-extension-aaa-ldap extension supports many different LDAP server types, and an interactive setup script is provided to assist you with the setup for most LDAP types.

Changes to the ovirt-engine-extension-aaa-ldap component:

• Using the virt-engine-extension-aaa-ldap-setup tool it's possible to configure an Active Directory forest with multi-domain trust, or an Active Directory forest with a single domain. However it is currently not possible to configure using a single domain from a multi-domain Active Directory forest because this is advanced configuration which is difficult to perform automatically.

This update provides common advanced Active Directory configuration examples that users can copy and adapt to their local environment. Those examples are bundled within the ovirt-engine-extension-aaa-ldap package, and can be found at /usr/share/ovirt-engine-extension-aaa-ldap/examples/README.md.

The ovirt-engine-extension-aaa-ldap-setup tool user experience has also been improved with the following changes:

• Add more detailed error reporting for various Active Directory forest configuration steps.
• Made the login test mandatory to test the provided configuration. (BZ#1462294)

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/2974891

Affected Products

Updated Packages

• ovirt-engine-extension-aaa-ldap-setup-1.3.7-1.el7ev.noarch.rpm
• ovirt-engine-extension-aaa-ldap-1.3.7-1.el7ev.noarch.rpm
• ovirt-engine-extension-aaa-ldap-1.3.7-1.el7ev.src.rpm

Fixes

• This content is not included.BZ - 1462294
• This content is not included.BZ - 1475015
• This content is not included.BZ - 1511120
• This content is not included.BZ - 1524120
• This content is not included.BZ - 1538217

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.