In a default installation we have two methods of authentication:
- Internal admin user aka [email protected]
But, how about connecting our IPA to an Active Directory? Piece of cake! We just need to add it through the command line:
rhevm-manage-domains -action=list rhevm-manage-domains -action=add -domain='your.nice.domain' -user='your.ad.admin.user.' -interactive service jbossas restart
After that we can check that our Active Directory is correctly up and running, trying to connect it through:
rhevm-manage-domains -action=list rhevm-manage-domains -action=validate
If it validates, all should be fine! Just try to log in with your admin IPA user and set up some users/perms from your AD, and then just authenticate with your user/pass of the AD.
If it doesn’t work just take into account:
- Remember to restart jbossas service after setting up your AD domain!
- On the UserPortal/RHEVManager remember to select the correct domain from the combobox!
- If you can add your AD domain, did you try to add it with another administration user of your AD?
And just in case you just broke IPA and don’t remember your internal admin password ([email protected]), you can change it through:
rhevm-config -s AdminPassword=<newpassword> service jbossas restart