[Spacewalk-list] Integrating Spacewalk Authentication with IPA

[Bruno Henrique Barbosa]

Hi Shashank, 


Besides the KB settings, you must create the HBAC service on IPA. Policy -> HBAC Service -> Add, then create a service named " rhn-satellite " and suit it into your HBAC rules, just like you would do with sshd or login services. 


After that, on Spacewalk, just create the matching login users and mark PAM authentication. It should work. 

Bruno Henrique Barbosa 

Jr. Sys Admin 
IT Department 
Santos City Hall 
----- Mensagem original -----

De: "Shashank Sahni" <shredder12 at gmail.com> 
Para: spacewalk-list at redhat.com 
Enviadas: Terça-feira, 25 de Fevereiro de 2014 8:30:03 
Assunto: [Spacewalk-list] Integrating Spacewalk Authentication with IPA 





Hi everyone, 

I'm currently running configured instances of Spacewalk and Kibana. In order to integrate Spacewalk authentication with IPA, I followed the following post. 

https://access.redhat.com/site/documentation/en-US/Red_Hat_Network_Satellite/5.4/html-single/Installation_Guide/index.html#sect-Installation_Guide-Maintenance-Implementing_PAM_Authentication 

I created a new user and marked it to be authenticated via PAM. I populated the PAM file with the contents mentioned in the post above. Unfortunately, the authentication isn't working. 

I get the following log message in tomcat6/catalina.out 

com.redhat.rhn.domain.user.legacy.UserImpl - PAM login for user User abc (id 4, org_id 1) failed with error Authentication failure. 





Note that, ipa-client is successfully installed and configured on spacewalk server. 


Any suggestions? 





-- 
Shashank Sahni 

_______________________________________________ 
Spacewalk-list mailing list 
Spacewalk-list at redhat.com 
https://www.redhat.com/mailman/listinfo/spacewalk-list 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20140225/36865f69/attachment.htm>