<div dir="ltr">Thank you for reaching out. The problem has been fixed. I have forgotten to restart tomcat6 to disable tomcat auth. User error!!!</div><div class="gmail_extra"> <div class="gmail_quote">On Thu, Jun 30, 2016 at 6:09 AM, Jan Pazdziora <<a href="mailto:jpazdziora@redhat.com" target="_blank">jpazdziora@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Wed, Jun 29, 2016 at 03:33:34PM -0400, Danila Ladner wrote: > Hello Folks. > > I am stuck at this task integrating spacewalk freeipa authorization. > > I have followed this docs from spacewalk to enable web authentication with > FreeIPA: > > <a href="https://fedorahosted.org/spacewalk/wiki/SpacewalkAndIPA" rel="noreferrer" target="_blank">https://fedorahosted.org/spacewalk/wiki/SpacewalkAndIPA</a> > > I did all the steps above and trying to authenticate with the user I do not > have in the internal spacewalk database, but ssd ifp with sssd_dbus should > help me with that. [...] > I did enabled sssd and sssd_ifp logs and see all the lookups go through if > you need them i can provide them. > The problem is it seems on the step where spacewalk can't create a new user > based on Organization Unit name. > I am a little bit lost and firstly asked Spacewalk community but no one was > able to help me. > If anyone has any additional information where can I troubleshoot further, > i'd appreciate it. I have integrated Jenkins UI with LDAP/IPA auth and it > works just fine, so I am sure it is not IPA backend, but something in > particular with spacewalk httpd modules, but still can't figure out what > exactly is the issue. > If anyone have some information or done similar integration, i'd appreciate > if you can share it. What Spacewalk version and what OS and version is this? -- Jan Pazdziora Senior Principal Software Engineer, Identity Management Engineering, Red Hat </blockquote></div> </div>