After installing katello-2.0.0-0.el6.noarch on Centos 6.5 and
configuring it, I cannot access the Lifecycle_Environments page. We use
freeipa as authentication and I have given the group the "Admin" role.
The page starts to load but then changes to a 403 error, the rest of the
pages work fine.
Please request the required privileges from an administrator.
From foreman production.log:
Processing by HostgroupsController#index as HTML
Rendered hostgroups/index.html.erb within layouts/application (33.0ms)
Rendered common/_searchbar.html.erb (2.9ms)
Rendered home/_user_dropdown.html.erb (1.5ms)
Read fragment views/tabs_and_title_records-4 (0.2ms)
Rendered home/_topbar.html.erb (2.7ms)
Rendered layouts/base.html.erb (4.3ms)
Completed 200 OK in 79ms (Views: 44.1ms | ActiveRecord: 5.9ms)
Processing by Bastion::BastionController#index as HTML
Parameters: {"bastion_page"=>"lifecycle_environments"}
Rendered home/_user_dropdown.html.erb (1.7ms)
Read fragment views/tabs_and_title_records-4 (0.2ms)
Rendered home/_topbar.html.erb (3.3ms)
Rendered layouts/base.html.erb (4.8ms)
Rendered
/opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/engines/bastion/app/views/bastion/layouts/application.html.haml
(26.2ms)
Completed 200 OK in 44ms (Views: 24.7ms | ActiveRecord: 6.2ms)
Processing by Katello::ApplicationController#permission_denied as HTML
Rendered
/opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/403.html.haml
within katello/layouts/katello (1.2ms)
Rendered
/opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/_common_i18n.html.haml
(2.8ms)
Rendered home/_user_dropdown.html.erb (1.5ms)
Read fragment views/tabs_and_title_records-4 (0.2ms)
Rendered home/_topbar.html.erb (2.5ms)
Rendered layouts/base.html.erb (3.8ms)
Completed 200 OK in 26ms (Views: 11.9ms | ActiveRecord: 1.9ms)
Processing by Katello::Api::V2::EnvironmentsController#paths as JSON
Parameters: {"api_version"=>"v2", "organization_id"=>"1"}
Rendered
/opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/api/v2/environments/paths.json.rabl
within katello/api/v2/layouts/collection (26.7ms)
Completed 200 OK in 207ms (Views: 29.7ms | ActiveRecord: 4.5ms)
Processing by DashboardController#index as HTML
Rendered dashboard/welcome.html.erb within layouts/application (11.9ms)
Rendered home/_user_dropdown.html.erb (1.7ms)
Read fragment views/tabs_and_title_records-4 (0.1ms)
Rendered home/_topbar.html.erb (2.7ms)
Rendered layouts/base.html.erb (4.2ms)
Filter chain halted as :welcome rendered or redirected
Completed 200 OK in 179ms (Views: 23.2ms | ActiveRecord: 3.8ms)
Make sure you have an Organization selected (not Any Organization).
···
On Thursday, October 23, 2014 6:55:35 AM UTC-4, Jorick Astrego wrote:
>
> After installing katello-2.0.0-0.el6.noarch on Centos 6.5 and configuring
> it, I cannot access the Lifecycle_Environments page. We use freeipa as
> authentication and I have given the group the "Admin" role.
>
> The page starts to load but then changes to a 403 error, the rest of the
> pages work fine.
>
> https://katello.test.nu/lifecycle_environments 403 - Permission Denied
>
> You are not authorised to perform this action.
>
> Please request the required privileges from an administrator.
>
>
> From foreman production.log:
>
>
> Processing by HostgroupsController#index as HTML
> Rendered hostgroups/index.html.erb within layouts/application (33.0ms)
> Rendered common/_searchbar.html.erb (2.9ms)
> Rendered home/_user_dropdown.html.erb (1.5ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (2.7ms)
> Rendered layouts/base.html.erb (4.3ms)
> Completed 200 OK in 79ms (Views: 44.1ms | ActiveRecord: 5.9ms)
> Processing by Bastion::BastionController#index as HTML
> Parameters: {"bastion_page"=>"lifecycle_environments"}
> Rendered home/_user_dropdown.html.erb (1.7ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (3.3ms)
> Rendered layouts/base.html.erb (4.8ms)
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/engines/bastion/app/views/bastion/layouts/application.html.haml
> (26.2ms)
> Completed 200 OK in 44ms (Views: 24.7ms | ActiveRecord: 6.2ms)
> Processing by Katello::ApplicationController#permission_denied as HTML
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/403.html.haml
> within katello/layouts/katello (1.2ms)
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/_common_i18n.html.haml
> (2.8ms)
> Rendered home/_user_dropdown.html.erb (1.5ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (2.5ms)
> Rendered layouts/base.html.erb (3.8ms)
> Completed 200 OK in 26ms (Views: 11.9ms | ActiveRecord: 1.9ms)
> Processing by Katello::Api::V2::EnvironmentsController#paths as JSON
> Parameters: {"api_version"=>"v2", "organization_id"=>"1"}
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/api/v2/environments/paths.json.rabl
> within katello/api/v2/layouts/collection (26.7ms)
> Completed 200 OK in 207ms (Views: 29.7ms | ActiveRecord: 4.5ms)
> Processing by DashboardController#index as HTML
> Rendered dashboard/welcome.html.erb within layouts/application (11.9ms)
> Rendered home/_user_dropdown.html.erb (1.7ms)
> Read fragment views/tabs_and_title_records-4 (0.1ms)
> Rendered home/_topbar.html.erb (2.7ms)
> Rendered layouts/base.html.erb (4.2ms)
> Filter chain halted as :welcome rendered or redirected
> Completed 200 OK in 179ms (Views: 23.2ms | ActiveRecord: 3.8ms)
>
>
>
>
> Met vriendelijke groet, With kind regards,
>
> Jorick Astrego
>
> *Netbulae Virtualization Experts *
> ------------------------------
> Tel: 053 20 30 270 in...@netbulae.eu Staalsteden 4-3A KvK
> 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW
> NL821234584B01
> ------------------------------
>
>
When I have "Any Organization", I get a different 403 that tells me to
choose an organization. This one is permission denied and it's for all
the katello views.
All the foreman elements work fine.
After some more testing it appears the local admin user does work. So it
must be something with IPA being the authentication source and the Admin
role for the group IMHO
Cheers, Jorick
···
On 10/23/2014 03:06 PM, Garrett DeMarco wrote:
> Make sure you have an Organization selected (not Any Organization).
>
> On Thursday, October 23, 2014 6:55:35 AM UTC-4, Jorick Astrego wrote:
>
> After installing katello-2.0.0-0.el6.noarch on Centos 6.5 and
> configuring it, I cannot access the Lifecycle_Environments page.
> We use freeipa as authentication and I have given the group the
> "Admin" role.
>
> The page starts to load but then changes to a 403 error, the rest
> of the pages work fine.
>
> https://katello.test.nu/lifecycle_environments
>
>
>
> 403 - Permission Denied
>
> You are not authorised to perform this action.
>
> Please request the required privileges from an administrator.
>
>
> From foreman production.log:
>
>
> Processing by HostgroupsController#index as HTML
> Rendered hostgroups/index.html.erb within layouts/application
> (33.0ms)
> Rendered common/_searchbar.html.erb (2.9ms)
> Rendered home/_user_dropdown.html.erb (1.5ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (2.7ms)
> Rendered layouts/base.html.erb (4.3ms)
> Completed 200 OK in 79ms (Views: 44.1ms | ActiveRecord: 5.9ms)
> Processing by Bastion::BastionController#index as HTML
> Parameters: {"bastion_page"=>"lifecycle_environments"}
> Rendered home/_user_dropdown.html.erb (1.7ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (3.3ms)
> Rendered layouts/base.html.erb (4.8ms)
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/engines/bastion/app/views/bastion/layouts/application.html.haml
> (26.2ms)
> Completed 200 OK in 44ms (Views: 24.7ms | ActiveRecord: 6.2ms)
> Processing by Katello::ApplicationController#permission_denied as HTML
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/403.html.haml
> within katello/layouts/katello (1.2ms)
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/common/_common_i18n.html.haml
> (2.8ms)
> Rendered home/_user_dropdown.html.erb (1.5ms)
> Read fragment views/tabs_and_title_records-4 (0.2ms)
> Rendered home/_topbar.html.erb (2.5ms)
> Rendered layouts/base.html.erb (3.8ms)
> Completed 200 OK in 26ms (Views: 11.9ms | ActiveRecord: 1.9ms)
> Processing by Katello::Api::V2::EnvironmentsController#paths as JSON
> Parameters: {"api_version"=>"v2", "organization_id"=>"1"}
> Rendered
> /opt/rh/ruby193/root/usr/share/gems/gems/katello-2.0.0/app/views/katello/api/v2/environments/paths.json.rabl
> within katello/api/v2/layouts/collection (26.7ms)
> Completed 200 OK in 207ms (Views: 29.7ms | ActiveRecord: 4.5ms)
> Processing by DashboardController#index as HTML
> Rendered dashboard/welcome.html.erb within layouts/application
> (11.9ms)
> Rendered home/_user_dropdown.html.erb (1.7ms)
> Read fragment views/tabs_and_title_records-4 (0.1ms)
> Rendered home/_topbar.html.erb (2.7ms)
> Rendered layouts/base.html.erb (4.2ms)
> Filter chain halted as :welcome rendered or redirected
> Completed 200 OK in 179ms (Views: 23.2ms | ActiveRecord: 3.8ms)
>
>
>
>
> Met vriendelijke groet, With kind regards,
>
> Jorick Astrego*
>
> Netbulae Virtualization Experts *
> ------------------------------------------------------------------------
> Tel: 053 20 30 270 in...@netbulae.eu Staalsteden
> 4-3A KvK 08198180
> Fax: 053 20 30 271 www.netbulae.eu 7547
> TA Enschede BTW NL821234584B01
>
>
> ------------------------------------------------------------------------
>
> --
> You received this message because you are subscribed to the Google
> Groups "Foreman users" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to foreman-users+unsubscribe@googlegroups.com
> .
> To post to this group, send email to foreman-users@googlegroups.com
> .
> Visit this group at http://groups.google.com/group/foreman-users.
> For more options, visit https://groups.google.com/d/optout.
