Ldap users in oneadmin group don't get the admin view

Community Support
1

Is it expected that core users in the oneadmin group display the full admin ui. but an ldap user in the same group get the display from the user.yaml view instead of admin.yaml view?

Did I configure something wrong regarding LDAP in sunstone?

2

I still have the issue where LDAP admins don’t see the admin UI. Does anyone know if this is a bug, intentional, or a misconfiguration?

3

Could you send us the output of these commands:
onegroup show $GROUP_ID -x
oneuser show $USER_ID -x

4

This user can’t see the system menu, hosts etc. if I convert him to a core user he can see them. some data in the info below anonymized.

#> oneuser show 2 -x
    <USER>
      <ID>2</ID>
      <GID>0</GID>
      <GROUPS>
        <ID>0</ID>
      </GROUPS>
      <GNAME>oneadmin</GNAME>
      <NAME>jeff</NAME>
      <PASSWORD>uid=jeff,ou=Users,dc=company,dc=com</PASSWORD>
      <AUTH_DRIVER>ldap</AUTH_DRIVER>
      <ENABLED>1</ENABLED>
      <LOGIN_TOKEN/>
      <TEMPLATE>
        <DEFAULT_VIEW><![CDATA[user]]></DEFAULT_VIEW>
        <SSH_PUBLIC_KEY><![CDATA[ssh-rsa AAAA......key material........]]></SSH_PUBLIC_KEY>
        <TABLE_DEFAULT_PAGE_LENGTH><![CDATA[100]]></TABLE_DEFAULT_PAGE_LENGTH>
        <TOKEN_PASSWORD><![CDATA[11111111hexstringFFFFFFFFF]]></TOKEN_PASSWORD>
      </TEMPLATE>
      <DATASTORE_QUOTA>
        <DATASTORE>
          <ID><![CDATA[107]]></ID>
          <IMAGES><![CDATA[-1]]></IMAGES>
          <IMAGES_USED><![CDATA[1]]></IMAGES_USED>
          <SIZE><![CDATA[-1]]></SIZE>
          <SIZE_USED><![CDATA[1707]]></SIZE_USED>
        </DATASTORE>
      </DATASTORE_QUOTA>
      <NETWORK_QUOTA/>
      <VM_QUOTA/>
      <IMAGE_QUOTA/>
      <DEFAULT_USER_QUOTAS>
        <DATASTORE_QUOTA/>
        <NETWORK_QUOTA/>
        <VM_QUOTA/>
        <IMAGE_QUOTA/>
      </DEFAULT_USER_QUOTAS>
    </USER>

# onegroup show 0 -x
<GROUP>
  <ID>0</ID>
  <NAME>oneadmin</NAME>
  <TEMPLATE/>
  <USERS>
    <ID>0</ID>
    <ID>1</ID>
    <ID>2</ID>
    <ID>3</ID>
    <ID>4</ID>
    <ID>6</ID>
    <ID>7</ID>
  </USERS>
  <ADMINS/>
  <DATASTORE_QUOTA/>
  <NETWORK_QUOTA/>
  <VM_QUOTA/>
  <IMAGE_QUOTA/>
  <DEFAULT_GROUP_QUOTAS>
    <DATASTORE_QUOTA/>
    <NETWORK_QUOTA/>
    <VM_QUOTA/>
    <IMAGE_QUOTA/>
  </DEFAULT_GROUP_QUOTAS>
</GROUP>
5

Hi Jeff,

The problem is this attribute in the user template:

If you change it to admin you will see the admin view. You can do it from the CLI or from the Settings wizard in Sunstone.

6

Ah, ok I didn’t appreciate that the setting was for more than cloud vs user view. thanks.