[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Unable to add user to group



I can't seem to add a user to a group.  I have a user:

$ curl -k -v -XGET  -H "User-Agent: oc/v1.1.2 (darwin/amd64) openshift/2711160" -H "Authorization: Bearer PDqIrEiOTqtwJvHDcTB-snC5FpcpnCz5fIrz7S6ORCI" https://openshift.rheldemo.lan:8443/oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4
*   Trying 192.168.2.191...
* Connected to openshift.rheldemo.lan (192.168.2.191) port 8443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate: 172.30.0.1
* Server certificate: openshift-signer 1465933076
> GET /oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4 HTTP/1.1
> Host: openshift.rheldemo.lan:8443
> Accept: */*
> User-Agent: oc/v1.1.2 (darwin/amd64) openshift/2711160
> Authorization: Bearer PDqIrEiOTqtwJvHDcTB-snC5FpcpnCz5fIrz7S6ORCI
< HTTP/1.1 200 OK
< Cache-Control: no-store
< Content-Type: application/json
< Date: Thu, 16 Jun 2016 19:47:05 GMT
< Content-Length: 381
{"kind":"User","apiVersion":"v1","metadata":{"name":"0b126172-33e9-11e6-9c91-525400d4fbc4","selfLink":"/oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4","uid":"4c403e86-33f4-11e6-b368-fa163ef48e94","resourceVersion":"17244","creationTimestamp":"2016-06-16T18:58:22Z"},"fullName":"OpenShift Admin","identities":["unison_ldap:0b126172-33e9-11e6-9c91-525400d4fbc4"],"groups":null}

then I run oadm to add the user to a group:

[root openshift ~]# oadm --loglevel 9 groups add-users cluster-administrators 0b126172-33e9-11e6-9c91-525400d4fbc4

================================================================================
ATTENTION: You are running oadm via a wrapper around 'docker run openshift/origin:v1.3.0-alpha.1'.
This wrapper is intended only to be used to bootstrap an environment. Please
install client tools on another host once you have granted cluster-admin
privileges to a user.
See https://docs.openshift.org/latest/cli_reference/get_started_cli.html
=================================================================================

Usage of loopback devices is strongly discouraged for production use. Either use `--storage-opt dm.thinpooldev` or use `--storage-opt dm.no_warn_on_loop_devices=true` to suppress this warning.
I0616 19:50:26.085449       1 loader.go:242] Config loaded from file /root/.kube/config
I0616 19:50:26.087794       1 round_trippers.go:299] curl -k -v -XGET  -H "Accept: application/json, */*" -H "User-Agent: oadm/v1.3.0 (linux/amd64) kubernetes/6e83535" https://openshift.rheldemo.lan:8443/api
I0616 19:50:26.125647       1 round_trippers.go:318] GET https://openshift.rheldemo.lan:8443/api 200 OK in 37 milliseconds
I0616 19:50:26.125669       1 round_trippers.go:324] Response Headers:
I0616 19:50:26.125677       1 round_trippers.go:327]     Date: Thu, 16 Jun 2016 19:50:26 GMT
I0616 19:50:26.125685       1 round_trippers.go:327]     Content-Length: 135
I0616 19:50:26.125691       1 round_trippers.go:327]     Cache-Control: no-store
I0616 19:50:26.125696       1 round_trippers.go:327]     Content-Type: application/json
I0616 19:50:26.125765       1 request.go:870] Response Body: {"kind":"APIVersions","versions":["v1"],"serverAddressByClientCIDRs":[{"clientCIDR":"0.0.0.0/0","serverAddress":"192.168.100.6:443"}]}
I0616 19:50:26.126056       1 round_trippers.go:299] curl -k -v -XGET  -H "Accept: application/json, */*" -H "User-Agent: oadm/v1.3.0 (linux/amd64) kubernetes/6e83535" https://openshift.rheldemo.lan:8443/apis
I0616 19:50:26.126838       1 round_trippers.go:318] GET https://openshift.rheldemo.lan:8443/apis 200 OK in 0 milliseconds
I0616 19:50:26.126866       1 round_trippers.go:324] Response Headers:
I0616 19:50:26.126872       1 round_trippers.go:327]     Content-Type: application/json
I0616 19:50:26.126877       1 round_trippers.go:327]     Date: Thu, 16 Jun 2016 19:50:26 GMT
I0616 19:50:26.126883       1 round_trippers.go:327]     Content-Length: 775
I0616 19:50:26.126888       1 round_trippers.go:327]     Cache-Control: no-store
I0616 19:50:26.126922       1 request.go:870] Response Body: {"kind":"APIGroupList","groups":[{"name":"autoscaling","versions":[{"groupVersion":"autoscaling/v1","version":"v1"}],"preferredVersion":{"groupVersion":"autoscaling/v1","version":"v1"},"serverAddressByClientCIDRs":[{"clientCIDR":"0.0.0.0/0","serverAddress":"192.168.100.6:443"}]},{"name":"batch","versions":[{"groupVersion":"batch/v1","version":"v1"}],"preferredVersion":{"groupVersion":"batch/v1","version":"v1"},"serverAddressByClientCIDRs":[{"clientCIDR":"0.0.0.0/0","serverAddress":"192.168.100.6:443"}]},{"name":"extensions","versions":[{"groupVersion":"extensions/v1beta1","version":"v1beta1"}],"preferredVersion":{"groupVersion":"extensions/v1beta1","version":"v1beta1"},"serverAddressByClientCIDRs":[{"clientCIDR":"0.0.0.0/0","serverAddress":"192.168.100.6:443"}]}]}
I0616 19:50:26.132811       1 round_trippers.go:299] curl -k -v -XGET  -H "User-Agent: oadm/v1.3.0 (linux/amd64) openshift/6e83535" -H "Accept: application/json, */*" https://openshift.rheldemo.lan:8443/oapi
I0616 19:50:26.133409       1 round_trippers.go:318] GET https://openshift.rheldemo.lan:8443/oapi 200 OK in 0 milliseconds
I0616 19:50:26.133428       1 round_trippers.go:324] Response Headers:
I0616 19:50:26.133433       1 round_trippers.go:327]     Cache-Control: no-store
I0616 19:50:26.133439       1 round_trippers.go:327]     Content-Type: application/json
I0616 19:50:26.133450       1 round_trippers.go:327]     Date: Thu, 16 Jun 2016 19:50:26 GMT
I0616 19:50:26.133455       1 round_trippers.go:327]     Content-Length: 93
I0616 19:50:26.133489       1 request.go:870] Response Body: {"kind":"APIVersions","apiVersion":"v1","versions":["v1"],"serverAddressByClientCIDRs":null}
I0616 19:50:26.133763       1 round_trippers.go:299] curl -k -v -XGET  -H "Accept: application/json, */*" -H "User-Agent: oadm/v1.3.0 (linux/amd64) openshift/6e83535" https://openshift.rheldemo.lan:8443/oapi/v1/groups/cluster-administrators
I0616 19:50:26.135065       1 round_trippers.go:318] GET https://openshift.rheldemo.lan:8443/oapi/v1/groups/cluster-administrators 200 OK in 1 milliseconds
I0616 19:50:26.135084       1 round_trippers.go:324] Response Headers:
I0616 19:50:26.135090       1 round_trippers.go:327]     Cache-Control: no-store
I0616 19:50:26.135095       1 round_trippers.go:327]     Content-Type: application/json
I0616 19:50:26.135101       1 round_trippers.go:327]     Date: Thu, 16 Jun 2016 19:50:26 GMT
I0616 19:50:26.135106       1 round_trippers.go:327]     Content-Length: 295
I0616 19:50:26.135143       1 request.go:870] Response Body: {"kind":"Group","apiVersion":"v1","metadata":{"name":"cluster-administrators","selfLink":"/oapi/v1/groups/cluster-administrators","uid":"52a7c5fa-3339-11e6-93e7-fa163ef48e94","resourceVersion":"17554","creationTimestamp":"2016-06-15T20:39:57Z"},"users":["0b126172-33e9-11e6-9c91-525400d4fbc4"]}
I0616 19:50:26.135544       1 request.go:555] Request Body: {"kind":"Group","apiVersion":"v1","metadata":{"name":"cluster-administrators","selfLink":"/oapi/v1/groups/cluster-administrators","uid":"52a7c5fa-3339-11e6-93e7-fa163ef48e94","resourceVersion":"17554","creationTimestamp":"2016-06-15T20:39:57Z"},"users":["0b126172-33e9-11e6-9c91-525400d4fbc4"]}
I0616 19:50:26.135594       1 round_trippers.go:299] curl -k -v -XPUT  -H "Content-Type: application/json" -H "User-Agent: oadm/v1.3.0 (linux/amd64) openshift/6e83535" -H "Accept: application/json, */*" https://openshift.rheldemo.lan:8443/oapi/v1/groups/cluster-administrators
I0616 19:50:26.137081       1 round_trippers.go:318] PUT https://openshift.rheldemo.lan:8443/oapi/v1/groups/cluster-administrators 200 OK in 1 milliseconds
I0616 19:50:26.137102       1 round_trippers.go:324] Response Headers:
I0616 19:50:26.137109       1 round_trippers.go:327]     Date: Thu, 16 Jun 2016 19:50:26 GMT
I0616 19:50:26.137114       1 round_trippers.go:327]     Content-Length: 295
I0616 19:50:26.137120       1 round_trippers.go:327]     Cache-Control: no-store
I0616 19:50:26.137125       1 round_trippers.go:327]     Content-Type: application/json
I0616 19:50:26.137161       1 request.go:870] Response Body: {"kind":"Group","apiVersion":"v1","metadata":{"name":"cluster-administrators","selfLink":"/oapi/v1/groups/cluster-administrators","uid":"52a7c5fa-3339-11e6-93e7-fa163ef48e94","resourceVersion":"17554","creationTimestamp":"2016-06-15T20:39:57Z"},"users":["0b126172-33e9-11e6-9c91-525400d4fbc4"]}

Then I check the user again:

$ curl -k -v -XGET  -H "User-Agent: oc/v1.1.2 (darwin/amd64) openshift/2711160" -H "Authorization: Bearer PDqIrEiOTqtwJvHDcTB-snC5FpcpnCz5fIrz7S6ORCI" https://openshift.rheldemo.lan:8443/oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4
*   Trying 192.168.2.191...
* Connected to openshift.rheldemo.lan (192.168.2.191) port 8443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
* Server certificate: 172.30.0.1
* Server certificate: openshift-signer 1465933076
> GET /oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4 HTTP/1.1
> Host: openshift.rheldemo.lan:8443
> Accept: */*
> User-Agent: oc/v1.1.2 (darwin/amd64) openshift/2711160
> Authorization: Bearer PDqIrEiOTqtwJvHDcTB-snC5FpcpnCz5fIrz7S6ORCI
< HTTP/1.1 200 OK
< Cache-Control: no-store
< Content-Type: application/json
< Date: Thu, 16 Jun 2016 19:52:56 GMT
< Content-Length: 381
{"kind":"User","apiVersion":"v1","metadata":{"name":"0b126172-33e9-11e6-9c91-525400d4fbc4","selfLink":"/oapi/v1/users/0b126172-33e9-11e6-9c91-525400d4fbc4","uid":"4c403e86-33f4-11e6-b368-fa163ef48e94","resourceVersion":"17244","creationTimestamp":"2016-06-16T18:58:22Z"},"fullName":"OpenShift Admin","identities":["unison_ldap:0b126172-33e9-11e6-9c91-525400d4fbc4"],"groups":null}

Notice that the user's groups are still null....am I missing something?

Thanks
Marc

[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]