4.2. Configuring Single Sign-On for Virtual Machines

1. Log in to the Red Hat Enterprise Linux virtual machine.

2. Enable the repository:

   • For Red Hat Enterprise Linux 6:

     # subscription-manager repos --enable=rhel-6-server-rhv-4-agent-rpms

   • For Red Hat Enterprise Linux 7:

     # subscription-manager repos --enable=rhel-7-server-rh-common-rpms

3. Download and install the guest agent, single sign-on, and IPA packages:

   # yum install ovirt-guest-agent-common ovirt-guest-agent-pam-module ovirt-guest-agent-gdm-plugin ipa-client

4. Run the following command and follow the prompts to configure ipa-client and join the virtual machine to the domain:

   # ipa-client-install --permit --mkhomedir

   Note

   In environments that use DNS obfuscation, this command should be:

   # ipa-client-install --domain=FQDN --server=FQDN

5. For Red Hat Enterprise Linux 7.2 and later:

   # authconfig --enablenis --update

   Note

   Red Hat Enterprise Linux 7.2 has a new version of the System Security Services Daemon (SSSD), which introduces configuration that is incompatible with the Red Hat Virtualization Manager guest agent single sign-on implementation. This command ensures that single sign-on works.

6. Fetch the details of an IPA user:

   # getent passwd ipa-user

7. Record the IPA user’s UID and GID:

   ipa-user:*:936600010:936600001::/home/ipa-user:/bin/sh

8. Create a home directory for the IPA user:

   # mkdir /home/ipa-user

9. Assign ownership of the directory to the IPA user:

   # chown 936600010:936600001 /home/ipa-user

Procedure

1. Select the Windows virtual machine. Ensure the machine is powered up.
2. On the virtual machine, locate the CD drive and open the CD.
3. Launch virtio-win-guest-tools.
4. Click Options
5. Select Install oVirt Guest Agent.
6. Click OK.
7. Click Install.
8. When the installation completes, you are prompted to restart the machine to apply the changes.

1. Select a virtual machine and click Edit.
2. Click the Console tab.
3. Select the Disable Single Sign On check box.
4. Click OK.