<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 9, 2016 at 8:05 PM, Juan Hernández <span dir="ltr"><<a href="mailto:jhernand@redhat.com" target="_blank">jhernand@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="gmail-">On 11/09/2016 11:12 AM, Yaniv Kaul wrote:<br>
><br>
><br>
> On Sat, Oct 15, 2016 at 1:04 AM, Ravi Nori <<a href="mailto:rnori@redhat.com">rnori@redhat.com</a><br>
</span><span class="gmail-">> <mailto:<a href="mailto:rnori@redhat.com">rnori@redhat.com</a>>> wrote:<br>
><br>
> Also can you please try following command to directly obtain token<br>
> from SSO. Can replace engine with FQDN and IP to see if both work<br>
><br>
> curl -v -k -H "Accept: application/json"<br>
> 'https://<engine>:443/ovirt-<wbr>engine/sso/oauth/token?grant_<wbr>type=password&username=admin@<wbr>internal&password=123&scope=<wbr>ovirt-app-api'<br>
><br>
> You should see output similar to the one below<br>
><br>
> {"access_token":"<wbr>K0sBa0D3rLtmNTdMJ-<wbr>Q4FzOgCtGGY2cSFSCwbLkG94te9nDd<wbr>mEzHSizsFaOeNMdwOziIv3l2-<wbr>Uqm8bxWkMpwMA","scope":"ovirt-<wbr>app-api<br>
> ovirt-ext=token-info:authz-<wbr>search<br>
> ovirt-ext=token-info:public-<wbr>authz-search<br>
> ovirt-ext=token-info:validate"<wbr>,"exp":-381399824,"token_type"<wbr>:"bearer"}<br>
><br>
><br>
> Sorry it took me so long to get back to it, but here it is:<br>
> {"access_token":"<wbr>eA8w0DaapkKAQ8tfHakzA-R0l-mjD_<wbr>CsTlAqBaH4iVVjXxQN33poXzt9UhPJ<wbr>LxMU8YOvVNX6LICcxL1EeAiAlw","<wbr>scope":"ovirt-app-api<br>
> ovirt-ext=token-info:authz-<wbr>search<br>
> ovirt-ext=token-info:public-<wbr>authz-search<br>
> ovirt-ext=token-info:validate"<wbr>,"exp":["java.lang.Long",<wbr>1479290132000],"token_type":"<wbr>bearer"}<br>
><br>
<br>
</span>That "java.lang.Long" there is an error, but not related to this<br>
problem, as the SDK doesn't use the "exp" attribute. I guess it is a<br>
side effect of the recent change to use "long" instead of "int", looks<br>
like the JSON library used in the engine doesn't like longs.<br>
<span class="gmail-"><br>
> And here's the difference between the SDK and the manual curl command in<br>
> ssl_access log:<br>
> 192.168.201.1 - - [09/Nov/2016:04:52:19 -0500] "POST<br>
> /ovirt-engine/sso/oauth/token HTTP/1.1" 404 74<br>
> 192.168.201.1 - - [09/Nov/2016:04:55:32 -0500] "GET<br>
> /ovirt-engine/sso/oauth/token?<wbr>grant_type=password&username=<wbr>admin@internal&password=123&<wbr>scope=ovirt-app-api<br>
> HTTP/1.1" 200 295<br>
><br>
<br>
</span>That difference is by design. The SDK uses POST to avoid sending the<br>
credentials (specially the password) as a query parameter, as that is<br>
most probably logged and archived.<br>
<br>
We discovered recently an issue with the Python SDK, due to a bug in the<br>
"pycurl" library:<br>
<br>
Debug mode raises UnicodeDecodeError: 'utf8' codec can't decode byte<br>
0x8d in position 7: invalid start byte<br>
<a href="https://bugzilla.redhat.com/1392878" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/<wbr>1392878</a><br>
<br>
It isn't exactly the same problem, but as the cause of that bug is a<br>
pointer that is used after releasing, it can cause all kinds of strange<br>
effects.<br>
<br>
Please try the latest build of the SDK.<br></blockquote><div><br></div><div>I thought I was:</div><div>python-ovirt-engine-sdk4-4.1.0-0.1.a0.20161108gitaad5627.fc24.x86_64</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<span class="gmail-"><br>
><br>
><br>
> Thanks<br>
><br>
> Ravi<br>
><br>
> On Fri, Oct 14, 2016 at 4:00 PM, Yaniv Kaul <<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a><br>
</span><span class="gmail-">> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>>> wrote:<br>
><br>
> On Oct 14, 2016 7:13 PM, "Ravi Nori" <<a href="mailto:rnori@redhat.com">rnori@redhat.com</a><br>
</span><span class="gmail-">> <mailto:<a href="mailto:rnori@redhat.com">rnori@redhat.com</a>>> wrote:<br>
> ><br>
> > SSO configuration looks good.<br>
> ><br>
> > Can you please share any additional httpd configuration in /etc/httpd/conf.d. Anything to do with LocationMatch for ovirt-engine urls.<br>
><br>
> This is a standard ovirt-system-tests on Lago installation,<br>
> nothing out of the ordinary, but I'll check.<br>
> Y.<br>
><br>
> ><br>
> > On Fri, Oct 14, 2016 at 12:52 PM, Yaniv Kaul <<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a><br>
</span><span class="gmail-">> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>>> wrote:<br>
> >><br>
> >><br>
> >><br>
> >> On Fri, Oct 14, 2016 at 3:50 PM, Ravi Nori <<a href="mailto:rnori@redhat.com">rnori@redhat.com</a><br>
</span><div><div class="gmail-h5">> <mailto:<a href="mailto:rnori@redhat.com">rnori@redhat.com</a>>> wrote:<br>
> >>><br>
> >>> Hi Yaniv,<br>
> >>><br>
> >>> Can you check the output of<br>
> https:://<engine>/ovirt-<wbr>engine/sso/status in your browser and<br>
> see if the SSO service is active.<br>
> >>><br>
> >>> If SSO is deployed, you should see an output similar to the<br>
> one below. Also are you able to login to webadmin using the<br>
> browser?<br>
> >><br>
> >><br>
> >> I am able to login using the webui.<br>
> >><br>
> >>><br>
> >>><br>
> >>> {"status_description":"SSO Webapp<br>
> Deployed","version":"0","<wbr>status":"active"}<br>
> >><br>
> >><br>
> >> Indeed:<br>
> >> {"status_description":"SSO Webapp<br>
> Deployed","version":"0","<wbr>status":"active"}<br>
> >><br>
> >> (not sure what 'version 0' means?)<br>
> >><br>
> >>><br>
> >>><br>
> >>> Please share the content of<br>
> /etc/ovirt-engine/engine.conf.<wbr>d/11-setup-sso.conf<br>
> >><br>
> >><br>
> >> [root@lago-basic-suite-master-<wbr>engine ~]# cat<br>
> /etc/ovirt-engine/engine.conf.<wbr>d/11-setup-sso.conf<br>
> >> ENGINE_SSO_CLIENT_ID="ovirt-<wbr>engine-core"<br>
> >> ENGINE_SSO_CLIENT_SECRET="<wbr>bsOabtD7gE2McwLe80P109UV800XLx<wbr>4O"<br>
> >> ENGINE_SSO_AUTH_URL="https://$<wbr>{ENGINE_FQDN}:443/ovirt-<wbr>engine/sso"<br>
> >><br>
> ENGINE_SSO_SERVICE_URL="<a href="https://localhost:443/ovirt-engine/sso" rel="noreferrer" target="_blank">https:<wbr>//localhost:443/ovirt-engine/<wbr>sso</a><br>
> <<a href="https://localhost:443/ovirt-engine/sso" rel="noreferrer" target="_blank">https://localhost:443/ovirt-<wbr>engine/sso</a>>"<br>
> >> ENGINE_SSO_SERVICE_SSL_VERIFY_<wbr>HOST=false<br>
> >> ENGINE_SSO_SERVICE_SSL_VERIFY_<wbr>CHAIN=true<br>
> >> SSO_ALTERNATE_ENGINE_FQDNS=""<br>
> >> SSO_ENGINE_URL="https://${<wbr>ENGINE_FQDN}:443/ovirt-engine/<wbr>"<br>
> >><br>
> >><br>
> >> Thanks,<br>
> >> Y.<br>
> >><br>
> >><br>
> >>><br>
> >>><br>
> >>> Thanks<br>
> >>><br>
> >>> Ravi<br>
> >>><br>
> >>><br>
> >>><br>
> >>><br>
> >>><br>
> >>> On Fri, Oct 14, 2016 at 7:57 AM, Juan Hernández<br>
</div></div><span class="gmail-">> <<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a> <mailto:<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a>>> wrote:<br>
> >>>><br>
> >>>> On 10/14/2016 01:45 PM, Yaniv Kaul wrote:<br>
> >>>> ><br>
> >>>> ><br>
> >>>> > On Thu, Oct 13, 2016 at 11:13 AM, Juan Hernández<br>
> <<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a> <mailto:<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a>><br>
</span>> >>>> > <mailto:<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a><br>
<div class="gmail-HOEnZb"><div class="gmail-h5">> <mailto:<a href="mailto:jhernand@redhat.com">jhernand@redhat.com</a>>>> wrote:<br>
> >>>> ><br>
> >>>> > On 10/13/2016 12:04 AM, Yaniv Kaul wrote:<br>
> >>>> > > On Fri, Oct 7, 2016 at 10:44 PM, Yaniv Kaul<br>
> <<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>><br>
> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>>><br>
> >>>> > > <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>><br>
> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a> <mailto:<a href="mailto:ykaul@redhat.com">ykaul@redhat.com</a>>>>> wrote:<br>
> >>>> > ><br>
> >>>> > > I'm trying on FC24, using<br>
> >>>> > ><br>
> >>>> ><br>
> python-ovirt-engine-sdk4-4.1.<wbr>0-0.0.20161003git056315d.fc24.<wbr>x86_64 to<br>
> >>>> > > add a DC, and failing - against master. The<br>
> client is unhappy:<br>
> >>>> > > File<br>
> >>>> > ><br>
> >>>> ><br>
> "/home/ykaul/ovirt-system-<wbr>tests/basic-suite-master/test-<wbr>scenarios/002_bootstrap.py",<br>
> >>>> > > line 98, in add_dc4<br>
> >>>> > ><br>
> version=sdk4.types.Version(<wbr>major=DC_VER_MAJ,minor=DC_VER_<wbr>MIN),<br>
> >>>> > > File<br>
> "/usr/lib64/python2.7/site-<wbr>packages/ovirtsdk4/services.<wbr>py",<br>
> >>>> > > line 4347, in add<br>
> >>>> > > response = self._connection.send(request)<br>
> >>>> > > File<br>
> "/usr/lib64/python2.7/site-<wbr>packages/ovirtsdk4/__init__.<wbr>py",<br>
> >>>> > > line 276, in send<br>
> >>>> > > return self.__send(request)<br>
> >>>> > > File<br>
> "/usr/lib64/python2.7/site-<wbr>packages/ovirtsdk4/__init__.<wbr>py",<br>
> >>>> > > line 298, in __send<br>
> >>>> > > self._sso_token = self._get_access_token()<br>
> >>>> > > File<br>
> "/usr/lib64/python2.7/site-<wbr>packages/ovirtsdk4/__init__.<wbr>py",<br>
> >>>> > > line 460, in _get_access_token<br>
> >>>> > > sso_response =<br>
> self._get_sso_response(self._<wbr>sso_url,<br>
> >>>> > post_data)<br>
> >>>> > > File<br>
> "/usr/lib64/python2.7/site-<wbr>packages/ovirtsdk4/__init__.<wbr>py",<br>
> >>>> > > line 498, in _get_sso_response<br>
> >>>> > > return<br>
> json.loads(body_buf.getvalue()<wbr>.decode('utf-8'))<br>
> >>>> > > File "/usr/lib64/python2.7/json/__<wbr>init__.py",<br>
> line 339, in loads<br>
> >>>> > > return _default_decoder.decode(s)<br>
> >>>> > > File "/usr/lib64/python2.7/json/<wbr>decoder.py",<br>
> line 364, in decode<br>
> >>>> > > obj, end = self.raw_decode(s, idx=_w(s,<br>
> 0).end())<br>
> >>>> > > File "/usr/lib64/python2.7/json/<wbr>decoder.py",<br>
> line 382, in<br>
> >>>> > raw_decode<br>
> >>>> > > raise ValueError("No JSON object could be<br>
> decoded")<br>
> >>>> > > ValueError: No JSON object could be decoded<br>
> >>>> > ><br>
> >>>> > ><br>
> >>>> > > Surprisingly, I now can't find that RPM of this<br>
> SDK in<br>
> >>>> > > <a href="http://resources.ovirt.org" rel="noreferrer" target="_blank">resources.ovirt.org</a><br>
> <<a href="http://resources.ovirt.org" rel="noreferrer" target="_blank">http://resources.ovirt.org</a>> <<a href="http://resources.ovirt.org" rel="noreferrer" target="_blank">http://resources.ovirt.org</a>><br>
> >>>> > <<a href="http://resources.ovirt.org" rel="noreferrer" target="_blank">http://resources.ovirt.org</a>> now.<br>
> >>>> > ><br>
> >>>> > > I've tried<br>
> >>>> > > with<br>
> >>>> ><br>
> <a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a>><br>
> >>>> ><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a>>><br>
> >>>> > ><br>
> >>>> ><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a>><br>
> >>>> ><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a><br>
> <<a href="http://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/fc24/x86_64/python-ovirt-engine-sdk4-4.0.0-0.1.20161004gitf94eeb5.fc24.x86_64.rpm" rel="noreferrer" target="_blank">http://resources.ovirt.org/<wbr>pub/ovirt-master-snapshot/rpm/<wbr>fc24/x86_64/python-ovirt-<wbr>engine-sdk4-4.0.0-0.1.<wbr>20161004gitf94eeb5.fc24.x86_<wbr>64.rpm</a>>>><br>
> >>>> > ><br>
> >>>> > > - same result.<br>
> >>>> > ><br>
> >>>> > > Did not see anything obvious on server or<br>
> engine logs.<br>
> >>>> > > The code:<br>
> >>>> > > def add_dc4(api):<br>
> >>>> > > nt.assert_true(api != None)<br>
> >>>> > > dcs_service =<br>
> api.system_service().data_<wbr>centers_service()<br>
> >>>> > > nt.assert_true(<br>
> >>>> > > dc = dcs_service.add(<br>
> >>>> > > sdk4.types.DataCenter(<br>
> >>>> > > name=DC_NAME4,<br>
> >>>> > > description='APIv4 DC',<br>
> >>>> > > local=False,<br>
> >>>> > ><br>
> >>>> > ><br>
> version=sdk4.types.Version(<wbr>major=DC_VER_MAJ,minor=DC_VER_<wbr>MIN),<br>
> >>>> > > ),<br>
> >>>> > > )<br>
> >>>> > > )<br>
> >>>> > ><br>
> >>>> > ><br>
> >>>> > > And the api object is from:<br>
> >>>> > > return sdk4.Connection(<br>
> >>>> > > url=url,<br>
> >>>> > > username=constants.ENGINE_<wbr>USER,<br>
> >>>> > ><br>
> >>>> > password=str(self.metadata['<wbr>ovirt-engine-password']),<br>
> >>>> > > insecure=True,<br>
> >>>> > > debug=True,<br>
> >>>> > > )<br>
> >>>> > ><br>
> >>>> > ><br>
> >>>> > > The clue is actually on the HTTPd logs:<br>
> >>>> > > 192.168.203.1 - - [12/Oct/2016:17:56:27 -0400] "POST<br>
> >>>> > > /ovirt-engine/sso/oauth/token HTTP/1.1" 404 74<br>
> >>>> > ><br>
> >>>> > > And indeed, from the deubg log:<br>
> >>>> > > begin captured logging << --------------------\n<br>
> >>>> > > root: DEBUG: Trying 192.168.203.3...\n<br>
> >>>> > > root: DEBUG: Connected to 192.168.203.3<br>
> (192.168.203.3) port 443<br>
> >>>> > (#0)\n<br>
> >>>> > > root: DEBUG: Initializing NSS with certpath:<br>
> sql:/etc/pki/nssdb\n<br>
> >>>> > > root: DEBUG: skipping SSL peer certificate<br>
> verification\n<br>
> >>>> > > root: DEBUG: ALPN/NPN, server did not agree to a<br>
> protocol\n<br>
> >>>> > > root: DEBUG: SSL connection using<br>
> >>>> > TLS_ECDHE_RSA_WITH_AES_128_<wbr>GCM_SHA256\n<br>
> >>>> > > root: DEBUG: Server certificate:\n<br>
> >>>> > > root: DEBUG: subject: CN=engine,O=Test,C=US\n<br>
> >>>> > > root: DEBUG: start date: Oct 11 21:55:29 2016 GMT\n<br>
> >>>> > > root: DEBUG: expire date: Sep 16 21:55:29 2021 GMT\n<br>
> >>>> > > root: DEBUG: common name: engine\nroot: DEBUG: issuer:<br>
> >>>> > > CN=engine.38998,O=Test,C=US\n<br>
> >>>> > > *root: DEBUG: POST /ovirt-engine/sso/oauth/token<br>
> HTTP/1.1\n*<br>
> >>>> > > *root: DEBUG: Host: 192.168.203.3\n*<br>
> >>>> > > *root: DEBUG: User-Agent: PythonSDK/4.1.0a0\n*<br>
> >>>> > > *root: DEBUG: Accept: application/json\n*<br>
> >>>> > > *root: DEBUG: Content-Length: 78\n*<br>
> >>>> > > *root: DEBUG: Content-Type:<br>
> application/x-www-form-<wbr>urlencoded\nroot:<br>
> >>>> > > DEBUG:<br>
> >>>> > ><br>
> >>>> ><br>
> username=admin%40internal&<wbr>scope=ovirt-app-api&password=<wbr>123&grant_type=password\n*<br>
> >>>> > > *root: DEBUG: upload completely sent off: 78 out of<br>
> 78 bytes\n*<br>
> >>>> > > *root: DEBUG: HTTP/1.1 404 Not Found\n*<br>
> >>>> > > *root: DEBUG: Date: Wed, 12 Oct 2016 21:56:27 GMT\n*<br>
> >>>> > > *root: DEBUG: Server: Apache/2.4.6 (CentOS)<br>
> OpenSSL/1.0.1e-fips\n*<br>
> >>>> > > *root: DEBUG: Content-Length: 74\n*<br>
> >>>> > > *root: DEBUG: Content-Type: text/html; charset=UTF-8\n*<br>
> >>>> > > *root: DEBUG: \n*<br>
> >>>> > > *root: DEBUG:<br>
> <html><head><title>Error</<wbr>title></head><body>404 - Not<br>
> >>>> > > Found</body></html>\n*<br>
> >>>> > > root: DEBUG: Connection #0 to host 192.168.203.3<br>
> left intact\n<br>
> >>>> > > --------------------- >> end captured logging<br>
> >>>> > ><br>
> >>>> ><br>
> >>>> > That definitively looks like version 3 of the engine.<br>
> Either that or<br>
> >>>> > version 4 of the engine with web server configuration<br>
> modified so that<br>
> >>>> > the SSO doesn't work as expected.<br>
> >>>> ><br>
> >>>> > What do you get if you run this against that server?<br>
> >>>> ><br>
> >>>> ><br>
> >>>> > Attached.<br>
> >>>> > Y.<br>
> >>>> ><br>
> >>>><br>
> >>>> OK, that is version 4.1 of the engine, so next question is<br>
> why the SSO<br>
> >>>> service is not responding. Do you see any message in<br>
> >>>> /var/log/ovirt-engine/server.<wbr>log about "enginesso.war" not<br>
> being<br>
> >>>> deployed? Did you do any modification to the<br>
> >>>> /etc/httpd/conf.d/z-ovirt-<wbr>engine.conf file?<br>
> >>>><br>
> >>>> Ravi, Martin, any idea of why the SSO service may not be<br>
> working?<br>
> >>>><br>
> >>>> ><br>
> >>>> ><br>
> >>>> > curl \<br>
> >>>> > --verbose \<br>
> >>>> > --insecure \<br>
> >>>> > --request GET \<br>
> >>>> > --user "admin@internal:yourpassword" \<br>
> >>>> > --header "Version: 4" \<br>
> >>>> > --header "Accept: application/xml" \<br>
> >>>> > "<a href="https://thatserver/ovirt-engine/api" rel="noreferrer" target="_blank">https://thatserver/ovirt-<wbr>engine/api</a><br>
> <<a href="https://thatserver/ovirt-engine/api" rel="noreferrer" target="_blank">https://thatserver/ovirt-<wbr>engine/api</a>><br>
> >>>> > <<a href="https://thatserver/ovirt-engine/api" rel="noreferrer" target="_blank">https://thatserver/ovirt-<wbr>engine/api</a><br>
> <<a href="https://thatserver/ovirt-engine/api" rel="noreferrer" target="_blank">https://thatserver/ovirt-<wbr>engine/api</a>>>"<br>
> >>>> ><br>
> >>>><br>
> >>>><br>
> >>>> --<br>
> >>>> Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea<br>
> 3, planta<br>
> >>>> 3ºD, 28016 Madrid, Spain<br>
> >>>> Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941<br>
> - Red Hat S.L.<br>
> >>><br>
> >>><br>
> >><br>
> ><br>
><br>
><br>
><br>
<br>
<br>
--<br>
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>
3ºD, 28016 Madrid, Spain<br>
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.<br>
</div></div></blockquote></div><br></div></div>