Many thanks Itamar, I had not noticed that bug.<br>The -addPermissions flag indeed did the trick.<br><br>- DHC<br><br><div class="gmail_quote">On Mon, Sep 24, 2012 at 4:58 PM, Itamar Heim <span dir="ltr"><<a href="mailto:iheim@redhat.com" target="_blank">iheim@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 09/24/2012 11:31 PM, Dead Horse wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I have built ovirt-engine from the latest GIT master over the past few<br>
nights and am running into a MS AD/LDAP error. This same MS AD setup<br>
works fine with Released 3.1.<br>
<br>
Current nightly builds from jenkins are not building all the GWT<br>
permutations (Internet Explorer for example) so I have been attempting<br>
to re-build the engine so I can test using Internet Explorer.<br>
It would be nice if the nightly jenkins builds could be changed to do<br>
the build with all GWT permutations enabled.<br>
<br>
I am building in an FC17 environment with updates applied and current as<br>
of today. Accordingly maven3 and all build dependencies are installed<br>
from the FC17 repositories.<br>
I tried the latest nightly from Jenkins and it does not exhibit the<br>
below error. I am guessing I must not have the build recipe/env correct.<br>
</blockquote>
<br></div>
Bug 858769 - manage-domains: once the domain is added admin@internal can't search in that domain<br>
<br>
I assume you are not using -addPermissions during the manage domains command - it should workaround it.<br>
I know yair is working on analyzing this.<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
<br>
The AD error I am running into looks like:<br>
<br>
2012-09-24 16:15:44,037 ERROR<br>
[org.ovirt.engine.core.bll.<u></u>adbroker.DirectorySearcher]<br>
(ajp--127.0.0.1-8702-4) Failed ldap search server<br></div>
LDAP://<a href="http://someserver.foo.com:389" target="_blank">someserver.foo.com:389</a> <<a href="http://someserver.foo.com:389" target="_blank">http://someserver.foo.com:389</a><u></u>> due to<div><div class="h5">
<br>
Kerberos error. Please check log for further details.. We should not try<br>
the next server<br>
2012-09-24 16:15:44,039 ERROR<br>
[org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPIDirContextAuthentication<u></u>Strategy]<br>
(ajp--127.0.0.1-8702-2) Error from Kerberos: java.lang.NullPointerException<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPICallbackHandler.handle(<u></u>GSSAPICallbackHandler.java:47)<br>
at<br>
javax.security.auth.login.<u></u>LoginContext$<u></u>SecureCallbackHandler$1.run(<u></u>LoginContext.java:969)<br>
at<br>
javax.security.auth.login.<u></u>LoginContext$<u></u>SecureCallbackHandler$1.run(<u></u>LoginContext.java:966)<br>
at java.security.<u></u>AccessController.doPrivileged(<u></u>Native Method)<br>
at<br>
javax.security.auth.login.<u></u>LoginContext$<u></u>SecureCallbackHandler.handle(<u></u>LoginContext.java:965)<br>
at<br>
com.sun.security.auth.module.<u></u>Krb5LoginModule.promptForPass(<u></u>Krb5LoginModule.java:870)<br>
at<br>
com.sun.security.auth.module.<u></u>Krb5LoginModule.<u></u>attemptAuthentication(<u></u>Krb5LoginModule.java:715)<br>
at<br>
com.sun.security.auth.module.<u></u>Krb5LoginModule.login(<u></u>Krb5LoginModule.java:580)<br>
at sun.reflect.<u></u>NativeMethodAccessorImpl.<u></u>invoke0(Native Method)<br>
at<br>
sun.reflect.<u></u>NativeMethodAccessorImpl.<u></u>invoke(<u></u>NativeMethodAccessorImpl.java:<u></u>57)<br>
at<br>
sun.reflect.<u></u>DelegatingMethodAccessorImpl.<u></u>invoke(<u></u>DelegatingMethodAccessorImpl.<u></u>java:43)<br>
at java.lang.reflect.Method.<u></u>invoke(Method.java:601)<br>
at javax.security.auth.login.<u></u>LoginContext.invoke(<u></u>LoginContext.java:784)<br>
at<br>
javax.security.auth.login.<u></u>LoginContext.access$000(<u></u>LoginContext.java:203)<br>
at javax.security.auth.login.<u></u>LoginContext$4.run(<u></u>LoginContext.java:698)<br>
at javax.security.auth.login.<u></u>LoginContext$4.run(<u></u>LoginContext.java:696)<br>
at java.security.<u></u>AccessController.doPrivileged(<u></u>Native Method)<br>
at<br>
javax.security.auth.login.<u></u>LoginContext.invokePriv(<u></u>LoginContext.java:695)<br>
at javax.security.auth.login.<u></u>LoginContext.login(<u></u>LoginContext.java:594)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.authenticateToKDC(<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.java:127)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.explicitAuth(<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.java:119)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.authenticate(<u></u>GSSAPIDirContextAuthentication<u></u>Strategy.java:111)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>GSSAPILdapTemplateWrapper.<u></u>useAuthenticationStrategy(<u></u>GSSAPILdapTemplateWrapper.<u></u>java:86)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>PrepareLdapConnectionTask.<u></u>call(<u></u>PrepareLdapConnectionTask.<u></u>java:56)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.DirectorySearcher.<u></u>find(DirectorySearcher.java:<u></u>103)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.DirectorySearcher.<u></u>FindAll(DirectorySearcher.<u></u>java:48)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>LdapSearchGroupsByQueryCommand<u></u>.executeQuery(<u></u>LdapSearchGroupsByQueryCommand<u></u>.java:22)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.<u></u>LdapBrokerCommandBase.execute(<u></u>LdapBrokerCommandBase.java:69)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>adbroker.LdapBrokerBase.<u></u>RunAdAction(LdapBrokerBase.<u></u>java:18)<br>
at org.ovirt.engine.core.bll.<u></u>SearchQuery.adSearch(<u></u>SearchQuery.java:194)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>SearchQuery.searchAdGroups(<u></u>SearchQuery.java:172)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>SearchQuery.<u></u>executeQueryCommand(<u></u>SearchQuery.java:79)<br>
at<br>
org.ovirt.engine.core.bll.<u></u>QueriesCommandBase.<u></u>ExecuteCommand(<u></u>QueriesCommandBase.java:71)<br>
at<br>
org.ovirt.engine.core.dal.<u></u>VdcCommandBase.Execute(<u></u>VdcCommandBase.java:41)<br>
at org.ovirt.engine.core.bll.<u></u>Backend.runQueryImpl(Backend.<u></u>java:384)<br>
at org.ovirt.engine.core.bll.<u></u>Backend.RunQuery(Backend.java:<u></u>367)<br>
at sun.reflect.<u></u>GeneratedMethodAccessor12.<u></u>invoke(Unknown Source)<br>
at<br>
sun.reflect.<u></u>DelegatingMethodAccessorImpl.<u></u>invoke(<u></u>DelegatingMethodAccessorImpl.<u></u>java:43)<br>
at java.lang.reflect.Method.<u></u>invoke(Method.java:601)<br>
at<br>
org.jboss.as.ee.component.<u></u>ManagedReferenceMethodIntercep<u></u>torFactory$<u></u>ManagedReferenceMethodIntercep<u></u>tor.processInvocation(<u></u>ManagedReferenceMethodIntercep<u></u>torFactory.java:72)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext$Invocation.<u></u>proceed(InterceptorContext.<u></u>java:374)<br>
at<br>
org.ovirt.engine.core.utils.<u></u>ThreadLocalSessionCleanerInter<u></u>ceptor.<u></u>injectWebContextToThreadLocal(<u></u>ThreadLocalSessionCleanerInter<u></u>ceptor.java:11)<br>
at sun.reflect.<u></u>GeneratedMethodAccessor7.<u></u>invoke(Unknown Source)<br>
at<br>
sun.reflect.<u></u>DelegatingMethodAccessorImpl.<u></u>invoke(<u></u>DelegatingMethodAccessorImpl.<u></u>java:43)<br>
at java.lang.reflect.Method.<u></u>invoke(Method.java:601)<br>
at<br>
org.jboss.as.ee.component.<u></u>ManagedReferenceLifecycleMetho<u></u>dInterceptorFactory$<u></u>ManagedReferenceLifecycleMetho<u></u>dInterceptor.<u></u>processInvocation(<u></u>ManagedReferenceLifecycleMetho<u></u>dInterceptorFactory.java:123)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>WeavedInterceptor.<u></u>processInvocation(<u></u>WeavedInterceptor.java:53)<br>
at<br>
org.jboss.as.ee.component.<u></u>interceptors.<u></u>UserInterceptorFactory$1.<u></u>processInvocation(<u></u>UserInterceptorFactory.java:<u></u>36)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>InitialInterceptor.<u></u>processInvocation(<u></u>InitialInterceptor.java:21)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>ChainedInterceptor.<u></u>processInvocation(<u></u>ChainedInterceptor.java:61)<br>
at<br>
org.jboss.as.ee.component.<u></u>interceptors.<u></u>ComponentDispatcherInterceptor<u></u>.processInvocation(<u></u>ComponentDispatcherInterceptor<u></u>.java:53)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ejb3.component.<u></u>singleton.<u></u>SingletonComponentInstanceAsso<u></u>ciationInterceptor.<u></u>processInvocation(<u></u>SingletonComponentInstanceAsso<u></u>ciationInterceptor.java:53)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ejb3.tx.<u></u>CMTTxInterceptor.invokeInNoTx(<u></u>CMTTxInterceptor.java:211)<br>
at<br>
org.jboss.as.ejb3.tx.<u></u>CMTTxInterceptor.supports(<u></u>CMTTxInterceptor.java:363)<br>
at<br>
org.jboss.as.ejb3.tx.<u></u>CMTTxInterceptor.<u></u>processInvocation(<u></u>CMTTxInterceptor.java:194)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ejb3.component.<u></u>interceptors.<u></u>CurrentInvocationContextInterc<u></u>eptor.processInvocation(<u></u>CurrentInvocationContextInterc<u></u>eptor.java:41)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ejb3.component.<u></u>interceptors.<u></u>LoggingInterceptor.<u></u>processInvocation(<u></u>LoggingInterceptor.java:59)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ee.component.<u></u>NamespaceContextInterceptor.<u></u>processInvocation(<u></u>NamespaceContextInterceptor.<u></u>java:50)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.as.ee.component.<u></u>TCCLInterceptor.<u></u>processInvocation(<u></u>TCCLInterceptor.java:45)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>ChainedInterceptor.<u></u>processInvocation(<u></u>ChainedInterceptor.java:61)<br>
at<br>
org.jboss.as.ee.component.<u></u>ViewService$View.invoke(<u></u>ViewService.java:165)<br>
at<br>
org.jboss.as.ee.component.<u></u>ViewDescription$1.<u></u>processInvocation(<u></u>ViewDescription.java:173)<br>
at<br>
org.jboss.invocation.<u></u>InterceptorContext.proceed(<u></u>InterceptorContext.java:288)<br>
at<br>
org.jboss.invocation.<u></u>ChainedInterceptor.<u></u>processInvocation(<u></u>ChainedInterceptor.java:61)<br>
at<br>
org.jboss.as.ee.component.<u></u>ProxyInvocationHandler.invoke(<u></u>ProxyInvocationHandler.java:<u></u>72)<br>
at<br>
org.ovirt.engine.core.common.<u></u>interfaces.BackendLocal$$$<u></u>view9.RunQuery(Unknown<br>
Source)<br>
at<br>
org.ovirt.engine.ui.frontend.<u></u>server.gwt.<u></u>GenericApiGWTServiceImpl.<u></u>RunQuery(<u></u>GenericApiGWTServiceImpl.java:<u></u>51)<br>
at sun.reflect.<u></u>GeneratedMethodAccessor15.<u></u>invoke(Unknown Source)<br>
at<br>
sun.reflect.<u></u>DelegatingMethodAccessorImpl.<u></u>invoke(<u></u>DelegatingMethodAccessorImpl.<u></u>java:43)<br>
at java.lang.reflect.Method.<u></u>invoke(Method.java:601)<br>
at com.google.gwt.rpc.server.RPC.<u></u>invokeAndStreamResponse(RPC.<u></u>java:196)<br>
at<br>
com.google.gwt.rpc.server.<u></u>RpcServlet.processCall(<u></u>RpcServlet.java:161)<br>
at<br>
com.google.gwt.rpc.server.<u></u>RpcServlet.processPost(<u></u>RpcServlet.java:222)<br>
at<br>
com.google.gwt.user.server.<u></u>rpc.<u></u>AbstractRemoteServiceServlet.<u></u>doPost(<u></u>AbstractRemoteServiceServlet.<u></u>java:62)<br>
at javax.servlet.http.<u></u>HttpServlet.service(<u></u>HttpServlet.java:754)<br>
at javax.servlet.http.<u></u>HttpServlet.service(<u></u>HttpServlet.java:847)<br>
at<br>
org.apache.catalina.core.<u></u>ApplicationFilterChain.<u></u>internalDoFilter(<u></u>ApplicationFilterChain.java:<u></u>329)<br>
at<br>
org.apache.catalina.core.<u></u>ApplicationFilterChain.<u></u>doFilter(<u></u>ApplicationFilterChain.java:<u></u>248)<br>
at<br>
org.apache.catalina.core.<u></u>StandardWrapperValve.invoke(<u></u>StandardWrapperValve.java:275)<br>
at<br>
org.apache.catalina.core.<u></u>StandardContextValve.invoke(<u></u>StandardContextValve.java:161)<br>
at<br>
org.apache.catalina.<u></u>authenticator.<u></u>AuthenticatorBase.invoke(<u></u>AuthenticatorBase.java:489)<br>
at<br>
org.jboss.as.web.security.<u></u>SecurityContextAssociationValv<u></u>e.invoke(<u></u>SecurityContextAssociationValv<u></u>e.java:153)<br>
at<br>
org.apache.catalina.core.<u></u>StandardHostValve.invoke(<u></u>StandardHostValve.java:155)<br>
at<br>
org.apache.catalina.valves.<u></u>ErrorReportValve.invoke(<u></u>ErrorReportValve.java:102)<br>
at org.jboss.web.rewrite.<u></u>RewriteValve.invoke(<u></u>RewriteValve.java:466)<br>
at<br>
org.apache.catalina.core.<u></u>StandardEngineValve.invoke(<u></u>StandardEngineValve.java:109)<br>
at<br>
org.apache.catalina.connector.<u></u>CoyoteAdapter.service(<u></u>CoyoteAdapter.java:368)<br>
at org.apache.coyote.ajp.<u></u>AjpProcessor.process(<u></u>AjpProcessor.java:505)<br>
at<br>
org.apache.coyote.ajp.<u></u>AjpProtocol$<u></u>AjpConnectionHandler.process(<u></u>AjpProtocol.java:445)<br>
at<br>
<a href="http://org.apache.tomcat.util.net" target="_blank">org.apache.tomcat.util.net</a>.<u></u>JIoEndpoint$Worker.run(<u></u>JIoEndpoint.java:930)<br>
at java.lang.Thread.run(Thread.<u></u>java:722)<br>
<br>
- DHC<br>
<br>
<br></div></div>
______________________________<u></u>_________________<br>
Engine-devel mailing list<br>
<a href="mailto:Engine-devel@ovirt.org" target="_blank">Engine-devel@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/engine-devel" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/engine-devel</a><br>
<br>
</blockquote>
<br>
<br>
</blockquote></div><br>