<html>
  <head>
    <meta content="text/html; charset=utf-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Le 28/09/2016 à 20:47, Yaniv Kaul a
      écrit :<br>
    </div>
    <blockquote
cite="mid:CAJgorsbEFRspPi6Q1E4ZJ5r9vMJ0NE6mNAP4Do-kLY4-3WhDaQ@mail.gmail.com"
      type="cite">
      <div dir="ltr"><br>
        <div class="gmail_extra">
          <div class="gmail_quote">
            <blockquote class="gmail_quote" style="margin:0px 0px 0px
              0.8ex;border-left:1px solid
              rgb(204,204,204);padding-left:1ex">
              Apart that, by connecting into the engine VM, I saw that
              the engine process was running, so I tried to access the
              web GUI, by running an SSH connection to the bare-metal
              host :<br>
              ssh -L 8443:<a moz-do-not-send="true"
                href="http://192.168.200.4:443" rel="noreferrer"
                target="_blank">192.168.200.4:443</a> <a
                moz-do-not-send="true"
                href="mailto:root@serv-hv-dev01.sdis.isere.fr"
                target="_blank">root@serv-hv-dev01.sdis.isere.<wbr>fr</a><br>
              <br>
              <br>
              Accessing <a moz-do-not-send="true"
                href="https://localhost:8443/" rel="noreferrer"
                target="_blank">https://localhost:8443/</a> is working,
              but when trying to access the login screen, I'm left with
              :<br>
              "The client is not authorized to request an authorization.
              It's required to access the system using FQDN."<br>
            </blockquote>
            <div><br>
            </div>
            <div>Add to your /etc/hosts</div>
            <div>192.168.200.4 engine</div>
            <div><br>
            </div>
            <div>And connect to <a moz-do-not-send="true"
                href="https://engine">https://engine</a></div>
          </div>
        </div>
      </div>
    </blockquote>
    <br>
    Yaniv,<br>
    <br>
    <ul>
      <li> If you mean : "Change the /etc/hosts of the bare-metal server
        which is running Lago", I already tried that :</li>
    </ul>
    <tt>root@serv-hv-dev01:/etc# cat /etc/hosts</tt><tt><br>
    </tt><tt>127.0.0.1   localhost localhost.localdomain localhost4
      localhost4.localdomain4</tt><tt><br>
    </tt><tt>::1         localhost localhost.localdomain localhost6
      localhost6.localdomain6</tt><tt><br>
    </tt><tt>192.168.200.4    engine
      lago-basic-suite-4-0-engine.lago.local</tt><br>
    <br>
    And of course, I adapted the "ssh -L" connection according to it :<br>
    <tt>ssh -L 8443:engine:443 root@serv-hv-dev01</tt><br>
    or<br>
    <tt>ssh -L 8443:lago-basic-suite-4-0-engine.lago.local:443
      root@serv-hv-dev01</tt><br>
    <br>
    <ul>
      <li>If you mean to change the /etc/hosts of the computer I'm
        initiating the ssh connection from, it does not seem relevant as
        it can not reach the internal 192.168.200/24 virtual subnet.<br>
      </li>
    </ul>
    <ul>
      <li>That's enough HTML email formating for me this year</li>
    </ul>
    <p>In the engine's /var/log/ovirt-engine/engine.log, I clearly see
      the exception raised with the same error message :</p>
    <p><tt>2016-09-28 16:00:58,922 DEBUG
        [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
        Parameter app_url not found request, using default value</tt><tt><br>
      </tt><tt>2016-09-28 16:00:58,923 ERROR
        [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
        The client is not authorized to request an authorization. It's
        required to access the system using FQDN.</tt><tt><br>
      </tt><tt>2016-09-28 16:00:58,923 DEBUG
        [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
        Exception: org.ovirt.engine.core.sso.utils.OAuthException: The
        client is not authorized to request an authorization. It's
        required to access the system using FQDN.</tt><tt><br>
      </tt><tt>        at
org.ovirt.engine.core.sso.utils.SsoUtils.validateClientRequest(SsoUtils.java:460)
        [enginesso.jar:]</tt><tt><br>
      </tt><tt>        at
org.ovirt.engine.core.sso.servlets.OAuthAuthorizeServlet.service(OAuthAuthorizeServlet.java:51)
        [enginesso.jar:]</tt><tt><br>
      </tt><tt>        at
        javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
        [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]</tt><tt><br>
      </tt><tt>        at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
        [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</tt><tt><br>
      </tt><tt>        at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
        [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</tt><tt><br>
      </tt><tt>and so on...</tt></p>
    --
    <pre class="moz-signature" cols="72">Nicolas ECARNOT
</pre>
  </body>
</html>