<div dir="ltr">Yes. You're right. The cert that is generated in the setup process. But the fingerprints are different between what the setup process says at the end and what the cert presents with on initial connection in the browser.<br>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jul 18, 2013 at 8:42 AM, Alon Bar-Lev <span dir="ltr"><<a href="mailto:alonbl@redhat.com" target="_blank">alonbl@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im"><br>
<br>
----- Original Message -----<br>
> From: "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>><br>
> To: "Alon Bar-Lev" <<a href="mailto:alonbl@redhat.com">alonbl@redhat.com</a>><br>
> Cc: <a href="mailto:users@ovirt.org">users@ovirt.org</a>, "Alex Lourie" <<a href="mailto:alourie@redhat.com">alourie@redhat.com</a>>, "Moran Goldboim" <<a href="mailto:mgoldboi@redhat.com">mgoldboi@redhat.com</a>>, "Itamar Heim"<br>
> <<a href="mailto:iheim@redhat.com">iheim@redhat.com</a>><br>
</div><div class="im">> Sent: Thursday, July 18, 2013 3:38:49 PM<br>
> Subject: Re: [Users] 3.2.2 allinone install fails on CentOS 6.4<br>
><br>
</div><div class="im">> Woo!<br>
><br>
> Found the problem (I think). ipa-server was also installed on the same<br>
> system. When ovirt ran, it detected this and suggested using ports 8700 and<br>
> 8701 which I used. Apparently jboss uses those ports? I removed ipa-server<br>
> and had options to configure new ports for engine to use. I put in 8700 and<br>
> 8701 but the installer said "NO!" and noted that jboss was already claiming<br>
> those ports.<br>
><br>
> So I'm in but there was a cert problem. The SHA1 fingerprint reported by<br>
> the engine-setup was NOT the one presented by the self-signed security cert<br>
> on login.<br>
<br>
</div>The SSL certificate is not self-signed, it is signed by the CA certificate the setup enrolls.<br>
<div class="HOEnZb"><div class="h5"><br>
<br>
><br>
> On Thu, Jul 18, 2013 at 7:52 AM, Alon Bar-Lev <<a href="mailto:alonbl@redhat.com">alonbl@redhat.com</a>> wrote:<br>
><br>
> ><br>
> ><br>
> > ----- Original Message -----<br>
> > > From: "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>><br>
> > > To: "Alon Bar-Lev" <<a href="mailto:alonbl@redhat.com">alonbl@redhat.com</a>><br>
> > > Cc: <a href="mailto:users@ovirt.org">users@ovirt.org</a>, "Alex Lourie" <<a href="mailto:alourie@redhat.com">alourie@redhat.com</a>>, "Moran<br>
> > Goldboim" <<a href="mailto:mgoldboi@redhat.com">mgoldboi@redhat.com</a>>, "Itamar Heim"<br>
> > > <<a href="mailto:iheim@redhat.com">iheim@redhat.com</a>><br>
> > > Sent: Thursday, July 18, 2013 2:45:06 PM<br>
> > > Subject: Re: [Users] 3.2.2 allinone install fails on CentOS 6.4<br>
> > ><br>
> > > Will do. Suggested version? I can't tell from ovirt site which engine has<br>
> > > apache integrated. Or am I looking for jboss-as integrated with apache?<br>
> > ><br>
> ><br>
> > This is a new installation, right?<br>
> > If it is, please start from scratch and when prompted select to configure<br>
> > apache.<br>
> > Execute:<br>
> > # engine-cleanup<br>
> > # engine-setup<br>
> ><br>
> > If you need to preserve this system then simplest method for now is to:<br>
> > 1. copy apache.p12 to jboss.p12<br>
> > 2. chown jboss.p12 to ovirt and set mode of 0600.<br>
> ><br>
> > ><br>
> > > On Thu, Jul 18, 2013 at 3:05 AM, Alon Bar-Lev <<a href="mailto:alonbl@redhat.com">alonbl@redhat.com</a>> wrote:<br>
> > ><br>
> > > ><br>
> > > ><br>
> > > ><br>
> > > > ----- Original Message -----<br>
> > > > > From: "Itamar Heim" <<a href="mailto:iheim@redhat.com">iheim@redhat.com</a>><br>
> > > > > To: "Jim Kinney" <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>><br>
> > > > > Cc: <a href="mailto:users@ovirt.org">users@ovirt.org</a>, "Alex Lourie" <<a href="mailto:alourie@redhat.com">alourie@redhat.com</a>>, "Alon<br>
> > Bar-Lev"<br>
> > > > <<a href="mailto:alonbl@redhat.com">alonbl@redhat.com</a>>, "Moran Goldboim"<br>
> > > > > <<a href="mailto:mgoldboi@redhat.com">mgoldboi@redhat.com</a>><br>
> > > > > Sent: Thursday, July 18, 2013 6:42:02 AM<br>
> > > > > Subject: Re: [Users] 3.2.2 allinone install fails on CentOS 6.4<br>
> > > > ><br>
> > > > > On 07/17/2013 11:55 PM, Jim Kinney wrote:<br>
> > > > > > I'm tying to install $STABLE (3.2.2) on CentOS 6.4 . I have the<br>
> > repo<br>
> > > > for<br>
> > > > > > the el6 from ovirt.<br>
> > > > ><br>
> > > > > this looks like<br>
> > > > > packaging: Creating keystore for jboss use<br>
> > > ><br>
> > > > Indeed.<br>
> > > ><br>
> > > > Jim, I suggest you install engine with apache integration, apache<br>
> > > > integration is forced in 3.3 so better to be ready.<br>
> > > ><br>
> > > > ><br>
> > > > > Currently jboss uses apache.p12 keystore file. In cases<br>
> > > > > where apache is not used for proxying, jboss tries to<br>
> > > > > use this file directly and fails on permissions.<br>
> > > > ><br>
> > > > > This patch tries to resolve the issue by adding an additional<br>
> > > > > keystore jboss.p12 during setup/upgrade for the use by the jboss.<br>
> > > > ><br>
> > > > > Change-Id: I22d71d9de011e8af4bde26d9e2a048a6387ce70f<br>
> > > > > Signed-off-by: Alex Lourie <<a href="mailto:alourie@redhat.com">alourie@redhat.com</a>><br>
> > > > ><br>
> > > > > <a href="http://gerrit.ovirt.org/#/c/12374/" target="_blank">http://gerrit.ovirt.org/#/c/12374/</a><br>
> > > > ><br>
> > > > > alex - was it backported to 3.2?<br>
> > > > > i also see some other potentially relevant patches were backported to<br>
> > > > > 3.2.2 by alon - shouldn't we refresh the build for this?<br>
> > > > ><br>
> > > ><br>
> > <a href="http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=shortlog;h=refs%2Fheads%2Fengine_3.2" target="_blank">http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=shortlog;h=refs%2Fheads%2Fengine_3.2</a><br>
> > > > ><br>
> > > > > ><br>
> > > > > > Before the engine-setup --with-allinone=yes can complete it errors<br>
> > out<br>
> > > > > > with the following in the setup log:<br>
> > > > > ><br>
> > > > > > 2013-07-17 15:52:47::DEBUG::all_in_one_100::451::root:: Checking<br>
> > JBoss<br>
> > > > > > status.<br>
> > > > > > 2013-07-17 15:52:47::INFO::all_in_one_100::454::root:: JBoss is up<br>
> > and<br>
> > > > > > running.<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::setup_sequences::59::root:: running<br>
> > initAPI<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::all_in_one_100::240::root:: Initiating<br>
> > the<br>
> > > > > > API object<br>
> > > > > > 2013-07-17 15:52:47::ERROR::all_in_one_100::251::root:: Traceback<br>
> > (most<br>
> > > > > > recent call last):<br>
> > > > > > File<br>
> > "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > > > > > line 248, in initAPI<br>
> > > > > > ca_file=basedefs.FILE_CA_CRT_SRC,<br>
> > > > > > File "/usr/lib/python2.6/site-packages/ovirtsdk/api.py", line<br>
> > 119,<br>
> > > > in<br>
> > > > > > __init__<br>
> > > > > > url='/api'<br>
> > > > > > File<br>
> > > > > ><br>
> > "/usr/lib/python2.6/site-packages/ovirtsdk/infrastructure/proxy.py",<br>
> > > > > > line 112, in request<br>
> > > > > > persistent_auth=self._persistent_auth)<br>
> > > > > > File<br>
> > > > > ><br>
> > "/usr/lib/python2.6/site-packages/ovirtsdk/infrastructure/proxy.py",<br>
> > > > > > line 134, in __doRequest<br>
> > > > > > persistent_auth=persistent_auth<br>
> > > > > > File<br>
> > "/usr/lib/python2.6/site-packages/ovirtsdk/web/connection.py",<br>
> > > > > > line 148, in doRequest<br>
> > > > > > raise ConnectionError, str(e)<br>
> > > > > > ConnectionError: [ERROR]::oVirt API connection failure, [Errno 111]<br>
> > > > > > Connection refused<br>
> > > > > ><br>
> > > > > > 2013-07-17 15:52:47::DEBUG::setup_sequences::62::root:: Traceback<br>
> > (most<br>
> > > > > > recent call last):<br>
> > > > > > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line<br>
> > 60,<br>
> > > > > > in run<br>
> > > > > > function()<br>
> > > > > > File<br>
> > "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > > > > > line 252, in initAPI<br>
> > > > > > raise Exception(ERROR_CREATE_API_OBJECT)<br>
> > > > > > Exception: Error: could not create ovirtsdk API object<br>
> > > > > ><br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1972::root:: *** The<br>
> > > > following<br>
> > > > > > params were used as user input:<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > > > override-httpd-config: no<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: http-port:<br>
> > 8700<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: https-port:<br>
> > 8701<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > random-passwords: no<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: mac-range:<br>
> > > > > > 00:1A:4A:8C:8A:00-00:1A:4A:8C:8A:FF<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: host-fqdn:<br>
> > > > > > <a href="http://storage01.mydomain.me" target="_blank">storage01.mydomain.me</a> <<a href="http://storage01.mydomain.me" target="_blank">http://storage01.mydomain.me</a>><br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: auth-pass:<br>
> > > > ********<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: org-name:<br>
> > > > > > <a href="http://mydomain.me" target="_blank">mydomain.me</a> <<a href="http://mydomain.me" target="_blank">http://mydomain.me</a>><br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > application-mode:<br>
> > > > > > virt<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > default-dc-type:<br>
> > > > > > POSIXFS<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > > > db-remote-install: local<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: db-host:<br>
> > > > localhost<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > db-local-pass:<br>
> > > > > > ********<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: nfs-mp:<br>
> > > > > > /var/lib/exports/iso<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > iso-domain-name:<br>
> > > > > > ISO_DOMAIN<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root:: config-nfs:<br>
> > yes<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > > > override-firewall: None<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > > > config-allinone: yes<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > storage-path:<br>
> > > > > > /var/lib/images<br>
> > > > > > 2013-07-17 15:52:47::DEBUG::engine-setup::1977::root::<br>
> > superuser-pass:<br>
> > > > > > ********<br>
> > > > > > 2013-07-17 15:52:47::ERROR::engine-setup::2392::root:: Traceback<br>
> > (most<br>
> > > > > > recent call last):<br>
> > > > > > File "/usr/bin/engine-setup", line 2386, in <module><br>
> > > > > > main(confFile)<br>
> > > > > > File "/usr/bin/engine-setup", line 2169, in main<br>
> > > > > > runSequences()<br>
> > > > > > File "/usr/bin/engine-setup", line 2092, in runSequences<br>
> > > > > > controller.runAllSequences()<br>
> > > > > > File "/usr/share/ovirt-engine/scripts/setup_controller.py",<br>
> > line 54,<br>
> > > > > > in runAllSequences<br>
> > > > > > sequence.run()<br>
> > > > > > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line<br>
> > 154,<br>
> > > > > > in run<br>
> > > > > > step.run()<br>
> > > > > > File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line<br>
> > 60,<br>
> > > > > > in run<br>
> > > > > > function()<br>
> > > > > > File<br>
> > "/usr/share/ovirt-engine/scripts/plugins/all_in_one_100.py",<br>
> > > > > > line 252, in initAPI<br>
> > > > > > raise Exception(ERROR_CREATE_API_OBJECT)<br>
> > > > > > Exception: Error: could not create ovirtsdk API object<br>
> > > > > ><br>
> > > > > ><br>
> > > > > ><br>
> > > > > > After much digging, it seems like the issue is in the certs but<br>
> > it's<br>
> > > > not<br>
> > > > > > making sense to me why it fails. From the server.log:<br>
> > > > > ><br>
> > > > > > 2013-07-17 16:37:28,873 INFO<br>
> > [org.jboss.as.server.deployment.scanner]<br>
> > > > > > (MSC service thread 1-3) JBAS015012: Started<br>
> > > > FileSystemDeploymentService<br>
> > > > > > for directory /var/lib/ovirt-engine/deployments<br>
> > > > > > 2013-07-17 16:37:28,877 ERROR<br>
> > > > > > [org.apache.tomcat.util.net.jsse.JSSESocketFactory] (MSC service<br>
> > thread<br>
> > > > > > 1-4) Failed to load keystore type PKCS12 with path<br>
> > > > > > /etc/pki/ovirt-engine/keys/apache.p12 due to<br>
> > > > > > /etc/pki/ovirt-engine/keys/apache.p12 (Permission denied):<br>
> > > > > > java.io.FileNotFoundException:<br>
> > /etc/pki/ovirt-engine/keys/apache.p12<br>
> > > > > > (Permission denied)<br>
> > > > > > at java.io.FileInputStream.open(Native Method)<br>
> > [rt.jar:1.7.0_25]<br>
> > > > > > at java.io.FileInputStream.<init>(FileInputStream.java:138)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:515)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > > org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:977)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > org.apache.catalina.connector.Connector.init(Connector.java:983)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > > > > > [jboss-as-web-7.1.1.Final.jar:7.1.1.Final]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> > > > > ><br>
> > > > > > 2013-07-17 16:37:28,883 ERROR<br>
> > [org.apache.coyote.http11.Http11Protocol]<br>
> > > > > > (MSC service thread 1-4) Error initializing endpoint:<br>
> > > > > > java.io.FileNotFoundException:<br>
> > /etc/pki/ovirt-engine/keys/apache.p12<br>
> > > > > > (Permission denied)<br>
> > > > > > at java.io.FileInputStream.open(Native Method)<br>
> > [rt.jar:1.7.0_25]<br>
> > > > > > at java.io.FileInputStream.<init>(FileInputStream.java:138)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:374)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:299)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:515)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:452)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:168)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > > org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:977)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:190)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > org.apache.catalina.connector.Connector.init(Connector.java:983)<br>
> > > > > > [jbossweb-7.0.13.Final.jar:]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > > > > > [jboss-as-web-7.1.1.Final.jar:7.1.1.Final]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> > > > > ><br>
> > > > > > 2013-07-17 16:37:28,892 ERROR [org.jboss.msc.service.fail] (MSC<br>
> > service<br>
> > > > > > thread 1-4) MSC00001: Failed to start service<br>
> > > > jboss.web.connector.https:<br>
> > > > > > org.jboss.msc.service.StartException in service<br>
> > > > > > jboss.web.connector.https: JBAS018007: Error starting web connector<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:271)<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1811)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1746)<br>
> > > > > > [jboss-msc-1.0.2.GA.jar:<a href="http://1.0.2.GA" target="_blank">1.0.2.GA</a> <<a href="http://1.0.2.GA" target="_blank">http://1.0.2.GA</a>>]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)<br>
> > > > > > [rt.jar:1.7.0_25]<br>
> > > > > > at java.lang.Thread.run(Thread.java:724) [rt.jar:1.7.0_25]<br>
> > > > > > Caused by: LifecycleException: Protocol handler initialization<br>
> > failed:<br>
> > > > > > java.io.FileNotFoundException:<br>
> > /etc/pki/ovirt-engine/keys/apache.p12<br>
> > > > > > (Permission denied)<br>
> > > > > > at<br>
> > > > org.apache.catalina.connector.Connector.init(Connector.java:985)<br>
> > > > > > at<br>
> > > > > ><br>
> > > ><br>
> > org.jboss.as.web.WebConnectorService.start(WebConnectorService.java:267)<br>
> > > > > > ... 5 more<br>
> > > > > ><br>
> > > > > > 2013-07-17 16:37:28,904 INFO<br>
> > [org.jboss.as.server.deployment.scanner]<br>
> > > > > > (DeploymentScanner-threads - 1) JBAS015003: Found engine.ear in<br>
> > > > > > deployment directory. To trigger deployment create a file called<br>
> > > > > > engine.ear.dodeploy<br>
> > > > > > 2013-07-17 16:37:28,957 INFO<br>
> > > > > > [org.jboss.as.connector.subsystems.datasources] (MSC service thread<br>
> > > > > > 1-11) JBAS010400: Bound data source [java:/ENGINEDataSource]<br>
> > > > > > 2013-07-17 16:37:28,966 INFO [org.jboss.as.controller] (Controller<br>
> > > > Boot<br>
> > > > > > Thread) JBAS014774: Service status report<br>
> > > > > > JBAS014777: Services which failed to start: service<br>
> > > > > > jboss.web.connector.https: org.jboss.msc.service.StartException in<br>
> > > > > > service jboss.web.connector.https: JBAS018007: Error starting web<br>
> > > > connector<br>
> > > > > ><br>
> > > > > ><br>
> > > > > > the /etc/pki/ovirt-engine/keys:<br>
> > > > > ><br>
> > > > > > ls -la /etc/pki/ovirt-engine/keys/<br>
> > > > > > total 24<br>
> > > > > > drwxr-xr-x. 2 ovirt ovirt 4096 Jul 17 15:51 .<br>
> > > > > > drwxr-xr-x. 6 ovirt ovirt 4096 Jul 17 15:51 ..<br>
> > > > > > -rw-r-----. 1 apache apache 1828 Jul 17 15:51 apache.key.nopass<br>
> > > > > > -rw-r-----. 1 apache apache 2685 Jul 17 15:51 apache.p12<br>
> > > > > > -rw-------. 1 root root 1832 Jul 17 15:51 engine_id_rsa<br>
> > > > > > -rw-r-----. 1 ovirt ovirt 2685 Jul 17 15:51 engine.p12<br>
> > > > > ><br>
> > > > > ><br>
> > > > > > I've tried with setenforce 0 and no change.<br>
> > > > > ><br>
> > > > > > I've downgraded to earlier 3.2.0 versions, earlier jboss-as, beta<br>
> > > > > > allinone plugin for 3.2, no changes. At one point I added some<br>
> > > > > > additional debuggingto the allinone script to make sure that<br>
> > reasonable<br>
> > > > > > variables were being passed around (they are).<br>
> > > > > ><br>
> > > > > > I'm stumped.<br>
> > > > > ><br>
> > > > > > --<br>
> > > > > > --<br>
> > > > > > James P. Kinney III<br>
> > > > > > ////<br>
> > > > > > ////Every time you stop a school, you will have to build a jail.<br>
> > What<br>
> > > > > > you gain at one end you lose at the other. It's like feeding a dog<br>
> > on<br>
> > > > > > his own tail. It won't fatten the dog.<br>
> > > > > > - Speech 11/23/1900 Mark Twain<br>
> > > > > > ////<br>
> > > > > > <a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br>
> > > > > > <a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
> > > > > > ////<br>
> > > > > ><br>
> > > > > ><br>
> > > > > > _______________________________________________<br>
> > > > > > Users mailing list<br>
> > > > > > <a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
> > > > > > <a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
> > > > > ><br>
> > > > ><br>
> > > > ><br>
> > > ><br>
> > ><br>
> > ><br>
> > ><br>
> > > --<br>
> > > --<br>
> > > James P. Kinney III<br>
> > > *<br>
> > > *Every time you stop a school, you will have to build a jail. What you<br>
> > gain<br>
> > > at one end you lose at the other. It's like feeding a dog on his own<br>
> > tail.<br>
> > > It won't fatten the dog.<br>
> > > - Speech 11/23/1900 Mark Twain<br>
> > > *<br>
> > > <a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br>
> > > <a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
> > > *<br>
> > ><br>
> ><br>
><br>
><br>
><br>
> --<br>
> --<br>
> James P. Kinney III<br>
> *<br>
> *Every time you stop a school, you will have to build a jail. What you gain<br>
> at one end you lose at the other. It's like feeding a dog on his own tail.<br>
> It won't fatten the dog.<br>
> - Speech 11/23/1900 Mark Twain<br>
> *<br>
> <a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br>
> <a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
> *<br>
><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>-- <br>James P. Kinney III<br><i><i><i><i><br></i></i></i></i>Every time you stop a school, you will have to build a jail. What you
gain at one end you lose at the other. It's like feeding a dog on his
own tail. It won't fatten the dog.<br>
- Speech 11/23/1900 Mark Twain<br><i><i><i><i><br><a href="http://electjimkinney.org" target="_blank">http://electjimkinney.org</a><br><a href="http://heretothereideas.blogspot.com/" target="_blank">http://heretothereideas.blogspot.com/</a><br>
</i></i></i></i>
</div>