<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi,</p>
<p>with 4.1 beta2, I try to use ovirtvm-console with my AD imported
account with issue "Failed to execute login on behalf - for user
xxx". <br>
</p>
<ul>
<li>I can login with name into the webadmin as a superuser.<br>
</li>
<li>I don't meet any issue with 4.0.x <br>
</li>
<li>whatever the pub key is it is the same</li>
<li>All other AD and local accounts work as expected with
ovirtvm-console</li>
</ul>
<p>Regarding the engine logs, it seems that some character of my
name are not recognized:</p>
<p>2017-01-09 17:35:52,014+01 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
OAuthException server_error: java.text.ParseException: Invalid
character ' ' encountered.<br>
2017-01-09 17:35:52,016+01 ERROR
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
task-1) [50439863] Unable to create engine session:
EngineException: user <a class="moz-txt-link-abbreviated" href="mailto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a> in domain
'abes.fr-authz (Failed with error PRINCIPAL_NOT_FOUND and code
5200)<br>
2017-01-09 17:35:52,024+01 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-1) [50439863] Correlation ID: 50439863, Call Stack:
null, Custom Event ID: -1, Message: Failed to execute login on
behalf - for user <a class="moz-txt-link-abbreviated" href="mailto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a>.<br>
2017-01-09 17:35:52,025+01 ERROR
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default
task-1) [50439863] Error processing request: :
java.lang.RuntimeException: Unable to create session using
LoginOnBehalf<br>
</p>
<br>
<pre class="moz-signature" cols="72">--
Nathanaël Blanchet
Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5         
Tél. 33 (0)4 67 54 84 55
Fax 33 (0)4 67 54 84 14
<a class="moz-txt-link-abbreviated" href="mailto:blanchet@abes.fr">blanchet@abes.fr</a> </pre>
</body>
</html>