<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi, <br>
    </p>
    <p>    I am getting exactly the same issue here with 4.1 , when
      trying to log in to the serial console over SSH.</p>
    <p><br>
    </p>
    <p>The user with domain is <a class="moz-txt-link-rfc2396E" href="mailto:emayoral_adm@arsyslan.es">"emayoral_adm@arsyslan.es"</a> (please note
      mailman may translate the "at" character to a textual "_at_"). The
      First name and last name as read from active directory is "Eduardo
      Mayoral" (with no quotes)<br>
    </p>
    <p>The password is: 08.HJYqoce,nrW (OK, this is not the real
      password, but it has the same special characters and approximate
      structure and length)<br>
    </p>
    <p>This is the engine.log output.<br>
    </p>
    <p><tt><font size="-1">2017-03-02 11:13:31,917Z INFO 
          [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
          task-25) [5d9b7d18] Running command: LoginOnBehalfCommand
          internal: true.<br>
          2017-03-02 11:13:31,938Z ERROR
          [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-33)
          [] OAuthException server_error: java.text.ParseException:
          Invalid character ' ' encountered.<br>
          2017-03-02 11:13:31,939Z ERROR
          [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
          task-25) [5d9b7d18] Unable to create engine session:
          EngineException:  user <a class="moz-txt-link-abbreviated" href="mailto:emayoral_adm@arsyslan.es">emayoral_adm@arsyslan.es</a> in domain
          'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and
          code 5200)<br>
          2017-03-02 11:13:31,945Z ERROR
          [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
          (default task-25) [5d9b7d18] EVENT_ID:
          USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18,
          Call Stack: null, Custom Event ID: -1, Message: Failed to
          execute login on behalf - for user <a class="moz-txt-link-abbreviated" href="mailto:emayoral_adm@arsyslan.es">emayoral_adm@arsyslan.es</a>.<br>
          2017-03-02 11:13:31,945Z ERROR
          [org.ovirt.engine.core.services.VMConsoleProxyServlet]
          (default task-25) [5d9b7d18] Error processing request: :
          java.lang.RuntimeException: Unable to create session using
          LoginOnBehalf<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.availableConsoles(VMConsoleProxyServlet.java:102)
          [services.jar:]<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.produceContentFromParameters(VMConsoleProxyServlet.java:177)
          [services.jar:]<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.doPost(VMConsoleProxyServlet.java:213)
          [services.jar:]<br>
              at
          javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
          [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]<br>
              at
          javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
          [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:66)
          [utils.jar:]<br>
              at
          io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
          io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
          io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
          [rt.jar:1.8.0_121]<br>
              at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
          [rt.jar:1.8.0_121]<br>
              at java.lang.Thread.run(Thread.java:745)
          [rt.jar:1.8.0_121]<br>
        </font></tt><br>
    </p>
    <p>Did you find the cause for this and possible fixes or
      workarounds?<br>
    </p>
    <br>
    <pre class="moz-signature" cols="72">-- 
Eduardo Mayoral Jimeno (<a class="moz-txt-link-abbreviated" href="mailto:emayoral@arsys.es">emayoral@arsys.es</a>)
Administrador de sistemas. Departamento de Plataformas. Arsys internet.
+34 941 620 145 ext. 5153</pre>
  </body>
</html>