Re: [Engine-devel] Root password to add Host

From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; Cc: "engine-devel" <engine-devel(a)ovirt.org&gt; Sent: Wednesday, May 1, 2013 1:00:55 AM Subject: Re: [Engine-devel] Root password to add Host Oh sure, [root@scenic ~]# rpm -q ovirt-engine ovirt-engine-3.1.0-3.26.3.el6.centos.alt.noarch

From what I gather, it is something to do with java... although the format of the certificate file is PEM it tries to read it as DER, first time I see this.

[root@scenic ~]# java -version java version "1.7.0_19" OpenJDK Runtime Environment (rhel-2.3.9.1.el6_4-x86_64) OpenJDK 64-Bit Server VM (build 23.7-b01, mixed mode) 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > ----- Original Message ----- > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > Cc: "engine-devel" <engine-devel(a)ovirt.org&gt; > > Sent: Wednesday, May 1, 2013 12:56:07 AM > > Subject: Re: [Engine-devel] Root password to add Host > > > > I use oVirt 3.x, to install i follow this guide : > > http://wiki.centos.org/HowTos/oVirt > > The x is quite important... > rpm -q ovirt-engine > > Also, please send your java version: > java -version > > > And ovirt-node version is 2.6.0 > > > > [root@scenic ~]# openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer > > -text > > Certificate: > > Data: > > Version: 3 (0x2) > > Serial Number: 2 (0x2) > > Signature Algorithm: sha1WithRSAEncryption > > Issuer: C=US, O=lix.polytechnique.fr, > > CN=CA-scenic.lix.polytechnique.fr.20433 > > Validity > > Not Before: Apr 29 15:11:10 2013 > > Not After : Apr 4 15:11:12 2018 GMT > > Subject: C=US, O=lix.polytechnique.fr, CN= > > scenic.lix.polytechnique.fr > > Subject Public Key Info: > > Public Key Algorithm: rsaEncryption > > Public-Key: (2048 bit) > > Modulus: > > 00:ce:7a:2e:c1:9a:86:2c:c2:76:5e:ea:8b:59:18: > > 62:7d:7a:9f:55:ff:71:15:f7:93:3f:40:1e:70:5d: > > 80:43:ea:c7:f4:50:0a:a6:47:2a:f8:07:4d:0c:0a: > > 4d:01:1e:97:de:36:63:40:df:30:7a:40:9d:34:93: > > d6:a8:43:c6:b3:62:c1:de:db:57:d1:fb:b9:c6:e2: > > 34:65:f2:67:e1:8c:91:67:3f:99:a6:2b:7b:8a:51: > > ad:9c:43:c3:a5:cd:c5:a2:29:e9:99:db:ba:f4:76: > > d0:e5:41:97:31:fc:13:94:53:af:90:ca:06:aa:7d: > > 68:04:62:66:a5:90:4b:11:de:07:34:ec:68:89:9c: > > 13:7b:a2:ba:1f:2a:28:6b:ba:9a:b3:ba:97:5c:96: > > cd:1e:2e:e7:fc:bf:20:a2:a5:57:f3:73:8d:12:db: > > 81:00:53:50:a6:54:e9:14:1e:46:69:08:e2:80:b1: > > 30:97:89:d3:a1:a2:7a:47:a3:c9:2e:c9:ce:14:74: > > 92:27:02:58:41:d8:e1:dd:9e:99:26:fa:b0:ad:6c: > > e0:11:3f:17:7d:f7:63:27:62:a3:d0:28:f3:1a:91: > > ca:65:b7:69:9b:b6:86:85:70:a6:ac:5c:51:e2:ff: > > e9:f2:28:78:24:21:28:0c:d0:95:a4:f8:e5:67:15: > > d6:77 > > Exponent: 65537 (0x10001) > > X509v3 extensions: > > X509v3 Subject Key Identifier: > > > 4A:E0:DF:6D:4D:AD:03:26:30:B5:D4:D4:DC:69:C5:DA:74:B2:66:AB > > Authority Information Access: > > CA Issuers - URI: > > http://scenic.lix.polytechnique.fr:80/ca.crt > > > > X509v3 Authority Key Identifier: > > > > keyid:7E:D8:AE:56:25:C5:B0:34:96:5A:EA:AF:E9:2D:F3:E0:06:1C:19:D0 > > DirName:/C=US/O= > > lix.polytechnique.fr/CN=CA-scenic.lix.polytechnique.fr.20433 > > serial:01 > > > > X509v3 Basic Constraints: > > CA:FALSE > > X509v3 Key Usage: critical > > Digital Signature, Key Encipherment > > X509v3 Extended Key Usage: critical > > TLS Web Server Authentication, TLS Web Client > Authentication > > Signature Algorithm: sha1WithRSAEncryption > > 89:f3:e5:af:a8:98:44:fa:60:52:93:4f:7c:e8:62:78:40:f8: > > c7:a7:e1:c3:38:b5:7d:4c:5b:7a:df:5d:1b:05:2c:ca:43:ce: > > a2:8a:f6:fd:02:3e:98:6f:bc:ea:a6:78:f7:e4:7a:4f:49:0c: > > 86:cb:b6:23:2e:b7:93:f1:e8:ba:76:05:21:00:ed:cc:f2:ee: > > 0e:17:dc:21:0a:21:9e:ce:e1:bf:b5:11:d4:a5:d3:31:dd:f4: > > e3:c7:ea:40:26:27:45:79:9f:2d:79:91:41:03:61:26:51:31: > > 54:d5:06:90:cf:d4:a0:8b:b7:8a:b0:02:b4:37:24:0f:b2:26: > > 99:a9:39:78:48:8a:1b:03:89:64:68:de:9e:cb:fc:99:d6:41: > > 3d:3d:d9:15:8f:f6:ef:3f:b2:51:c8:dd:60:a8:c5:29:88:20: > > 69:b9:8a:23:eb:9b:64:94:cd:ad:e2:f9:7c:0e:d7:92:cf:cb: > > 7d:dd:3b:2d:67:13:1d:c3:0a:51:28:e7:b7:44:36:fa:43:83: > > 80:13:51:ff:f7:1b:22:c0:80:c5:c1:85:90:87:a6:17:46:44: > > dc:88:1f:16:69:ee:27:44:89:c0:2b:2a:4d:f9:46:fc:50:f1: > > 2c:af:af:c1:30:ee:6f:6c:b5:cd:f5:e7:73:99:b0:ff:36:2c: > > 87:32:66:0e > > -----BEGIN CERTIFICATE----- > > MIIEXjCCA0agAwIBAgIBAjANBgkqhkiG9w0BAQUFADBbMQswCQYDVQQGEwJVUzEd > > MBsGA1UEChMUbGl4LnBvbHl0ZWNobmlxdWUuZnIxLTArBgNVBAMTJENBLXNjZW5p > > Yy5saXgucG9seXRlY2huaXF1ZS5mci4yMDQzMzAiFxExMzA0MjkxNTExMTArMDAw > > MBcNMTgwNDA0MTUxMTEyWjBSMQswCQYDVQQGEwJVUzEdMBsGA1UECgwUbGl4LnBv > > bHl0ZWNobmlxdWUuZnIxJDAiBgNVBAMMG3NjZW5pYy5saXgucG9seXRlY2huaXF1 > > ZS5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM56LsGahizCdl7q > > i1kYYn16n1X/cRX3kz9AHnBdgEPqx/RQCqZHKvgHTQwKTQEel942Y0DfMHpAnTST > > 1qhDxrNiwd7bV9H7ucbiNGXyZ+GMkWc/maYre4pRrZxDw6XNxaIp6ZnbuvR20OVB > > lzH8E5RTr5DKBqp9aARiZqWQSxHeBzTsaImcE3uiuh8qKGu6mrO6l1yWzR4u5/y/ > > IKKlV/NzjRLbgQBTUKZU6RQeRmkI4oCxMJeJ06GiekejyS7JzhR0kicCWEHY4d2e > > mSb6sK1s4BE/F333Yydio9Ao8xqRymW3aZu2hoVwpqxcUeL/6fIoeCQhKAzQlaT4 > > 5WcV1ncCAwEAAaOCATAwggEsMB0GA1UdDgQWBBRK4N9tTa0DJjC11NTcacXadLJm > > qzBIBggrBgEFBQcBAQQ8MDowOAYIKwYBBQUHMAKGLGh0dHA6Ly9zY2VuaWMubGl4 > > LnBvbHl0ZWNobmlxdWUuZnI6ODAvY2EuY3J0MIGDBgNVHSMEfDB6gBR+2K5WJcWw > > NJZa6q/pLfPgBhwZ0KFfpF0wWzELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFGxpeC5w > > b2x5dGVjaG5pcXVlLmZyMS0wKwYDVQQDEyRDQS1zY2VuaWMubGl4LnBvbHl0ZWNo > > bmlxdWUuZnIuMjA0MzOCAQEwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwIAYD > > VR0lAQH/BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBBQUAA4IB > > AQCJ8+WvqJhE+mBSk0986GJ4QPjHp+HDOLV9TFt6310bBSzKQ86iivb9Aj6Yb7zq > > pnj35HpPSQyGy7YjLreT8ei6dgUhAO3M8u4OF9whCiGezuG/tRHUpdMx3fTjx+pA > > JidFeZ8teZFBA2EmUTFU1QaQz9Sgi7eKsAK0NyQPsiaZqTl4SIobA4lkaN6ey/yZ > > 1kE9PdkVj/bvP7JRyN1gqMUpiCBpuYoj65tklM2t4vl8DteSz8t93TstZxMdwwpR > > KOe3RDb6Q4OAE1H/9xsiwIDFwYWQh6YXRkTciB8Wae4nRInAKypN+Ub8UPEsr6/B > > MO5vbLXN9edzmbD/NiyHMmYO > > -----END CERTIFICATE----- > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > Which version do you use? > > > > > > this should not happen... > > > > > > what is the output of: > > > > > > $ openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -text > > > > > > ----- Original Message ----- > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > > > Cc: "engine-devel" <engine-devel(a)ovirt.org&gt; > > > > Sent: Wednesday, May 1, 2013 12:47:13 AM > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > Sure, > > > > > > > > 2013-04-30 23:44:35,984 ERROR > > > > [org.ovirt.engine.core.pki.PKIResourceServlet] > (ajp--127.0.0.1-8702-4) > > > > Cannot send public key resource > '/etc/pki/ovirt-engine/certs/engine.cer' > > > > format 'SSH': java.security.cert.CertificateParsingException: invalid > > > > DER-encoded certificate data > > > > at > sun.security.x509.X509CertImpl.parse(X509CertImpl.java:1723) > > > > [rt.jar:1.6.0_24] > > > > at > sun.security.x509.X509CertImpl.<init>(X509CertImpl.java:320) > > > > [rt.jar:1.6.0_24] > > > > at > > > > > > > > sun.security.provider.X509Factory.engineGenerateCertificate(X509Factory.java:121) > > > > [rt.jar:1.6.0_24] > > > > at > > > > > > > > java.security.cert.CertificateFactory.generateCertificate(CertificateFactory.java:322) > > > > [rt.jar:1.6.0_24] > > > > at > > > > > > > > org.ovirt.engine.core.pki.PKIResourceServlet.doGet(PKIResourceServlet.java:83) > > > > [classes:] > > > > at > javax.servlet.http.HttpServlet.service(HttpServlet.java:734) > > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] > > > > at > javax.servlet.http.HttpServlet.service(HttpServlet.java:847) > > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] > > > > at > > > > > > > > org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) > > > > [jboss-as-web-7.1.1.Final.jar:7.1.1.Final] > > > > at > > > > > > > > org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > > > > org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:445) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at > > > > > org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) > > > > [jbossweb-7.0.13.Final.jar:] > > > > at java.lang.Thread.run(Thread.java:679) [rt.jar:1.6.0_24] > > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > > > > > > > > > > Can you please attach /var/log/ovirt-engine/engine.log? > > > > > > > > > > ----- Original Message ----- > > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; > > > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > > > > > Cc: "engine-devel" <engine-devel(a)ovirt.org&gt; > > > > > > Sent: Wednesday, May 1, 2013 12:33:38 AM > > > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > > > > > Ok this what I have done, I see it, I specify the engine address, > > > then he > > > > > > ask me to "Retrieve Certificate" i do it, it works. After I > choose > > > "Save > > > > > & > > > > > > Register", i can see "Activating VDMS", and "All changes were > applied > > > > > > successfully". But nothing in the engine ... > > > > > > I tryed the other way but don't work too ... for this solution > i'm > > > nearly > > > > > > sure that it's cause the password is wrong, it isn't the one > which i > > > > > > specified in ovirt-node. > > > > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > > > > > > > > > > > > > > > > Please reply to 'all'. > > > > > > > > > > > > > > When you login as admin you should be presented with Text User > > > > > Interface. > > > > > > > Within this interface there should be options on the left and a > > > dialog > > > > > on > > > > > > > the right. > > > > > > > At the left you should see 'ovirt-engine' or similar option, > when > > > > > > > selecting it, you should see on the right an input field of > > > address of > > > > > the > > > > > > > ovirt-engine server, specifying the engine address and > selecting > > > apply > > > > > will > > > > > > > initiate registration into the engine. > > > > > > > > > > > > > > Once registered, you should see the host in the engine, select > it > > > and > > > > > > > click on "Approve". > > > > > > > > > > > > > > Another option is to specify password at the same dialog > without > > > > > filling > > > > > > > the engine address. This password may be used as the password > > > withi the > > > > > > > 'Add Host' dialog. > > > > > > > > > > > > > > Alon > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; > > > > > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > > > > > > > Sent: Wednesday, May 1, 2013 12:00:01 AM > > > > > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > > > > > > > > > I think I don't really understand what you call TUI? > > > > > > > > Yes I'm log as admin on ovirt-node to use Hypervisor > > > > > > > > > > > > > > > > (And sorry if I make some language faults English isn't my > native > > > > > > > language > > > > > > > > ^^) > > > > > > > > > > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > > > > > > > > > > > > > > > > > > > > > > You cannot do this via agent by via the TUI of the > ovirt-node. > > > > > > > > > > > > > > > > > > Just to make sure, you are using ovirt-node as hypervisor, > > > right? > > > > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com&gt; > > > > > > > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > > > > > > > > > Sent: Tuesday, April 30, 2013 11:47:53 PM > > > > > > > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > > > > > > > > > > > > > Oh ok, i didn't know ... > > > > > > > > > > > > > > > > > > > > I was looking my oVirt Engine and i don't understand how > i > > > can > > > > > add an > > > > > > > > > Host > > > > > > > > > > without this password ... > > > > > > > > > > For me i have to right click on the Hosts panel, select > "new" > > > > > and it > > > > > > > asks > > > > > > > > > > me to give name, address and Root password. > > > > > > > > > > I have already register this Host from oVirt Node > > > Hypervisor, i > > > > > add > > > > > > > my > > > > > > > > > > Management Server and there is no problem i can see > > > "Certificate > > > > > > > Status : > > > > > > > > > > Verified" but this Host don't appears in the Web page ... > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > > > > > > From: "Florian BRUSCHET" <florian.bruschet(a)gmail.com > > > > > > > > > > > > > > To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; > > > > > > > > > > > > Sent: Tuesday, April 30, 2013 11:06:14 PM > > > > > > > > > > > > Subject: Re: [Engine-devel] Root password to add Host > > > > > > > > > > > > > > > > > > > > > > > > For me single mode it's when you add "single" at the > end > > > of > > > > > the > > > > > > > > > kernel > > > > > > > > > > > > commande line like that you boot on shell commande as > > > > > > > > > > > > root@localhostand > > > > > > > > > > > > you can do what you want. > > > > > > > > > > > > > > > > > > > > > > Oh... this is "single user mode"... :) > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > I will try it soon! > > > > > > > > > > > > > > > > > > > > > > > > Thank you > > > > > > > > > > > > > > > > > > > > > > > > Florian > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 2013/4/30 Alon Bar-Lev <alonbl(a)redhat.com&gt; > > > > > > > > > > > > > > > > > > > > > > > > > What is 'single mode'? > > > > > > > > > > > > > > > > > > > > > > > > > > You should be able to set root password via node > TUI, > > > at > > > > > ovirt > > > > > > > tab. > > > > > > > > > > > > > Or... you can simply perform registration via the > node > > > > > TUI, so > > > > > > > you > > > > > > > > > > > don't > > > > > > > > > > > > > need to specify password at all. > > > > > > > > > > > > > > > > > > > > > > > > > > ----- Original Message ----- > > > > > > > > > > > > > > From: "Florian BRUSCHET" < > florian.bruschet(a)gmail.com > > > > > > > > > > > > > > > > > > To: engine-devel(a)ovirt.org > > > > > > > > > > > > > > Sent: Tuesday, April 30, 2013 7:28:12 PM > > > > > > > > > > > > > > Subject: [Engine-devel] Root password to add Host > > > > > > > > > > > > > > > > > > > > > > > > > > > > Hi, > > > > > > > > > > > > > > > > > > > > > > > > > > > > I try to add Host from oVirt Engine Web > > > Administration, > > > > > but > > > > > > > it > > > > > > > > > asks > > > > > > > > > > > me to > > > > > > > > > > > > > > give a Root Password (It's not the same that i > used > > > to > > > > > log in > > > > > > > > > admin > > > > > > > > > > > on > > > > > > > > > > > > > the > > > > > > > > > > > > > > Node). > > > > > > > > > > > > > > Do i really need this Root Password? Because i > can't > > > > > have it > > > > > > > and > > > > > > > > > i > > > > > > > > > > > don't > > > > > > > > > > > > > want > > > > > > > > > > > > > > to change it by using single mode... > > > > > > > > > > > > > > There is an other solution to add Hosts? > > > > > > > > > > > > > > > > > > > > > > > > > > > > Thank you, > > > > > > > > > > > > > > > > > > > > > > > > > > > > Florian BRUSCHET > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > > > > > > > > > Engine-devel mailing list > > > > > > > > > > > > > > Engine-devel(a)ovirt.org > > > > > > > > > > > > > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > >