[ovirt-users] ovirtvm-console : Failed to execute login on behalf - for user

Thursday, 2 March 2017

This is a multi-part message in MIME format.
--------------FFCEC3700EE1EB803E2B583D
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Hi,

    I am getting exactly the same issue here with 4.1 , when trying to
log in to the serial console over SSH.

The user with domain is &quot;emayoral_adm(a)arsyslan.es&quot; (please note mailman
may translate the "at" character to a textual "_at_"). The First name
and last name as read from active directory is "Eduardo Mayoral" (with
no quotes)

The password is: 08.HJYqoce,nrW (OK, this is not the real password, but
it has the same special characters and approximate structure and length)

This is the engine.log output.

2017-03-02 11:13:31,917Z INFO 
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25)
[5d9b7d18] Running command: LoginOnBehalfCommand internal: true.
2017-03-02 11:13:31,938Z ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-33) []
OAuthException server_error: java.text.ParseException: Invalid character
' ' encountered.
2017-03-02 11:13:31,939Z ERROR
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25)
[5d9b7d18] Unable to create engine session: EngineException:  user
emayoral_adm(a)arsyslan.es in domain 'arsyslan.es-authz (Failed with error
PRINCIPAL_NOT_FOUND and code 5200)
2017-03-02 11:13:31,945Z ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-25) [5d9b7d18] EVENT_ID:
USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18, Call
Stack: null, Custom Event ID: -1, Message: Failed to execute login on
behalf - for user emayoral_adm(a)arsyslan.es.
2017-03-02 11:13:31,945Z ERROR
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-25)
[5d9b7d18] Error processing request: : java.lang.RuntimeException:
Unable to create session using LoginOnBehalf
    at
org.ovirt.engine.core.services.VMConsoleProxyServlet.availableConsoles(VMConsoleProxyServlet.java:102)
[services.jar:]
    at
org.ovirt.engine.core.services.VMConsoleProxyServlet.produceContentFromParameters(VMConsoleProxyServlet.java:177)
[services.jar:]
    at
org.ovirt.engine.core.services.VMConsoleProxyServlet.doPost(VMConsoleProxyServlet.java:213)
[services.jar:]
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
[jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
[jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]
    at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:66)
[utils.jar:]
    at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
    at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
    at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
[undertow-servlet-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
[undertow-core-1.4.0.Final.jar:1.4.0.Final]
    at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
[rt.jar:1.8.0_121]
    at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
[rt.jar:1.8.0_121]
    at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_121]

Did you find the cause for this and possible fixes or workarounds?

-- 
Eduardo Mayoral Jimeno (emayoral(a)arsys.es)
Administrador de sistemas. Departamento de Plataformas. Arsys internet.
+34 941 620 145 ext. 5153

--------------FFCEC3700EE1EB803E2B583D
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html;
charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Hi, <br>
    </p>
    <p>    I am getting exactly the same issue here with 4.1 , when
      trying to log in to the serial console over SSH.</p>
    <p><br>
    </p>
    <p>The user with domain is <a class="moz-txt-link-rfc2396E"
href="mailto:emayoral_adm@arsyslan.es">"emayoral_adm@arsyslan.es"</a>
(please note
      mailman may translate the "at" character to a textual "_at_").
The
      First name and last name as read from active directory is "Eduardo
      Mayoral" (with no quotes)<br>
    </p>
    <p>The password is: 08.HJYqoce,nrW (OK, this is not the real
      password, but it has the same special characters and approximate
      structure and length)<br>
    </p>
    <p>This is the engine.log output.<br>
    </p>
    <p><tt><font size="-1">2017-03-02 11:13:31,917Z INFO 
          [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
          task-25) [5d9b7d18] Running command: LoginOnBehalfCommand
          internal: true.<br>
          2017-03-02 11:13:31,938Z ERROR
          [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-33)
          [] OAuthException server_error: java.text.ParseException:
          Invalid character ' ' encountered.<br>
          2017-03-02 11:13:31,939Z ERROR
          [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
          task-25) [5d9b7d18] Unable to create engine session:
          EngineException:  user <a class="moz-txt-link-abbreviated"
href="mailto:emayoral_adm@arsyslan.es">emayoral_adm@arsyslan.es</a> in
domain
          'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and
          code 5200)<br>
          2017-03-02 11:13:31,945Z ERROR
          [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
          (default task-25) [5d9b7d18] EVENT_ID:
          USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18,
          Call Stack: null, Custom Event ID: -1, Message: Failed to
          execute login on behalf - for user <a
class="moz-txt-link-abbreviated"
href="mailto:emayoral_adm@arsyslan.es">emayoral_adm@arsyslan.es</a>.<br>
          2017-03-02 11:13:31,945Z ERROR
          [org.ovirt.engine.core.services.VMConsoleProxyServlet]
          (default task-25) [5d9b7d18] Error processing request: :
          java.lang.RuntimeException: Unable to create session using
          LoginOnBehalf<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.availableConsoles(VMConsoleProxyServlet.java:102)
          [services.jar:]<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.produceContentFromParameters(VMConsoleProxyServlet.java:177)
          [services.jar:]<br>
              at
org.ovirt.engine.core.services.VMConsoleProxyServlet.doPost(VMConsoleProxyServlet.java:213)
          [services.jar:]<br>
              at
          javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
          [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]<br>
              at
          javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
          [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:66)
          [utils.jar:]<br>
              at
          io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:292)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:81)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:138)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:272)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:104)
          [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]<br>
              at
          io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
          io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805)
          [undertow-core-1.4.0.Final.jar:1.4.0.Final]<br>
              at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
          [rt.jar:1.8.0_121]<br>
              at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
          [rt.jar:1.8.0_121]<br>
              at java.lang.Thread.run(Thread.java:745)
          [rt.jar:1.8.0_121]<br>
        </font></tt><br>
    </p>
    <p>Did you find the cause for this and possible fixes or
      workarounds?<br>
    </p>
    <br>
    <pre class="moz-signature" cols="72">-- 
Eduardo Mayoral Jimeno (<a class="moz-txt-link-abbreviated"
href="mailto:emayoral@arsys.es">emayoral@arsys.es</a>)
Administrador de sistemas. Departamento de Plataformas. Arsys internet.
+34 941 620 145 ext. 5153</pre>
  </body>
</html>

--------------FFCEC3700EE1EB803E2B583D--

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

[ovirt-users] ovirtvm-console : Failed to execute login on behalf - for user