[ovirt-users] Re: migrating standalone engine to selfhosted and upgrade from 4.3 to 4.4 in one step

On 8/3/20 11:12 AM, Jiří Sléžka wrote: I just tried it. It looks like it could work at least until installation process want to login into engine. It looks like it does not use valid login name nor password. [ INFO ] TASK [ovirt.hosted_engine_setup : Expose engine VM webui over a local port via ssh port forwarding] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Evaluate temporary bootstrap engine URL] [ INFO ] ok: [localhost] [ INFO ] The bootstrap engine is temporary accessible over https://ovirt05.net.slu.cz:6900/ovirt-engine/ [ INFO ] TASK [ovirt.hosted_engine_setup : Detect VLAN ID] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Set Engine public key as authorized key without validating the TLS/SSL certificates] [ INFO ] changed: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : include_tasks] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Obtain SSO token using username/password credentials] [ INFO ] ok: [localhost] [ INFO ] TASK [ovirt.hosted_engine_setup : Ensure that the target datacenter is present] [ ERROR ] ovirtsdk4.AuthError: Error during SSO authentication access_denied : Cannot authenticate user 'None@N/A': No valid profile found in credentials.. [ ERROR ] fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error during SSO authentication access_denied : Cannot authenticate user 'None@N/A': No valid profile found in credentials.."} I tried to login to https://ovirt05.net.slu.cz:6900/ovirt-engine/ and it probably accept username admin@internal and new password entered during hosted engine deploy but then it display error "The provided authorization grant for the auth code has expired." Maybe it is related to this bug (and custom 3rd party Apache certificate) https://bugzilla.redhat.com/show_bug.cgi?id=1715767 in my case it looks like on engine vm in file /etc/pki/ovirt-engine/apache-ca.pem is original certificate from backup which is for ovirt.slu.cz fqdn. For new hosted engine I use new fqdn ovirt.net.slu.cz. Should I change ovirt.slu.cz record to point to new ip address (it have to be one from ovirtmgmt subnet) and then try restore? Documentation is not much clear in this particular subject. Cheers, Jiri