8:40 a.m.
Hi,
Does the admin@internal user have all the permissions?
Cause it seems like you are able to login with it, but then it fails
somehow.
Eventually you could try to add an additional user (in keycloak), and
then use user@internalsso in veeam (after you granted it all the
permissions).
This should work fine.
Jean-Louis
On 3/06/2025 23:27, victordanco(a)hotmail.com wrote:
> Good morning dear community. We are experiencing a problem when taking a backup
through Veeam backup. I share the logs:
>
> Engine.log
> 2025-06-03 16:09:52,158-05 ERROR [org.ovirt.engine.core.sso.service.SsoService]
(default task-2019) [53762455] OAuthException invalid_grant: The provided authorization
grant for the auth code has expired.
> 2025-06-03 16:09:52,160-05 ERROR
[org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default task-2006) [] Cannot
authenticate using authentication Headers: invalid_grant: The provided authorization grant
for the auth code has expired.
> 2025-06-03 16:09:52,429-05 INFO
[org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006) [] User
admin@internal-authz with profile [internal] successfully logged in with scopes:
ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~
ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search
ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate
ovirt-ext=token:password-access
> 2025-06-03 16:09:52,518-05 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006) [60f224da]
Running command: CreateUserSessionCommand internal: false.
> 2025-06-03 16:09:52,530-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-2006)
[60f224da] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from
'192.168.170.52' using session
'dYQlOCMThsTOInKjX8GKWUpAk/SFspOh5vuX0efK1slxzWloBoK9jGqt7TwOapfxUR1kzGg0ctoofUC7/pjeVg=='
logged in.
> 2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper]
(default task-2006) [] Can't find relative path for class
"org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will
return null
> 2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper]
(default task-2006) [] Can't find relative path for class
"org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will
return null
> 2025-06-03 16:10:05,258-05 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) [] User
admin@internal-authz with profile [internal] successfully logged out
> 2025-06-03 16:10:05,267-05 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-2019)
[78785b84] Running command: TerminateSessionsForTokenCommand internal: true.
> 2025-06-03 16:10:05,305-05 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) [] User
admin@internal-authz with profile [internal] successfully logged out
> 2025-06-03 16:10:05,310-05 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-2019)
[4a6cfc6] Running command: TerminateSessionsForTokenCommand internal: true.
> 2025-06-03 16:10:28,401-05 INFO
[org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006) [] User
admin@internal-authz with profile [internal] successfully logged in with scopes:
ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~
ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search
ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate
ovirt-ext=token:password-access
> 2025-06-03 16:10:28,453-05 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006) [152dcb43]
Running command: CreateUserSessionCommand internal: false.
> 2025-06-03 16:10:28,466-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-2006)
[152dcb43] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from
'192.168.170.52' using session
'1WDL5jCeJNVnQCOSAJu8hd+M1IJJp5AChx3SQnpNjG+v2cZHNRYBsrQpmfhNAuB5KAHUun7HKUxbRQcs5OCalQ=='
logged in.
> 2025-06-03 16:10:50,031-05 WARN
[org.ovirt.engine.core.utils.virtiowin.VirtioWinReader]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-19) [6b0bdae7]
Directory '/usr/share/virtio-win' doesn't exist.
>
> ---------
> Veeam Proxy:
> 2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: <==
Request "Get"
"https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk",
body: "{}"
> 2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: ==>
Response "Get"
"https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk",
"code: 401", duration: "163 msec", body: "[binary data]"
>
> Note that the user I use is admin@internal. I have read other forums that it is
recommended to use admin@ovirt@internalsso or others, but veeam does not allow me to use
admin@ovirt@internalsso.
>
> I appreciate your help or recommendations. Regards!
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5UDYFIGVQZN...