Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: > Please check again using ls -la on that folder. Yes, I did run "ls -la" :-) -Sharad Mishra > > Sent from my Android phone. Please ignore typos. > > -----Original Message----- > From: snmishra(a)linux.vnet.ibm.com > Received: Thursday, 19 Apr 2012, 20:38 > To: Ofer Schreiber [oschreib(a)redhat.com] > CC: users(a)ovirt.org > Subject: Re: [Users] Joss fails to start ... Keystore was tampered. > > > Quoting Ofer Schreiber <oschreib(a)redhat.com&gt;: > >> I'm trying to understand few things: >> 1. Did you used RPM for deployment? > > No, it was from source. (git clone) > >> 2. Was it an UPGRADE for the engine? > > yes, I updated the source which was about a month old. > >> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it >> changed recently? > > There is no .keystore in /etc/pki/ovirt-engine. But rest of the files > in this directory were modified on 4/17 (certs, keys, private, > requests). I was playing with kerberos for ldap on 17th so it is > possible that I did something that messed up the server, and it was > just coincidental that I upgraded the source next day and ran into > this issue. > > Any help on how I can get out of it? > > -Sharad Mishra >> >> Ofer. >> >> ----- Original Message ----- >>> >>> I had jboss running on my rhel6.2 machine. This morning I fetched >>> latest engine source, built and deployed it. I did not see any >>> errors. >>> But now when I start jboss-as service I see following errors in >>> engine.log - >>> >>> 2012-04-18 13:57:48,051 INFO [org.ovirt.engine.core.bll.Backend] >>> (MSC >>> service thread 1-5) Start time: 4/18/12 1:57 PM >>> 2012-04-18 13:57:48,204 ERROR >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>> was >>> tampered with, or password was incorrect >>> 2012-04-18 13:57:48,204 ERROR >>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>> service thread 1-5) Failed to decrypt value for property >>> LocalAdminPassword will be used encrypted value >>> 2012-04-18 13:57:48,209 WARN >>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread >>> 1-5) >>> Could not find enum value for option: NetConsolePort >>> 2012-04-18 13:57:48,212 ERROR >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>> was >>> tampered with, or password was incorrect >>> 2012-04-18 13:57:48,212 ERROR >>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>> service thread 1-5) Failed to decrypt value for property >>> CertificatePassword will be used encrypted value >>> 2012-04-18 13:57:48,214 ERROR >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>> was >>> tampered with, or password was incorrect >>> >>> Regards, >>> Sharad Mishra >>> IBM >>> >>> _______________________________________________ >>> Users mailing list >>> Users(a)ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> > > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > > Sent from my Android phone. Please ignore typos.

Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: > Thanks. > Unfortunately the keystore is the most important file in the PKI > area. Please try to recall your actions, and try to look for the > keystore in case you moved / change folders or anything alike. > > Currently, the only valid solution for a lost keystore is re-installation. I reinstalled ovirt-engine from source on a fresh rhel6.2 machine. I still do not see .keystore in /etc/pki/ovirt-engine. Now I get FileNotFoundException but engine is running. 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-15) Failed to decryptjava.io.FileNotFoundException: .keystore (No such file or directory) 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-15) Failed to decrypt value for property AdminPassword will be used encrypted value 2012-04-23 11:21:14,902 INFO [org.ovirt.engine.core.bll.Backend] (MSC service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM -Sharad Mishra > > On 19/04/12 22:40, snmishra(a)linux.vnet.ibm.com wrote: >> >> Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: >> >>> Please check again using ls -la on that folder. >> >> Yes, I did run "ls -la" :-) >> >> -Sharad Mishra >> >>> >>> Sent from my Android phone. Please ignore typos. >>> >>> -----Original Message----- >>> From: snmishra(a)linux.vnet.ibm.com >>> Received: Thursday, 19 Apr 2012, 20:38 >>> To: Ofer Schreiber [oschreib(a)redhat.com] >>> CC: users(a)ovirt.org >>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered. >>> >>> >>> Quoting Ofer Schreiber <oschreib(a)redhat.com&gt;: >>> >>>> I'm trying to understand few things: >>>> 1. Did you used RPM for deployment? >>> >>> No, it was from source. (git clone) >>> >>>> 2. Was it an UPGRADE for the engine? >>> >>> yes, I updated the source which was about a month old. >>> >>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it >>>> changed recently? >>> >>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files >>> in this directory were modified on 4/17 (certs, keys, private, >>> requests). I was playing with kerberos for ldap on 17th so it is >>> possible that I did something that messed up the server, and it was >>> just coincidental that I upgraded the source next day and ran into >>> this issue. >>> >>> Any help on how I can get out of it? >>> >>> -Sharad Mishra >>>> >>>> Ofer. >>>> >>>> ----- Original Message ----- >>>>> >>>>> I had jboss running on my rhel6.2 machine. This morning I fetched >>>>> latest engine source, built and deployed it. I did not see any >>>>> errors. >>>>> But now when I start jboss-as service I see following errors in >>>>> engine.log - >>>>> >>>>> 2012-04-18 13:57:48,051 INFO [org.ovirt.engine.core.bll.Backend] >>>>> (MSC >>>>> service thread 1-5) Start time: 4/18/12 1:57 PM >>>>> 2012-04-18 13:57:48,204 ERROR >>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>> was >>>>> tampered with, or password was incorrect >>>>> 2012-04-18 13:57:48,204 ERROR >>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>>>> service thread 1-5) Failed to decrypt value for property >>>>> LocalAdminPassword will be used encrypted value >>>>> 2012-04-18 13:57:48,209 WARN >>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread >>>>> 1-5) >>>>> Could not find enum value for option: NetConsolePort >>>>> 2012-04-18 13:57:48,212 ERROR >>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>> was >>>>> tampered with, or password was incorrect >>>>> 2012-04-18 13:57:48,212 ERROR >>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>>>> service thread 1-5) Failed to decrypt value for property >>>>> CertificatePassword will be used encrypted value >>>>> 2012-04-18 13:57:48,214 ERROR >>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>> was >>>>> tampered with, or password was incorrect >>>>> >>>>> Regards, >>>>> Sharad Mishra >>>>> IBM >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>> >>> >>> >>> >>> _______________________________________________ >>> Users mailing list >>> Users(a)ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >>> Sent from my Android phone. Please ignore typos. >> >> >>

Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: > Please explain "from source"- > - Did you run maven using dep and started JBoss? yes, I followed the steps at http://www.ovirt.org/wiki/Building_Ovirt_Engine section "Building oVirt-engine from source". -Sharad > or > - Did you create RPM's and used yum install? > > On 23/04/12 22:28, Sharad Mishra wrote: >> >> Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: >> >>> Thanks. >>> Unfortunately the keystore is the most important file in the PKI >>> area. Please try to recall your actions, and try to look for the >>> keystore in case you moved / change folders or anything alike. >>> >>> Currently, the only valid solution for a lost keystore is re-installation. >> >> I reinstalled ovirt-engine from source on a fresh rhel6.2 machine. I still do not see .keystore in /etc/pki/ovirt-engine. Now I get FileNotFoundException but engine is running. >> >> 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-15) Failed to decryptjava.io.FileNotFoundException: .keystore (No such file or directory) >> 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-15) Failed to decrypt value for property AdminPassword will be used encrypted value >> 2012-04-23 11:21:14,902 INFO [org.ovirt.engine.core.bll.Backend] (MSC service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM >> >> -Sharad Mishra >> >>> >>> On 19/04/12 22:40, snmishra(a)linux.vnet.ibm.com wrote: >>>> >>>> Quoting Doron Fediuck <dfediuck(a)redhat.com&gt;: >>>> >>>>> Please check again using ls -la on that folder. >>>> >>>> Yes, I did run "ls -la" :-) >>>> >>>> -Sharad Mishra >>>> >>>>> >>>>> Sent from my Android phone. Please ignore typos. >>>>> >>>>> -----Original Message----- >>>>> From: snmishra(a)linux.vnet.ibm.com >>>>> Received: Thursday, 19 Apr 2012, 20:38 >>>>> To: Ofer Schreiber [oschreib(a)redhat.com] >>>>> CC: users(a)ovirt.org >>>>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered. >>>>> >>>>> >>>>> Quoting Ofer Schreiber <oschreib(a)redhat.com&gt;: >>>>> >>>>>> I'm trying to understand few things: >>>>>> 1. Did you used RPM for deployment? >>>>> >>>>> No, it was from source. (git clone) >>>>> >>>>>> 2. Was it an UPGRADE for the engine? >>>>> >>>>> yes, I updated the source which was about a month old. >>>>> >>>>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it >>>>>> changed recently? >>>>> >>>>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files >>>>> in this directory were modified on 4/17 (certs, keys, private, >>>>> requests). I was playing with kerberos for ldap on 17th so it is >>>>> possible that I did something that messed up the server, and it was >>>>> just coincidental that I upgraded the source next day and ran into >>>>> this issue. >>>>> >>>>> Any help on how I can get out of it? >>>>> >>>>> -Sharad Mishra >>>>>> >>>>>> Ofer. >>>>>> >>>>>> ----- Original Message ----- >>>>>>> >>>>>>> I had jboss running on my rhel6.2 machine. This morning I fetched >>>>>>> latest engine source, built and deployed it. I did not see any >>>>>>> errors. >>>>>>> But now when I start jboss-as service I see following errors in >>>>>>> engine.log - >>>>>>> >>>>>>> 2012-04-18 13:57:48,051 INFO [org.ovirt.engine.core.bll.Backend] >>>>>>> (MSC >>>>>>> service thread 1-5) Start time: 4/18/12 1:57 PM >>>>>>> 2012-04-18 13:57:48,204 ERROR >>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>>>> was >>>>>>> tampered with, or password was incorrect >>>>>>> 2012-04-18 13:57:48,204 ERROR >>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>>>>>> service thread 1-5) Failed to decrypt value for property >>>>>>> LocalAdminPassword will be used encrypted value >>>>>>> 2012-04-18 13:57:48,209 WARN >>>>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread >>>>>>> 1-5) >>>>>>> Could not find enum value for option: NetConsolePort >>>>>>> 2012-04-18 13:57:48,212 ERROR >>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>>>> was >>>>>>> tampered with, or password was incorrect >>>>>>> 2012-04-18 13:57:48,212 ERROR >>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC >>>>>>> service thread 1-5) Failed to decrypt value for property >>>>>>> CertificatePassword will be used encrypted value >>>>>>> 2012-04-18 13:57:48,214 ERROR >>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC >>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore >>>>>>> was >>>>>>> tampered with, or password was incorrect >>>>>>> >>>>>>> Regards, >>>>>>> Sharad Mishra >>>>>>> IBM >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)ovirt.org >>>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>>>> >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>> >>>>> >>>>> Sent from my Android phone. Please ignore typos. >>>> >>>> >>>> >> >> >>