
Also, can you please try to search within this domain, not only login to it? Does it fail or works good? (in webadmin go to users tab and click add, select your domain and search for users). ----- Original Message -----
From: "Alon Bar-Lev" <alonbl@redhat.com> To: "Juan Jose" <jj197005@gmail.com> Cc: "Ondra Machacek" <omachace@redhat.com>, "Yair Zaslavsky" <yzaslavs@redhat.com>, users@ovirt.org Sent: Tuesday, November 25, 2014 1:49:20 PM Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
2014-11-25 12:54:10,687 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher] (ajp--127.0.0.1-8702-5) Failed ldap search server ldap://adserver.siee.local:389 using user juanjo@SIEE.LOCAL due to Authentication Failed. Please verify the username and password.. We should not try the next server
----- Original Message -----
From: "Juan Jose" <jj197005@gmail.com> To: "Ondra Machacek" <omachace@redhat.com>, alonbl@redhat.com, "Yair Zaslavsky" <yzaslavs@redhat.com>, users@ovirt.org Sent: Tuesday, November 25, 2014 2:29:26 PM Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
Hello Ondra and everybody,
It works with my other user:
engine-manage-domains add --domain=siee.local --provider=ad --user=juanjo --add-permissions Enter password: Successfully added domain siee.local. oVirt Engine restart is required in order for the changes to take place (service ovirt-engine restart). Manage Domains completed successfully
But after restarted ovirt-engine if I try to loging with "juanjo" in the administrator portal and I receive the error "General command validation failure", as you can see in the attached image.
I'm showing below the engine.log lines with the error:
2014-11-25 12:54:10,680 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy] (ajp--127.0.0.1-8702-5) Kerberos error: Pre-authentication information was invalid (24) 2014-11-25 12:54:10,681 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy] (ajp--127.0.0.1-8702-5) Authentication Failed. Please verify the username and password. 2014-11-25 12:54:10,687 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher] (ajp--127.0.0.1-8702-5) Failed ldap search server ldap://adserver.siee.local:389 using user juanjo@SIEE.LOCAL due to Authentication Failed. Please verify the username and password.. We should not try the next server 2014-11-25 12:54:10,688 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase] (ajp--127.0.0.1-8702-5) Failed to run command LdapGetAdUserByUserNameCommand. Domain is siee.local. User is juanjo@SIEE.LOCAL. 2014-11-25 12:54:10,689 ERROR [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (ajp--127.0.0.1-8702-5) Error during CanDoActionFailure.: Class: class org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException Input: {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= http://www.ovirt.org, Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_NAME;type=class java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=Kerberos/Ldap Authz (Built-in), Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=siee.local, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class java.lang.Long;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1, Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=N/A, Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[*], Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.Kerberos/Ldap Authz (Built-in).siee.local), Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz]}, Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3, Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df], Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=juanjo}} Output: {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2, Extkey[name=AAA_AUTHZ_STATUS;type=class java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=1}
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:91) [extensions-manager.jar:] at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109) [extensions-manager.jar:] at org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecordImpl(AuthzUtils.java:51) [aaa.jar:] at org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecord(AuthzUtils.java:42) [aaa.jar:] at org.ovirt.engine.core.bll.aaa.LoginBaseCommand.isUserCanBeAuthenticated(LoginBaseCommand.java:234) [bll.jar:] at org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand.canDoAction(LoginAdminUserCommand.java:15) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.internalCanDoAction(CommandBase.java:744) [bll.jar:] at org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:338) [bll.jar:] at org.ovirt.engine.core.bll.Backend.login(Backend.java:575) [bll.jar:] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_51] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:114) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:125) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:135) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.ovirt.engine.core.bll.interceptors.ThreadLocalSessionCleanerInterceptor.injectWebContextToThreadLocal(ThreadLocalSessionCleanerInterceptor.java:13) [bll.jar:] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_51] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at org.jboss.as.ee.component.ManagedReferenceLifecycleMethodInterceptorFactory$ManagedReferenceLifecycleMethodInterceptor.processInvocation(ManagedReferenceLifecycleMethodInterceptorFactory.java:123) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:82) [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:211) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:363) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:194) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59) [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:173) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61) [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] at org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72) [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] at org.ovirt.engine.core.common.interfaces.BackendLocal$$$view7.login(Unknown Source) [common.jar:] at org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.login(GenericApiGWTServiceImpl.java:183) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_51] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at com.google.gwt.rpc.server.RPC.invokeAndStreamResponse(RPC.java:196) at com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:172) at com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233) at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62) at javax.servlet.http.HttpServlet.service(HttpServlet.java:754) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94) [utils.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:72) at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:64) [utils.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31) [aaa.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.aaa.filters.LoginFilter.doFilter(LoginFilter.java:73) [aaa.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.aaa.filters.NegotiationFilter.doFilter(NegotiationFilter.java:131) [aaa.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:75) [aaa.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:63) [aaa.jar:] at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280) at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489) at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505) at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:445) at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_51]
Could you help me with this problem, please?
Many thanks in advanced,
Juanjo.
On Tue, Nov 25, 2014 at 12:24 PM, Ondra Machacek <omachace@redhat.com> wrote:
Hi,
can you please try different account than Administrator?
From: "Juan Jose" <jj197005@gmail.com> To: omachace@redhat.com, alonbl@redhat.com, "Yair Zaslavsky" < yzaslavs@redhat.com>, users@ovirt.org Sent: Tuesday, November 25, 2014 11:01:13 AM Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
Hello everybody,
Ondra you are right, I removed the domain. I have already tried to execute the command with lower case the domain name and the result is the same
engine-manage-domains add --domain=siee.local --provider=ad --user=Administrator --add-permissions Enter password: No user in Directory was found for Administrator@SIEE.LOCAL. Trying next LDAP server in list Failure while testing domain siee.local. Details: No user information was found for user
the result to the command psql -U engine -d engine -c "select * from vdc_options where option_name='LDAPSecurityAuthentication'" is:
psql: FATAL: Ident authentication failed for user "engine"
And for second command psql -U engine -d engine -c "update vdc_options set option_value='siee.local:GSSAPI' where option_name='LDAPSecurityAuthentication'", I receive the same response:
psql: FATAL: Ident authentication failed for user "engine"
Is there any problem?
Many thanks in advanced,
Juanjo.
On Mon, Nov 24, 2014 at 1:57 PM, Ondra Machacek <omachace@redhat.com> wrote:
I understood that domain can be deleted, but can't be added, so there won't be needed values to update in vdc_options.
Juanjo - Can you please provide us what's the result of command:
$ psql -U engine -d engine -c "select * from vdc_options where option_name='LDAPSecurityAuthentication'"
If it's empty or if the domain name is upper case or lower case? If it's upper, than please lower case it. $ psql -U engine -d engine -c "update vdc_options set option_value='siee.local:GSSAPI' where option_name='LDAPSecurityAuthentication'"
----- Original Message -----
From: "Alon Bar-Lev" <alonbl@redhat.com> To: "Ondra Machacek" <omachace@redhat.com> Cc: jj197005@gmail.com, users@ovirt.org, "Yair Zaslavsky" < yzaslavs@redhat.com> Sent: Monday, November 24, 2014 1:49:11 PM Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
----- Original Message ----- > From: "Ondra Machacek" <omachace@redhat.com> > To: jj197005@gmail.com > Cc: users@ovirt.org, "Yair Zaslavsky" <yzaslavs@redhat.com>, > "Alon Bar-Lev" > <alonbl@redhat.com> > Sent: Monday, November 24, 2014 2:46:20 PM > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue > > Please try to run your command with domain in lower case: > > engine-manage-domains add --domain=siee.local --provider=ad > --user=Administrator
it is already added, won't it simpler to modify the vdc_options?
> > > ----- Original Message ----- > > From: "Alon Bar-Lev" <alonbl@redhat.com> > > To: "Juan Jose" <jj197005@gmail.com> > > Cc: users@ovirt.org, "Yair Zaslavsky" <yzaslavs@redhat.com>, "Ondra > > Machacek" <omachace@redhat.com> > > Sent: Monday, November 24, 2014 1:27:39 PM > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue > > > > > > Yes, > > I think we just fixed this[1]. > > We can fix this manually, yair, ondra what is the easiest fix? > > > > BTW: you can also checkout the new ldap provider > > (ovirt-engine-extension-aaa-ldap) in 3.5 which should be much more > > robust[1], I can help you set it up. > > > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1167211 > > [2] > >
http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;...
> > > > ----- Original Message ----- > > > From: "Juan Jose" <jj197005@gmail.com> > > > To: users@ovirt.org > > > Sent: Monday, November 24, 2014 2:22:44 PM > > > Subject: [ovirt-users] Adding domain to oVirt to 3.5 issue > > > > > > Hello everybody, > > > > > > I have upgraded my oVirt 3.4 to 3.5 version without any > > > problem > > > apparently. > > > > > > After finish the upgrade I have tried to login with any of my AD users > > > from > > > my Samba 4, like I used to do in oVirt 3.4 but I received > > > authentication > > > errors as below error: > > > > > > 2014-11-21 14:06:02,681 ERROR > > >
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > (ajp--127.0.0.1-8702-3) Kerberos error: Pre-authentication information > > > was > > > invalid (24) > > > 2014-11-21 14:06:02,683 ERROR > > >
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > (ajp--127.0.0.1-8702-3) Authentication Failed. Please verify
> > > username > > > and password. > > > 2014-11-21 14:06:02,685 ERROR > > >
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> > > (ajp--127.0.0.1-8702-3) Failed ldap search server > > > ldap://adserver.siee.local:389 using user juanjo@SIEE.LOCAL due to > > > Authentication Failed. Please verify the username and
> > > should > > > not try the next server > > > 2014-11-21 14:06:02,688 ERROR > > >
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
> > > (ajp--127.0.0.1-8702-3) Failed to run command > > > LdapGetAdUserByUserNameCommand. Domain is siee.local. User is > > > juanjo@SIEE.LOCAL. > > > 2014-11-21 14:06:02,690 ERROR > > > [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] > > > (ajp--127.0.0.1-8702-3) Error during CanDoActionFailure.: Class: class > > >
org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException
> > > Input: > > > {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class > > >
org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class
> > >
java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0,
> > > Extkey[name=EXTENSION_LICENSE;type=class > > >
java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL
> > > 2.0, Extkey[name=EXTENSION_HOME_URL;type=class > > >
java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]=
> > > http://www.ovirt.org , > > > Extkey[name=EXTENSION_LOCALE;type=class > > >
java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US,
> > > Extkey[name=EXTENSION_NAME;type=class > > >
java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=Kerberos/Ldap
> > > Authz (Built-in), > > > Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class > > >
java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0,
> > > Extkey[name=EXTENSION_CONFIGURATION;type=class > > >
java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***,
> > > Extkey[name=EXTENSION_AUTHOR;type=class > > >
java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The
> > > oVirt Project, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class > > >
java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100,
> > > Extkey[name=EXTENSION_INSTANCE_NAME;type=class > > >
java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=siee.local,
> > > Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class > > >
java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0,
> > > Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class > > >
java.lang.Long;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1,
> > > Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface > > >
java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[],
> > > Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class > > >
org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*,
> > > Extkey[name=EXTENSION_VERSION;type=class > > >
java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=N/A,
> > > Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface > > >
java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[*],
> > > Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface > > >
org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.Kerberos/Ldap
> > > Authz (Built-in).siee.local), > > > Extkey[name=EXTENSION_PROVIDES;type=interface > > >
java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz]},
> > > Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class > > >
java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3,
> > > Extkey[name=EXTENSION_INVOKE_COMMAND;type=class > > >
org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df],
> > > Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class > > >
org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class
> > >
java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=juanjo}}
> > > Output: > > > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class > > >
java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2,
> > > Extkey[name=AAA_AUTHZ_STATUS;type=class > > >
java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=1}
> > > > > > at > > >
org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:91)
> > > [extensions-manager.jar:] > > > at > > >
org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109)
> > > [extensions-manager.jar:] > > > at > > >
org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecordImpl(AuthzUtils.java:51)
> > > [aaa.jar:] > > > at > > >
org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecord(AuthzUtils.java:42)
> > > [aaa.jar:] > > > at > > >
org.ovirt.engine.core.bll.aaa.LoginBaseCommand.isUserCanBeAuthenticated(LoginBaseCommand.java:234)
> > > [bll.jar:] > > > at > > >
org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand.canDoAction(LoginAdminUserCommand.java:15)
> > > [bll.jar:] > > > at > > >
org.ovirt.engine.core.bll.CommandBase.internalCanDoAction(CommandBase.java:744)
> > > [bll.jar:] > > > at > > >
org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:338)
> > > [bll.jar:] > > > at org.ovirt.engine.core.bll.Backend.login(Backend.java:575) [bll.jar:] > > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native > > > Method) > > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51] > > > at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] > > > at > > >
org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:114)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:125)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:135)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.ovirt.engine.core.bll.interceptors.ThreadLocalSessionCleanerInterceptor.injectWebContextToThreadLocal(ThreadLocalSessionCleanerInterceptor.java:13)
> > > [bll.jar:] > > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native > > > Method) > > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51] > > > at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] > > > at > > >
org.jboss.as.ee.component.ManagedReferenceLifecycleMethodInterceptorFactory$ManagedReferenceLifecycleMethodInterceptor.processInvocation(ManagedReferenceLifecycleMethodInterceptorFactory.java:123)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:82)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:211)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:363)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:194)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > > org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165) > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:173)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final] > > > at > > >
org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final] > > > at > > >
org.ovirt.engine.core.common.interfaces.BackendLocal$$$view7.login(Unknown
> > > Source) [common.jar:] > > > at > > >
org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.login(GenericApiGWTServiceImpl.java:183)
> > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native > > > Method) > > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51] > > > at > > >
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51] > > > at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] > > > at com.google.gwt.rpc.server.RPC.invokeAndStreamResponse(RPC.java:196) > > > at > > > com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:172) > > > at > > > com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233) > > > at > > >
com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
> > > at > > > javax.servlet.http.HttpServlet.service(HttpServlet.java:754) > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] > > > at > > > javax.servlet.http.HttpServlet.service(HttpServlet.java:847) > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94)
> > > [utils.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:72)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:64)
> > > [utils.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31)
> > > [aaa.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.aaa.filters.LoginFilter.doFilter(LoginFilter.java:73)
> > > [aaa.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.aaa.filters.NegotiationFilter.doFilter(NegotiationFilter.java:131)
> > > [aaa.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:75)
> > > [aaa.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:63)
> > > [aaa.jar:] > > > at > > >
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > at > > >
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > at > > >
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
> > > at > > >
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
> > > at > > >
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489)
> > > at > > >
org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153)
> > > at > > >
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
> > > at > > >
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> > > at org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466) > > > at > > >
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> > > at > > >
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
> > > at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505) > > > at > > >
org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:445)
> > > at > > > org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) > > > at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_51] > > > > > > I have not changed any password from any of my AD users. > > > > > > I have removed from my oVirt 3.5 the domain with: > > > > > > engine-manage-domains delete --domain=siee.local --user=Administrator > > > > > > And I have removed the domain without problems. But I want to add it > > > again > > > but I can't. I execute the bellow command, put the password > > > of my > > > Administrator domain and I receive the error showed bellow: > > > > > > engine-manage-domains add --domain=SIEE.LOCAL --provider=ad > > > --user=Administrator > > > Enter password: > > > No user in Directory was found for Administrator@SIEE.LOCAL. Trying > > > next > > > LDAP > > > server in list > > > Failure while testing domain siee.local. Details: No user information > > > was > > > found for user > > > > > > The password that I use is correct because I can login with user > > > Administrator in the domain siee.local through a Windows 7 Enterprise > > > client. All this issue comes after my upgrade to oVirt 3.5. Does > > > someone > > > help me with this problem?. If more info is needed or logs,
----- Original Message ----- the password.. We please
ask
> > > me. > > > > > > Many thanks in advanced, > > > > > > Juanjo > > > > > > _______________________________________________ > > > Users mailing list > > > Users@ovirt.org > > > http://lists.ovirt.org/mailman/listinfo/users > > > > > >