6:37 p.m.
This is a multi-part message in MIME format.
--------------BB4C4DF1A3B16FBCD0105975
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable
Hi,
with 4.1 beta2, I try to use ovirtvm-console with my AD imported account=20
with issue "Failed to execute login on behalf - for user xxx".
* I can login with name into the webadmin as a superuser.
* I don't meet any issue with 4.0.x
* whatever the pub key is it is the same
* All other AD and local accounts work as expected with ovirtvm-console
Regarding the engine logs, it seems that some character of my name are=20
not recognized:
2017-01-09 17:35:52,014+01 ERROR=20
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []=20
OAuthException server_error: java.text.ParseException: Invalid character=20
' ' encountered.
2017-01-09 17:35:52,016+01 ERROR=20
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-1)=20
[50439863] Unable to create engine session: EngineException: user=20
sblanchet(a)levant.abes.fr in domain 'abes.fr-authz (Failed with error=20
PRINCIPAL_NOT_FOUND and code 5200)
2017-01-09 17:35:52,024+01 ERROR=20
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]=20
(default task-1) [50439863] Correlation ID: 50439863, Call Stack: null,=20
Custom Event ID: -1, Message: Failed to execute login on behalf - for=20
user sblanchet(a)levant.abes.fr.
2017-01-09 17:35:52,025+01 ERROR=20
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-1)=20
[50439863] Error processing request: : java.lang.RuntimeException:=20
Unable to create session using LoginOnBehalf
--=20
Nathana=C3=ABl Blanchet
Supervision r=C3=A9seau
P=C3=B4le Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 =09
T=C3=A9l. 33 (0)4 67 54 84 55
Fax 33 (0)4 67 54 84 14
blanchet(a)abes.fr
--------------BB4C4DF1A3B16FBCD0105975
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"content-type" content=3D"text/html;
charset=3Dutf=
-8">
</head>
<body text=3D"#000000" bgcolor=3D"#FFFFFF">
<p>Hi,</p>
<p>with 4.1 beta2, I try to use ovirtvm-console with my AD imported
account with issue "Failed to execute login on behalf - for user
xxx". <br>
</p>
<ul>
<li>I can login with name into the webadmin as a superuser.<br>
</li>
<li>I don't meet any issue with 4.0.x <br>
</li>
<li>whatever the pub key is it is the same</li>
<li>All other AD and local accounts work as expected with
ovirtvm-console</li>
</ul>
<p>Regarding the engine logs, it seems that some character of my
name are not recognized:</p>
<p>2017-01-09 17:35:52,014+01 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
OAuthException server_error: java.text.ParseException: Invalid
character ' ' encountered.<br>
2017-01-09 17:35:52,016+01 ERROR
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
task-1) [50439863] Unable to create engine session:
EngineException:=C2=A0 user <a class=3D"moz-txt-link-abbreviated" h=
ref=3D"mailto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a> in
d=
omain
'abes.fr-authz (Failed with error PRINCIPAL_NOT_FOUND and code
5200)<br>
2017-01-09 17:35:52,024+01 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirect=
or]
(default task-1) [50439863] Correlation ID: 50439863, Call Stack:
null, Custom Event ID: -1, Message: Failed to execute login on
behalf - for user <a class=3D"moz-txt-link-abbreviated"
href=3D"mai=
lto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a>.<br>
2017-01-09 17:35:52,025+01 ERROR
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default
task-1) [50439863] Error processing request: :
java.lang.RuntimeException: Unable to create session using
LoginOnBehalf<br>
</p>
<br>
<pre class=3D"moz-signature" cols=3D"72">--=20
Nathana=C3=ABl Blanchet
Supervision r=C3=A9seau
P=C3=B4le Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 =09
T=C3=A9l. 33 (0)4 67 54 84 55
Fax 33 (0)4 67 54 84 14
<a class=3D"moz-txt-link-abbreviated"
href=3D"mailto:blanchet@abes.fr">bl=
anchet(a)abes.fr</a> </pre>
</body>
</html>
--------------BB4C4DF1A3B16FBCD0105975--