[ovirt-users] Re: admin user locked out (OVN invalid_grant)

On Tue, 12 Feb 2019 16:50:06 -0000 Andrey Rusakov <anrusakov(a)gmail.com&gt; wrote: > Hi, > > Recently i upgrade my oVirt installation 4.2.8 to 4.3. > I was able to login right after upgrade (yum, setup, reboot). > But according to logs, account locks in 2-3 minutes. > > 2019-02-12 15:44:57,228+03 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) [] OAuthException invalid_grant: The provided authorization grant for the auth code has expired. > 2019-02-12 15:44:57,232+03 ERROR [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default task-2) [] Cannot authenticate using authentication Headers: invalid_grant: The provided authorization grant for the auth code has expired. > 2019-02-12 15:44:57,307+03 INFO [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default task-2) [] locking user: admin due to interval failures > > I was able to unlock admin using CLI, but every time i go to OVN config it locks immediately. > > Checking OVN service logs i can see > > code 401, message Unauthorized > "POST /v2.0/tokens HTTP/1.1" 401 - > > And > "Error during SSO authentication invalid_grant : The provided authorization grant for the auth code has expired." > On OVN web page. > For a timely fix, please disable automatic synchronization of the ovirt-provider-ovn via web UI Administration -> Providers -> ovirt-provider-ovn -> Edit -> Disable Automatic Synchronization Is there a file /etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf ? > Is it possible to renew authorization grant or ...? > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRTJIQSQGCA...