On Tue, 12 Feb 2019 16:50:06 -0000
Andrey  Rusakov <anrusakov@gmail.com> wrote:

> Hi,
>
> Recently i upgrade my oVirt installation 4.2.8 to 4.3.
> I was able to login right after upgrade (yum, setup, reboot).
> But according to logs, account locks in 2-3 minutes.
>
> 2019-02-12 15:44:57,228+03 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-1) [] OAuthException invalid_grant: The provided authorization grant for the auth code has expired.
> 2019-02-12 15:44:57,232+03 ERROR [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default task-2) [] Cannot authenticate using authentication Headers: invalid_grant: The provided authorization grant for the auth code has expired.
> 2019-02-12 15:44:57,307+03 INFO  [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default task-2) [] locking user: admin due to interval failures
>
> I was able to unlock admin using CLI, but every time i go to OVN config it locks immediately.
>
> Checking OVN service logs i can see
>
> code 401, message Unauthorized
> "POST /v2.0/tokens HTTP/1.1" 401 -
>
> And
> "Error during SSO authentication invalid_grant : The provided authorization grant for the auth code has expired."
> On OVN web page.
>


For a timely fix, please disable automatic synchronization of the
ovirt-provider-ovn via web UI Administration -> Providers ->
ovirt-provider-ovn -> Edit -> Disable Automatic Synchronization

Is there a file
/etc/ovirt-provider-ovn/conf.d/10-setup-ovirt-provider-ovn.conf
?

> Is it possible to  renew authorization grant or ...?
> 
> _______________________________________________
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-leave@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/FRTJIQSQGCANHY7HKQAPPBHGLRN2LDJK/