Hi,
Can you enable debug logging for sso and give me the debug logs when the
error occurs.
You can enable debug logging for sso by adding the following to
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, just
below the entry for bll
<logger category="org.ovirt.engine.core.sso">
<level name="DEBUG"/>
</logger>
Thanks
On Wed, Mar 29, 2017 at 3:21 AM, Francesco Romani <fromani(a)redhat.com>
wrote:
Hi,
On 03/02/2017 12:21 PM, Eduardo Mayoral wrote:
Hi,
I am getting exactly the same issue here with 4.1 , when trying to log
in to the serial console over SSH.
The user with domain is "emayoral_adm(a)arsyslan.es"
<emayoral_adm(a)arsyslan.es> (please note mailman may translate the "at"
character to a textual "_at_"). The First name and last name as read from
active directory is "Eduardo Mayoral" (with no quotes)
The password is: 08.HJYqoce,nrW (OK, this is not the real password, but it
has the same special characters and approximate structure and length)
This is the engine.log output.
2017-03-02 11:13:31,917Z INFO [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand]
(default task-25) [5d9b7d18] Running command: LoginOnBehalfCommand
internal: true.
2017-03-02 11:13:31,938Z ERROR [org.ovirt.engine.core.sso.utils.SsoUtils]
(default task-33) [] OAuthException server_error: java.text.ParseException:
Invalid character ' ' encountered.
2017-03-02 11:13:31,939Z ERROR [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand]
(default task-25) [5d9b7d18] Unable to create engine session:
EngineException: user emayoral_adm(a)arsyslan.es in domain
'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and code 5200)
2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.dal.
dbbroker.auditloghandling.AuditLogDirector] (default task-25) [5d9b7d18]
EVENT_ID: USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18,
Call Stack: null, Custom Event ID: -1, Message: Failed to execute login on
behalf - for user emayoral_adm(a)arsyslan.es.
2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.services.VMConsoleProxyServlet]
(default task-25) [5d9b7d18] Error processing request: :
java.lang.RuntimeException: Unable to create session using LoginOnBehalf
This smells like one engine internal bug. Please make sure to file one
bugzilla entry.
Bests,
--
Francesco Romani
Senior SW Eng., Virtualization R&D
Red Hat
IRC: fromani github: @fromanirh
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users