Hi, Can you enable debug logging for sso and give me the debug logs when the error occurs. You can enable debug logging for sso by adding the following to /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, just below the entry for bll <logger category="org.ovirt.engine.core.sso"> <level name="DEBUG"/> </logger> Thanks On Wed, Mar 29, 2017 at 3:21 AM, Francesco Romani <fromani@redhat.com> wrote:
Hi,
On 03/02/2017 12:21 PM, Eduardo Mayoral wrote:
Hi,
I am getting exactly the same issue here with 4.1 , when trying to log in to the serial console over SSH.
The user with domain is "emayoral_adm@arsyslan.es" <emayoral_adm@arsyslan.es> (please note mailman may translate the "at" character to a textual "_at_"). The First name and last name as read from active directory is "Eduardo Mayoral" (with no quotes)
The password is: 08.HJYqoce,nrW (OK, this is not the real password, but it has the same special characters and approximate structure and length)
This is the engine.log output.
2017-03-02 11:13:31,917Z INFO [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25) [5d9b7d18] Running command: LoginOnBehalfCommand internal: true. 2017-03-02 11:13:31,938Z ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-33) [] OAuthException server_error: java.text.ParseException: Invalid character ' ' encountered. 2017-03-02 11:13:31,939Z ERROR [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25) [5d9b7d18] Unable to create engine session: EngineException: user emayoral_adm@arsyslan.es in domain 'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and code 5200) 2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.dal. dbbroker.auditloghandling.AuditLogDirector] (default task-25) [5d9b7d18] EVENT_ID: USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18, Call Stack: null, Custom Event ID: -1, Message: Failed to execute login on behalf - for user emayoral_adm@arsyslan.es. 2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-25) [5d9b7d18] Error processing request: : java.lang.RuntimeException: Unable to create session using LoginOnBehalf
This smells like one engine internal bug. Please make sure to file one bugzilla entry.
Bests,
-- Francesco Romani Senior SW Eng., Virtualization R&D Red Hat IRC: fromani github: @fromanirh
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users