Hi,

Can you enable debug logging for sso and give me the debug logs when the error occurs.

You can enable debug logging for sso by adding the following to /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, just below the entry for bll

       <logger category="org.ovirt.engine.core.sso">
        <level name="DEBUG"/>
      </logger>

Thanks

On Wed, Mar 29, 2017 at 3:21 AM, Francesco Romani <fromani@redhat.com> wrote:

Hi,


On 03/02/2017 12:21 PM, Eduardo Mayoral wrote:

Hi,

    I am getting exactly the same issue here with 4.1 , when trying to log in to the serial console over SSH.


The user with domain is "emayoral_adm@arsyslan.es" (please note mailman may translate the "at" character to a textual "_at_"). The First name and last name as read from active directory is "Eduardo Mayoral" (with no quotes)

The password is: 08.HJYqoce,nrW (OK, this is not the real password, but it has the same special characters and approximate structure and length)

This is the engine.log output.

2017-03-02 11:13:31,917Z INFO  [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25) [5d9b7d18] Running command: LoginOnBehalfCommand internal: true.
2017-03-02 11:13:31,938Z ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-33) [] OAuthException server_error: java.text.ParseException: Invalid character ' ' encountered.
2017-03-02 11:13:31,939Z ERROR [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-25) [5d9b7d18] Unable to create engine session: EngineException:  user emayoral_adm@arsyslan.es in domain 'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and code 5200)
2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-25) [5d9b7d18] EVENT_ID: USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18, Call Stack: null, Custom Event ID: -1, Message: Failed to execute login on behalf - for user emayoral_adm@arsyslan.es.
2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-25) [5d9b7d18] Error processing request: : java.lang.RuntimeException: Unable to create session using LoginOnBehalf


 This smells like one engine internal bug. Please make sure to file one bugzilla entry.

Bests,

-- 
Francesco Romani
Senior SW Eng., Virtualization R&D
Red Hat
IRC: fromani github: @fromanirh

_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users