9:37 a.m.
Hi,
I think I know (it's hard to tell without more logs, but
anyway):
It's because your PKI was expired and thus renewed. If you used the
command line to restore/deploy, you were also asked:
'Renew engine CA on restore if needed? Please notice '
'that if you choose Yes, all hosts will have to be '
'later manually reinstalled from the engine. '
'(@VALUES@)[@DEFAULT@]: '
and probably replied Yes.
You have two options:
1. Try again, and reply No.
2. Run first engine-setup (can add --offline to prevent it from
upgrading) on your old engine. You should be prompted there, and reply
Yes, and then take a backup after it finishes and try again to restore
with that backup.
In any case, that's a b
your guess was right, I think (btw: I check the ca.pem in the old HE -
this one is valid til 2028). I took the easy way and replied with "No".
I will open a bug (my first one :-)). Is this one for the
ovirt-hosted-engine-setup category?
Anyway, setup ran much farther but still did not complete. It fails
after this error now:
[ ERROR ] ovirtsdk4.AuthError: Error during SSO authentication
server_error : PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
[ ERROR ] fatal: [localhost]: FAILED! => {"attempts": 50,
"changed":
false, "msg": "Error during SSO authentication server_error : PKIX path
building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target"}
I can see this in /var/log/engine.log in the HE.
2020-05-27 16:10:43,695+02 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-8) []
OAuthException server_error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
2020-05-27 16:10:53,962+02 INFO
[org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
task-8) [] locking user: admin due to interval failures
2020-05-27 16:10:58,956+02 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-8) []
OAuthException server_error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
2020-05-27 16:11:09,222+02 INFO
[org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
task-8) [] locking user: admin due to interval failures
2020-05-27 16:11:14,217+02 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-8) []
OAuthException server_error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
2020-05-27 16:11:24,484+02 INFO
[org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default
task-8) [] locking user: admin due to interval failures
2020-05-27 16:11:29,480+02 ERROR
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-8) []
OAuthException server_error: PKIX path building failed:
sun.security.provider.certpath.SunCertPathBuilderException: unable to
find valid certification path to requested target
I tried to dig around a bit more in /var/log of the HE to get more
details but can't seem to find anything there.
Thanks in advance!
Best regards
Oli