Il 04/02/2014 12:55, Yedidyah Bar David ha scritto:

From: "Alessandro Bianchi" <a.bianchi@skynet.it>
To: "Gianluca Cecchi" <gianluca.cecchi@gmail.com>
Cc: "Yedidyah Bar David" <didi@redhat.com>, "users" <users@ovirt.org>
Sent: Tuesday, February 4, 2014 1:19:43 PM
Subject: Re: [Users] ovirt-report Forbidden access error

Il 04/02/2014 11:30, Gianluca Cecchi ha scritto:

On Tue, Feb 4, 2014 at 11:10 AM, Alessandro Bianchi <a.bianchi@skynet.it> wrote:

Il 04/02/2014 09:55, Gianluca Cecchi ha scritto:

On Tue, Feb 4, 2014 at 9:10 AM, Alessandro Bianchi wrote:

in working directory '/usr/share/ovirt-engine-dwh/db-scripts'
2014-02-04 09:01:26::DEBUG::common_utils::962::root:: output =
2014-02-04 09:01:26::DEBUG::common_utils::963::root:: stderr = psql: FATALE:
autenticazione con password fallita per l'utente "engine_history"
password retrieved from file "/tmp/pgpassNkKGNp.tmp"

(autenticazione con password fallita per l'utente "engine_history" =
authentication failed for user "engine_history" system language is italian)

so it seems a user creation permission problem on the database

since I'm not too familiar with pgsql how is it supposed to fix this?

It look like it misses the password in some ovirt configuration file but
where to edit and how o fix it?

Any hint?

Thank you

See this thread of mine if you want to start from scratch and you
don't have any previous reports/dwh data or you don't mind to loose
them. Engine and its data is not impacted at all.
Eventually I'm going to open a bug for bad mgmt of pre-existing DB
user during setup (eg due to a previously failed in the middle
install).

http://lists.ovirt.org/pipermail/users/2014-February/020740.html

Let us know how it goes.

Gianluca

Ok with this 2b extra step it works

I have installed everything with no errors, but still have Forbidden access
right clicking on Vms -> reports

If I click on the "reports portal" I see this link

ATTENZIONE: i link numerici sono spesso utilizzati da malintenzionati http://10.0.0.5/OvirtEngineWeb/ReportsRedirectServlet

I suspect this is something related to apache configuration

access.log shows nothing so were may I see a log of what's happening?

Thank you

Alessandro

I too see that redirect and then when I click I land to
https://my-engine/ovirt-engine-reports/login.html

and then after login/pwd :
https://my-engine/ovirt-engine-reports/flow.html?_flowId=searchFlow

I have SpiceProxy configured.
Don't know if this impacts apache configuration.
In my case it works and in /etc/httpd/conf.d
Ihave
# ls -lrt
total 68
-rw-r--r--. 1 root root  926 Mar 31  2013 BackupPC.conf
-rw-r--r--. 1 root root  298 Jul 23  2013 squid.conf
-rw-r--r--. 1 root root  516 Jul 31  2013 welcome.conf
-rw-r--r--. 1 root root 1252 Jul 31  2013 userdir.conf
-rw-r--r--. 1 root root 9426 Jul 31  2013 ssl.conf.20131003112151
-rw-r--r--. 1 root root 2893 Jul 31  2013 autoindex.conf
-rw-r--r--. 1 root root  366 Jul 31  2013 README
-rw-r--r--. 1 root root 2778 Oct  3 11:21
z-ovirt-engine-proxy.conf.20131119125706
-rw-r--r--. 1 root root   33 Oct  3 11:21 ovirt-engine-root-redirect.conf
-rw-r--r--. 1 root root 9444 Oct  3 11:21 ssl.conf
-rw-r--r--. 1 root root 2775 Nov 19 12:57
z-ovirt-engine-proxy.conf.20140115003015
-rw-r--r--. 1 root root 1251 Jan  7 15:54 z-ovirt-engine-reports-proxy.conf
-rw-r--r--. 1 root root 2788 Jan 15 00:30 z-ovirt-engine-proxy.conf

z-ovirt-engine-reports-proxy.conf:
<IfModule proxy_ajp_module>

    <Proxy ajp://localhost:8702>
        # This is needed to make sure that connections to the application server
        # are recovered in a short time interval (5 seconds at the moment)
        # otherwise when the application server is restarted the web server will
        # refuse to connect during 60 seconds.
        ProxySet retry=5

        # This is needed to make sure that long RESTAPI requests have time to
        # finish before the web server aborts the request as the default timeout
        # (controlled by the Timeout directive in httpd.conf) is 60 seconds.
        ProxySet timeout=3600
    </Proxy>

    <Location /ovirt-engine-reports>
        ProxyPass ajp://localhost:8702/ovirt-engine-reports
        <IfModule deflate_module>
            AddOutputFilterByType DEFLATE text/javascript text/css
text/html text/xml text/json application/xml application/json
application/x-yaml
        </IfModule>
    </Location>

</IfModule>

Uuuuuuh

enterig the URL you showed directely I can login and see reports ok

so it looks link in ovirt main page is somehow wrong!

This should work. To help debug this, please check/post these:

/etc/httpd/conf.d/z-ovirt-engine-proxy.conf

/etc/httpd/conf.d/z-ovirt-engine-reports-proxy.conf

/var/log/httpd/error_log

/var/log/httpd/ssl_error_log

/var/log/httpd/access_log

/var/log/httpd/ssl_access_log

As user postgres, output of:

psql engine -c "select * from vdc_options where option_name='RedirectServletReportsPage';"

Thanks!

--

Didi

--
Il messaggio è stato analizzato alla ricerca di virus o
contenuti pericolosi da SkyNet Srl, ed è
risultato non infetto.

This message has been checked for virus or dangerous content
by SkyNet SRL and seems to be clean.

added the name of the report host in my /etc/hosts and now have ssl certificate error BUT goes to the right server

Sorry for wasting your time ...