ovirtvm-console : Failed to execute login on behalf - for user - Users

9 Jan 2017

      This is a multi-part message in MIME format.
--------------BB4C4DF1A3B16FBCD0105975
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: quoted-printable

Hi,

with 4.1 beta2, I try to use ovirtvm-console with my AD imported account=20
with issue "Failed to execute login on behalf - for user xxx".

  * I can login with name into the webadmin as a superuser.
  * I don't meet any issue with 4.0.x
  * whatever the pub key is it is the same
  * All other AD and local accounts work as expected with ovirtvm-console

Regarding the engine logs, it seems that some character of my name are=20
not recognized:

2017-01-09 17:35:52,014+01 ERROR=20
[org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []=20
OAuthException server_error: java.text.ParseException: Invalid character=20
' ' encountered.
2017-01-09 17:35:52,016+01 ERROR=20
[org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default task-1)=20
[50439863] Unable to create engine session: EngineException:  user=20
sblanchet@levant.abes.fr in domain 'abes.fr-authz (Failed with error=20
PRINCIPAL_NOT_FOUND and code 5200)
2017-01-09 17:35:52,024+01 ERROR=20
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]=20
(default task-1) [50439863] Correlation ID: 50439863, Call Stack: null,=20
Custom Event ID: -1, Message: Failed to execute login on behalf - for=20
user sblanchet@levant.abes.fr.
2017-01-09 17:35:52,025+01 ERROR=20
[org.ovirt.engine.core.services.VMConsoleProxyServlet] (default task-1)=20
[50439863] Error processing request: : java.lang.RuntimeException:=20
Unable to create session using LoginOnBehalf

--=20
Nathana=C3=ABl Blanchet

Supervision r=C3=A9seau
P=C3=B4le Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 =09
T=C3=A9l. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanchet@abes.fr

--------------BB4C4DF1A3B16FBCD0105975
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html>
  <head>

    <meta http-equiv=3D"content-type" content=3D"text/html; charset=3Dutf=
-8">
  </head>
  <body text=3D"#000000" bgcolor=3D"#FFFFFF">
    <p>Hi,</p>
    <p>with 4.1 beta2, I try to use ovirtvm-console with my AD imported
      account with issue "Failed to execute login on behalf - for user
      xxx". <br>
    </p>
    <ul>
      <li>I can login with name into the webadmin as a superuser.<br>
      </li>
      <li>I don't meet any issue with 4.0.x <br>
      </li>
      <li>whatever the pub key is it is the same</li>
      <li>All other AD and local accounts work as expected with
        ovirtvm-console</li>
    </ul>
    <p>Regarding the engine logs, it seems that some character of my
      name are not recognized:</p>
    <p>2017-01-09 17:35:52,014+01 ERROR
      [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-29) []
      OAuthException server_error: java.text.ParseException: Invalid
      character ' ' encountered.<br>
      2017-01-09 17:35:52,016+01 ERROR
      [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand] (default
      task-1) [50439863] Unable to create engine session:
      EngineException:=C2=A0 user <a class=3D"moz-txt-link-abbreviated" h=
ref=3D"mailto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a> in d=
omain
      'abes.fr-authz (Failed with error PRINCIPAL_NOT_FOUND and code
      5200)<br>
      2017-01-09 17:35:52,024+01 ERROR
      [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirect=
or]
      (default task-1) [50439863] Correlation ID: 50439863, Call Stack:
      null, Custom Event ID: -1, Message: Failed to execute login on
      behalf - for user <a class=3D"moz-txt-link-abbreviated" href=3D"mai=
lto:sblanchet@levant.abes.fr">sblanchet@levant.abes.fr</a>.<br>
      2017-01-09 17:35:52,025+01 ERROR
      [org.ovirt.engine.core.services.VMConsoleProxyServlet] (default
      task-1) [50439863] Error processing request: :
      java.lang.RuntimeException: Unable to create session using
      LoginOnBehalf<br>
    </p>
    <br>
    <pre class=3D"moz-signature" cols=3D"72">--=20
Nathana=C3=ABl Blanchet

Supervision r=C3=A9seau
P=C3=B4le Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5 =09
T=C3=A9l. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:blanchet@abes.fr">bl=
anchet@abes.fr</a> </pre>
  </body>
</html>

--------------BB4C4DF1A3B16FBCD0105975--

ovirtvm-console : Failed to execute login on behalf - for user

Nathanaël Blanchet

Ravi Nori

tags

participants (2)