Hi! I have installed oVirt 4.5.1 and I am using KeyCloak to login. I have created users in keycloak and with them i can login to ovirt Manager, but I can't login to Grafana. Also, I can login to Keycloak only with user "admin" and not with newly created users. I have tried to add @ovirt or @ovirt@internal, but every time i get "Invalid username or password" I haven't really changed default options in keycloak and can't find good manual for ovirt + keyclock. Can anyone tell me how to create user in keycloak that cant login to Grafana? Regards,
Ok, i finally found a way to login, using username "admin" and password that I have created when installing hosted engine. I thought the Grafana login was connected to Keycloak or the oVirt internal SSO database, but as far as I can see, Grafana account is created during the installation of Hosted-engine, and subsequent password changes in Keycloak or the internal SSO database do not affect the Grafana login credidentials, you have to use ones you have created during installation.
I thought that was fixed in latest version: https://bugzilla.redhat.com/show_bug.cgi?id=1996292 https://bugzilla.redhat.com/show_bug.cgi?id=2021497 Maybe report your findings in one of the bzs. Greetings Klaas On 7/18/22 08:16, markeczzz@gmail.com wrote:
Ok, i finally found a way to login, using username "admin" and password that I have created when installing hosted engine.
I thought the Grafana login was connected to Keycloak or the oVirt internal SSO database, but as far as I can see, Grafana account is created during the installation of Hosted-engine, and subsequent password changes in Keycloak or the internal SSO database do not affect the Grafana login credidentials, you have to use ones you have created during installation. _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/D6Q2JV65JM3Q3N...
Hi everyone, I think what you found here is the bug. Partially it was fixed in the mentioned BZs but later we realized it still exists under some circumstances. I have posted GitHub PR [1] addressing it and it has already been merged. This fix is expected to be released as part of oVirt Engine 4.5.2. After that, it will be possible to fully use SSO ie. login with the same username to grafana and oVirt. The root cause for this bug was a different 'admin' email being used in grafana and oVirt. Until then, I think it should be possible to login grafana/monitoring portal: 1) when no keycloak enabled: use 'admin' and don't use 'oVirt SSO' on grafana login page 2) when keycloak enabled: use 'admin' and don't choose 'oVirt SSO' on grafana login page 3) when keycloak enabled: user 'admin@ovirt' via 'oVirt SSO' on grafana login page, or login first to oVirt and then go to grafana (Monitoring Panel). Last option should not ask you for credentials again as the SSO is supposed to work. [1] https://github.com/oVirt/ovirt-engine/pull/508 thanks, Artur On Mon, Jul 18, 2022 at 5:13 PM Klaas Demter <klaasdemter@gmail.com> wrote:
I thought that was fixed in latest version:
https://bugzilla.redhat.com/show_bug.cgi?id=1996292
https://bugzilla.redhat.com/show_bug.cgi?id=2021497
Maybe report your findings in one of the bzs.
Greetings
Klaas
Ok, i finally found a way to login, using username "admin" and password
On 7/18/22 08:16, markeczzz@gmail.com wrote: that I have created when installing hosted engine.
I thought the Grafana login was connected to Keycloak or the oVirt
internal SSO database, but as far as I can see, Grafana account is created during the installation of Hosted-engine, and subsequent password changes in Keycloak or the internal SSO database do not affect the Grafana login credidentials, you have to use ones you have created during installation.
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/D6Q2JV65JM3Q3N...
Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/F7BHAD6DJ66QYT...
-- Artur Socha Senior Software Engineer, RHV Red Hat
participants (3)
-
Artur Socha -
Klaas Demter -
markeczzz＠gmail.com