admin@internal login failure
Hey Everyone, I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server. For both webpage login and the ovirt shell I get the following messaged in the enging.log file. 2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION] I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now. I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work. If anyone knows how to correct this that would be very helpful. Thanks, -Darcy
On 07/11/2014 02:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Hi Darcy, I guess attaching upgrade and engine logs might help people to identify what happened. Anyway, have you tried: engine-config -s AdminPassword=interactive service ovirt-engine restart From: http://www.ovirt.org/Engine_config_examples#Changing_admin_user_password -- Cheers Douglas
On Fri, Jul 11, 2014 at 3:15 PM, Douglas Schilling Landgraf <dougsland@redhat.com> wrote:
On 07/11/2014 02:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Hi Darcy,
I guess attaching upgrade and engine logs might help people to identify what happened. Anyway, have you tried:
engine-config -s AdminPassword=interactive service ovirt-engine restart
From: http://www.ovirt.org/Engine_config_examples#Changing_admin_user_password
-- Cheers Douglas
I did do that but I don't think it's an authentication problem. If I put in the wrong password when trying to log in as the admin user I get this error. 2014-07-11 14:25:19,674 INFO [org.ovirt.engine.core.bll.LoginBaseCommand] (ajp--127.0.0.1-8702-8) Cant login user "admin" with authentication profile "internal" because the authentication failed. 2014-07-11 14:25:19,675 WARN [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginAdminUser failed. Reasons:USER_FAILED_TO_AUTHENTICATE There isn't anything in the engine logs when I try to log in besides the two lines I initially sent. I can't seem to find any upgrade logs, where are they located? Also when I re-attached the ipa domain and gave the admin user permissions I get the same not authorized error.
Hi, Setup logs are at /var/log/ovirt-engine/setup, please attach the log since it stopped working. Also, please specify version of working engine and current engine. Thanks, Alon ----- Original Message -----
From: "Darcy Hodgson" <dnhodgson@gmail.com> Cc: users@ovirt.org Sent: Friday, July 11, 2014 9:40:17 PM Subject: Re: [ovirt-users] admin@internal login failure
On Fri, Jul 11, 2014 at 3:15 PM, Douglas Schilling Landgraf <dougsland@redhat.com> wrote:
On 07/11/2014 02:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Hi Darcy,
I guess attaching upgrade and engine logs might help people to identify what happened. Anyway, have you tried:
engine-config -s AdminPassword=interactive service ovirt-engine restart
From: http://www.ovirt.org/Engine_config_examples#Changing_admin_user_password
-- Cheers Douglas
I did do that but I don't think it's an authentication problem. If I put in the wrong password when trying to log in as the admin user I get this error.
2014-07-11 14:25:19,674 INFO [org.ovirt.engine.core.bll.LoginBaseCommand] (ajp--127.0.0.1-8702-8) Cant login user "admin" with authentication profile "internal" because the authentication failed. 2014-07-11 14:25:19,675 WARN [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginAdminUser failed. Reasons:USER_FAILED_TO_AUTHENTICATE
There isn't anything in the engine logs when I try to log in besides the two lines I initially sent. I can't seem to find any upgrade logs, where are they located?
Also when I re-attached the ipa domain and gave the admin user permissions I get the same not authorized error. _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
the error you are looking for is in the vm log: kvm: unhandled exit 80000021 kvm_run returned -22 this seems to have been fixed in the past (if you do a google search you can find related bugs). can you please make sure you are using the latest packages? Thanks, Dafna On 07/11/2014 07:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Thanks,
-Darcy _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Dafna Ron
sorry :) answered wrong thread... however, there was bug posted on that as well.. Adding meital since I think she might remember which bug it was. On 07/14/2014 10:13 AM, Dafna Ron wrote:
the error you are looking for is in the vm log:
kvm: unhandled exit 80000021 kvm_run returned -22
this seems to have been fixed in the past (if you do a google search you can find related bugs). can you please make sure you are using the latest packages?
Thanks, Dafna
On 07/11/2014 07:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Thanks,
-Darcy _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Dafna Ron
Just want to let everyone know I got this resolved. I'm not sure why but for some reason there were two internal admin users. One without any permissions. I was able to create a new user in IPA and give that user superuser. Then I was able to delete the admin user without any permissions. I reset the admin password and restarted the engine and was able to log in again. -Darcy On Mon, Jul 14, 2014 at 5:16 AM, Dafna Ron <dron@redhat.com> wrote:
sorry :) answered wrong thread... however, there was bug posted on that as well.. Adding meital since I think she might remember which bug it was.
On 07/14/2014 10:13 AM, Dafna Ron wrote:
the error you are looking for is in the vm log:
kvm: unhandled exit 80000021 kvm_run returned -22
this seems to have been fixed in the past (if you do a google search you can find related bugs). can you please make sure you are using the latest packages?
Thanks, Dafna
On 07/11/2014 07:04 PM, Darcy Hodgson wrote:
Hey Everyone,
I am no longer able to log in with the internal admin account. I'm not sure if this is related to me doing updates, or re-attaching the engine to my ipa server.
For both webpage login and the ovirt shell I get the following messaged in the enging.log file.
2014-07-11 11:01:16,685 WARN [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginUser failed. Reasons:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION 2014-07-11 11:01:16,687 INFO [org.ovirt.engine.api.restapi.security.auth.LoginValidator] (ajp--127.0.0.1-8702-8) Login failure, user: admin domain: internal reason: [USER_NOT_AUTHORIZED_TO_PERFORM_ACTION]
I tried to do a engine-cleanup/engine-setup but that didn't help. I don't want to lose all the data as this environment has been running for a while now.
I then tried to remove the ipa domain and log in with the internal admin user without success. Followed by re-adding my domain and adding permissions to my ipa admin user which also did not work.
If anyone knows how to correct this that would be very helpful.
Thanks,
-Darcy _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Dafna Ron
participants (4)
-
Alon Bar-Lev -
Dafna Ron -
Darcy Hodgson -
Douglas Schilling Landgraf