On 22/06/12 04:12, Robert Middleswarth wrote: > Getting a log full of error messages like these. > > 2012-06-21 21:03:30,075 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-90) Failed to decryptData must start with zero > 2012-06-21 21:03:46,235 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-18) Failed to decryptData must not be longer than 128 bytes > > What is causing this and what can I do to fix it? > > Thanks > Robert Hi Robert, This really depends on your setup (devel' or yum installed). There are several DB values which are encrypted during the installation which you override by plain text values. In most cases the engine tries to fallback, and use the original value it got despite the error. The question now you should answer, is if you have any other issue. If things seem to work well, than it's an issue of encrypting the relevant values (if needed). If you have other related issues, then setting these values to plain text should use the fallback and resolve the issue.

On 06/24/2012 06:45 PM, Robert Middleswarth wrote: > On 06/24/2012 09:55 AM, Doron Fediuck wrote: >> On 22/06/12 04:12, Robert Middleswarth wrote: >>> Getting a log full of error messages like these. >>> >>> 2012-06-21 21:03:30,075 ERROR >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> (QuartzScheduler_Worker-90) Failed to decryptData must start with zero >>> 2012-06-21 21:03:46,235 ERROR >>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>> (QuartzScheduler_Worker-18) Failed to decryptData must not be longer >>> than 128 bytes >>> >>> What is causing this and what can I do to fix it? >>> >>> Thanks >>> Robert >> Hi Robert, >> This really depends on your setup (devel' or yum installed). >> There are several DB values which are encrypted during the >> installation which you override >> by plain text values. In most cases the engine tries to fallback, and >> use the original value >> it got despite the error. The question now you should answer, is if >> you have any other issue. >> If things seem to work well, than it's an issue of encrypting the >> relevant values (if needed). >> If you have other related issues, then setting these values to plain >> text should use the fallback >> and resolve the issue. >> > There doesn't seem to be any negitive effect other then making the log > hard to read. Is there any way to suppress the error? > > Thanks > Robert Robert, I do suggest that you try further to investigate the root cause for this. However, it is possible to modify the configuration not to log this error - you should be able to define a log4j category at $JBOSS_HOME/standalone/configuration/standalone.xml (under subsystem xmlns="urn:jboss:domain:logging:1.1) in such a way that for EncryptionUtils only FATAL messages will appear at the log (and still, I suggest that you further try to investigate why this is happening in the first place). Yair

> _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users

On 06/24/2012 07:02 PM, Robert Middleswarth wrote: > On 06/24/2012 11:55 AM, Yair Zaslavsky wrote: >> On 06/24/2012 06:45 PM, Robert Middleswarth wrote: >>> On 06/24/2012 09:55 AM, Doron Fediuck wrote: >>>> On 22/06/12 04:12, Robert Middleswarth wrote: >>>>> Getting a log full of error messages like these. >>>>> >>>>> 2012-06-21 21:03:30,075 ERROR >>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>> (QuartzScheduler_Worker-90) Failed to decryptData must start with zero >>>>> 2012-06-21 21:03:46,235 ERROR >>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>> (QuartzScheduler_Worker-18) Failed to decryptData must not be longer >>>>> than 128 bytes >>>>> >>>>> What is causing this and what can I do to fix it? >>>>> >>>>> Thanks >>>>> Robert >>>> Hi Robert, >>>> This really depends on your setup (devel' or yum installed). >>>> There are several DB values which are encrypted during the >>>> installation which you override >>>> by plain text values. In most cases the engine tries to fallback, and >>>> use the original value >>>> it got despite the error. The question now you should answer, is if >>>> you have any other issue. >>>> If things seem to work well, than it's an issue of encrypting the >>>> relevant values (if needed). >>>> If you have other related issues, then setting these values to plain >>>> text should use the fallback >>>> and resolve the issue. >>>> >>> There doesn't seem to be any negitive effect other then making the log >>> hard to read. Is there any way to suppress the error? >>> >>> Thanks >>> Robert >> Robert, I do suggest that you try further to investigate the root cause >> for this. >> However, it is possible to modify the configuration not to log this >> error - you should be able to define a log4j category at >> $JBOSS_HOME/standalone/configuration/standalone.xml (under subsystem >> xmlns="urn:jboss:domain:logging:1.1) in such a way that for >> EncryptionUtils only FATAL messages will appear at the log (and still, I >> suggest that you further try to investigate why this is happening in the >> first place). >> >> Yair > I am fine with investigating why but these error's are so generic I have > no idea what files to check? Despite tiring a few times I really don't > get Java. Robert - we can go to two approaches here with logging both require you to define a log4j category for EncryptionUtils First approach - as I suggested, move to FATAL - you will not see these errors. Second approach - move to DEBUG. I looked at the code, and saw that if you define a category for EncryptionUtils with DEBUG level you will also get a print of stacktrace, this may assist in understanding the problem you're facing.

>>> _______________________________________________ >>> Users mailing list >>> Users(a)ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users > Thanks > Robert

On 06/24/2012 07:26 PM, Robert Middleswarth wrote: > On 06/24/2012 12:11 PM, Yair Zaslavsky wrote: >> On 06/24/2012 07:02 PM, Robert Middleswarth wrote: >>> On 06/24/2012 11:55 AM, Yair Zaslavsky wrote: >>>> On 06/24/2012 06:45 PM, Robert Middleswarth wrote: >>>>> On 06/24/2012 09:55 AM, Doron Fediuck wrote: >>>>>> On 22/06/12 04:12, Robert Middleswarth wrote: >>>>>>> Getting a log full of error messages like these. >>>>>>> >>>>>>> 2012-06-21 21:03:30,075 ERROR >>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>>>> (QuartzScheduler_Worker-90) Failed to decryptData must start with >>>>>>> zero >>>>>>> 2012-06-21 21:03:46,235 ERROR >>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>>>> (QuartzScheduler_Worker-18) Failed to decryptData must not be longer >>>>>>> than 128 bytes >>>>>>> >>>>>>> What is causing this and what can I do to fix it? >>>>>>> >>>>>>> Thanks >>>>>>> Robert >>>>>> Hi Robert, >>>>>> This really depends on your setup (devel' or yum installed). >>>>>> There are several DB values which are encrypted during the >>>>>> installation which you override >>>>>> by plain text values. In most cases the engine tries to fallback, and >>>>>> use the original value >>>>>> it got despite the error. The question now you should answer, is if >>>>>> you have any other issue. >>>>>> If things seem to work well, than it's an issue of encrypting the >>>>>> relevant values (if needed). >>>>>> If you have other related issues, then setting these values to plain >>>>>> text should use the fallback >>>>>> and resolve the issue. >>>>>> >>>>> There doesn't seem to be any negitive effect other then making the log >>>>> hard to read. Is there any way to suppress the error? >>>>> >>>>> Thanks >>>>> Robert >>>> Robert, I do suggest that you try further to investigate the root cause >>>> for this. >>>> However, it is possible to modify the configuration not to log this >>>> error - you should be able to define a log4j category at >>>> $JBOSS_HOME/standalone/configuration/standalone.xml (under subsystem >>>> xmlns="urn:jboss:domain:logging:1.1) in such a way that for >>>> EncryptionUtils only FATAL messages will appear at the log (and >>>> still, I >>>> suggest that you further try to investigate why this is happening in >>>> the >>>> first place). >>>> >>>> Yair >>> I am fine with investigating why but these error's are so generic I have >>> no idea what files to check? Despite tiring a few times I really don't >>> get Java. >> Robert - we can go to two approaches here with logging both require you >> to define a log4j category for EncryptionUtils >> >> First approach - as I suggested, move to FATAL - you will not see these >> errors. >> Second approach - move to DEBUG. I looked at the code, and saw that if >> you define a category for EncryptionUtils with DEBUG level you will >> also get a print of stacktrace, this may assist in understanding the >> problem you're facing. > Yair, > > I checked standalone.xml file and there is no section related to > EncyptionUtils nor was there a definition for engine.log I am guessing > that these are defined in a diff config file. You should modify this file and add a category for EncryptionUtils - look at how the category - <logger category="org.ovirt"> <level name="INFO"/> <handlers> <handler name="ENGINE_LOG"/> </handlers> </logger> Is defined.

What you should do is add <logger category="org.ovirt.engine.core.engineencryptutils"> <level name="FATAL"/> <handlers> <handler name="ENGINE_LOG"/> </handlers> </logger> Near the logger category for "org.ovirt" (I mean, as a sibling to that element). Pay attention that here i defined it for FATAL - you may wish to try it with DEBUG to see the stacktrace. Yair >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>> Thanks >>> Robert > Thanks > Robert >

----- Original Message ----- > On 06/24/2012 07:26 PM, Robert Middleswarth wrote: >> On 06/24/2012 12:11 PM, Yair Zaslavsky wrote: >>> On 06/24/2012 07:02 PM, Robert Middleswarth wrote: >>>> On 06/24/2012 11:55 AM, Yair Zaslavsky wrote: >>>>> On 06/24/2012 06:45 PM, Robert Middleswarth wrote: >>>>>> On 06/24/2012 09:55 AM, Doron Fediuck wrote: >>>>>>> On 22/06/12 04:12, Robert Middleswarth wrote: >>>>>>>> Getting a log full of error messages like these. >>>>>>>> >>>>>>>> 2012-06-21 21:03:30,075 ERROR >>>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>>>>> (QuartzScheduler_Worker-90) Failed to decryptData must start >>>>>>>> with >>>>>>>> zero >>>>>>>> 2012-06-21 21:03:46,235 ERROR >>>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] >>>>>>>> (QuartzScheduler_Worker-18) Failed to decryptData must not be >>>>>>>> longer >>>>>>>> than 128 bytes >>>>>>>> >>>>>>>> What is causing this and what can I do to fix it? >>>>>>>> >>>>>>>> Thanks >>>>>>>> Robert >>>>>>> Hi Robert, >>>>>>> This really depends on your setup (devel' or yum installed). >>>>>>> There are several DB values which are encrypted during the >>>>>>> installation which you override >>>>>>> by plain text values. In most cases the engine tries to >>>>>>> fallback, and >>>>>>> use the original value >>>>>>> it got despite the error. The question now you should answer, >>>>>>> is if >>>>>>> you have any other issue. >>>>>>> If things seem to work well, than it's an issue of encrypting >>>>>>> the >>>>>>> relevant values (if needed). >>>>>>> If you have other related issues, then setting these values to >>>>>>> plain >>>>>>> text should use the fallback >>>>>>> and resolve the issue. >>>>>>> >>>>>> There doesn't seem to be any negitive effect other then making >>>>>> the log >>>>>> hard to read. Is there any way to suppress the error? >>>>>> >>>>>> Thanks >>>>>> Robert >>>>> Robert, I do suggest that you try further to investigate the >>>>> root cause >>>>> for this. >>>>> However, it is possible to modify the configuration not to log >>>>> this >>>>> error - you should be able to define a log4j category at >>>>> $JBOSS_HOME/standalone/configuration/standalone.xml (under >>>>> subsystem >>>>> xmlns="urn:jboss:domain:logging:1.1) in such a way that for >>>>> EncryptionUtils only FATAL messages will appear at the log (and >>>>> still, I >>>>> suggest that you further try to investigate why this is >>>>> happening in >>>>> the >>>>> first place).engine-service.xml >>>>> >>>>> Yair >>>> I am fine with investigating why but these error's are so generic >>>> I have >>>> no idea what files to check? Despite tiring a few times I really >>>> don't >>>> get Java. >>> Robert - we can go to two approaches here with logging both >>> require you >>> to define a log4j category for EncryptionUtils >>> >>> First approach - as I suggested, move to FATAL - you will not see >>> these >>> errors. >>> Second approach - move to DEBUG. I looked at the code, and saw >>> that if >>> you define a category for EncryptionUtils with DEBUG level you >>> will >>> also get a print of stacktrace, this may assist in understanding >>> the >>> problem you're facing. >> Yair, >> >> I checked standalone.xml file and there is no section related to >> EncyptionUtils nor was there a definition for engine.log I am >> guessing >> that these are defined in a diff config file. > > You should modify this file and add a category for EncryptionUtils - > look at how the category - > > <logger category="org.ovirt"> > <level name="INFO"/> > <handlers> > <handler name="ENGINE_LOG"/> > </handlers> > </logger> > > > > Is defined. > > What you should do is add > > <logger category="org.ovirt.engine.core.engineencryptutils"> > <level name="FATAL"/> > <handlers> > <handler name="ENGINE_LOG"/> > </handlers> > </logger> > > Near the logger category for "org.ovirt" (I mean, as a sibling to > that > element). > Pay attention that here i defined it for FATAL - you may wish to try > it > with DEBUG to see the stacktrace. > > Yair In rpm based enb, we use /etc/ovirt-engine/engine-service.xml as the jboss settings file.

> > > >>> >>>>>> _______________________________________________ >>>>>> Users mailing list >>>>>> Users(a)ovirt.org >>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>> Thanks >>>> Robert >> Thanks >> Robert >> > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users >