Re: [ovirt-users] Admin user locked

Hi Eitan, Please *PFA*. If you need any other information please let me know. Thanks, Hari On Tue, Apr 17, 2018 at 2:55 PM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Eitan,
Please *PFA*. If you need any other information please let me know.
Thanks, Hari
On Tue, Apr 17, 2018 at 2:43 PM, Eitan Raviv <eraviv@redhat.com> wrote:
Can you share the engine log containing the corresponding error messages?
Thanks
On Tue, Apr 17, 2018 at 10:45 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Team,
What is the reason for the following lock error for admin user?
2018-04-16 21:12:38,278+05 INFO [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default task-17) [] locking user: admin due to interval failures
I am able to unlock it. But I would like to know the reason for this error?
Thanks, Hari
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Eitan Raviv IRC: erav (#ovirt #vdsm #devel #rhev-dev)

On Tue, Apr 17, 2018 at 11:27 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Eitan,
Please *PFA*. If you need any other information please let me know.
Thanks, Hari
Hello, apart from PFA acronym I don't know the meaning of.... Please notice that "share" doesn't necessary mean "attach": some of us have limited mailbox sizes and 1.7Mb of file is not the best. There are many free services you can use and then send only the link to the list. Thanks, Gianluca

Hi Gianluca, Sorry for the large file size. It is available at the following link, please let me know the reason for this error. https://files.fm/u/4th5yqn6#_ Thanks, Hari On Tue, Apr 17, 2018 at 3:05 PM, Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
On Tue, Apr 17, 2018 at 11:27 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Eitan,
Please *PFA*. If you need any other information please let me know.
Thanks, Hari
Hello, apart from PFA acronym I don't know the meaning of.... Please notice that "share" doesn't necessary mean "attach": some of us have limited mailbox sizes and 1.7Mb of file is not the best. There are many free services you can use and then send only the link to the list.
Thanks, Gianluca

On Tue, Apr 17, 2018 at 11:41 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Gianluca,
Sorry for the large file size. It is available at the following link, please let me know the reason for this error.
Thanks, Hari
See this thread, as it seems you have installed latest 4.2.2.6 http://lists.ovirt.org/pipermail/users/2018-April/088314.html Did you install/configure OVN provider too as described into the thread? I see 2018-04-16 20:14:43,966+05 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-71) [5d0e568d] EVENT_ID: PROVIDER_SYNCHRONIZED_FAILED(216), Failed to synchronize networks of Provider ovirt-provider-ovn. and 2018-04-17 14:49:09,971+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-51) [] OAu thException access_denied: Cannot authenticate user 'admin@internal': Unable to log in because the u ser account is disabled or locked. Contact the system administrator.. Possibly you changed admin password and ovn was not synchronized... HIH, Gianluca

We didn't install OVN provider. What is the meaning of interval failures? On Tue, Apr 17, 2018 at 3:18 PM, Gianluca Cecchi <gianluca.cecchi@gmail.com> wrote:
On Tue, Apr 17, 2018 at 11:41 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Gianluca,
Sorry for the large file size. It is available at the following link, please let me know the reason for this error.
Thanks, Hari
See this thread, as it seems you have installed latest 4.2.2.6 http://lists.ovirt.org/pipermail/users/2018-April/088314.html
Did you install/configure OVN provider too as described into the thread?
I see
2018-04-16 20:14:43,966+05 ERROR [org.ovirt.engine.core.dal. dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-71) [5d0e568d] EVENT_ID: PROVIDER_SYNCHRONIZED_FAILED(216), Failed to synchronize networks of Provider ovirt-provider-ovn.
and
2018-04-17 14:49:09,971+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-51) [] OAu thException access_denied: Cannot authenticate user 'admin@internal': Unable to log in because the u ser account is disabled or locked. Contact the system administrator..
Possibly you changed admin password and ovn was not synchronized... HIH, Gianluca

From the your log it looks like recurring access attempts to the Gluster Volumes list have been made to host1. It looks like at one point the admin profile became 'N/A' and then switched back to admin. Did you do any changes to the admin user? Can you unlock the admin user, reset it, restart engine and see if these
The interval failures mean that after some failed access attempts (made periodically) engine locks the credentials with which the attempts were made. problems recurr? To unlock you can use (from a bash shell): "ovirt-aaa-jdbc-tool user unlock admin" HTH On Tue, Apr 17, 2018 at 1:23 PM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
We didn't install OVN provider. What is the meaning of interval failures?
On Tue, Apr 17, 2018 at 3:18 PM, Gianluca Cecchi < gianluca.cecchi@gmail.com> wrote:
On Tue, Apr 17, 2018 at 11:41 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Gianluca,
Sorry for the large file size. It is available at the following link, please let me know the reason for this error.
Thanks, Hari
See this thread, as it seems you have installed latest 4.2.2.6 http://lists.ovirt.org/pipermail/users/2018-April/088314.html
Did you install/configure OVN provider too as described into the thread?
I see
2018-04-16 20:14:43,966+05 ERROR [org.ovirt.engine.core.dal.dbb roker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-71) [5d0e568d] EVENT_ID: PROVIDER_SYNCHRONIZED_FAILED(216), Failed to synchronize networks of Provider ovirt-provider-ovn.
and
2018-04-17 14:49:09,971+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-51) [] OAu thException access_denied: Cannot authenticate user 'admin@internal': Unable to log in because the u ser account is disabled or locked. Contact the system administrator..
Possibly you changed admin password and ovn was not synchronized... HIH, Gianluca
-- Eitan Raviv IRC: erav (#ovirt #vdsm #devel #rhev-dev)

okay, Thanks. On Tue, Apr 17, 2018 at 4:56 PM, Eitan Raviv <eraviv@redhat.com> wrote:
The interval failures mean that after some failed access attempts (made periodically) engine locks the credentials with which the attempts were made. From the your log it looks like recurring access attempts to the Gluster Volumes list have been made to host1. It looks like at one point the admin profile became 'N/A' and then switched back to admin. Did you do any changes to the admin user? Can you unlock the admin user, reset it, restart engine and see if these problems recurr?
To unlock you can use (from a bash shell): "ovirt-aaa-jdbc-tool user unlock admin"
HTH
On Tue, Apr 17, 2018 at 1:23 PM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
We didn't install OVN provider. What is the meaning of interval failures?
On Tue, Apr 17, 2018 at 3:18 PM, Gianluca Cecchi < gianluca.cecchi@gmail.com> wrote:
On Tue, Apr 17, 2018 at 11:41 AM, Hari Prasanth Loganathan < hariprasanth.l@msystechnologies.com> wrote:
Hi Gianluca,
Sorry for the large file size. It is available at the following link, please let me know the reason for this error.
Thanks, Hari
See this thread, as it seems you have installed latest 4.2.2.6 http://lists.ovirt.org/pipermail/users/2018-April/088314.html
Did you install/configure OVN provider too as described into the thread?
I see
2018-04-16 20:14:43,966+05 ERROR [org.ovirt.engine.core.dal.dbb roker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-71) [5d0e568d] EVENT_ID: PROVIDER_SYNCHRONIZED_FAILED(216), Failed to synchronize networks of Provider ovirt-provider-ovn.
and
2018-04-17 14:49:09,971+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-51) [] OAu thException access_denied: Cannot authenticate user 'admin@internal': Unable to log in because the u ser account is disabled or locked. Contact the system administrator..
Possibly you changed admin password and ovn was not synchronized... HIH, Gianluca
-- Eitan Raviv IRC: erav (#ovirt #vdsm #devel #rhev-dev)
participants (3)
-
Eitan Raviv
-
Gianluca Cecchi
-
Hari Prasanth Loganathan