oVirt Version 4.2.3.5-1.el7.centos cannot change password from user (Bad Request)
Hi there, I have created a new user from hosted engine by: ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user' --attribute=firstName=test_user ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme then I try to login and I get the message: *Unable to log in because the password has expired. Change the password to proceed. * When I click "Change the password" the browser redirects to: https://FQDN/ovirt-engine/sso/%s and I get *Bad RequestYour browser sent a request that this server could not understand.* Last time I tried with 4.2.1 and it was working with no issues. Cheers, Alex
On Fri, Jun 8, 2018 at 6:47 AM, Alejandro Cortina < alejandro.cortina2@gmail.com> wrote:
Hi there,
I have created a new user from hosted engine by:
ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user' --attribute=firstName=test_user ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
You need to specify password expiration date, otherwise it's expired at the same moment you set it. Please take a look at [1]
then I try to login and I get the message:
*Unable to log in because the password has expired. Change the password to proceed. *
When I click "Change the password" the browser redirects to:
https://FQDN/ovirt-engine/sso/%s
and I get
*Bad RequestYour browser sent a request that this server could not understand.*
Last time I tried with 4.2.1 and it was working with no issues.
Could you please share engine.log so we can get more details about the issue? Thanks Martin [1] https://www.ovirt.org/develop/release-management/features/infra/aaa-jdbc/#pa...
Cheers,
Alex
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community- guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/ message/JALESO5IC4PMEJPX5UMOZUZPKSC2SDYT/
-- Martin Perina Associate Manager, Software Engineering Red Hat Czech s.r.o.
Hi Martin, thanks for the link. That worked, if you need here are the logs (removed org.ovirt.engine.core.vdsbroker.gluster* and org.ovirt.engine.core.bll.lock.InMemoryLockManager*, etc): 2018-06-08 13:33:44,453+09 INFO [org.ovirt.engine.core.bll.aaa.AddUserCommand] (default task-15) [588403fe-0957-48dc-87fa-60bdb618953c] Running command: AddUserCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group MANIPULATE_USERS with role type ADMIN 2018-06-08 13:33:44,482+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-15) [588403fe-0957-48dc-87fa-60bdb618953c] EVENT_ID: USER_ADD(149), User 'svc_foreman' was added successfully to the system. 2018-06-08 13:35:05,631+09 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (EE-ManagedThreadFactory-engine-Thread-115246) [e5f309f8-c349-4244-b2a6-94d8ef187b0c] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group MANIPULATE_PERMISSIONS with role type USER, ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER 2018-06-08 13:35:05,666+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-115246) [e5f309f8-c349-4244-b2a6-94d8ef187b0c] EVENT_ID: USER_ADD_SYSTEM_PERMISSION(866), User/Group svc_foreman was granted permission for Role ReadOnlyAdmin on System by admin@internal-authz. 2018-06-08 13:35:14,756+09 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-16) [5de285fc] Running command: LogoutSessionCommand internal: false. 2018-06-08 13:35:14,768+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-16) [5de285fc] EVENT_ID: USER_VDC_LOGOUT(31), User admin@internal-authz connected from 'IP_FOREMAN' using session 'J/o5sSeEdvL7qPnoF16wGQHZ61Kc0NvfQ+/s9GdvDufSkPdO0kc0gJ31OYBCUF+dQTWTGVBc3LZow/S3DIBSEA==' logged out. 2018-06-08 13:35:14,784+09 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-14) [] User admin@internal successfully logged out 2018-06-08 13:35:14,794+09 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-17) [2c86b5cf] Running command: TerminateSessionsForTokenCommand internal: true. 2018-06-08 13:35:36,087+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-42) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 13:35:36,087+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-19) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. 2018-06-08 13:36:06,094+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-50) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'UNKNOWN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 13:36:06,095+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-49) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'UNKNOWN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. 2018-06-08 13:39:01,638+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-40) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 13:39:01,639+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-64) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. 2018-06-08 13:44:06,575+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-16) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 13:44:06,576+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-14) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. 2018-06-08 13:50:36,239+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-17) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User bot_virt-who@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in. Verify your login information or contact the system administrator.'. 2018-06-08 13:50:36,240+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-53) [] Cannot authenticate user 'bot_virt-who@internal' connecting from 'IP_FOREMAN': Unable to log in. Verify your login information or contact the system administrator. 2018-06-08 13:52:05,259+09 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-44) [] User svc_foreman@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2018-06-08 13:52:05,329+09 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-46) [73a676d] Running command: CreateUserSessionCommand internal: false. 2018-06-08 13:52:05,350+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-46) [73a676d] EVENT_ID: USER_VDC_LOGIN(30), User svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session '+Azi1/9NMUOarS22HdNRtZU5Oq2jfpeC9wJVADFZi3UGoafuIiWzNXwEUAwq5XAwMhoxXUxTObR+PW24NFuwmw==' logged in. 2018-06-08 13:53:08,870+09 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-6) [3dc715a] Running command: LogoutSessionCommand internal: false. 2018-06-08 13:53:08,889+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-6) [3dc715a] EVENT_ID: USER_VDC_LOGOUT(31), User svc_foreman@internal-authz connected from 'IP_FOREMAN' using session '+Azi1/9NMUOarS22HdNRtZU5Oq2jfpeC9wJVADFZi3UGoafuIiWzNXwEUAwq5XAwMhoxXUxTObR+PW24NFuwmw==' logged out. 2018-06-08 13:53:08,907+09 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-56) [] User svc_foreman@internal successfully logged out 2018-06-08 13:53:08,918+09 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-13) [75f088df] Running command: TerminateSessionsForTokenCommand internal: true. 2018-06-08 13:53:19,972+09 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-12) [] User svc_foreman@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2018-06-08 13:53:20,031+09 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-23) [59ffd09c] Running command: CreateUserSessionCommand internal: false. 2018-06-08 13:53:20,046+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-23) [59ffd09c] EVENT_ID: USER_VDC_LOGIN(30), User svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session 'vAXr/87x8YHB7TzHyM7m2eXAOESUNy8MzH15Pu6n8BgJwJnxkgs0BkZ0XHlmrnbCr0d2oeCtk6VE+pF54KhWww==' logged in. 2018-06-08 13:53:58,218+09 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-31) [1d26d1f7] Running command: LogoutSessionCommand internal: false. 2018-06-08 13:53:58,228+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-31) [1d26d1f7] EVENT_ID: USER_VDC_LOGOUT(31), User svc_foreman@internal-authz connected from 'IP_FOREMAN' using session 'vAXr/87x8YHB7TzHyM7m2eXAOESUNy8MzH15Pu6n8BgJwJnxkgs0BkZ0XHlmrnbCr0d2oeCtk6VE+pF54KhWww==' logged out. 2018-06-08 13:53:58,247+09 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-26) [] User svc_foreman@internal successfully logged out 2018-06-08 13:53:58,257+09 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-37) [2408fb55] Running command: TerminateSessionsForTokenCommand internal: true. 2018-06-08 13:54:06,153+09 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-64) [] User svc_foreman@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2018-06-08 13:54:06,199+09 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-30) [299b27e2] Running command: CreateUserSessionCommand internal: false. 2018-06-08 13:54:06,213+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-30) [299b27e2] EVENT_ID: USER_VDC_LOGIN(30), User svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session 'I20YgzaKBS0TEzSlWGrlSbfzXoRXgi3dcAGARHQjuiF/t02Q9xMWc/+MHE/TdJyhc8Bss8Asm/FLsjQhJlO1/w==' logged in. 2018-06-08 13:54:22,038+09 INFO [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Lock Acquired to object 'EngineLock:{exclusiveLocks='[7faa7563-51f8-439e-b9a9-3c610915a842=PROVIDER]', sharedLocks=''}' 2018-06-08 13:54:22,045+09 INFO [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Running command: SyncNetworkProviderCommand internal: true. 2018-06-08 13:54:22,050+09 ERROR [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Command 'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand' failed: EngineException: (Failed with error SSL peer shut down incorrectly and code 5050) 2018-06-08 13:54:22,051+09 INFO [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Lock freed to object 'EngineLock:{exclusiveLocks='[7faa7563-51f8-439e-b9a9-3c610915a842=PROVIDER]', sharedLocks=''}' 2018-06-08 13:55:47,938+09 INFO [org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-3) [77ec31] Running command: LogoutSessionCommand internal: false. 2018-06-08 13:55:47,948+09 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-3) [77ec31] EVENT_ID: USER_VDC_LOGOUT(31), User svc_foreman@internal-authz connected from 'IP_FOREMAN' using session 'I20YgzaKBS0TEzSlWGrlSbfzXoRXgi3dcAGARHQjuiF/t02Q9xMWc/+MHE/TdJyhc8Bss8Asm/FLsjQhJlO1/w==' logged out. 2018-06-08 13:55:47,966+09 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-59) [] User svc_foreman@internal successfully logged out 2018-06-08 13:55:47,974+09 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-35) [7fb8f438] Running command: TerminateSessionsForTokenCommand internal: true. 2018-06-08 13:56:00,387+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-45) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in. Verify your login information or contact the system administrator.'. 2018-06-08 13:56:00,388+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-24) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in. Verify your login information or contact the system administrator. 2018-06-08 13:56:44,910+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-11) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 13:56:44,911+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-51) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. 2018-06-08 14:00:56,537+09 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-28) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in : 'Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed.'. 2018-06-08 14:00:56,538+09 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-20) [] Cannot authenticate user 'svc_foreman@internal' connecting from 'IP_FOREMAN': Unable to log in because the password has expired. <a href='%s'>Change the password</a> to proceed. Cheers, Alex On Fri, Jun 8, 2018 at 5:11 PM, Martin Perina <mperina@redhat.com> wrote:
On Fri, Jun 8, 2018 at 6:47 AM, Alejandro Cortina < alejandro.cortina2@gmail.com> wrote:
Hi there,
I have created a new user from hosted engine by:
ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user' --attribute=firstName=test_user ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
You need to specify password expiration date, otherwise it's expired at the same moment you set it. Please take a look at [1]
then I try to login and I get the message:
*Unable to log in because the password has expired. Change the password to proceed. *
When I click "Change the password" the browser redirects to:
https://FQDN/ovirt-engine/sso/%s
and I get
*Bad RequestYour browser sent a request that this server could not understand.*
Last time I tried with 4.2.1 and it was working with no issues.
Could you please share engine.log so we can get more details about the issue?
Thanks
Martin
[1] https://www.ovirt.org/develop/release-management/features/ infra/aaa-jdbc/#password-management
Cheers,
Alex
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/communit y/about/community-guidelines/ List Archives: https://lists.ovirt.org/archiv es/list/users@ovirt.org/message/JALESO5IC4PMEJPX5UMOZUZPKSC2SDYT/
-- Martin Perina Associate Manager, Software Engineering Red Hat Czech s.r.o.
participants (2)
-
Alejandro Cortina -
Martin Perina