6:47 a.m.
Hi there,
I have created a new user from hosted engine by:
ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user'
--attribute=firstName=test_user
ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
then I try to login and I get the message:
*Unable to log in because the password has expired. Change the password to
proceed. *
When I click "Change the password" the browser redirects to:
https://FQDN/ovirt-engine/sso/%s
and I get
*Bad RequestYour browser sent a request that this server could not
understand.*
Last time I tried with 4.2.1 and it was working with no issues.
Cheers,
Alex
10:11 a.m.
New subject: oVirt Version 4.2.3.5-1.el7.centos cannot change password from user (Bad Request)
On Fri, Jun 8, 2018 at 6:47 AM, Alejandro Cortina <
alejandro.cortina2(a)gmail.com> wrote:
Hi there,
I have created a new user from hosted engine by:
ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user'
--attribute=firstName=test_user
ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
You need to specify password expiration date, otherwise it's expired at
the same moment you set it. Please take a look at [1]
then I try to login and I get the message:
*Unable to log in because the password has expired. Change the password
to proceed. *
When I click "Change the password" the browser redirects to:
https://FQDN/ovirt-engine/sso/%s
and I get
*Bad RequestYour browser sent a request that this server could not
understand.*
Last time I tried with 4.2.1 and it was working with no issues.
Could you please share engine.log so we can get more details about the
issue?
Thanks
Martin
[1]
https://www.ovirt.org/develop/release-management/features/infra/aaa-jdbc/...
Cheers,
Alex
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-
guidelines/
List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/
message/JALESO5IC4PMEJPX5UMOZUZPKSC2SDYT/
--
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
6:16 a.m.
New subject: oVirt Version 4.2.3.5-1.el7.centos cannot change password from user (Bad Request)
Hi Martin,
thanks for the link. That worked, if you need here are the logs (removed
org.ovirt.engine.core.vdsbroker.gluster* and
org.ovirt.engine.core.bll.lock.InMemoryLockManager*, etc):
2018-06-08 13:33:44,453+09 INFO
[org.ovirt.engine.core.bll.aaa.AddUserCommand] (default task-15)
[588403fe-0957-48dc-87fa-60bdb618953c] Running command: AddUserCommand
internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group
MANIPULATE_USERS with role type ADMIN
2018-06-08 13:33:44,482+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-15) [588403fe-0957-48dc-87fa-60bdb618953c] EVENT_ID:
USER_ADD(149), User 'svc_foreman' was added successfully to the system.
2018-06-08 13:35:05,631+09 INFO
[org.ovirt.engine.core.bll.AddSystemPermissionCommand]
(EE-ManagedThreadFactory-engine-Thread-115246)
[e5f309f8-c349-4244-b2a6-94d8ef187b0c] Running command:
AddSystemPermissionCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group
MANIPULATE_PERMISSIONS with role type USER, ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group
ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER
2018-06-08 13:35:05,666+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedThreadFactory-engine-Thread-115246)
[e5f309f8-c349-4244-b2a6-94d8ef187b0c] EVENT_ID:
USER_ADD_SYSTEM_PERMISSION(866), User/Group svc_foreman was granted
permission for Role ReadOnlyAdmin on System by admin@internal-authz.
2018-06-08 13:35:14,756+09 INFO
[org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-16)
[5de285fc] Running command: LogoutSessionCommand internal: false.
2018-06-08 13:35:14,768+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-16) [5de285fc] EVENT_ID: USER_VDC_LOGOUT(31), User
admin@internal-authz connected from 'IP_FOREMAN' using session
'J/o5sSeEdvL7qPnoF16wGQHZ61Kc0NvfQ+/s9GdvDufSkPdO0kc0gJ31OYBCUF+dQTWTGVBc3LZow/S3DIBSEA=='
logged out.
2018-06-08 13:35:14,784+09 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-14)
[] User admin@internal successfully logged out
2018-06-08 13:35:14,794+09 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-17) [2c86b5cf] Running command: TerminateSessionsForTokenCommand
internal: true.
2018-06-08 13:35:36,087+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-42) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. <a href='%s'>Change
the
password</a> to proceed.'.
2018-06-08 13:35:36,087+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-19) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
2018-06-08 13:36:06,094+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-50) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'UNKNOWN' failed to log in : 'Unable
to log in because the password has expired. <a href='%s'>Change the
password</a> to proceed.'.
2018-06-08 13:36:06,095+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-49) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'UNKNOWN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
2018-06-08 13:39:01,638+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-40) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. <a href='%s'>Change
the
password</a> to proceed.'.
2018-06-08 13:39:01,639+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-64) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
2018-06-08 13:44:06,575+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-16) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. <a href='%s'>Change
the
password</a> to proceed.'.
2018-06-08 13:44:06,576+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-14) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
2018-06-08 13:50:36,239+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-17) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
bot_virt-who@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in. Verify your login information or contact the system
administrator.'.
2018-06-08 13:50:36,240+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-53) [] Cannot authenticate user 'bot_virt-who@internal' connecting
from 'IP_FOREMAN': Unable to log in. Verify your login information or
contact the system administrator.
2018-06-08 13:52:05,259+09 INFO
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-44) []
User svc_foreman@internal successfully logged in with scopes:
ovirt-app-admin ovirt-app-api ovirt-app-portal
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-06-08 13:52:05,329+09 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-46)
[73a676d] Running command: CreateUserSessionCommand internal: false.
2018-06-08 13:52:05,350+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-46) [73a676d] EVENT_ID: USER_VDC_LOGIN(30), User
svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session
'+Azi1/9NMUOarS22HdNRtZU5Oq2jfpeC9wJVADFZi3UGoafuIiWzNXwEUAwq5XAwMhoxXUxTObR+PW24NFuwmw=='
logged in.
2018-06-08 13:53:08,870+09 INFO
[org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-6)
[3dc715a] Running command: LogoutSessionCommand internal: false.
2018-06-08 13:53:08,889+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-6) [3dc715a] EVENT_ID: USER_VDC_LOGOUT(31), User
svc_foreman@internal-authz connected from 'IP_FOREMAN' using session
'+Azi1/9NMUOarS22HdNRtZU5Oq2jfpeC9wJVADFZi3UGoafuIiWzNXwEUAwq5XAwMhoxXUxTObR+PW24NFuwmw=='
logged out.
2018-06-08 13:53:08,907+09 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-56)
[] User svc_foreman@internal successfully logged out
2018-06-08 13:53:08,918+09 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-13) [75f088df] Running command: TerminateSessionsForTokenCommand
internal: true.
2018-06-08 13:53:19,972+09 INFO
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-12) []
User svc_foreman@internal successfully logged in with scopes:
ovirt-app-admin ovirt-app-api ovirt-app-portal
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-06-08 13:53:20,031+09 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-23)
[59ffd09c] Running command: CreateUserSessionCommand internal: false.
2018-06-08 13:53:20,046+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-23) [59ffd09c] EVENT_ID: USER_VDC_LOGIN(30), User
svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session
'vAXr/87x8YHB7TzHyM7m2eXAOESUNy8MzH15Pu6n8BgJwJnxkgs0BkZ0XHlmrnbCr0d2oeCtk6VE+pF54KhWww=='
logged in.
2018-06-08 13:53:58,218+09 INFO
[org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-31)
[1d26d1f7] Running command: LogoutSessionCommand internal: false.
2018-06-08 13:53:58,228+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-31) [1d26d1f7] EVENT_ID: USER_VDC_LOGOUT(31), User
svc_foreman@internal-authz connected from 'IP_FOREMAN' using session
'vAXr/87x8YHB7TzHyM7m2eXAOESUNy8MzH15Pu6n8BgJwJnxkgs0BkZ0XHlmrnbCr0d2oeCtk6VE+pF54KhWww=='
logged out.
2018-06-08 13:53:58,247+09 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-26)
[] User svc_foreman@internal successfully logged out
2018-06-08 13:53:58,257+09 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-37) [2408fb55] Running command: TerminateSessionsForTokenCommand
internal: true.
2018-06-08 13:54:06,153+09 INFO
[org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-64) []
User svc_foreman@internal successfully logged in with scopes:
ovirt-app-admin ovirt-app-api ovirt-app-portal
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2018-06-08 13:54:06,199+09 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-30)
[299b27e2] Running command: CreateUserSessionCommand internal: false.
2018-06-08 13:54:06,213+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-30) [299b27e2] EVENT_ID: USER_VDC_LOGIN(30), User
svc_foreman@internal-authz connecting from 'IP_FOREMAN' using session
'I20YgzaKBS0TEzSlWGrlSbfzXoRXgi3dcAGARHQjuiF/t02Q9xMWc/+MHE/TdJyhc8Bss8Asm/FLsjQhJlO1/w=='
logged in.
2018-06-08 13:54:22,038+09 INFO
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Lock
Acquired to object
'EngineLock:{exclusiveLocks='[7faa7563-51f8-439e-b9a9-3c610915a842=PROVIDER]',
sharedLocks=''}'
2018-06-08 13:54:22,045+09 INFO
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Running
command: SyncNetworkProviderCommand internal: true.
2018-06-08 13:54:22,050+09 ERROR
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Command
'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand'
failed: EngineException: (Failed with error SSL peer shut down incorrectly
and code 5050)
2018-06-08 13:54:22,051+09 INFO
[org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-60) [6e5f543b] Lock freed
to object
'EngineLock:{exclusiveLocks='[7faa7563-51f8-439e-b9a9-3c610915a842=PROVIDER]',
sharedLocks=''}'
2018-06-08 13:55:47,938+09 INFO
[org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-3)
[77ec31] Running command: LogoutSessionCommand internal: false.
2018-06-08 13:55:47,948+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-3) [77ec31] EVENT_ID: USER_VDC_LOGOUT(31), User
svc_foreman@internal-authz connected from 'IP_FOREMAN' using session
'I20YgzaKBS0TEzSlWGrlSbfzXoRXgi3dcAGARHQjuiF/t02Q9xMWc/+MHE/TdJyhc8Bss8Asm/FLsjQhJlO1/w=='
logged out.
2018-06-08 13:55:47,966+09 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-59)
[] User svc_foreman@internal successfully logged out
2018-06-08 13:55:47,974+09 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-35) [7fb8f438] Running command: TerminateSessionsForTokenCommand
internal: true.
2018-06-08 13:56:00,387+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-45) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in. Verify your login information or contact the system
administrator.'.
2018-06-08 13:56:00,388+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-24) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in. Verify your login information or contact
the system administrator.
2018-06-08 13:56:44,910+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-11) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. <a href='%s'>Change
the
password</a> to proceed.'.
2018-06-08 13:56:44,911+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-51) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
2018-06-08 14:00:56,537+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-28) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. <a href='%s'>Change
the
password</a> to proceed.'.
2018-06-08 14:00:56,538+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-20) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. <a
href='%s'>Change the password</a> to proceed.
Cheers,
Alex
On Fri, Jun 8, 2018 at 5:11 PM, Martin Perina <mperina(a)redhat.com> wrote:
On Fri, Jun 8, 2018 at 6:47 AM, Alejandro Cortina <
alejandro.cortina2(a)gmail.com> wrote:
> Hi there,
>
> I have created a new user from hosted engine by:
>
> ovirt-aaa-jdbc-tool user add test_user --attribute=description='test
> user' --attribute=firstName=test_user
> ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
>
You need to specify password expiration date, otherwise it's expired at
the same moment you set it. Please take a look at [1]
>
> then I try to login and I get the message:
>
> *Unable to log in because the password has expired. Change the password
> to proceed. *
>
> When I click "Change the password" the browser redirects to:
>
> https://FQDN/ovirt-engine/sso/%s
>
> and I get
>
>
>
>
> *Bad RequestYour browser sent a request that this server could not
> understand.*
>
> Last time I tried with 4.2.1 and it was working with no issues.
>
Could you please share engine.log so we can get more details about the
issue?
Thanks
Martin
[1] https://www.ovirt.org/develop/release-management/features/
infra/aaa-jdbc/#password-management
> Cheers,
>
> Alex
>
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/communit
> y/about/community-guidelines/
> List Archives: https://lists.ovirt.org/archiv
> es/list/users(a)ovirt.org/message/JALESO5IC4PMEJPX5UMOZUZPKSC2SDYT/
>
>
--
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
2166
days inactive
2169
days old
2 comments
2 participants
participants (2)
-
Alejandro Cortina -
Martin Perina