[Users] Cannot login with AD user after upgrade 3.3->3.4
------=_NextPartTM-000-54883a05-ff94-4df1-b2be-55566b23207c Content-Type: multipart/alternative; boundary="_000_12EF8D94C6F8734FB2FF37B9FBEDD1735861477AEXCHANGEcollogi_" --_000_12EF8D94C6F8734FB2FF37B9FBEDD1735861477AEXCHANGEcollogi_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, my upgrade from 3.3 to 3.4 went quite well. Only problem afterwards is I'm unable to log into the engine with one of my attached AD users. Internal admin user works fine. system permissions before and after the upgrade are as follows: mydomain.com/builtin/Administrators SuperUser mydomain.com/builtin/Administrators PowerUserRole engine log reads: 2014-03-28 21:22:10,858 WARN [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-8) CanDoAction of action LoginAdminUser failed. Reason= s:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION Login page reads: User is not authorized to perform this action. I know the password is correct. If i mistype it the error clearly shows that the password is wrong. Is there any additional authorization I have to assign in 3.4? Markus --_000_12EF8D94C6F8734FB2FF37B9FBEDD1735861477AEXCHANGEcollogi_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style id=3D"owaParaStyle" type=3D"text/css">P {margin-top:0;margin-bottom:= 0;}</style> </head> <body ocsi=3D"0" fpstyle=3D"1"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;">Hello,<br> <br> my upgrade from 3.3 to 3.4 went quite well. Only problem <br> afterwards is I'm unable to log into the engine with one of <br> my attached AD users. Internal admin user works fine.<br> <br> system permissions before and after the upgrade are as follows:<br> <br> mydomain.com/builtin/Administrators SuperUser<br> mydomain.com/builtin/Administrators PowerUserRole<br> <br> engine log reads:<br> <br> 2014-03-28 21:22:10,858 WARN <br> [org.ovirt.engine.core.bll.LoginAdminUserCommand] <br> (ajp--127.0.0.1-8702-8) CanDoAction of action LoginAdminUser failed. Reason= s:USER_NOT_AUTHORIZED_TO_PERFORM_ACTION<br> <br> Login page reads:<br> <br> User is not authorized to perform this action.<br> <br> I know the password is correct. If i mistype it the error clearly<br> shows that the password is wrong. Is there any additional <br> authorization I have to assign in 3.4?<br> <br> Markus<br> <br> </div> </body> </html> --_000_12EF8D94C6F8734FB2FF37B9FBEDD1735861477AEXCHANGEcollogi_-- ------=_NextPartTM-000-54883a05-ff94-4df1-b2be-55566b23207c Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" **************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-54883a05-ff94-4df1-b2be-55566b23207c--
This is a multi-part message in MIME format. ------=_NextPartTM-000-6eb821ac-21c9-42f6-9fa6-cfc6724d4166 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hello,=0A= =0A= my upgrade from 3.3 to 3.4 went quite well. Only problem =0A= afterwards is I'm unable to log into the engine with one of =0A= my attached AD users. Internal admin user works fine.=0A= =0A= system permissions before and after the upgrade are as follows:=0A= =0A= mydomain.com/builtin/Administrators SuperUser=0A= mydomain.com/builtin/Administrators PowerUserRole=0A= =0A= sorry for the noise. User/group assignments in the domain=0A= were changed in parallel. So user had effectively no access =0A= rights.=0A= =0A= Markus= ------=_NextPartTM-000-6eb821ac-21c9-42f6-9fa6-cfc6724d4166 Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt"
**************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-6eb821ac-21c9-42f6-9fa6-cfc6724d4166--
Looks like a bug in upgrade from 3.3 to 3.4 I will file a bug on that. https://bugzilla.redhat.com/show_bug.cgi?id=1082195 ----- Original Message -----
From: "Markus Stockhausen" <stockhausen@collogia.de> To: "ovirt-users" <users@ovirt.org> Sent: Friday, March 28, 2014 11:56:32 PM Subject: Re: [Users] Cannot login with AD user after upgrade 3.3->3.4
Hello,
my upgrade from 3.3 to 3.4 went quite well. Only problem afterwards is I'm unable to log into the engine with one of my attached AD users. Internal admin user works fine.
system permissions before and after the upgrade are as follows:
mydomain.com/builtin/Administrators SuperUser mydomain.com/builtin/Administrators PowerUserRole
sorry for the noise. User/group assignments in the domain were changed in parallel. So user had effectively no access rights.
Markus _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Markus, which version of ovirt 3.3 did you upgrade from? and to which version of 3.4? ----- Original Message -----
From: "Yair Zaslavsky" <yzaslavs@redhat.com> To: "Markus Stockhausen" <stockhausen@collogia.de> Cc: "ovirt-users" <users@ovirt.org> Sent: Saturday, March 29, 2014 6:01:24 AM Subject: Re: [Users] Cannot login with AD user after upgrade 3.3->3.4
Looks like a bug in upgrade from 3.3 to 3.4 I will file a bug on that.
https://bugzilla.redhat.com/show_bug.cgi?id=1082195
----- Original Message -----
From: "Markus Stockhausen" <stockhausen@collogia.de> To: "ovirt-users" <users@ovirt.org> Sent: Friday, March 28, 2014 11:56:32 PM Subject: Re: [Users] Cannot login with AD user after upgrade 3.3->3.4
Hello,
my upgrade from 3.3 to 3.4 went quite well. Only problem afterwards is I'm unable to log into the engine with one of my attached AD users. Internal admin user works fine.
system permissions before and after the upgrade are as follows:
mydomain.com/builtin/Administrators SuperUser mydomain.com/builtin/Administrators PowerUserRole
sorry for the noise. User/group assignments in the domain were changed in parallel. So user had effectively no access rights.
Markus _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
This is a multi-part message in MIME format. ------=_NextPartTM-000-c19b44d1-0d13-4c13-9417-c2e076d31698 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Von: Yair Zaslavsky [yzaslavs@redhat.com]=0A= Gesendet: Samstag, 29. M=E4rz 2014 04:11=0A= An: Markus Stockhausen=0A= Cc: ovirt-users=0A= Betreff: Re: [Users] Cannot login with AD user after upgrade 3.3->3.4=0A= =0A= Markus, which version of ovirt 3.3 did you upgrade from? and to which ver= sion of 3.4?=0A= =0A= I upgraded from 3.3.3 to GA 3.4. As explained the error was a parallel =0A= change in the AD. You can close the BZ if you like.=0A= =0A= Markus=0A= ------=_NextPartTM-000-c19b44d1-0d13-4c13-9417-c2e076d31698 Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt"
**************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-c19b44d1-0d13-4c13-9417-c2e076d31698--
participants (2)
-
Markus Stockhausen -
Yair Zaslavsky