Restored engine backup: The provided authorization grant for the auth code has expired.
Hi, I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3. I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in: The provided authorization grant for the auth code has expired. What does that mean and how can it be fixed? Thanks. Nicolás
Please, any help with this? El 24/3/21 a las 10:05, Nicolás escribió:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
Thanks.
Nicolás _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCO...
I know that it's off topic, but If you have access via ssh you can try to create a local admin user via AAA JDBC (there is an example at https://www.ovirt.org/develop/release-management/features/infra/aaa-jdbc.htm... ) Best Regards,Strahil Nikolov On Fri, Mar 26, 2021 at 10:22, Nicolás<nicolas@devels.es> wrote: Please, any help with this? El 24/3/21 a las 10:05, Nicolás escribió:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
Thanks.
Nicolás _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCO...
Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWV...
bump... El 26/3/21 a las 8:21, Nicolás escribió:
Please, any help with this?
El 24/3/21 a las 10:05, Nicolás escribió:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
Thanks.
Nicolás _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCO...
Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5VYLMSCUGDDBWV...
Il giorno mer 24 mar 2021 alle ore 11:08 Nicolás <nicolas@devels.es> ha scritto:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
+Artur Socha <asocha@redhat.com> , +Martin Perina <mperina@redhat.com> can you help here?
Thanks.
Nicolás _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PADF5SSC6XUYCO...
-- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo@redhat.com <https://www.redhat.com/> *Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*
On Wed, Mar 24, 2021 at 12:07 PM Nicolás <nicolas@devels.es> wrote:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
Can you please check also this thread: https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFI... What version was used for backup, and what version for restore? Did you have a 3rd-party CA cert installed? Please verify that it was backed up and restored correctly, or manually reinstalled after restore. Good luck and best regards, -- Didi
Hi Didi, El 7/4/21 a las 9:27, Yedidyah Bar David escribió:
On Wed, Mar 24, 2021 at 12:07 PM Nicolás <nicolas@devels.es> wrote:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed? Can you please check also this thread:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFI...
What version was used for backup, and what version for restore?
For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used. For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used.
Did you have a 3rd-party CA cert installed?
I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too.
Please verify that it was backed up and restored correctly, or manually reinstalled after restore.
As per the logs, both processes were ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings. I'm attaching a engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in. Thanks for any help regarding this, as I can't figure out what else could be happening. Nicolás
Good luck and best regards, -- Didi
Hi Didi, El 7/4/21 a las 9:27, Yedidyah Bar David escribió:
On Wed, Mar 24, 2021 at 12:07 PM Nicolás <nicolas@devels.es> wrote:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed? Can you please check also this thread:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFI...
What version was used for backup, and what version for restore?
For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used. For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used.
Did you have a 3rd-party CA cert installed?
I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too.
Please verify that it was backed up and restored correctly, or manually reinstalled after restore.
As per the logs, both processes ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings. I'm attaching an engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in. Thanks for any help regarding this, as I can't figure out what else could be happening. Nicolás
Good luck and best regards, -- Didi
Hi, As I see this is an issue hard to get help on, I'll ask it otherwise: Alternatively to backup and restore, is there a way to migrate an oVirt-manager installation to other machine? We're trying to move the manager machine since the current physical machine is getting short of resources, and we already have a prepared physical host to migrate it to. If there's an alternative way to migrate it, I'd be very grateful if someone could shed some light on it. Thanks. El 2/8/21 a las 13:02, Nicolás escribió:
Hi Didi,
El 7/4/21 a las 9:27, Yedidyah Bar David escribió:
On Wed, Mar 24, 2021 at 12:07 PM Nicolás <nicolas@devels.es> wrote:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed? Can you please check also this thread:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFI...
What version was used for backup, and what version for restore?
For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used.
For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used.
Did you have a 3rd-party CA cert installed?
I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too.
Please verify that it was backed up and restored correctly, or manually reinstalled after restore.
As per the logs, both processes ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings.
I'm attaching an engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in.
Thanks for any help regarding this, as I can't figure out what else could be happening.
Nicolás
Good luck and best regards, -- Didi
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3V...
On Tue, Aug 3, 2021 at 11:22 PM Nicolás <nicolas@devels.es> wrote:
Hi,
As I see this is an issue hard to get help on, I'll ask it otherwise:
Alternatively to backup and restore, is there a way to migrate an oVirt-manager installation to other machine? We're trying to move the manager machine since the current physical machine is getting short of resources, and we already have a prepared physical host to migrate it to.
If there's an alternative way to migrate it, I'd be very grateful if someone could shed some light on it.
I am not aware of a tested, documented alternative.
Thanks.
El 2/8/21 a las 13:02, Nicolás escribió:
Hi Didi,
El 7/4/21 a las 9:27, Yedidyah Bar David escribió:
On Wed, Mar 24, 2021 at 12:07 PM Nicolás <nicolas@devels.es> <nicolas@devels.es> wrote:
Hi,
I'm restoring a full ovirt engine backup, having used the --scope=all option, for oVirt 4.3.
I restored the backup on a fresh CentOS7 machine. The process went well, but when trying to log into the restored authentication system I get the following message which won't allow me to log in:
The provided authorization grant for the auth code has expired.
What does that mean and how can it be fixed?
Can you please check also this thread:
https://lists.ovirt.org/archives/list/users@ovirt.org/thread/YH4J7GG7WLOLUFI...
What version was used for backup, and what version for restore?
For backup, version 4.3.8.2-1.el7 of ovirt-engine-tools-backup was used.
For restore, version 4.3.10.4-1.el7 of ovirt-engine-tools-backup was used.
Did you have a 3rd-party CA cert installed?
I am using a custom LetsEncrypt certificate in apache. I have this certificate configured in httpd and ovirt-websocket-proxy, but it's exactly the same certificate I have configured in the oVirt installation that was backed up (as I understand it, it's not the same case than the one described in the link - I might be wrong). So I copied the same certificate on the other side too.
Please verify that it was backed up and restored correctly, or manually reinstalled after restore.
As per the logs, both processes ended correctly, no errors showed up. I also run the 'engine-setup' command on the restored machine, and it ended with no errors/warnings.
I'm attaching an engine.log of the restored node in case it helps, from the moment I restart the engine and try to log in.
Thanks for any help regarding this, as I can't figure out what else could be happening.
I suggest trying to follow the procedure for replacing the certificate from scratch, as if it's not installed. Better take a backup of /etc before you start, for reference/comparison. Please upload large attachments such as the engine log to some file-sharing service (e.g. dropbox google drive) and share a link. Thanks. Best regards,
Nicolás
Good luck and best regards, -- Didi
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3LV4X5KDDOST3V...
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/54CDGSH5DOHZJL...
-- Didi
If the system is boot from SAN, you can just present the LUNs to the new host.You might need to boot in the full initramfs (the bottom entry in grub) and rebuild all initramfs images. Best Regards,Strahil Nikolov On Wed, Aug 4, 2021 at 13:45, Yedidyah Bar David<didi@redhat.com> wrote: _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZACZLK3PVF34VT...
participants (4)
-
Nicolás -
Sandro Bonazzola -
Strahil Nikolov -
Yedidyah Bar David