
--_000_9936BF6BA7EAF843AAB3A4ECC0FBB3ABE7DD48ExchangePBRGemPbr_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, a few days ago I installed an ovirt-engine 4.2.2.6 following the steps of t= he documentation. After the installation I logged in to the admin page, con= figured a datadomain and changed the admin password. After a few hours I tr= ied to login again, using the new password and got "Unable to log in becaus= e the user account is disabled or locked. Contact the system administrator.= " So I unlocked the admin account from the shell using "ovirt-aaa-jdbc-tool= user unlock admin" which worked fine and I was able to continue working ti= ll the next login. I traced the /var/log/ovirt-engine/engine.log and found this after unlockin= g the admin account again. 2018-04-12 09:06:19,984+02 INFO [org.ovirt.engine.core.bll.provider.networ= k.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thre= ad-87) [2ed5aa42] Lock Acquired to object 'EngineLock:{exclusiveLocks=3D'[e= 37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=3DPROVIDER]', sharedLocks=3D''}' 2018-04-12 09:06:19,991+02 INFO [org.ovirt.engine.core.bll.provider.networ= k.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thre= ad-87) [2ed5aa42] Running command: SyncNetworkProviderCommand internal: tru= e. 2018-04-12 09:06:20,102+02 INFO [org.ovirt.engine.extension.aaa.jdbc.core.= Authentication] (default task-239) [] locking user: admin due to interval f= ailures 2018-04-12 09:06:25,046+02 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils]= (default task-239) [] OAuthException access_denied: Cannot authenticate us= er 'admin@internal': The username or password is incorrect.. 2018-04-12 09:06:25,049+02 ERROR [org.ovirt.engine.core.bll.provider.networ= k.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thre= ad-87) [2ed5aa42] Command 'org.ovirt.engine.core.bll.provider.network.SyncN= etworkProviderCommand' failed: EngineException: (Failed with error Unauthor= ized and code 5050) 2018-04-12 09:06:25,050+02 INFO [org.ovirt.engine.core.bll.provider.networ= k.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thre= ad-87) [2ed5aa42] Lock freed to object 'EngineLock:{exclusiveLocks=3D'[e37c= 0b9e-09bc-4893-9b0c-c70f56d6ecfc=3DPROVIDER]', sharedLocks=3D''}' It seems like the SyncNetworkProviderCommand is somehow locking the admin a= ccount. I already restarted the whole machine but it didn't help. Can someone please point me in the right direction, where to find the error= ? Thanks in advance --_000_9936BF6BA7EAF843AAB3A4ECC0FBB3ABE7DD48ExchangePBRGemPbr_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html dir=3D"ltr"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" id=3D"owaParaStyle">P {margin-top:0;margin-bottom:= 0;}</style> </head> <body fpstyle=3D"1" ocsi=3D"0"> <div style=3D"direction: ltr;font-family: Tahoma;color: #000000;font-size: = 10pt;">Hello,<br> <br> a few days ago I installed an ovirt-engine 4.2.2.6 following the steps of t= he documentation. After the installation I logged in to the admin page, con= figured a datadomain and changed the admin password. After a few hours I tr= ied to login again, using the new password and got "Unable to log in because the user account is disabl= ed or locked. Contact the system administrator." So I unlocked the adm= in account from the shell using "ovirt-aaa-jdbc-tool user unlock admin= " which worked fine and I was able to continue working till the next login.<br> <br> I traced the /var/log/ovirt-engine/engine.log and found this after unlockin= g the admin account again.<br> <br> 2018-04-12 09:06:19,984+02 INFO [org.ovirt.engine.core.bll.provid= er.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineSched= uled-Thread-87) [2ed5aa42] Lock Acquired to object 'EngineLock:{exclusiveLo= cks=3D'[e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=3DPROVIDER]', sharedLocks=3D''}'<br> 2018-04-12 09:06:19,991+02 INFO [org.ovirt.engine.core.bll.provid= er.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineSched= uled-Thread-87) [2ed5aa42] Running command: SyncNetworkProviderCommand inte= rnal: true.<br> 2018-04-12 09:06:20,102+02 INFO [org.ovirt.engine.extension.aaa.j= dbc.core.Authentication] (default task-239) [] locking user: admin due to i= nterval failures<br> 2018-04-12 09:06:25,046+02 ERROR [org.ovirt.engine.core.sso.utils.SsoUt= ils] (default task-239) [] OAuthException access_denied: Cannot authenticat= e user 'admin@internal': The username or password is incorrect..<br> 2018-04-12 09:06:25,049+02 ERROR [org.ovirt.engine.core.bll.provider.ne= twork.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-= Thread-87) [2ed5aa42] Command 'org.ovirt.engine.core.bll.provider.network.S= yncNetworkProviderCommand' failed: EngineException: (Failed with error Unauthorized and code 5050)<br> 2018-04-12 09:06:25,050+02 INFO [org.ovirt.engine.core.bll.provid= er.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineSched= uled-Thread-87) [2ed5aa42] Lock freed to object 'EngineLock:{exclusiveLocks= =3D'[e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=3DPROVIDER]', sharedLocks=3D''}'<br> <br> It seems like the SyncNetworkProviderCommand is somehow locking the admin a= ccount. I already restarted the whole machine but it didn't help.<br> <br> Can someone please point me in the right direction, where to find the error= ?<br> <br> Thanks in advance<br> </div> </body> </html> --_000_9936BF6BA7EAF843AAB3A4ECC0FBB3ABE7DD48ExchangePBRGemPbr_--

The sync network command is probably unrelated. Can you attach the full engine and the setup logs? Martin, this looks a bit like [1]. Any idea? Thanks [1] https://bugzilla.redhat.com/show_bug.cgi?id=1410955 On Thu, Apr 12, 2018 at 10:22 AM, Käfer Marcel <marcel.kaefer@putzbrunn.de> wrote:
Hello,
a few days ago I installed an ovirt-engine 4.2.2.6 following the steps of the documentation. After the installation I logged in to the admin page, configured a datadomain and changed the admin password. After a few hours I tried to login again, using the new password and got "Unable to log in because the user account is disabled or locked. Contact the system administrator." So I unlocked the admin account from the shell using "ovirt-aaa-jdbc-tool user unlock admin" which worked fine and I was able to continue working till the next login.
I traced the /var/log/ovirt-engine/engine.log and found this after unlocking the admin account again.
2018-04-12 09:06:19,984+02 INFO [org.ovirt.engine.core.bll. provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Lock Acquired to object 'EngineLock:{exclusiveLocks='[ e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=PROVIDER]', sharedLocks=''}' 2018-04-12 09:06:19,991+02 INFO [org.ovirt.engine.core.bll. provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Running command: SyncNetworkProviderCommand internal: true. 2018-04-12 09:06:20,102+02 INFO [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default task-239) [] locking user: admin due to interval failures 2018-04-12 09:06:25,046+02 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-239) [] OAuthException access_denied: Cannot authenticate user 'admin@internal': The username or password is incorrect.. 2018-04-12 09:06:25,049+02 ERROR [org.ovirt.engine.core.bll. provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Command 'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand' failed: EngineException: (Failed with error Unauthorized and code 5050) 2018-04-12 09:06:25,050+02 INFO [org.ovirt.engine.core.bll. provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Lock freed to object 'EngineLock:{exclusiveLocks='[ e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=PROVIDER]', sharedLocks=''}'
It seems like the SyncNetworkProviderCommand is somehow locking the admin account. I already restarted the whole machine but it didn't help.
Can someone please point me in the right direction, where to find the error?
Thanks in advance
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Eitan Raviv IRC: erav (#ovirt #vdsm #devel #rhev-dev)
participants (2)
-
Eitan Raviv
-
Käfer Marcel