FreeIPA authentication broken
Hey everyone, I had FreeIPA authentication set up on my oVirt instance and it was working great. Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine. Once I got it back up and running again, my FreeIPA authentication was sill a choice for authentication, but it always rejects my password even though it is correct. I have tried running the setup again to no avail. Nothing shows up in the httpd error log when the login fails. The engine.log from ovirt-engine in /var/log shows the following upon attempting to authenticate with a user from freeIPA: 2018-04-23 08:08:24,384-06 WARN [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-34) [] Ignoring records from pool: 'authz' 2018-04-23 08:08:24,384-06 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-34) [] Cannot authenticate user 'nesretep@IPA' connecting from 'UNKNOWN': The username or password is incorrect. I'm not sure why 'authz' is being ignored but it is certainly why IPA authentication isn't working as 'username@authz' is how IPA logins show up in oVirt when they do work. Any ideas where to look next? -- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
On 04/23/2018 04:30 PM, Kristian Petersen wrote:
Hey everyone,
I had FreeIPA authentication set up on my oVirt instance and it was working great. Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine. Once I got it back up and running again, my FreeIPA authentication was sill a choice for authentication, but it always rejects my password even though it is correct. I have tried running the setup again to no avail. Nothing shows up in the httpd error log when the login fails. The engine.log from ovirt-engine in /var/log shows the following upon attempting to authenticate with a user from freeIPA:
2018-04-23 08:08:24,384-06 WARN [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-34) [] Ignoring records from pool: 'authz' 2018-04-23 08:08:24,384-06 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-34) [] Cannot authenticate user 'nesretep@IPA' connecting from 'UNKNOWN': The username or password is incorrect.
Can you try to run this command: $ ovirt-engine-extensions-tool --log-level=FINEST --log-file=/tmp/aaa.log aaa login-user --user-name nesretep --profile IPA and share /tmp/aaa.log?
I'm not sure why 'authz' is being ignored but it is certainly why IPA authentication isn't working as 'username@authz' is how IPA logins show up in oVirt when they do work. Any ideas where to look next? -- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
After running ovirt-engine-extensions-tool --log-level=FINEST --log-file=/tmp/aaa.log aaa login-user --user-name nesretep --profile IPA... *Contents of /tmp/aaa.log:* 2018-04-23 14:10:58,771-06 FINE Version: ovirt-engine-4.2.1.7 () 2018-04-23 14:10:58,856-06 INFO ======================================================================== 2018-04-23 14:10:58,856-06 INFO ============================ Initialization ============================ 2018-04-23 14:10:58,857-06 INFO ======================================================================== 2018-04-23 14:10:58,858-06 FINE Loading extension file 'internal-authz.properties' 2018-04-23 14:10:58,882-06 INFO Loading extension 'internal-authz' 2018-04-23 14:10:58,884-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,886-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/internal-authz.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae -5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extk ey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE _NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authz}} 2018-04-23 14:10:58,887-06 FINEST Invoke Input END 2018-04-23 14:10:58,891-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,892-06 FINEST {Extkey[name=AAA_AUTHZ_STATUS;type=class java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=0, Extkey[name=EXTENSIO N_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:58,892-06 FINEST Invoke Output END 2018-04-23 14:10:58,893-06 INFO Extension 'internal-authz' loaded 2018-04-23 14:10:58,894-06 FINE Config BEGIN 2018-04-23 14:10:58,894-06 FINE ovirt.engine.extension.provides: org.ovirt.engine.api.extensions.aaa.Authz 2018-04-23 14:10:58,895-06 FINE ovirt.engine.extension.binding.jbossmodule.class: org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthzExtension 2018-04-23 14:10:58,896-06 FINE ovirt.engine.extension.bindings.method: jbossmodule 2018-04-23 14:10:58,897-06 FINE config.datasource.file: /etc/ovirt-engine/aaa/internal.properties 2018-04-23 14:10:58,897-06 FINE ovirt.engine.extension.name: internal-authz 2018-04-23 14:10:58,898-06 FINE ovirt.engine.extension.binding.jbossmodule.module: org.ovirt.engine.extension.aaa.jdbc 2018-04-23 14:10:58,898-06 FINE Config END 2018-04-23 14:10:58,899-06 FINE Loading extension file 'internal-authn.properties' 2018-04-23 14:10:58,900-06 INFO Loading extension 'internal-authn' 2018-04-23 14:10:58,900-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,901-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/internal-authn.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae -5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extk ey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE _NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authn}} 2018-04-23 14:10:58,902-06 FINEST Invoke Input END 2018-04-23 14:10:58,903-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,903-06 FINEST {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:58,904-06 FINEST Invoke Output END 2018-04-23 14:10:58,904-06 INFO Extension 'internal-authn' loaded 2018-04-23 14:10:58,905-06 FINE Config BEGIN 2018-04-23 14:10:58,905-06 FINE ovirt.engine.aaa.authn.profile.name: internal 2018-04-23 14:10:58,906-06 FINE ovirt.engine.extension.provides: org.ovirt.engine.api.extensions.aaa.Authn 2018-04-23 14:10:58,906-06 FINE ovirt.engine.extension.binding.jbossmodule.class: org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthnExtension 2018-04-23 14:10:58,907-06 FINE ovirt.engine.aaa.authn.authz.plugin: internal-authz 2018-04-23 14:10:58,907-06 FINE ovirt.engine.extension.bindings.method: jbossmodule 2018-04-23 14:10:58,907-06 FINE config.datasource.file: /etc/ovirt-engine/aaa/internal.properties 2018-04-23 14:10:58,908-06 FINE ovirt.engine.extension.name: internal-authn 2018-04-23 14:10:58,908-06 FINE ovirt.engine.extension.binding.jbossmodule.module: org.ovirt.engine.extension.aaa.jdbc 2018-04-23 14:10:58,909-06 FINE Config END 2018-04-23 14:10:58,909-06 FINE Loading extension file 'IPA.properties' 2018-04-23 14:10:58,915-06 INFO Loading extension 'IPA' 2018-04-23 14:10:58,916-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,917-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/IPA.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0 fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXT ENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type= class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA}} 2018-04-23 14:10:58,917-06 FINEST Invoke Input END 2018-04-23 14:10:58,950-06 FINE Exception java.io.FileNotFoundException: /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at java.io.FileInputStream.open0(Native Method) at java.io.FileInputStream.open(FileInputStream.java:195) at java.io.FileInputStream.<init>(FileInputStream.java:138) at org.ovirt.engineextensions.aaa.ldap.Util.includeProperties(Util.java:165) at org.ovirt.engineextensions.aaa.ldap.Util.loadProperties(Util.java:210) at org.ovirt.engineextensions.aaa.ldap.ExtensionUtil.frameworkCreate(ExtensionUtil.java:115) at org.ovirt.engineextensions.aaa.ldap.AuthzExtension.doLoad(AuthzExtension.java:518) at org.ovirt.engineextensions.aaa.ldap.AuthzExtension.invoke(AuthzExtension.java:472) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:49) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:73) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main(ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) 2018-04-23 14:10:58,951-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,952-06 FINEST {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=/etc/ovi rt-engine/extensions.d/../aaa/IPA.properties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8b de-40fb-b6c0-099c772ddd4e];]=2} 2018-04-23 14:10:58,952-06 FINEST Invoke Output END 2018-04-23 14:10:58,953-06 SEVERE Extension 'IPA.properties' load failed (ignored): Error loading extension 'IPA': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such f ile or directory) 2018-04-23 14:10:58,953-06 FINE Exception: java.lang.RuntimeException: Error loading extension 'IPA': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:257) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main(ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) Caused by: Class: class org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException Input: {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=EXTENSION_LOAD[b0f24 60e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f8 49834b7d];]={Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_CONTEXT ;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;type=class java.lang.St ring;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authz, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uui d=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name= EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTE NSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=1.3.6, Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection; uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSIO N_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778 bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/ext ensions.d/IPA.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= http://www.ovirt.org, Extkey[n ame=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;t ype=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class java.lang.Intege r;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=50, Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFAC E_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-86743 27f011b];]=IPA, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey [name=EXTENSION_NOTES;type=class java.lang.String;uuid=EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display name: ovirt-engine-extension-aaa-ldap-1.3.6-1.el7.centos}} Output: {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=/etc/ovirt-engine/extensions.d/../aaa/IPA.p roperties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2} at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:95) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230) ... 5 more 2018-04-23 14:10:58,956-06 FINE Loading extension file 'IPA-authn.properties' 2018-04-23 14:10:58,957-06 INFO Loading extension 'IPA-authn' 2018-04-23 14:10:58,957-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,958-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/IPA-authn.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068 a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[na me=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME ;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA-authn}} 2018-04-23 14:10:58,958-06 FINEST Invoke Input END 2018-04-23 14:10:58,959-06 FINE Exception java.io.FileNotFoundException: /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at java.io.FileInputStream.open0(Native Method) at java.io.FileInputStream.open(FileInputStream.java:195) at java.io.FileInputStream.<init>(FileInputStream.java:138) at org.ovirt.engineextensions.aaa.ldap.Util.includeProperties(Util.java:165) at org.ovirt.engineextensions.aaa.ldap.Util.loadProperties(Util.java:210) at org.ovirt.engineextensions.aaa.ldap.ExtensionUtil.frameworkCreate(ExtensionUtil.java:115) at org.ovirt.engineextensions.aaa.ldap.AuthnExtension.doLoad(AuthnExtension.java:117) at org.ovirt.engineextensions.aaa.ldap.AuthnExtension.invoke(AuthnExtension.java:66) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:49) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:73) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main(ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) 2018-04-23 14:10:58,959-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,960-06 FINEST {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=/etc/ovi rt-engine/extensions.d/../aaa/IPA.properties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8b de-40fb-b6c0-099c772ddd4e];]=2} 2018-04-23 14:10:58,960-06 FINEST Invoke Output END 2018-04-23 14:10:58,960-06 SEVERE Extension 'IPA-authn.properties' load failed (ignored): Error loading extension 'IPA-authn': /etc/ovirt-engine/extensions.d/../aaa/IPA.propertie s (No such file or directory) 2018-04-23 14:10:58,961-06 FINE Exception: java.lang.RuntimeException: Error loading extension 'IPA-authn': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:257) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main(ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) Caused by: Class: class org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException Input: {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=EXTENSION_LOAD[b0f24 60e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f8 49834b7d];]={Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_CONTEXT ;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;type=class java.lang.St ring;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authn, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uui d=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name= EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTE NSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=1.3.6, Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection; uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSIO N_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778 bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/ext ensions.d/IPA-authn.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= http://www.ovirt.org, Ex tkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION _MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang. Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAM E[65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA-authn, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b2 3-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=AAA_AUTHN_CAPABILITIES;type=class java.lang.Long;uuid=AAA_AUTHN_CAPABILITIES[9d16bee3-10fd-46f2-83f9-3d3c54cf258d];]=12, Extkey[name=EXT ENSION_NOTES;type=class java.lang.String;uuid=EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display name: ovirt-engine-extension-aaa-ldap-1.3.6-1.el7.centos}} Output: {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=/etc/ovirt-engine/extensions.d/../aaa/IPA.p roperties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2} at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:95) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230) ... 5 more 2018-04-23 14:10:58,962-06 INFO Initializing extension 'internal-authz' 2018-04-23 14:10:58,963-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,964-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_INITIALIZE[e5ae1b7f-9104-4f23-a444-7b9175ff68d2], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_IN VOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-9 55f-486a-bd35-0a272b45a711];]=[*], Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EX TENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;t ype=class java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]="ovirt-engine-extension-aaa-jdbc".authz, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interf ace org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsMana ger.trace."ovirt-engine-extension-aaa-jdbc".authz.internal-authz), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURAT ION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68 c];]="1.1.6", Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.a aa.Authz], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;t ype=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION _CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/extensions.d/internal-authz.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uu id=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= http://www.ovirt.org, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATIO N[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee 9-df362446e3e7];]=0, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100, Ext key[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANC E_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authz, Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class java.lang.Lon g;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_ VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=EXTENSION_NOTES;type=class java.lang.String;uuid=EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display nam e: "ovirt-engine-extension-aaa-jdbc"}} 2018-04-23 14:10:58,964-06 FINEST Invoke Input END 2018-04-23 14:10:59,013-06 FINEST cursor for: SELECT COUNT(script) AS count FROM schema_version WHERE script = $bSOnl$upgrade/01_00_0050_enable_change_password_capability.sql$bSO nl$ 2018-04-23 14:10:59,024-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:59,024-06 FINEST {Extkey[name=AAA_AUTHZ_STATUS;type=class java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=0, Extkey[name=EXTENSIO N_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:59,024-06 FINEST Invoke Output END 2018-04-23 14:10:59,025-06 INFO Extension 'internal-authz' initialized 2018-04-23 14:10:59,025-06 FINE Extension 'internal-authz' initialized 2018-04-23 14:10:59,025-06 INFO Initializing extension 'internal-authn' 2018-04-23 14:10:59,026-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:59,027-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_INITIALIZE[e5ae1b7f-9104-4f23-a444-7b9175ff68d2], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_IN VOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[na me=EXTENSION_NAME;type=class java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]="ovirt-engine-extension-aaa-jdbc".authn, Extkey[name=EXTENSION_MANAGER_TR ACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions .mgr.ExtensionsManager.trace."ovirt-engine-extension-aaa-jdbc".authn.internal-authn), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=E XTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4b db-ab1a-af9f779ce68c];]="1.1.6", Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engi ne.api.extensions.aaa.Authn], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name =EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.St ring;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/extensions.d/internal-authn.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= http://www.ovirt.org, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXT ENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4c ff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b 9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authn, Extkey[name=EXTE NSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=AAA_AUTHN_CAPABILITIES;typ e=class java.lang.Long;uuid=AAA_AUTHN_CAPABILITIES[9d16bee3-10fd-46f2-83f9-3d3c54cf258d];]=44, Extkey[name=EXTENSION_NOTES;type=class java.lang.String;uuid=EXTENSION_NOTES[2da5ad7 e-185a-4584-aaff-97f66978e4ea];]=Display name: "ovirt-engine-extension-aaa-jdbc"}} 2018-04-23 14:10:59,027-06 FINEST Invoke Input END 2018-04-23 14:10:59,033-06 FINEST cursor for: SELECT COUNT(script) AS count FROM schema_version WHERE script = $gTCNO$upgrade/01_00_0050_enable_change_password_capability.sql$gTC NO$ 2018-04-23 14:10:59,035-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:59,036-06 FINEST {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:59,036-06 FINEST Invoke Output END 2018-04-23 14:10:59,036-06 INFO Extension 'internal-authn' initialized 2018-04-23 14:10:59,037-06 FINE Extension 'internal-authn' initialized 2018-04-23 14:10:59,037-06 INFO Start of enabled extensions list 2018-04-23 14:10:59,037-06 INFO Instance name: 'internal-authn', Extension name: '"ovirt-engine-extension-aaa-jdbc".authn', Version: '"1.1.6"', Notes: 'Display name: "ovirt-eng ine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/intern al-authn.properties', Initialized: 'true' 2018-04-23 14:10:59,038-06 INFO Instance name: 'internal-authz', Extension name: '"ovirt-engine-extension-aaa-jdbc".authz', Version: '"1.1.6"', Notes: 'Display name: "ovirt-eng ine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/intern al-authz.properties', Initialized: 'true' 2018-04-23 14:10:59,038-06 INFO End of enabled extensions list 2018-04-23 14:10:59,038-06 INFO ======================================================================== 2018-04-23 14:10:59,038-06 INFO ============================== Execution =============================== 2018-04-23 14:10:59,038-06 INFO ======================================================================== 2018-04-23 14:10:59,039-06 INFO Iteration: 0 2018-04-23 14:10:59,039-06 SEVERE Profile 'IPA' not found 2018-04-23 14:10:59,040-06 FINE Exception: java.lang.IllegalArgumentException: Profile 'IPA' not found at org.ovirt.engine.exttool.aaa.AAAServiceImpl.getExtensionByProfile(AAAServiceImpl.java:549) at org.ovirt.engine.exttool.aaa.AAAServiceImpl.access$1200(AAAServiceImpl.java:37) at org.ovirt.engine.exttool.aaa.AAAServiceImpl$AAAProfile.<init>(AAAServiceImpl.java:838) at org.ovirt.engine.exttool.aaa.AAAServiceImpl$Action.lambda$static$3(AAAServiceImpl.java:154) at org.ovirt.engine.exttool.aaa.AAAServiceImpl$Action.execute(AAAServiceImpl.java:417) at org.ovirt.engine.exttool.aaa.AAAServiceImpl.run(AAAServiceImpl.java:686) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main(ExtensionsToolExecutor.java:120) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) 2018-04-23 14:10:59,040-06 FINE Exiting with status '1' On Mon, Apr 23, 2018 at 1:02 PM, Ondra Machacek <omachace@redhat.com> wrote:
On 04/23/2018 04:30 PM, Kristian Petersen wrote:
Hey everyone,
I had FreeIPA authentication set up on my oVirt instance and it was working great. Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine. Once I got it back up and running again, my FreeIPA authentication was sill a choice for authentication, but it always rejects my password even though it is correct. I have tried running the setup again to no avail. Nothing shows up in the httpd error log when the login fails. The engine.log from ovirt-engine in /var/log shows the following upon attempting to authenticate with a user from freeIPA:
2018-04-23 08:08:24,384-06 WARN [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-34) [] Ignoring records from pool: 'authz' 2018-04-23 08:08:24,384-06 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-34) [] Cannot authenticate user 'nesretep@IPA' connecting from 'UNKNOWN': The username or password is incorrect.
Can you try to run this command:
$ ovirt-engine-extensions-tool --log-level=FINEST --log-file=/tmp/aaa.log aaa login-user --user-name nesretep --profile IPA
and share /tmp/aaa.log?
I'm not sure why 'authz' is being ignored but it is certainly why IPA authentication isn't working as 'username@authz' is how IPA logins show up in oVirt when they do work. Any ideas where to look next? -- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
Looks like it can't find the IPA.properties file. I tried following the path it is complaining about but there are only files in /etc/ovirt-engine/extensions.d on the engine VM. No subdirectories. However, that directory appears to contain the files it is looking for. Both IPA-authn.properties and IPA.properties are there as are the internal properties files. Is there a config file we can edit to tell it to look in the right place? On Mon, Apr 23, 2018 at 2:13 PM, Kristian Petersen <nesretep@chem.byu.edu> wrote:
After running ovirt-engine-extensions-tool --log-level=FINEST --log-file=/tmp/aaa.log aaa login-user --user-name nesretep --profile IPA...
*Contents of /tmp/aaa.log:* 2018-04-23 14:10:58,771-06 FINE Version: ovirt-engine-4.2.1.7 () 2018-04-23 14:10:58,856-06 INFO =========================== ============================================= 2018-04-23 14:10:58,856-06 INFO ============================ Initialization ============================ 2018-04-23 14:10:58,857-06 INFO =========================== ============================================= 2018-04-23 14:10:58,858-06 FINE Loading extension file 'internal-authz.properties' 2018-04-23 14:10:58,882-06 INFO Loading extension 'internal-authz' 2018-04-23 14:10:58,884-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,886-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[ name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid= EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt. engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/internal-authz.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid= EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae -5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extk ey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE _NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[ 65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authz}} 2018-04-23 14:10:58,887-06 FINEST Invoke Input END 2018-04-23 14:10:58,891-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,892-06 FINEST {Extkey[name=AAA_AUTHZ_STATUS;type=class java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=0, Extkey[name=EXTENSIO N_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[ 0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:58,892-06 FINEST Invoke Output END 2018-04-23 14:10:58,893-06 INFO Extension 'internal-authz' loaded 2018-04-23 14:10:58,894-06 FINE Config BEGIN 2018-04-23 14:10:58,894-06 FINE ovirt.engine.extension.provides: org.ovirt.engine.api.extensions.aaa.Authz 2018-04-23 14:10:58,895-06 FINE ovirt.engine.extension.binding.jbossmodule.class: org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthzExtension 2018-04-23 14:10:58,896-06 FINE ovirt.engine.extension.bindings.method: jbossmodule 2018-04-23 14:10:58,897-06 FINE config.datasource.file: /etc/ovirt-engine/aaa/internal.properties 2018-04-23 14:10:58,897-06 FINE ovirt.engine.extension.name: internal-authz 2018-04-23 14:10:58,898-06 FINE ovirt.engine.extension.binding.jbossmodule.module: org.ovirt.engine.extension.aaa.jdbc 2018-04-23 14:10:58,898-06 FINE Config END 2018-04-23 14:10:58,899-06 FINE Loading extension file 'internal-authn.properties' 2018-04-23 14:10:58,900-06 INFO Loading extension 'internal-authn' 2018-04-23 14:10:58,900-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,901-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[ name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid= EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt. engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/internal-authn.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid= EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae -5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extk ey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE _NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[ 65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authn}} 2018-04-23 14:10:58,902-06 FINEST Invoke Input END 2018-04-23 14:10:58,903-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,903-06 FINEST {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0}
2018-04-23 14:10:58,904-06 FINEST Invoke Output END 2018-04-23 14:10:58,904-06 INFO Extension 'internal-authn' loaded 2018-04-23 14:10:58,905-06 FINE Config BEGIN 2018-04-23 14:10:58,905-06 FINE ovirt.engine.aaa.authn.profile.name: internal 2018-04-23 14:10:58,906-06 FINE ovirt.engine.extension.provides: org.ovirt.engine.api.extensions.aaa.Authn 2018-04-23 14:10:58,906-06 FINE ovirt.engine.extension.binding.jbossmodule.class: org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthnExtension 2018-04-23 14:10:58,907-06 FINE ovirt.engine.aaa.authn.authz.plugin: internal-authz 2018-04-23 14:10:58,907-06 FINE ovirt.engine.extension.bindings.method: jbossmodule 2018-04-23 14:10:58,907-06 FINE config.datasource.file: /etc/ovirt-engine/aaa/internal.properties 2018-04-23 14:10:58,908-06 FINE ovirt.engine.extension.name: internal-authn 2018-04-23 14:10:58,908-06 FINE ovirt.engine.extension.binding.jbossmodule.module: org.ovirt.engine.extension.aaa.jdbc 2018-04-23 14:10:58,909-06 FINE Config END 2018-04-23 14:10:58,909-06 FINE Loading extension file 'IPA.properties' 2018-04-23 14:10:58,915-06 INFO Loading extension 'IPA' 2018-04-23 14:10:58,916-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,917-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[ name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid= EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt. engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/IPA.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae- 5068a226b0 fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXT ENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type= class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[ 65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA}} 2018-04-23 14:10:58,917-06 FINEST Invoke Input END 2018-04-23 14:10:58,950-06 FINE Exception java.io.FileNotFoundException: /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at java.io.FileInputStream.open0(Native Method) at java.io.FileInputStream.open(FileInputStream.java:195) at java.io.FileInputStream.<init>(FileInputStream.java:138) at org.ovirt.engineextensions.aaa.ldap.Util. includeProperties(Util.java:165) at org.ovirt.engineextensions.aaa.ldap.Util.loadProperties(Util.java:210)
at org.ovirt.engineextensions.aaa.ldap.ExtensionUtil. frameworkCreate(ExtensionUtil.java:115) at org.ovirt.engineextensions.aaa.ldap.AuthzExtension. doLoad(AuthzExtension.java:518) at org.ovirt.engineextensions.aaa.ldap.AuthzExtension. invoke(AuthzExtension.java:472) at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:49)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:73)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy. invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230)
at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151)
at org.ovirt.engine.exttool.core.ExtensionsToolExecutor. loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main( ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525)
2018-04-23 14:10:58,951-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,952-06 FINEST {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26- b8bdb72f5893];]=/etc/ovi rt-engine/extensions.d/../aaa/IPA.properties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid= EXTENSION_INVOKE_RESULT[0909d91d-8b de-40fb-b6c0-099c772ddd4e];]=2} 2018-04-23 14:10:58,952-06 FINEST Invoke Output END 2018-04-23 14:10:58,953-06 SEVERE Extension 'IPA.properties' load failed (ignored): Error loading extension 'IPA': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such f ile or directory) 2018-04-23 14:10:58,953-06 FINE Exception: java.lang.RuntimeException: Error loading extension 'IPA': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:257)
at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151)
at org.ovirt.engine.exttool.core.ExtensionsToolExecutor. loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main( ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) Caused by: Class: class org.ovirt.engine.core.extensions.mgr. ExtensionInvokeCommandFailedException Input: {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api. extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823- 77b262a2f28d];]=EXTENSION_LOAD[b0f24 60e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[ 886d2ebb-312a-49ae-9cc3-e1f8 49834b7d];]={Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65- 054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_ CONTEXT ;type=class org.ovirt.engine.api.extensions.ExtMap;uuid= EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;type=class java.lang.St ring;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28- b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authz, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uui d=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org. ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name= EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURATION_ SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTE NSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8- 8239-4bdb-ab1a-af9f779ce68c];]=1.3.6, Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection; uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828- 0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSIO N_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid= EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778 bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/ext ensions.d/IPA.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4- f969-42d4-b399-72d192e18304];]=http://www.ovirt.org, Extkey[n ame=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid= EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;t ype=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class java.lang.Intege r;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=50, Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFAC E_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid= EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-86743 27f011b];]=IPA, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_ VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey [name=EXTENSION_NOTES;type=class java.lang.String;uuid= EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display name: ovirt-engine-extension-aaa-ldap-1.3.6-1.el7.centos}} Output: {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid= EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26- b8bdb72f5893];]=/etc/ovirt-engine/extensions.d/../aaa/IPA.p roperties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2}
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:95)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy. invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230)
... 5 more
2018-04-23 14:10:58,956-06 FINE Loading extension file 'IPA-authn.properties' 2018-04-23 14:10:58,957-06 INFO Loading extension 'IPA-authn' 2018-04-23 14:10:58,957-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,958-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_LOAD[b0f2460e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_INVOKE_C ONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[ name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6- 4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]= org.slf4j.impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collec tion;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid= EXTENSION_PROV IDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt. engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0 ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/IPA-authn.properties, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid= EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068 a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[na me=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME ;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[ 65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA-authn}} 2018-04-23 14:10:58,958-06 FINEST Invoke Input END 2018-04-23 14:10:58,959-06 FINE Exception java.io.FileNotFoundException: /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at java.io.FileInputStream.open0(Native Method) at java.io.FileInputStream.open(FileInputStream.java:195) at java.io.FileInputStream.<init>(FileInputStream.java:138) at org.ovirt.engineextensions.aaa.ldap.Util. includeProperties(Util.java:165) at org.ovirt.engineextensions.aaa.ldap.Util.loadProperties(Util.java:210)
at org.ovirt.engineextensions.aaa.ldap.ExtensionUtil. frameworkCreate(ExtensionUtil.java:115) at org.ovirt.engineextensions.aaa.ldap.AuthnExtension. doLoad(AuthnExtension.java:117) at org.ovirt.engineextensions.aaa.ldap.AuthnExtension.invoke(AuthnExtension.java:66)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:49)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:73)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy. invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230)
at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151)
at org.ovirt.engine.exttool.core.ExtensionsToolExecutor. loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main( ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525)
2018-04-23 14:10:58,959-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:58,960-06 FINEST {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26- b8bdb72f5893];]=/etc/ovi rt-engine/extensions.d/../aaa/IPA.properties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid= EXTENSION_INVOKE_RESULT[0909d91d-8b de-40fb-b6c0-099c772ddd4e];]=2} 2018-04-23 14:10:58,960-06 FINEST Invoke Output END 2018-04-23 14:10:58,960-06 SEVERE Extension 'IPA-authn.properties' load failed (ignored): Error loading extension 'IPA-authn': /etc/ovirt-engine/extensions.d/../aaa/IPA.propertie s (No such file or directory) 2018-04-23 14:10:58,961-06 FINE Exception: java.lang.RuntimeException: Error loading extension 'IPA-authn': /etc/ovirt-engine/extensions.d/../aaa/IPA.properties (No such file or directory) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:257)
at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.load(ExtensionsManager.java:151)
at org.ovirt.engine.exttool.core.ExtensionsToolExecutor. loadExtensions(ExtensionsToolExecutor.java:214) at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main( ExtensionsToolExecutor.java:116) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525) Caused by: Class: class org.ovirt.engine.core.extensions.mgr. ExtensionInvokeCommandFailedException Input: {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api. extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823- 77b262a2f28d];]=EXTENSION_LOAD[b0f24 60e-7971-4a9c-b4e1-c1db1362a47a], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[ 886d2ebb-312a-49ae-9cc3-e1f8 49834b7d];]={Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65- 054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_ CONTEXT ;type=class org.ovirt.engine.api.extensions.ExtMap;uuid= EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;type=class java.lang.St ring;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28- b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authn, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface org.slf4j.Logger;uui d=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695- 918a3197ad83];]=org.slf4j.impl.JDK14LoggerAdapter(org. ovirt.engine.core.extensions.mgr.ExtensionsManager.trace), Extkey[name= EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURATION_ SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTE NSION_VERSION;type=class java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8- 8239-4bdb-ab1a-af9f779ce68c];]=1.3.6, Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection; uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828- 0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authn], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSIO N_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;type=class java.lang.String;uuid= EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778 bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[ 4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/ext ensions.d/IPA-authn.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4- f969-42d4-b399-72d192e18304];]=http://www.ovirt.org, Ex tkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid= EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION _MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXTENSION_ INTERFACE_VERSION_MIN;type=class java.lang. Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid= EXTENSION_INSTANCE_NAM E[65c67ff6-aeca-4bd5-a245-8674327f011b];]=IPA-authn, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b2 3-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=AAA_AUTHN_CAPABILITIES;type=class java.lang.Long;uuid=AAA_AUTHN_CAPABILITIES[9d16bee3-10fd-46f2-83f9-3d3c54cf258d];]=12, Extkey[name=EXT ENSION_NOTES;type=class java.lang.String;uuid= EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display name: ovirt-engine-extension-aaa-ldap-1.3.6-1.el7.centos}} Output: {Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid= EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26- b8bdb72f5893];]=/etc/ovirt-engine/extensions.d/../aaa/IPA.p roperties (No such file or directory), Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2}
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:95)
at org.ovirt.engine.core.extensions.mgr.ExtensionProxy. invoke(ExtensionProxy.java:109) at org.ovirt.engine.core.extensions.mgr.ExtensionsManager.loadImpl(ExtensionsManager.java:230)
... 5 more
2018-04-23 14:10:58,962-06 INFO Initializing extension 'internal-authz' 2018-04-23 14:10:58,963-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:58,964-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_INITIALIZE[e5ae1b7f-9104-4f23-a444-7b9175ff68d2], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_IN VOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={ Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-9 55f-486a-bd35-0a272b45a711];]=[*], Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65- 054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EX TENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[name=EXTENSION_NAME;t ype=class java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f- 4547-bf28-b0b01a103184];]="ovirt-engine-extension-aaa-jdbc".authz, Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interf ace org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[ 863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j. impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions. mgr.ExtensionsMana ger.trace."ovirt-engine-extension-aaa-jdbc".authz.internal-authz), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=EXTENSION_CONFIGURAT ION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_VERSION;type=class java.lang.String;uuid= EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68 c];]="1.1.6", Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6- 65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.a aa.Authz], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid= EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name=EXTENSION_LOCALE;t ype=class java.lang.String;uuid=EXTENSION_LOCALE[0780b112- 0ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.String;uuid=EXTENSION _CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];] =/etc/ovirt-engine/extensions.d/internal-authz.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uu id=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]=http://www. ovirt.org, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXTENSION_CONFIGURATIO N[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_ INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee 9-df362446e3e7];]=0, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[ 2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100, Ext key[name=EXTENSION_INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_ MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANC E_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[ 65c67ff6-aeca-4bd5-a245-8674327f011b];]=internal-authz, Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class java.lang.Lon g;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1, Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_ VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=EXTENSION_NOTES;type=class java.lang.String;uuid= EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display nam e: "ovirt-engine-extension-aaa-jdbc"}} 2018-04-23 14:10:58,964-06 FINEST Invoke Input END 2018-04-23 14:10:59,013-06 FINEST cursor for: SELECT COUNT(script) AS count FROM schema_version WHERE script = $bSOnl$upgrade/01_00_0050_ enable_change_password_capability.sql$bSO nl$ 2018-04-23 14:10:59,024-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:59,024-06 FINEST {Extkey[name=AAA_AUTHZ_STATUS;type=class java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=0, Extkey[name=EXTENSIO N_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[ 0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0} 2018-04-23 14:10:59,024-06 FINEST Invoke Output END 2018-04-23 14:10:59,025-06 INFO Extension 'internal-authz' initialized 2018-04-23 14:10:59,025-06 FINE Extension 'internal-authz' initialized 2018-04-23 14:10:59,025-06 INFO Initializing extension 'internal-authn' 2018-04-23 14:10:59,026-06 FINEST Invoke Input BEGIN 2018-04-23 14:10:59,027-06 FINEST {Extkey[name=EXTENSION_INVOKE_COMMAND;type=class org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[ 485778ab-bede-4f1a-b823-7 7b262a2f28d];]=EXTENSION_INITIALIZE[e5ae1b7f-9104-4f23-a444-7b9175ff68d2], Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_IN VOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={ Extkey[name=EXTENSION_LICENSE;type=class java.lang.String;uuid= EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL 2.0, Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class org.ovirt.engine.api. extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, Extkey[na me=EXTENSION_NAME;type=class java.lang.String;uuid= EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=" ovirt-engine-extension-aaa-jdbc".authn, Extkey[name=EXTENSION_MANAGER_TR ACE_LOG;type=interface org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[ 863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j. impl.JDK14LoggerAdapter(org.ovirt.engine.core.extensions .mgr.ExtensionsManager.trace."ovirt-engine-extension-aaa-jdbc".authn.internal-authn), Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface java.util.Collection;uuid=E XTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], Extkey[name=EXTENSION_VERSION;type=class java.lang.String;uuid= EXTENSION_VERSION[fe35f6a8-8239-4b db-ab1a-af9f779ce68c];]="1.1.6", Extkey[name=EXTENSION_PROVIDES;type=interface java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6- 65b5-4594-b828-0e275087de91];]=[org.ovirt.engi ne.api.extensions.aaa.Authn], Extkey[name=EXTENSION_AUTHOR;type=class java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a- 2dad-4bc5-9aad-e07018b7fbcc];]=The oVirt Project, Extkey[name =EXTENSION_LOCALE;type=class java.lang.String;uuid= EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class java.lang.St ring;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3- 983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/extensions.d/internal-authn.properties, Extkey[name=EXTENSION_HOME_URL;type=class java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4- f969-42d4-b399-72d192e18304];]=http://www.ovirt.org, Extkey[name=EXTENSION_CONFIGURATION;type=class java.util.Properties;uuid=EXT ENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4c ff49f-2717-4901-8ee9-df362446e3e7];]=0, Extkey[name=EXTENSION_ INTERFACE_VERSION_MIN;type=class java.lang.Integer;uuid= EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b 9d2ce0b];]=0, Extkey[name=EXTENSION_INSTANCE_NAME;type=class java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245- 8674327f011b];]=internal-authn, Extkey[name=EXTE NSION_BUILD_INTERFACE_VERSION;type=class java.lang.Integer;uuid= EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, Extkey[name=AAA_AUTHN_CAPABILITIES;typ e=class java.lang.Long;uuid=AAA_AUTHN_CAPABILITIES[9d16bee3-10fd-46f2-83f9-3d3c54cf258d];]=44, Extkey[name=EXTENSION_NOTES;type=class java.lang.String;uuid= EXTENSION_NOTES[2da5ad7 e-185a-4584-aaff-97f66978e4ea];]=Display name: "ovirt-engine-extension-aaa-jdbc"}} 2018-04-23 14:10:59,027-06 FINEST Invoke Input END 2018-04-23 14:10:59,033-06 FINEST cursor for: SELECT COUNT(script) AS count FROM schema_version WHERE script = $gTCNO$upgrade/01_00_0050_ enable_change_password_capability.sql$gTC NO$ 2018-04-23 14:10:59,035-06 FINEST Invoke Output BEGIN 2018-04-23 14:10:59,036-06 FINEST {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=0}
2018-04-23 14:10:59,036-06 FINEST Invoke Output END 2018-04-23 14:10:59,036-06 INFO Extension 'internal-authn' initialized 2018-04-23 14:10:59,037-06 FINE Extension 'internal-authn' initialized 2018-04-23 14:10:59,037-06 INFO Start of enabled extensions list 2018-04-23 14:10:59,037-06 INFO Instance name: 'internal-authn', Extension name: '"ovirt-engine-extension-aaa-jdbc".authn', Version: '"1.1.6"', Notes: 'Display name: "ovirt-eng ine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/intern al-authn.properties', Initialized: 'true' 2018-04-23 14:10:59,038-06 INFO Instance name: 'internal-authz', Extension name: '"ovirt-engine-extension-aaa-jdbc".authz', Version: '"1.1.6"', Notes: 'Display name: "ovirt-eng ine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/intern al-authz.properties', Initialized: 'true' 2018-04-23 14:10:59,038-06 INFO End of enabled extensions list 2018-04-23 14:10:59,038-06 INFO =========================== ============================================= 2018-04-23 14:10:59,038-06 INFO ============================== Execution =============================== 2018-04-23 14:10:59,038-06 INFO =========================== ============================================= 2018-04-23 14:10:59,039-06 INFO Iteration: 0 2018-04-23 14:10:59,039-06 SEVERE Profile 'IPA' not found 2018-04-23 14:10:59,040-06 FINE Exception: java.lang.IllegalArgumentException: Profile 'IPA' not found at org.ovirt.engine.exttool.aaa.AAAServiceImpl. getExtensionByProfile(AAAServiceImpl.java:549) at org.ovirt.engine.exttool.aaa.AAAServiceImpl.access$1200(AAAServiceImpl.java:37)
at org.ovirt.engine.exttool.aaa.AAAServiceImpl$AAAProfile.<init>(AAAServiceImpl.java:838)
at org.ovirt.engine.exttool.aaa.AAAServiceImpl$Action.lambda$ static$3(AAAServiceImpl.java:154) at org.ovirt.engine.exttool.aaa.AAAServiceImpl$Action.execute(AAAServiceImpl.java:417)
at org.ovirt.engine.exttool.aaa.AAAServiceImpl.run(AAAServiceImpl.java:686)
at org.ovirt.engine.exttool.core.ExtensionsToolExecutor.main( ExtensionsToolExecutor.java:120) at org.jboss.modules.Module.run(Module.java:344) at org.jboss.modules.Main.main(Main.java:525)
2018-04-23 14:10:59,040-06 FINE Exiting with status '1'
On Mon, Apr 23, 2018 at 1:02 PM, Ondra Machacek <omachace@redhat.com> wrote:
On 04/23/2018 04:30 PM, Kristian Petersen wrote:
Hey everyone,
I had FreeIPA authentication set up on my oVirt instance and it was working great. Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine. Once I got it back up and running again, my FreeIPA authentication was sill a choice for authentication, but it always rejects my password even though it is correct. I have tried running the setup again to no avail. Nothing shows up in the httpd error log when the login fails. The engine.log from ovirt-engine in /var/log shows the following upon attempting to authenticate with a user from freeIPA:
2018-04-23 08:08:24,384-06 WARN [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-34) [] Ignoring records from pool: 'authz' 2018-04-23 08:08:24,384-06 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-34) [] Cannot authenticate user 'nesretep@IPA' connecting from 'UNKNOWN': The username or password is incorrect.
Can you try to run this command:
$ ovirt-engine-extensions-tool --log-level=FINEST --log-file=/tmp/aaa.log aaa login-user --user-name nesretep --profile IPA
and share /tmp/aaa.log?
I'm not sure why 'authz' is being ignored but it is certainly why IPA authentication isn't working as 'username@authz' is how IPA logins show up in oVirt when they do work. Any ideas where to look next? -- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
-- Kristian Petersen System Administrator BYU Dept. of Chemistry and Biochemistry
Right, you are missing file /etc/ovirt-engine/aaa/IPA.properties It's not subdirectory of /etc/ovirt-engine/extensions.d, but it's in /etc/ovirt-engine/ in 'aaa' subdirectory, can you check what's there? Please check also the correct permissions of that file, it should be '600' and owned by ovirt user. On 04/23/2018 10:25 PM, Kristian Petersen wrote:
Looks like it can't find the IPA.properties file. I tried following the path it is complaining about but there are only files in /etc/ovirt-engine/extensions.d on the engine VM. No subdirectories. However, that directory appears to contain the files it is looking for. Both IPA-authn.properties and IPA.properties are there as are the internal properties files. Is there a config file we can edit to tell it to look in the right place?
participants (2)
-
Kristian Petersen -
Ondra Machacek