Hi, Does the admin@internal user have all the permissions? Cause it seems like you are able to login with it, but then it fails somehow. Eventually you could try to add an additional user (in keycloak), and then use user@internalsso in veeam (after you granted it all the permissions). This should work fine. Jean-Louis On 3/06/2025 23:27, victordanco@hotmail.com wrote:

Good morning dear community. We are experiencing a problem when taking a backup through Veeam backup. I share the logs:

Engine.log 2025-06-03 16:09:52,158-05 ERROR [org.ovirt.engine.core.sso.service.SsoService] (default task-2019) [53762455] OAuthException invalid_grant: The provided authorization grant for the auth code has expired. 2025-06-03 16:09:52,160-05 ERROR [org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default task-2006) [] Cannot authenticate using authentication Headers: invalid_grant: The provided authorization grant for the auth code has expired. 2025-06-03 16:09:52,429-05 INFO [org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006) [] User admin@internal-authz with profile [internal] successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2025-06-03 16:09:52,518-05 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006) [60f224da] Running command: CreateUserSessionCommand internal: false. 2025-06-03 16:09:52,530-05 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-2006) [60f224da] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from '192.168.170.52' using session 'dYQlOCMThsTOInKjX8GKWUpAk/SFspOh5vuX0efK1slxzWloBoK9jGqt7TwOapfxUR1kzGg0ctoofUC7/pjeVg==' logged in. 2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper] (default task-2006) [] Can't find relative path for class "org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will return null 2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper] (default task-2006) [] Can't find relative path for class "org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will return null 2025-06-03 16:10:05,258-05 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) [] User admin@internal-authz with profile [internal] successfully logged out 2025-06-03 16:10:05,267-05 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-2019) [78785b84] Running command: TerminateSessionsForTokenCommand internal: true. 2025-06-03 16:10:05,305-05 INFO [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) [] User admin@internal-authz with profile [internal] successfully logged out 2025-06-03 16:10:05,310-05 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-2019) [4a6cfc6] Running command: TerminateSessionsForTokenCommand internal: true. 2025-06-03 16:10:28,401-05 INFO [org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006) [] User admin@internal-authz with profile [internal] successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2025-06-03 16:10:28,453-05 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006) [152dcb43] Running command: CreateUserSessionCommand internal: false. 2025-06-03 16:10:28,466-05 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-2006) [152dcb43] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz connecting from '192.168.170.52' using session '1WDL5jCeJNVnQCOSAJu8hd+M1IJJp5AChx3SQnpNjG+v2cZHNRYBsrQpmfhNAuB5KAHUun7HKUxbRQcs5OCalQ==' logged in. 2025-06-03 16:10:50,031-05 WARN [org.ovirt.engine.core.utils.virtiowin.VirtioWinReader] (EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-19) [6b0bdae7] Directory '/usr/share/virtio-win' doesn't exist.

--------- Veeam Proxy: 2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: <== Request "Get" "https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk", body: "{}" 2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: ==> Response "Get" "https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk", "code: 401", duration: "163 msec", body: "[binary data]"

Note that the user I use is admin@internal. I have read other forums that it is recommended to use admin@ovirt@internalsso or others, but veeam does not allow me to use admin@ovirt@internalsso.

I appreciate your help or recommendations. Regards! _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/5UDYFIGVQZN6FD...