Unable to change the admin passsword on oVirt 4.5.2.5

Hi All, Any idea hot to change password of admin user on oVirt 4.5.2.5 ? Below is not working - [root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Password: Reenter password: updating user admin... user updated successfully [root@delhi-test-ovirtm-02 ~]# Above shows successful but password not changed. Thanks

Hi, the answer depends if you selected Keycloak integration during engine-setup or not. If you are not sure, you can check using following: 1. What is your username when connecting to webadmin? - If it's "admin@ovirt", the you are using Keycloak integration - If it's "admin" and profile "internal" then you are using AAA. 2. Please take a look at the file /etc/ovirt-engine/engine.conf.d/12-setup-keycloak: - If the file exists and it contains "KEYCLOAK_BUNDLED=true", then you are using Keycloak integration - If the file doesn't exists or it contains "KEYCLOAK_BUNDLED=false", then you are using AAA. If you selected Keycloak inetgration, the you need to login to Keycloak administration console and change admin@ovirt password there. More information can be found at https://www.keycloak.org/archive/documentation-15.0.html If you selected AAA, then the steps you posted below are correct. Unfortunately we don't have yet proper documentation about Keycloak integration, which was introduced in oVirt 4.5.1. Regards, Martin On Fri, Sep 16, 2022 at 3:42 PM Ayansh Rocks <shashank123rastogi@gmail.com> wrote:
Hi All,
Any idea hot to change password of admin user on oVirt 4.5.2.5 ?
Below is not working -
[root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Password: Reenter password: updating user admin... user updated successfully [root@delhi-test-ovirtm-02 ~]#
Above shows successful but password not changed.
Thanks _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/YYEHEQU3HIHAJS...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

I am using Keycloak integration but unable to find the way to change the password. Can I switch to "AAA" anyhow ? On Mon, Sep 19, 2022 at 2:15 PM Martin Perina <mperina@redhat.com> wrote:
Hi,
the answer depends if you selected Keycloak integration during engine-setup or not. If you are not sure, you can check using following:
1. What is your username when connecting to webadmin? - If it's "admin@ovirt", the you are using Keycloak integration - If it's "admin" and profile "internal" then you are using AAA.
2. Please take a look at the file /etc/ovirt-engine/engine.conf.d/12-setup-keycloak: - If the file exists and it contains "KEYCLOAK_BUNDLED=true", then you are using Keycloak integration - If the file doesn't exists or it contains "KEYCLOAK_BUNDLED=false", then you are using AAA.
If you selected Keycloak inetgration, the you need to login to Keycloak administration console and change admin@ovirt password there. More information can be found at https://www.keycloak.org/archive/documentation-15.0.html
If you selected AAA, then the steps you posted below are correct.
Unfortunately we don't have yet proper documentation about Keycloak integration, which was introduced in oVirt 4.5.1.
Regards, Martin
On Fri, Sep 16, 2022 at 3:42 PM Ayansh Rocks <shashank123rastogi@gmail.com> wrote:
Hi All,
Any idea hot to change password of admin user on oVirt 4.5.2.5 ?
Below is not working -
[root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Password: Reenter password: updating user admin... user updated successfully [root@delhi-test-ovirtm-02 ~]#
Above shows successful but password not changed.
Thanks _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/YYEHEQU3HIHAJS...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

Any straightaway command to change the admin user password when using keycloak integration ? On Thu, Sep 22, 2022 at 4:08 PM Ayansh Rocks <shashank123rastogi@gmail.com> wrote:
I am using Keycloak integration but unable to find the way to change the password. Can I switch to "AAA" anyhow ?
On Mon, Sep 19, 2022 at 2:15 PM Martin Perina <mperina@redhat.com> wrote:
Hi,
the answer depends if you selected Keycloak integration during engine-setup or not. If you are not sure, you can check using following:
1. What is your username when connecting to webadmin? - If it's "admin@ovirt", the you are using Keycloak integration - If it's "admin" and profile "internal" then you are using AAA.
2. Please take a look at the file /etc/ovirt-engine/engine.conf.d/12-setup-keycloak: - If the file exists and it contains "KEYCLOAK_BUNDLED=true", then you are using Keycloak integration - If the file doesn't exists or it contains "KEYCLOAK_BUNDLED=false", then you are using AAA.
If you selected Keycloak inetgration, the you need to login to Keycloak administration console and change admin@ovirt password there. More information can be found at https://www.keycloak.org/archive/documentation-15.0.html
If you selected AAA, then the steps you posted below are correct.
Unfortunately we don't have yet proper documentation about Keycloak integration, which was introduced in oVirt 4.5.1.
Regards, Martin
On Fri, Sep 16, 2022 at 3:42 PM Ayansh Rocks < shashank123rastogi@gmail.com> wrote:
Hi All,
Any idea hot to change password of admin user on oVirt 4.5.2.5 ?
Below is not working -
[root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Password: Reenter password: updating user admin... user updated successfully [root@delhi-test-ovirtm-02 ~]#
Above shows successful but password not changed.
Thanks _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/YYEHEQU3HIHAJS...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.

Hi, For new environment I would recommend to clean it and start from scratch. During engine-setup just provide 'No' to keycloak related questions . In case you already have a working setup, then please take a look into this thread [1]. It's a bit old but the procedure worked that time. [1] https://lists.ovirt.org/archives/list/users@ovirt.org/thread/6HNKNAXW2ACO5VA... Artur pt., 23 wrz 2022 o 11:07 Ayansh Rocks <shashank123rastogi@gmail.com> napisał(a):
Any straightaway command to change the admin user password when using keycloak integration ?
On Thu, Sep 22, 2022 at 4:08 PM Ayansh Rocks <shashank123rastogi@gmail.com> wrote:
I am using Keycloak integration but unable to find the way to change the password. Can I switch to "AAA" anyhow ?
On Mon, Sep 19, 2022 at 2:15 PM Martin Perina <mperina@redhat.com> wrote:
Hi,
the answer depends if you selected Keycloak integration during engine-setup or not. If you are not sure, you can check using following:
1. What is your username when connecting to webadmin? - If it's "admin@ovirt", the you are using Keycloak integration - If it's "admin" and profile "internal" then you are using AAA.
2. Please take a look at the file /etc/ovirt-engine/engine.conf.d/12-setup-keycloak: - If the file exists and it contains "KEYCLOAK_BUNDLED=true", then you are using Keycloak integration - If the file doesn't exists or it contains "KEYCLOAK_BUNDLED=false", then you are using AAA.
If you selected Keycloak inetgration, the you need to login to Keycloak administration console and change admin@ovirt password there. More information can be found at https://www.keycloak.org/archive/documentation-15.0.html
If you selected AAA, then the steps you posted below are correct.
Unfortunately we don't have yet proper documentation about Keycloak integration, which was introduced in oVirt 4.5.1.
Regards, Martin
On Fri, Sep 16, 2022 at 3:42 PM Ayansh Rocks <shashank123rastogi@gmail.com> wrote:
Hi All,
Any idea hot to change password of admin user on oVirt 4.5.2.5 ?
Below is not working -
[root@ovirt]# ovirt-aaa-jdbc-tool user password-reset admin Picked up JAVA_TOOL_OPTIONS: -Dcom.redhat.fips=false Password: Reenter password: updating user admin... user updated successfully [root@delhi-test-ovirtm-02 ~]#
Above shows successful but password not changed.
Thanks _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/YYEHEQU3HIHAJS...
-- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o.
_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/M4XFWCJXP3UY4H...

If you selected Keycloak inetgration, the you need to login to Keycloak administration console and change admin@ovirt password there. More information can be found at https://www.keycloak.org/archive/documentation-15.0.html
Freshly installed 4.5.4. I can't log into the Keycloak Administrator Console using admin@ovirt account that works perfectly fine to log me into the oVirt Administrator Portal. The /var/log/ovirt-engine/keycloak.log says: 2023-05-04 19:31:50,148+03 WARN [org.keycloak.events] (default task-48) [] type=LOGIN_ERROR, realmId=master, clientId=security-admin-console, userId=null, ipAddress=9x.7x.1x.1x, error=user_not_found, auth_method=openid-connect, auth_type=code, redirect_uri=https://$OVIRT_ENGINE_FQDN/ovirt-engine-auth/admin/master/console/, code_id=5d9176b7-96c8- 4903-a552-349a8cd20876, username=admin@ovirt, authSessionParentId=5d9176b7-96c8-4903-a552-349a8cd20876, authSessionTabId=BI3_6g5_x58 Any idea why I may be getting the user_not_found error?

Keycloak Administrator Console using admin@ovirt account I think there you must login with "admin" only... Consider the keycloak to a different subsystem (which is) compared to
2023. 05. 04. 19:02 keltezéssel, ivan.lezhnjov.iv@gmail.com írta: the oVirt management UI, so it has different auth scheme (but the same password, if you not gave different during the engine-setup) Regards: Peter -- *Erdősi Péter * /Informatikus, IKT Fejlesztési Főosztály / *Kormányzati Informatikai Fejlesztési Ügynökség * cím: 1134 Budapest, Váci út 35. tel: +36 1 450 3080 e-mail: erdosi.peter@kifu.gov.hu <mailto:erdosi.peter@kifu.gov.hu> KIFÜ - www.kifu.gov.hu <http://kifu.gov.hu/kifu/>

You're correct, sir. It's just "admin".
participants (5)
-
Artur Socha
-
Ayansh Rocks
-
Erdősi Péter
-
ivan.lezhnjov.iv@gmail.com
-
Martin Perina