[ovirt-devel] Login issue on master

[Martin Perina]

----- Original Message -----
> From: "Omer Frenkel" <ofrenkel at redhat.com>
> To: "Martin Perina" <mperina at redhat.com>
> Cc: "Vered Volansky" <vered at redhat.com>, "Oved Ourfali" <ovedo at redhat.com>, devel at ovirt.org
> Sent: Wednesday, August 12, 2015 11:25:37 AM
> Subject: Re: [ovirt-devel] Login issue on master
> 
> On Wed, Aug 12, 2015 at 9:35 AM, Martin Perina <mperina at redhat.com> wrote:
> 
> >
> >
> > ----- Original Message -----
> > > From: "Omer Frenkel" <ofrenkel at redhat.com>
> > > To: "Martin Perina" <mperina at redhat.com>
> > > Cc: "Vered Volansky" <vered at redhat.com>, "Oved Ourfali" <
> > ovedo at redhat.com>, devel at ovirt.org
> > > Sent: Wednesday, August 12, 2015 8:28:00 AM
> > > Subject: Re: [ovirt-devel] Login issue on master
> > >
> > > On Wed, Aug 12, 2015 at 8:54 AM, Martin Perina <mperina at redhat.com>
> > wrote:
> > >
> > > >
> > > >
> > > > ----- Original Message -----
> > > > > From: "Oved Ourfali" <ovedo at redhat.com>
> > > > > To: "Vered Volansky" <vered at redhat.com>
> > > > > Cc: devel at ovirt.org
> > > > > Sent: Wednesday, August 12, 2015 7:51:14 AM
> > > > > Subject: Re: [ovirt-devel] Login issue on master
> > > > >
> > > > > Please share complete engine.log and server.log.
> > > >
> > > > Log produced by engine-setup is more important at the moment.
> > > > Are you sure that engine-setup finished successfully?
> > > >
> > > > >
> > > > > ----- Original Message -----
> > > > > > From: "Vered Volansky" <vered at redhat.com>
> > > > > > To: devel at ovirt.org
> > > > > > Sent: Wednesday, August 12, 2015 8:48:00 AM
> > > > > > Subject: Re: [ovirt-devel] Login issue on master
> > > > > >
> > > > > > engine:
> > > > > > 2015-08-12 08:12:41,129 INFO
> > > > > > [org.ovirt.engine.core.bll.aaa.LoginBaseCommand]
> > > > > > (default task-28) [] Can't login user 'admin' with authentication
> > > > profile
> > > > > > 'internal' because the authentication failed.
> > > > > > 2015-08-12 08:12:41,146 ERROR
> > > > > >
> > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> > > > > > (default task-28) [] Correlation ID: null, Call Stack: null, Custom
> > > > Event
> > > > > > ID: -1, Message: User admin cannot login, please verify the
> > username
> > > > and
> > > > > > password.
> > > > > > 2015-08-12 08:12:41,154 ERROR
> > > > > >
> > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> > > > > > (default task-28) [] Correlation ID: null, Call Stack: null, Custom
> > > > Event
> > > > > > ID: -1, Message: User admin at internal failed to log in.
> > > > > > 2015-08-12 08:12:41,154 WARN
> > > > > > [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (default
> > > > task-28) []
> > > > > > CanDoAction of action 'LoginAdminUser' failed for user
> > admin at internal.
> > > > > > Reasons: USER_FAILED_TO_AUTHENTICATE_WRONG_USERNAME_OR_PASSWORD
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > On Wed, Aug 12, 2015 at 8:41 AM, Vered Volansky < vered at redhat.com
> > >
> > > > wrote:
> > > > > >
> > > > > >
> > > > > >
> > > > > > Can't login to engine after rebase and schema-dev execution.
> > > > > > Can't investigate more at the moment, just a heads up.
> > > > > >
> > > > > >
> > > > > > _______________________________________________
> > > > > > Devel mailing list
> > > > > > Devel at ovirt.org
> > > > > > http://lists.ovirt.org/mailman/listinfo/devel
> > > > > _______________________________________________
> > > > > Devel mailing list
> > > > > Devel at ovirt.org
> > > > > http://lists.ovirt.org/mailman/listinfo/devel
> > > > >
> > > > _______________________________________________
> > > > Devel mailing list
> > > > Devel at ovirt.org
> > > > http://lists.ovirt.org/mailman/listinfo/devel
> > > >
> > >
> > > ​any chance you deleted your prefix?
> > > if so, the setup creates new keys and cannot decrypt the saved password
> > > (that was encryped using the old keys), try to use
> > > engine-config --set AdminPassword=interactive
> >
> > This is no longer valid, admin password is not stored in vdc_options
> > anymore.
> >
> 
> ​was this communicated anywhere? i missed that.. thanks for the update​

I'm going to send email about it, the aaa internal/jdbc changes
were merged yesterday ...

> 
> 
> 
> > If you want to change you admin at internal password, please do following:
> >
> > 1. Run ovirt-engine-crypto-tool to encode new password:
> >
> >   ${PREFIX}/share/ovirt-engine/bin/ovirt-engine-crypto-tool.sh pbe-encode
> > --password=interactive:
> >
> > 2. Save encoding password into
> > ${PREFIX}/etc/ovirt-engine/extension.d/internal-authn.properties
> >    into field config.authn.user.password
> >
> > 3. Restart the engine
> >
> >
> >
> > >
> > > ​to create new password, restart the engine and try..​
> > >
> >
>