[Users] Joss fails to start ... Keystore was tampered.

[Doron Fediuck]

Please explain "from source"-
- Did you run maven using dep and started JBoss?
or
- Did you create RPM's and used yum install?

On 23/04/12 22:28, Sharad Mishra wrote:
> 
> Quoting Doron Fediuck <dfediuck at redhat.com>:
> 
>> Thanks.
>> Unfortunately the keystore is the most important file in the PKI
>> area. Please try to recall your actions, and try to look for the
>> keystore in case you moved / change folders or anything alike.
>>
>> Currently, the only valid solution for a lost keystore is re-installation.
> 
> I reinstalled ovirt-engine from source on a fresh rhel6.2 machine. I still do not see .keystore in /etc/pki/ovirt-engine. Now I get FileNotFoundException but engine is running.
> 
> 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-15) Failed to decryptjava.io.FileNotFoundException: .keystore (No such file or directory)
> 2012-04-23 11:21:14,900 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-15) Failed to decrypt value for property AdminPassword will be used encrypted value
> 2012-04-23 11:21:14,902 INFO  [org.ovirt.engine.core.bll.Backend] (MSC service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM
> 
> -Sharad Mishra
> 
>>
>> On 19/04/12 22:40, snmishra at linux.vnet.ibm.com wrote:
>>>
>>> Quoting Doron Fediuck <dfediuck at redhat.com>:
>>>
>>>> Please check again using ls -la on that folder.
>>>
>>> Yes, I did run "ls -la" :-)
>>>
>>> -Sharad Mishra
>>>
>>>>
>>>> Sent from my Android phone. Please ignore typos.
>>>>
>>>> -----Original Message-----
>>>> From: snmishra at linux.vnet.ibm.com
>>>> Received: Thursday, 19 Apr 2012, 20:38
>>>> To: Ofer Schreiber [oschreib at redhat.com]
>>>> CC: users at ovirt.org
>>>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered.
>>>>
>>>>
>>>> Quoting Ofer Schreiber <oschreib at redhat.com>:
>>>>
>>>>> I'm trying to understand few things:
>>>>> 1. Did you used RPM for deployment?
>>>>
>>>> No, it was from source. (git clone)
>>>>
>>>>> 2. Was it an UPGRADE for the engine?
>>>>
>>>> yes, I updated the source which was about a month old.
>>>>
>>>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it
>>>>> changed recently?
>>>>
>>>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files
>>>> in this directory were modified on 4/17 (certs, keys, private,
>>>> requests). I was playing with kerberos for ldap on 17th so it is
>>>> possible that I did something that messed up the server, and it was
>>>> just coincidental that I upgraded the source next day and ran into
>>>> this issue.
>>>>
>>>> Any help on how I can get out of it?
>>>>
>>>> -Sharad Mishra
>>>>>
>>>>> Ofer.
>>>>>
>>>>> ----- Original Message -----
>>>>>>
>>>>>> I had jboss running on my rhel6.2 machine. This morning I fetched
>>>>>> latest engine source, built and deployed it. I did not see any
>>>>>> errors.
>>>>>> But now when I start jboss-as service I see following errors in
>>>>>> engine.log -
>>>>>>
>>>>>> 2012-04-18 13:57:48,051 INFO  [org.ovirt.engine.core.bll.Backend]
>>>>>> (MSC
>>>>>> service thread 1-5) Start time: 4/18/12 1:57 PM
>>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>> was
>>>>>> tampered with, or password was incorrect
>>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>>> service thread 1-5) Failed to decrypt value for property
>>>>>> LocalAdminPassword will be used encrypted value
>>>>>> 2012-04-18 13:57:48,209 WARN
>>>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread
>>>>>> 1-5)
>>>>>> Could not find enum value for option: NetConsolePort
>>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>> was
>>>>>> tampered with, or password was incorrect
>>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>>> service thread 1-5) Failed to decrypt value for property
>>>>>> CertificatePassword will be used encrypted value
>>>>>> 2012-04-18 13:57:48,214 ERROR
>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>> was
>>>>>> tampered with, or password was incorrect
>>>>>>
>>>>>> Regards,
>>>>>> Sharad Mishra
>>>>>> IBM
>>>>>>
>>>>>> _______________________________________________
>>>>>> Users mailing list
>>>>>> Users at ovirt.org
>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>>
>>>> Sent from my Android phone. Please ignore typos.
>>>
>>>
>>>
> 
> 
>