[Users] Joss fails to start ... Keystore was tampered.

[Sharad Mishra]

Quoting Doron Fediuck <dfediuck at redhat.com>:

> Please explain "from source"-
> - Did you run maven using dep and started JBoss?

yes, I followed the steps at  
http://www.ovirt.org/wiki/Building_Ovirt_Engine section "Building  
oVirt-engine from source".

-Sharad

> or
> - Did you create RPM's and used yum install?
>
> On 23/04/12 22:28, Sharad Mishra wrote:
>>
>> Quoting Doron Fediuck <dfediuck at redhat.com>:
>>
>>> Thanks.
>>> Unfortunately the keystore is the most important file in the PKI
>>> area. Please try to recall your actions, and try to look for the
>>> keystore in case you moved / change folders or anything alike.
>>>
>>> Currently, the only valid solution for a lost keystore is re-installation.
>>
>> I reinstalled ovirt-engine from source on a fresh rhel6.2 machine.  
>> I still do not see .keystore in /etc/pki/ovirt-engine. Now I get  
>> FileNotFoundException but engine is running.
>>
>> 2012-04-23 11:21:14,900 ERROR  
>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC  
>> service thread 1-15) Failed to  
>> decryptjava.io.FileNotFoundException: .keystore (No such file or  
>> directory)
>> 2012-04-23 11:21:14,900 ERROR  
>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC  
>> service thread 1-15) Failed to decrypt value for property  
>> AdminPassword will be used encrypted value
>> 2012-04-23 11:21:14,902 INFO  [org.ovirt.engine.core.bll.Backend]  
>> (MSC service thread 1-15) VDSBrokerFrontend: 4/23/12 11:21 AM
>>
>> -Sharad Mishra
>>
>>>
>>> On 19/04/12 22:40, snmishra at linux.vnet.ibm.com wrote:
>>>>
>>>> Quoting Doron Fediuck <dfediuck at redhat.com>:
>>>>
>>>>> Please check again using ls -la on that folder.
>>>>
>>>> Yes, I did run "ls -la" :-)
>>>>
>>>> -Sharad Mishra
>>>>
>>>>>
>>>>> Sent from my Android phone. Please ignore typos.
>>>>>
>>>>> -----Original Message-----
>>>>> From: snmishra at linux.vnet.ibm.com
>>>>> Received: Thursday, 19 Apr 2012, 20:38
>>>>> To: Ofer Schreiber [oschreib at redhat.com]
>>>>> CC: users at ovirt.org
>>>>> Subject: Re: [Users] Joss fails to start ... Keystore was tampered.
>>>>>
>>>>>
>>>>> Quoting Ofer Schreiber <oschreib at redhat.com>:
>>>>>
>>>>>> I'm trying to understand few things:
>>>>>> 1. Did you used RPM for deployment?
>>>>>
>>>>> No, it was from source. (git clone)
>>>>>
>>>>>> 2. Was it an UPGRADE for the engine?
>>>>>
>>>>> yes, I updated the source which was about a month old.
>>>>>
>>>>>> 3. Do you have /etc/pki/ovirt-engine/.keystore available? did it
>>>>>> changed recently?
>>>>>
>>>>> There is no .keystore in /etc/pki/ovirt-engine. But rest of the files
>>>>> in this directory were modified on 4/17 (certs, keys, private,
>>>>> requests). I was playing with kerberos for ldap on 17th so it is
>>>>> possible that I did something that messed up the server, and it was
>>>>> just coincidental that I upgraded the source next day and ran into
>>>>> this issue.
>>>>>
>>>>> Any help on how I can get out of it?
>>>>>
>>>>> -Sharad Mishra
>>>>>>
>>>>>> Ofer.
>>>>>>
>>>>>> ----- Original Message -----
>>>>>>>
>>>>>>> I had jboss running on my rhel6.2 machine. This morning I fetched
>>>>>>> latest engine source, built and deployed it. I did not see any
>>>>>>> errors.
>>>>>>> But now when I start jboss-as service I see following errors in
>>>>>>> engine.log -
>>>>>>>
>>>>>>> 2012-04-18 13:57:48,051 INFO  [org.ovirt.engine.core.bll.Backend]
>>>>>>> (MSC
>>>>>>> service thread 1-5) Start time: 4/18/12 1:57 PM
>>>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>>> was
>>>>>>> tampered with, or password was incorrect
>>>>>>> 2012-04-18 13:57:48,204 ERROR
>>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>>>> service thread 1-5) Failed to decrypt value for property
>>>>>>> LocalAdminPassword will be used encrypted value
>>>>>>> 2012-04-18 13:57:48,209 WARN
>>>>>>> [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread
>>>>>>> 1-5)
>>>>>>> Could not find enum value for option: NetConsolePort
>>>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>>> was
>>>>>>> tampered with, or password was incorrect
>>>>>>> 2012-04-18 13:57:48,212 ERROR
>>>>>>> [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC
>>>>>>> service thread 1-5) Failed to decrypt value for property
>>>>>>> CertificatePassword will be used encrypted value
>>>>>>> 2012-04-18 13:57:48,214 ERROR
>>>>>>> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC
>>>>>>> service thread 1-5) Failed to decryptjava.io.IOException: Keystore
>>>>>>> was
>>>>>>> tampered with, or password was incorrect
>>>>>>>
>>>>>>> Regards,
>>>>>>> Sharad Mishra
>>>>>>> IBM
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> Users mailing list
>>>>>>> Users at ovirt.org
>>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>>
>>>>>
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> Users mailing list
>>>>> Users at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>
>>>>>
>>>>> Sent from my Android phone. Please ignore typos.
>>>>
>>>>
>>>>
>>
>>
>>