[Users] Problems after upgrading to latest rpms from the dre repository

[Eli Mesika]

----- Original Message -----
> From: "Joern Ott" <joern.ott at ciao.leguide.com>
> To: users at ovirt.org
> Sent: Monday, December 17, 2012 6:28:41 PM
> Subject: [Users] Problems after upgrading to latest rpms from the dre	repository
> 
> 
> 
> 
> 
> Hello everybody,
> 
> 
> 
> I just upgraded the engine with the engine upgrade script and get a
> lot of these errors:
> 
> 2012-12-17 17:25:00,498 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-84) Failed to decrypt Data must not be
> longer than 256 bytes


The RSA algorithm can only encrypt data that has a maximum byte length of the RSA key length in bits divided with eight minus eleven padding bytes, i.e. number of maximum bytes = key length in bits / 8 - 11. 
Since we are not using padding and using a key length of 2048 , it limits us to encrypting 2048/8 = 256 characters data.

We can do either 
1) Use a larger key
2) Encrypt the data with a symmetric key, and encrypt that key with rsa



> 
> 2012-12-17 17:25:00,498 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-72) Failed to decrypt Data must not be
> longer than 256 bytes
> 
> 2012-12-17 17:25:03,033 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-94) Failed to decrypt Data must not be
> longer than 256 bytes
> 
> 2012-12-17 17:25:03,033 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-7) Failed to decrypt Data must not be longer
> than 256 bytes
> 
> 2012-12-17 17:25:15,606 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-60) Failed to decrypt Data must not be
> longer than 256 bytes
> 
> 2012-12-17 17:25:15,606 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-55) Failed to decrypt Data must not be
> longer than 256 bytes
> 
> 2012-12-17 17:25:39,663 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-69) Failed to decrypt Data must not be
> longer than 256 bytes
> 
> 2012-12-17 17:25:39,663 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-68) Failed to decrypt
> java.lang.NullPointerException
> 
> 
> 
> In addition, I am no longer able to log in with admin at internal and
> the password we set before. As we use keepass generated passwords, I
> am pretty sure that I don’t have any typing errors in there. The
> engine log shows this:
> 
> 
> 
> 2012-12-17 17:26:43,328 ERROR
> [org.ovirt.engine.core.bll.LoginAdminUserCommand]
> (ajp--127.0.0.1-8702-2) USER_FAILED_TO_AUTHENTICATE : admin
> 
> 2012-12-17 17:26:43,328 WARN
> [org.ovirt.engine.core.bll.LoginAdminUserCommand]
> (ajp--127.0.0.1-8702-2) CanDoAction of action LoginAdminUser failed.
> Reasons:USER_FAILED_TO_AUTHENTICATE
> 
> 2012-12-17 17:26:46,290 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-94) Failed to decrypt Blocktype mismatch: 0
> 
> 2012-12-17 17:26:46,290 ERROR
> [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> (QuartzScheduler_Worker-91) Failed to decrypt Blocktype mismatch: 0
> 
> 
> 
> Any way of resetting the password in the database or fixing some
> encryption routines?
> 
> 
> 
> Kind regards
> 
> Jörn
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>