[Users] ovirt-report Forbidden access error

[Gianluca Cecchi]

On Tue, Feb 4, 2014 at 11:10 AM, Alessandro Bianchi <a.bianchi at skynet.it> wrote:
>
>
> Il 04/02/2014 09:55, Gianluca Cecchi ha scritto:
>
> On Tue, Feb 4, 2014 at 9:10 AM, Alessandro Bianchi wrote:
>
> in working directory '/usr/share/ovirt-engine-dwh/db-scripts'
> 2014-02-04 09:01:26::DEBUG::common_utils::962::root:: output =
> 2014-02-04 09:01:26::DEBUG::common_utils::963::root:: stderr = psql: FATALE:
> autenticazione con password fallita per l'utente "engine_history"
> password retrieved from file "/tmp/pgpassNkKGNp.tmp"
>
> (autenticazione con password fallita per l'utente "engine_history" =
> authentication failed for user "engine_history" system language is italian)
>
> so it seems a user creation permission problem on the database
>
> since I'm not too familiar with pgsql how is it supposed to fix this?
>
> It look like it misses the password in some ovirt configuration file but
> where to edit and how o fix it?
>
> Any hint?
>
> Thank you
>
> See this thread of mine if you want to start from scratch and you
> don't have any previous reports/dwh data or you don't mind to loose
> them. Engine and its data is not impacted at all.
> Eventually I'm going to open a bug for bad mgmt of pre-existing DB
> user during setup (eg due to a previously failed in the middle
> install).
>
> http://lists.ovirt.org/pipermail/users/2014-February/020740.html
>
> Let us know how it goes.
>
> Gianluca
>
> Ok with this 2b extra step it works
>
> I have installed everything with no errors, but still have Forbidden access
> right clicking on Vms -> reports
>
> If I click on the "reports portal" I see this link
>
> http://10.0.0.5/OvirtEngineWeb/ReportsRedirectServlet
>
> I suspect this is something related to apache configuration
>
> access.log shows nothing so were may I see a log of what's happening?
>
> Thank you
>
> Alessandro

I too see that redirect and then when I click I land to
https://my-engine/ovirt-engine-reports/login.html

and then after login/pwd :
https://my-engine/ovirt-engine-reports/flow.html?_flowId=searchFlow

I have SpiceProxy configured.
Don't know if this impacts apache configuration.
In my case it works and in /etc/httpd/conf.d
Ihave
# ls -lrt
total 68
-rw-r--r--. 1 root root  926 Mar 31  2013 BackupPC.conf
-rw-r--r--. 1 root root  298 Jul 23  2013 squid.conf
-rw-r--r--. 1 root root  516 Jul 31  2013 welcome.conf
-rw-r--r--. 1 root root 1252 Jul 31  2013 userdir.conf
-rw-r--r--. 1 root root 9426 Jul 31  2013 ssl.conf.20131003112151
-rw-r--r--. 1 root root 2893 Jul 31  2013 autoindex.conf
-rw-r--r--. 1 root root  366 Jul 31  2013 README
-rw-r--r--. 1 root root 2778 Oct  3 11:21
z-ovirt-engine-proxy.conf.20131119125706
-rw-r--r--. 1 root root   33 Oct  3 11:21 ovirt-engine-root-redirect.conf
-rw-r--r--. 1 root root 9444 Oct  3 11:21 ssl.conf
-rw-r--r--. 1 root root 2775 Nov 19 12:57
z-ovirt-engine-proxy.conf.20140115003015
-rw-r--r--. 1 root root 1251 Jan  7 15:54 z-ovirt-engine-reports-proxy.conf
-rw-r--r--. 1 root root 2788 Jan 15 00:30 z-ovirt-engine-proxy.conf

z-ovirt-engine-reports-proxy.conf:
<IfModule proxy_ajp_module>

    <Proxy ajp://localhost:8702>
        # This is needed to make sure that connections to the application server
        # are recovered in a short time interval (5 seconds at the moment)
        # otherwise when the application server is restarted the web server will
        # refuse to connect during 60 seconds.
        ProxySet retry=5

        # This is needed to make sure that long RESTAPI requests have time to
        # finish before the web server aborts the request as the default timeout
        # (controlled by the Timeout directive in httpd.conf) is 60 seconds.
        ProxySet timeout=3600
    </Proxy>

    <Location /ovirt-engine-reports>
        ProxyPass ajp://localhost:8702/ovirt-engine-reports
        <IfModule deflate_module>
            AddOutputFilterByType DEFLATE text/javascript text/css
text/html text/xml text/json application/xml application/json
application/x-yaml
        </IfModule>
    </Location>

</IfModule>