[Users] ovirt-report Forbidden access error
Yedidyah Bar David
didi at redhat.com
Tue Feb 4 11:55:30 UTC 2014
> From: "Alessandro Bianchi" <a.bianchi at skynet.it>
> To: "Gianluca Cecchi" <gianluca.cecchi at gmail.com>
> Cc: "Yedidyah Bar David" <didi at redhat.com>, "users" <users at ovirt.org>
> Sent: Tuesday, February 4, 2014 1:19:43 PM
> Subject: Re: [Users] ovirt-report Forbidden access error
> Il 04/02/2014 11:30, Gianluca Cecchi ha scritto:
> > On Tue, Feb 4, 2014 at 11:10 AM, Alessandro Bianchi <a.bianchi at skynet.it>
> > wrote:
>
> > > Il 04/02/2014 09:55, Gianluca Cecchi ha scritto:
> >
>
> > > On Tue, Feb 4, 2014 at 9:10 AM, Alessandro Bianchi wrote:
> >
>
> > > in working directory '/usr/share/ovirt-engine-dwh/db-scripts'
> >
>
> > > 2014-02-04 09:01:26::DEBUG::common_utils::962::root:: output =
> >
>
> > > 2014-02-04 09:01:26::DEBUG::common_utils::963::root:: stderr = psql:
> > > FATALE:
> >
>
> > > autenticazione con password fallita per l'utente "engine_history"
> >
>
> > > password retrieved from file "/tmp/pgpassNkKGNp.tmp"
> >
>
> > > (autenticazione con password fallita per l'utente "engine_history" =
> >
>
> > > authentication failed for user "engine_history" system language is
> > > italian)
> >
>
> > > so it seems a user creation permission problem on the database
> >
>
> > > since I'm not too familiar with pgsql how is it supposed to fix this?
> >
>
> > > It look like it misses the password in some ovirt configuration file but
> >
>
> > > where to edit and how o fix it?
> >
>
> > > Any hint?
> >
>
> > > Thank you
> >
>
> > > See this thread of mine if you want to start from scratch and you
> >
>
> > > don't have any previous reports/dwh data or you don't mind to loose
> >
>
> > > them. Engine and its data is not impacted at all.
> >
>
> > > Eventually I'm going to open a bug for bad mgmt of pre-existing DB
> >
>
> > > user during setup (eg due to a previously failed in the middle
> >
>
> > > install).
> > > http://lists.ovirt.org/pipermail/users/2014-February/020740.html
> > > Let us know how it goes.
> >
>
> > > Gianluca
> >
>
> > > Ok with this 2b extra step it works
> >
>
> > > I have installed everything with no errors, but still have Forbidden
> > > access
> >
>
> > > right clicking on Vms -> reports
> >
>
> > > If I click on the "reports portal" I see this link
> > > http://10.0.0.5/OvirtEngineWeb/ReportsRedirectServlet I suspect this is
> > > something related to apache configuration
> >
>
> > > access.log shows nothing so were may I see a log of what's happening?
> >
>
> > > Thank you
> >
>
> > > Alessandro
> >
>
> > I too see that redirect and then when I click I land to
> > https://my-engine/ovirt-engine-reports/login.html and then after login/pwd
> > :
> > https://my-engine/ovirt-engine-reports/flow.html?_flowId=searchFlow I have
> > SpiceProxy configured.
>
> > Don't know if this impacts apache configuration.
>
> > In my case it works and in /etc/httpd/conf.d
>
> > Ihave
>
> > # ls -lrt
>
> > total 68
>
> > -rw-r--r--. 1 root root 926 Mar 31 2013 BackupPC.conf
>
> > -rw-r--r--. 1 root root 298 Jul 23 2013 squid.conf
>
> > -rw-r--r--. 1 root root 516 Jul 31 2013 welcome.conf
>
> > -rw-r--r--. 1 root root 1252 Jul 31 2013 userdir.conf
>
> > -rw-r--r--. 1 root root 9426 Jul 31 2013 ssl.conf.20131003112151
>
> > -rw-r--r--. 1 root root 2893 Jul 31 2013 autoindex.conf
>
> > -rw-r--r--. 1 root root 366 Jul 31 2013 README
>
> > -rw-r--r--. 1 root root 2778 Oct 3 11:21
>
> > z-ovirt-engine-proxy.conf.20131119125706
>
> > -rw-r--r--. 1 root root 33 Oct 3 11:21 ovirt-engine-root-redirect.conf
>
> > -rw-r--r--. 1 root root 9444 Oct 3 11:21 ssl.conf
>
> > -rw-r--r--. 1 root root 2775 Nov 19 12:57
>
> > z-ovirt-engine-proxy.conf.20140115003015
>
> > -rw-r--r--. 1 root root 1251 Jan 7 15:54 z-ovirt-engine-reports-proxy.conf
>
> > -rw-r--r--. 1 root root 2788 Jan 15 00:30 z-ovirt-engine-proxy.conf
>
> > z-ovirt-engine-reports-proxy.conf:
>
> > <IfModule proxy_ajp_module>
>
> > <Proxy ajp://localhost:8702>
>
> > # This is needed to make sure that connections to the application server
>
> > # are recovered in a short time interval (5 seconds at the moment)
>
> > # otherwise when the application server is restarted the web server will
>
> > # refuse to connect during 60 seconds.
>
> > ProxySet retry=5
>
> > # This is needed to make sure that long RESTAPI requests have time to
>
> > # finish before the web server aborts the request as the default timeout
>
> > # (controlled by the Timeout directive in httpd.conf) is 60 seconds.
>
> > ProxySet timeout=3600
>
> > </Proxy>
>
> > <Location /ovirt-engine-reports>
>
> > ProxyPass ajp://localhost:8702/ovirt-engine-reports
>
> > <IfModule deflate_module>
>
> > AddOutputFilterByType DEFLATE text/javascript text/css
>
> > text/html text/xml text/json application/xml application/json
>
> > application/x-yaml
>
> > </IfModule>
>
> > </Location>
>
> > </IfModule>
>
> Uuuuuuh
> enterig the URL you showed directely I can login and see reports ok
> so it looks link in ovirt main page is somehow wrong!
This should work. To help debug this, p lease check/post these:
/etc/httpd/conf.d/z-ovirt-engine-proxy.conf
/etc/httpd/conf.d/z-ovirt-engine-reports-proxy.conf
/var/log/httpd/error_log
/var/log/httpd/ssl_error_log
/var/log/httpd/access_log
/var/log/httpd/ssl_access_log
As user postgres, output of:
psql engine -c "select * from vdc_options where option_name='RedirectServletReportsPage';"
Thanks!
--
Didi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140204/501aaa93/attachment-0001.html>
More information about the Users
mailing list