[Users] ovirt-report Forbidden access error

Tue Feb 4 11:55:30 UTC 2014

> From: "Alessandro Bianchi" <a.bianchi at skynet.it>
> To: "Gianluca Cecchi" <gianluca.cecchi at gmail.com>
> Cc: "Yedidyah Bar David" <didi at redhat.com>, "users" <users at ovirt.org>
> Sent: Tuesday, February 4, 2014 1:19:43 PM
> Subject: Re: [Users] ovirt-report Forbidden access error

> Il 04/02/2014 11:30, Gianluca Cecchi ha scritto:

> > On Tue, Feb 4, 2014 at 11:10 AM, Alessandro Bianchi <a.bianchi at skynet.it>
> > wrote:
> 

> > > Il 04/02/2014 09:55, Gianluca Cecchi ha scritto:
> > 
> 

> > > On Tue, Feb 4, 2014 at 9:10 AM, Alessandro Bianchi wrote:
> > 
> 

> > > in working directory '/usr/share/ovirt-engine-dwh/db-scripts'
> > 
> 
> > > 2014-02-04 09:01:26::DEBUG::common_utils::962::root:: output =
> > 
> 
> > > 2014-02-04 09:01:26::DEBUG::common_utils::963::root:: stderr = psql:
> > > FATALE:
> > 
> 
> > > autenticazione con password fallita per l'utente "engine_history"
> > 
> 
> > > password retrieved from file "/tmp/pgpassNkKGNp.tmp"
> > 
> 

> > > (autenticazione con password fallita per l'utente "engine_history" =
> > 
> 
> > > authentication failed for user "engine_history" system language is
> > > italian)
> > 
> 

> > > so it seems a user creation permission problem on the database
> > 
> 

> > > since I'm not too familiar with pgsql how is it supposed to fix this?
> > 
> 

> > > It look like it misses the password in some ovirt configuration file but
> > 
> 
> > > where to edit and how o fix it?
> > 
> 

> > > Any hint?
> > 
> 

> > > Thank you
> > 
> 

> > > See this thread of mine if you want to start from scratch and you
> > 
> 
> > > don't have any previous reports/dwh data or you don't mind to loose
> > 
> 
> > > them. Engine and its data is not impacted at all.
> > 
> 
> > > Eventually I'm going to open a bug for bad mgmt of pre-existing DB
> > 
> 
> > > user during setup (eg due to a previously failed in the middle
> > 
> 
> > > install).
> > > http://lists.ovirt.org/pipermail/users/2014-February/020740.html
> > > Let us know how it goes.
> > 
> 

> > > Gianluca
> > 
> 

> > > Ok with this 2b extra step it works
> > 
> 

> > > I have installed everything with no errors, but still have Forbidden
> > > access
> > 
> 
> > > right clicking on Vms -> reports
> > 
> 

> > > If I click on the "reports portal" I see this link
> > > http://10.0.0.5/OvirtEngineWeb/ReportsRedirectServlet I suspect this is
> > > something related to apache configuration
> > 
> 

> > > access.log shows nothing so were may I see a log of what's happening?
> > 
> 

> > > Thank you
> > 
> 

> > > Alessandro
> > 
> 

> > I too see that redirect and then when I click I land to
> > https://my-engine/ovirt-engine-reports/login.html and then after login/pwd
> > :
> > https://my-engine/ovirt-engine-reports/flow.html?_flowId=searchFlow I have
> > SpiceProxy configured.
> 
> > Don't know if this impacts apache configuration.
> 
> > In my case it works and in /etc/httpd/conf.d
> 
> > Ihave
> 
> > # ls -lrt
> 
> > total 68
> 
> > -rw-r--r--. 1 root root  926 Mar 31  2013 BackupPC.conf
> 
> > -rw-r--r--. 1 root root  298 Jul 23  2013 squid.conf
> 
> > -rw-r--r--. 1 root root  516 Jul 31  2013 welcome.conf
> 
> > -rw-r--r--. 1 root root 1252 Jul 31  2013 userdir.conf
> 
> > -rw-r--r--. 1 root root 9426 Jul 31  2013 ssl.conf.20131003112151
> 
> > -rw-r--r--. 1 root root 2893 Jul 31  2013 autoindex.conf
> 
> > -rw-r--r--. 1 root root  366 Jul 31  2013 README
> 
> > -rw-r--r--. 1 root root 2778 Oct  3 11:21
> 
> > z-ovirt-engine-proxy.conf.20131119125706
> 
> > -rw-r--r--. 1 root root   33 Oct  3 11:21 ovirt-engine-root-redirect.conf
> 
> > -rw-r--r--. 1 root root 9444 Oct  3 11:21 ssl.conf
> 
> > -rw-r--r--. 1 root root 2775 Nov 19 12:57
> 
> > z-ovirt-engine-proxy.conf.20140115003015
> 
> > -rw-r--r--. 1 root root 1251 Jan  7 15:54 z-ovirt-engine-reports-proxy.conf
> 
> > -rw-r--r--. 1 root root 2788 Jan 15 00:30 z-ovirt-engine-proxy.conf
> 

> > z-ovirt-engine-reports-proxy.conf:
> 
> > <IfModule proxy_ajp_module>
> 

> > <Proxy ajp://localhost:8702>
> 
> > # This is needed to make sure that connections to the application server
> 
> > # are recovered in a short time interval (5 seconds at the moment)
> 
> > # otherwise when the application server is restarted the web server will
> 
> > # refuse to connect during 60 seconds.
> 
> > ProxySet retry=5
> 

> > # This is needed to make sure that long RESTAPI requests have time to
> 
> > # finish before the web server aborts the request as the default timeout
> 
> > # (controlled by the Timeout directive in httpd.conf) is 60 seconds.
> 
> > ProxySet timeout=3600
> 
> > </Proxy>
> 

> > <Location /ovirt-engine-reports>
> 
> > ProxyPass ajp://localhost:8702/ovirt-engine-reports
> 
> > <IfModule deflate_module>
> 
> > AddOutputFilterByType DEFLATE text/javascript text/css
> 
> > text/html text/xml text/json application/xml application/json
> 
> > application/x-yaml
> 
> > </IfModule>
> 
> > </Location>
> 

> > </IfModule>
> 

> Uuuuuuh

> enterig the URL you showed directely I can login and see reports ok

> so it looks link in ovirt main page is somehow wrong!
This should work. To help debug this, p lease check/post these: 

/etc/httpd/conf.d/z-ovirt-engine-proxy.conf 
/etc/httpd/conf.d/z-ovirt-engine-reports-proxy.conf 
/var/log/httpd/error_log 
/var/log/httpd/ssl_error_log 
/var/log/httpd/access_log 
/var/log/httpd/ssl_access_log 

As user postgres, output of: 
psql engine -c "select * from vdc_options where option_name='RedirectServletReportsPage';" 

Thanks! 
-- 
Didi 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20140204/501aaa93/attachment-0001.html>