[ovirt-users] Adding domain to oVirt to 3.5 issue

Juan Jose jj197005 at gmail.com
Tue Nov 25 16:09:18 UTC 2014


Hello again,

Yes the password is correct, I can login in a Windows machine to my domain
siee.local with the user Juanjo. Moreover I have chanbged this user
password to simpler one and the result is the same.

I have logged in administration portal with internal admin user and I try
to navigate through the domain to find user to assign some user in a VM but
nothing is showed as you can see in the attached screen  image and any
error is faced in administration portal, but the
/var/log/ovirt-engine/engine.log show this:

2014-11-25 17:02:05,355 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
(ajp--127.0.0.1-8702-5) Kerberos error: Pre-authentication information was
invalid (24)
2014-11-25 17:02:05,356 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
(ajp--127.0.0.1-8702-5) Authentication Failed. Please verify the username
and password.
2014-11-25 17:02:05,357 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
(ajp--127.0.0.1-8702-5) Failed ldap search server
ldap://adserver.siee.local:389 using user juanjo at SIEE.LOCAL due to
Authentication Failed. Please verify the username and password.. We should
not try the next server
2014-11-25 17:02:05,359 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
(ajp--127.0.0.1-8702-5) Failed to run command LdapSearchUserByQueryCommand.
Domain is siee.local. User is juanjo at SIEE.LOCAL.
2014-11-25 17:02:05,402 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
(ajp--127.0.0.1-8702-5) Kerberos error: Pre-authentication information was
invalid (24)
2014-11-25 17:02:05,404 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
(ajp--127.0.0.1-8702-5) Authentication Failed. Please verify the username
and password.
2014-11-25 17:02:05,406 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
(ajp--127.0.0.1-8702-5) Failed ldap search server
ldap://adserver.siee.local:389 using user juanjo at SIEE.LOCAL due to
Authentication Failed. Please verify the username and password.. We should
not try the next server
2014-11-25 17:02:05,408 ERROR
[org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
(ajp--127.0.0.1-8702-5) Failed to run command
LdapSearchGroupsByQueryCommand. Domain is siee.local. User is
juanjo at SIEE.LOCAL.

every time I click "Go" button. Moreover I haven't changed anything from my
Samba4 AD and it is working handling my siee.local domain. This error is
showed since oVirt 3.5 upgrade.

Many thanks in advance,

Juanjo.



On Tue, Nov 25, 2014 at 2:29 PM, Ondra Machacek <omachace at redhat.com> wrote:

> Also, can you please try to search within this domain,
> not only login to it? Does it fail or works good?
>
> (in webadmin go to users tab and click add,
>  select your domain and search for users).
>
> ----- Original Message -----
> > From: "Alon Bar-Lev" <alonbl at redhat.com>
> > To: "Juan Jose" <jj197005 at gmail.com>
> > Cc: "Ondra Machacek" <omachace at redhat.com>, "Yair Zaslavsky" <
> yzaslavs at redhat.com>, users at ovirt.org
> > Sent: Tuesday, November 25, 2014 1:49:20 PM
> > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> >
> > 2014-11-25 12:54:10,687 ERROR
> > [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> > (ajp--127.0.0.1-8702-5) Failed ldap search server
> > ldap://adserver.siee.local:389 using user juanjo at SIEE.LOCAL due to
> > Authentication Failed. Please verify the username and password.. We
> should
> > not try the next server
> >
> >
> > ----- Original Message -----
> > > From: "Juan Jose" <jj197005 at gmail.com>
> > > To: "Ondra Machacek" <omachace at redhat.com>, alonbl at redhat.com, "Yair
> > > Zaslavsky" <yzaslavs at redhat.com>,
> > > users at ovirt.org
> > > Sent: Tuesday, November 25, 2014 2:29:26 PM
> > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > >
> > > Hello Ondra and everybody,
> > >
> > > It works with my other user:
> > >
> > > engine-manage-domains add --domain=siee.local --provider=ad
> --user=juanjo
> > > --add-permissions
> > > Enter password:
> > > Successfully added domain siee.local. oVirt Engine restart is required
> in
> > > order for the changes to take place (service ovirt-engine restart).
> > > Manage Domains completed successfully
> > >
> > > But after restarted ovirt-engine if I try to loging with "juanjo" in
> the
> > > administrator portal and I receive the error "General command
> validation
> > > failure", as you can see in the attached image.
> > >
> > > I'm showing below the engine.log lines with the error:
> > >
> > > 2014-11-25 12:54:10,680 ERROR
> > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > (ajp--127.0.0.1-8702-5) Kerberos error: Pre-authentication information
> was
> > > invalid (24)
> > > 2014-11-25 12:54:10,681 ERROR
> > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > (ajp--127.0.0.1-8702-5) Authentication Failed. Please verify the
> username
> > > and password.
> > > 2014-11-25 12:54:10,687 ERROR
> > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> > > (ajp--127.0.0.1-8702-5) Failed ldap search server
> > > ldap://adserver.siee.local:389 using user juanjo at SIEE.LOCAL due to
> > > Authentication Failed. Please verify the username and password.. We
> should
> > > not try the next server
> > > 2014-11-25 12:54:10,688 ERROR
> > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
> > > (ajp--127.0.0.1-8702-5) Failed to run command
> > > LdapGetAdUserByUserNameCommand. Domain is siee.local. User is
> > > juanjo at SIEE.LOCAL.
> > > 2014-11-25 12:54:10,689 ERROR
> > > [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand]
> > > (ajp--127.0.0.1-8702-5) Error during CanDoActionFailure.: Class: class
> > >
> org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException
> > > Input:
> > > {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class
> > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class
> > >
> java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0,
> > > Extkey[name=EXTENSION_LICENSE;type=class
> > >
> java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL
> > > 2.0, Extkey[name=EXTENSION_HOME_URL;type=class
> > >
> java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]=
> > > http://www.ovirt.org, Extkey[name=EXTENSION_LOCALE;type=class
> > >
> java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US,
> > > Extkey[name=EXTENSION_NAME;type=class
> > >
> java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=Kerberos/Ldap
> > > Authz (Built-in),
> Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class
> > >
> java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0,
> > > Extkey[name=EXTENSION_CONFIGURATION;type=class
> > >
> java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***,
> > > Extkey[name=EXTENSION_AUTHOR;type=class
> > >
> java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The
> > > oVirt Project, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class
> > >
> java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100,
> > > Extkey[name=EXTENSION_INSTANCE_NAME;type=class
> > >
> java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=siee.local,
> > > Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class
> > >
> java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0,
> > > Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class
> > >
> java.lang.Long;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1,
> > > Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface
> > >
> java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[],
> > > Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class
> > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*,
> > > Extkey[name=EXTENSION_VERSION;type=class
> > >
> java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=N/A,
> > > Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface
> > >
> java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[*],
> > > Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface
> > >
> org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.Kerberos/Ldap
> > > Authz (Built-in).siee.local),
> Extkey[name=EXTENSION_PROVIDES;type=interface
> > >
> java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz]},
> > > Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class
> > >
> java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3,
> > > Extkey[name=EXTENSION_INVOKE_COMMAND;type=class
> > >
> org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df],
> > > Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class
> > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class
> > >
> java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=juanjo}}
> > > Output:
> > > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class
> > >
> java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2,
> > > Extkey[name=AAA_AUTHZ_STATUS;type=class
> > >
> java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=1}
> > >
> > >     at
> > >
> org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:91)
> > > [extensions-manager.jar:]
> > >     at
> > >
> org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109)
> > > [extensions-manager.jar:]
> > >     at
> > >
> org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecordImpl(AuthzUtils.java:51)
> > > [aaa.jar:]
> > >     at
> > >
> org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecord(AuthzUtils.java:42)
> > > [aaa.jar:]
> > >     at
> > >
> org.ovirt.engine.core.bll.aaa.LoginBaseCommand.isUserCanBeAuthenticated(LoginBaseCommand.java:234)
> > > [bll.jar:]
> > >     at
> > >
> org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand.canDoAction(LoginAdminUserCommand.java:15)
> > > [bll.jar:]
> > >     at
> > >
> org.ovirt.engine.core.bll.CommandBase.internalCanDoAction(CommandBase.java:744)
> > > [bll.jar:]
> > >     at
> > >
> org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:338)
> > > [bll.jar:]
> > >     at org.ovirt.engine.core.bll.Backend.login(Backend.java:575)
> [bll.jar:]
> > >     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51]
> > >     at java.lang.reflect.Method.invoke(Method.java:606)
> [rt.jar:1.7.0_51]
> > >     at
> > >
> org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:114)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:125)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:135)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.ovirt.engine.core.bll.interceptors.ThreadLocalSessionCleanerInterceptor.injectWebContextToThreadLocal(ThreadLocalSessionCleanerInterceptor.java:13)
> > > [bll.jar:]
> > >     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51]
> > >     at java.lang.reflect.Method.invoke(Method.java:606)
> [rt.jar:1.7.0_51]
> > >     at
> > >
> org.jboss.as.ee.component.ManagedReferenceLifecycleMethodInterceptorFactory$ManagedReferenceLifecycleMethodInterceptor.processInvocation(ManagedReferenceLifecycleMethodInterceptorFactory.java:123)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:82)
> > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:211)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:363)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:194)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
> > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > > org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:173)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > >     at
> > >
> org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72)
> > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > >     at
> > >
> org.ovirt.engine.core.common.interfaces.BackendLocal$$$view7.login(Unknown
> > > Source) [common.jar:]
> > >     at
> > >
> org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.login(GenericApiGWTServiceImpl.java:183)
> > >     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > [rt.jar:1.7.0_51]
> > >     at
> > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > [rt.jar:1.7.0_51]
> > >     at java.lang.reflect.Method.invoke(Method.java:606)
> [rt.jar:1.7.0_51]
> > >     at
> com.google.gwt.rpc.server.RPC.invokeAndStreamResponse(RPC.java:196)
> > >     at
> > >
>  com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:172)
> > >     at
> > >
>  com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233)
> > >     at
> > >
> com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
> > >     at javax.servlet.http.HttpServlet.service(HttpServlet.java:754)
> > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
> > >     at javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
> > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94)
> > > [utils.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:72)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:64)
> > > [utils.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31)
> > > [aaa.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.aaa.filters.LoginFilter.doFilter(LoginFilter.java:73)
> > > [aaa.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.aaa.filters.NegotiationFilter.doFilter(NegotiationFilter.java:131)
> > > [aaa.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:75)
> > > [aaa.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:63)
> > > [aaa.jar:]
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > >     at
> > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > >     at
> > >
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
> > >     at
> > >
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
> > >     at
> > >
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489)
> > >     at
> > >
> org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153)
> > >     at
> > >
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
> > >     at
> > >
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> > >     at org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466)
> > >     at
> > >
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> > >     at
> > >
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
> > >     at
> org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505)
> > >     at
> > >
> org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:445)
> > >     at
> > > org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)
> > >     at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_51]
> > >
> > > Could you help me with this problem, please?
> > >
> > > Many thanks in advanced,
> > >
> > > Juanjo.
> > >
> > > On Tue, Nov 25, 2014 at 12:24 PM, Ondra Machacek <omachace at redhat.com>
> > > wrote:
> > >
> > > > Hi,
> > > >
> > > > can you please try different account than Administrator?
> > > >
> > > > ----- Original Message -----
> > > > > From: "Juan Jose" <jj197005 at gmail.com>
> > > > > To: omachace at redhat.com, alonbl at redhat.com, "Yair Zaslavsky" <
> > > > yzaslavs at redhat.com>, users at ovirt.org
> > > > > Sent: Tuesday, November 25, 2014 11:01:13 AM
> > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > > > >
> > > > > Hello everybody,
> > > > >
> > > > > Ondra you are right, I removed the domain. I have already tried to
> > > > execute
> > > > > the command with lower case the domain name and the result is the
> same
> > > > >
> > > > > engine-manage-domains add --domain=siee.local --provider=ad
> > > > > --user=Administrator  --add-permissions
> > > > > Enter password:
> > > > > No user in Directory was found for Administrator at SIEE.LOCAL.
> Trying
> > > > > next
> > > > > LDAP server in list
> > > > > Failure while testing domain siee.local. Details: No user
> information
> > > > > was
> > > > > found for user
> > > > >
> > > > > the result to the command psql -U engine -d engine -c "select *
> from
> > > > > vdc_options where option_name='LDAPSecurityAuthentication'" is:
> > > > >
> > > > > psql: FATAL:  Ident authentication failed for user "engine"
> > > > >
> > > > > And for second command psql -U engine -d engine -c "update
> vdc_options
> > > > set
> > > > > option_value='siee.local:GSSAPI' where
> > > > > option_name='LDAPSecurityAuthentication'", I receive the same
> response:
> > > > >
> > > > > psql: FATAL:  Ident authentication failed for user "engine"
> > > > >
> > > > > Is there any problem?
> > > > >
> > > > > Many thanks in advanced,
> > > > >
> > > > > Juanjo.
> > > > >
> > > > >
> > > > > On Mon, Nov 24, 2014 at 1:57 PM, Ondra Machacek <
> omachace at redhat.com>
> > > > wrote:
> > > > >
> > > > > > I understood that domain can be deleted, but can't be added,
> > > > > > so there won't be needed values to update in vdc_options.
> > > > > >
> > > > > > Juanjo - Can you please provide us what's the result of command:
> > > > > >
> > > > > > $ psql -U engine -d engine -c "select * from vdc_options where
> > > > > > option_name='LDAPSecurityAuthentication'"
> > > > > >
> > > > > > If it's empty or if the domain name is upper case or lower case?
> > > > > > If it's upper, than please lower case it.
> > > > > > $ psql -U engine -d engine -c "update vdc_options set
> > > > > > option_value='siee.local:GSSAPI' where
> > > > > > option_name='LDAPSecurityAuthentication'"
> > > > > >
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > > From: "Alon Bar-Lev" <alonbl at redhat.com>
> > > > > > > To: "Ondra Machacek" <omachace at redhat.com>
> > > > > > > Cc: jj197005 at gmail.com, users at ovirt.org, "Yair Zaslavsky" <
> > > > > > yzaslavs at redhat.com>
> > > > > > > Sent: Monday, November 24, 2014 1:49:11 PM
> > > > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > ----- Original Message -----
> > > > > > > > From: "Ondra Machacek" <omachace at redhat.com>
> > > > > > > > To: jj197005 at gmail.com
> > > > > > > > Cc: users at ovirt.org, "Yair Zaslavsky" <yzaslavs at redhat.com>,
> > > > > > > > "Alon
> > > > > > Bar-Lev"
> > > > > > > > <alonbl at redhat.com>
> > > > > > > > Sent: Monday, November 24, 2014 2:46:20 PM
> > > > > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5
> issue
> > > > > > > >
> > > > > > > > Please try to run your command with domain in lower case:
> > > > > > > >
> > > > > > > > engine-manage-domains add --domain=siee.local --provider=ad
> > > > > > > > --user=Administrator
> > > > > > >
> > > > > > > it is already added, won't it simpler to modify the
> vdc_options?
> > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > ----- Original Message -----
> > > > > > > > > From: "Alon Bar-Lev" <alonbl at redhat.com>
> > > > > > > > > To: "Juan Jose" <jj197005 at gmail.com>
> > > > > > > > > Cc: users at ovirt.org, "Yair Zaslavsky" <yzaslavs at redhat.com
> >,
> > > > "Ondra
> > > > > > > > > Machacek" <omachace at redhat.com>
> > > > > > > > > Sent: Monday, November 24, 2014 1:27:39 PM
> > > > > > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5
> issue
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Yes,
> > > > > > > > > I think we just fixed this[1].
> > > > > > > > > We can fix this manually, yair, ondra what is the easiest
> fix?
> > > > > > > > >
> > > > > > > > > BTW: you can also checkout the new ldap provider
> > > > > > > > > (ovirt-engine-extension-aaa-ldap) in 3.5 which should be
> much
> > > > more
> > > > > > > > > robust[1], I can help you set it up.
> > > > > > > > >
> > > > > > > > > [1] https://bugzilla.redhat.com/show_bug.cgi?id=1167211
> > > > > > > > > [2]
> > > > > > > > >
> > > > > >
> > > >
> http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD
> > > > > > > > >
> > > > > > > > > ----- Original Message -----
> > > > > > > > > > From: "Juan Jose" <jj197005 at gmail.com>
> > > > > > > > > > To: users at ovirt.org
> > > > > > > > > > Sent: Monday, November 24, 2014 2:22:44 PM
> > > > > > > > > > Subject: [ovirt-users] Adding domain to oVirt to 3.5
> issue
> > > > > > > > > >
> > > > > > > > > > Hello everybody,
> > > > > > > > > >
> > > > > > > > > > I have upgraded my oVirt 3.4 to 3.5 version without any
> > > > > > > > > > problem
> > > > > > > > > > apparently.
> > > > > > > > > >
> > > > > > > > > > After finish the upgrade I have tried to login with any
> of my
> > > > AD
> > > > > > users
> > > > > > > > > > from
> > > > > > > > > > my Samba 4, like I used to do in oVirt 3.4 but I received
> > > > > > > > > > authentication
> > > > > > > > > > errors as below error:
> > > > > > > > > >
> > > > > > > > > > 2014-11-21 14:06:02,681 ERROR
> > > > > > > > > >
> > > > > >
> > > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > > > > > > > > (ajp--127.0.0.1-8702-3) Kerberos error:
> Pre-authentication
> > > > > > information
> > > > > > > > > > was
> > > > > > > > > > invalid (24)
> > > > > > > > > > 2014-11-21 14:06:02,683 ERROR
> > > > > > > > > >
> > > > > >
> > > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.GSSAPIDirContextAuthenticationStrategy]
> > > > > > > > > > (ajp--127.0.0.1-8702-3) Authentication Failed. Please
> verify
> > > > the
> > > > > > > > > > username
> > > > > > > > > > and password.
> > > > > > > > > > 2014-11-21 14:06:02,685 ERROR
> > > > > > > > > >
> > > > > >
> > > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.DirectorySearcher]
> > > > > > > > > > (ajp--127.0.0.1-8702-3) Failed ldap search server
> > > > > > > > > > ldap://adserver.siee.local:389 using user
> juanjo at SIEE.LOCAL
> > > > due to
> > > > > > > > > > Authentication Failed. Please verify the username and
> > > > password.. We
> > > > > > > > > > should
> > > > > > > > > > not try the next server
> > > > > > > > > > 2014-11-21 14:06:02,688 ERROR
> > > > > > > > > >
> > > > > >
> > > >
> [org.ovirt.engine.extensions.aaa.builtin.kerberosldap.LdapBrokerCommandBase]
> > > > > > > > > > (ajp--127.0.0.1-8702-3) Failed to run command
> > > > > > > > > > LdapGetAdUserByUserNameCommand. Domain is siee.local.
> User is
> > > > > > > > > > juanjo at SIEE.LOCAL.
> > > > > > > > > > 2014-11-21 14:06:02,690 ERROR
> > > > > > > > > > [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand]
> > > > > > > > > > (ajp--127.0.0.1-8702-3) Error during CanDoActionFailure.:
> > > > Class:
> > > > > > class
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException
> > > > > > > > > > Input:
> > > > > > > > > > {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0,
> > > > > > > > > > Extkey[name=EXTENSION_LICENSE;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL
> > > > > > > > > > 2.0, Extkey[name=EXTENSION_HOME_URL;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]=
> > > > > > > > > > http://www.ovirt.org ,
> > > > > > > > > > Extkey[name=EXTENSION_LOCALE;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US,
> > > > > > > > > > Extkey[name=EXTENSION_NAME;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=Kerberos/Ldap
> > > > > > > > > > Authz (Built-in),
> > > > > > > > > > Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0,
> > > > > > > > > > Extkey[name=EXTENSION_CONFIGURATION;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***,
> > > > > > > > > > Extkey[name=EXTENSION_AUTHOR;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The
> > > > > > > > > > oVirt Project,
> > > > > > Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=100,
> > > > > > > > > > Extkey[name=EXTENSION_INSTANCE_NAME;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=siee.local,
> > > > > > > > > > Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0,
> > > > > > > > > > Extkey[name=AAA_AUTHZ_CAPABILITIES;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Long;uuid=AAA_AUTHZ_CAPABILITIES[6106d1fb-9291-4351-a947-b897b9540a23];]=1,
> > > > > > > > > >
> > > > Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface
> > > > > > > > > >
> > > > > >
> > > >
> java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[],
> > > > > > > > > > Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*,
> > > > > > > > > > Extkey[name=EXTENSION_VERSION;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=N/A,
> > > > > > > > > > Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface
> > > > > > > > > >
> > > > > >
> > > >
> java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[*],
> > > > > > > > > > Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface
> > > > > > > > > >
> > > > > >
> > > >
> org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.Kerberos/Ldap
> > > > > > > > > > Authz (Built-in).siee.local),
> > > > > > > > > > Extkey[name=EXTENSION_PROVIDES;type=interface
> > > > > > > > > >
> > > > > >
> > > >
> java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz]},
> > > > > > > > > > Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3,
> > > > > > > > > > Extkey[name=EXTENSION_INVOKE_COMMAND;type=class
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df],
> > > > > > > > > > Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=juanjo}}
> > > > > > > > > > Output:
> > > > > > > > > > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2,
> > > > > > > > > > Extkey[name=AAA_AUTHZ_STATUS;type=class
> > > > > > > > > >
> > > > > >
> > > >
> java.lang.Integer;uuid=AAA_AUTHZ_STATUS[566f0ba5-8329-4de1-952a-7a81e4bedd3e];]=1}
> > > > > > > > > >
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:91)
> > > > > > > > > > [extensions-manager.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.java:109)
> > > > > > > > > > [extensions-manager.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecordImpl(AuthzUtils.java:51)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.AuthzUtils.fetchPrincipalRecord(AuthzUtils.java:42)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.bll.aaa.LoginBaseCommand.isUserCanBeAuthenticated(LoginBaseCommand.java:234)
> > > > > > > > > > [bll.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand.canDoAction(LoginAdminUserCommand.java:15)
> > > > > > > > > > [bll.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.bll.CommandBase.internalCanDoAction(CommandBase.java:744)
> > > > > > > > > > [bll.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.bll.CommandBase.executeAction(CommandBase.java:338)
> > > > > > > > > > [bll.jar:]
> > > > > > > > > > at
> org.ovirt.engine.core.bll.Backend.login(Backend.java:575)
> > > > > > [bll.jar:]
> > > > > > > > > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
> > > > > > > > > > Method)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at java.lang.reflect.Method.invoke(Method.java:606)
> > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.ManagedReferenceMethodInterceptorFactory$ManagedReferenceMethodInterceptor.processInvocation(ManagedReferenceMethodInterceptorFactory.java:72)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.delegateInterception(Jsr299BindingsInterceptor.java:114)
> > > > > > > > > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.doMethodInterception(Jsr299BindingsInterceptor.java:125)
> > > > > > > > > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.weld.ejb.Jsr299BindingsInterceptor.processInvocation(Jsr299BindingsInterceptor.java:135)
> > > > > > > > > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext$Invocation.proceed(InterceptorContext.java:374)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.bll.interceptors.ThreadLocalSessionCleanerInterceptor.injectWebContextToThreadLocal(ThreadLocalSessionCleanerInterceptor.java:13)
> > > > > > > > > > [bll.jar:]
> > > > > > > > > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
> > > > > > > > > > Method)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at java.lang.reflect.Method.invoke(Method.java:606)
> > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.ManagedReferenceLifecycleMethodInterceptorFactory$ManagedReferenceLifecycleMethodInterceptor.processInvocation(ManagedReferenceLifecycleMethodInterceptorFactory.java:123)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.WeavedInterceptor.processInvocation(WeavedInterceptor.java:53)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.interceptors.UserInterceptorFactory$1.processInvocation(UserInterceptorFactory.java:36)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.weld.ejb.EjbRequestScopeActivationInterceptor.processInvocation(EjbRequestScopeActivationInterceptor.java:82)
> > > > > > > > > > [jboss-as-weld-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InitialInterceptor.processInvocation(InitialInterceptor.java:21)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.interceptors.ComponentDispatcherInterceptor.processInvocation(ComponentDispatcherInterceptor.java:53)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.component.singleton.SingletonComponentInstanceAssociationInterceptor.processInvocation(SingletonComponentInstanceAssociationInterceptor.java:53)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInNoTx(CMTTxInterceptor.java:211)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.supports(CMTTxInterceptor.java:363)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.tx.CMTTxInterceptor.processInvocation(CMTTxInterceptor.java:194)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.component.interceptors.CurrentInvocationContextInterceptor.processInvocation(CurrentInvocationContextInterceptor.java:41)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ejb3.component.interceptors.LoggingInterceptor.processInvocation(LoggingInterceptor.java:59)
> > > > > > > > > > [jboss-as-ejb3-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.NamespaceContextInterceptor.processInvocation(NamespaceContextInterceptor.java:50)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.TCCLInterceptor.processInvocation(TCCLInterceptor.java:45)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> org.jboss.as.ee.component.ViewService$View.invoke(ViewService.java:165)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.ViewDescription$1.processInvocation(ViewDescription.java:173)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.InterceptorContext.proceed(InterceptorContext.java:288)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.invocation.ChainedInterceptor.processInvocation(ChainedInterceptor.java:61)
> > > > > > > > > > [jboss-invocation-1.1.1.Final.jar:1.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.ee.component.ProxyInvocationHandler.invoke(ProxyInvocationHandler.java:72)
> > > > > > > > > > [jboss-as-ee-7.1.1.Final.jar:7.1.1.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.common.interfaces.BackendLocal$$$view7.login(Unknown
> > > > > > > > > > Source) [common.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.ui.frontend.server.gwt.GenericApiGWTServiceImpl.login(GenericApiGWTServiceImpl.java:183)
> > > > > > > > > > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native
> > > > > > > > > > Method)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> > > > > > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at java.lang.reflect.Method.invoke(Method.java:606)
> > > > > > [rt.jar:1.7.0_51]
> > > > > > > > > > at
> > > > > >
> com.google.gwt.rpc.server.RPC.invokeAndStreamResponse(RPC.java:196)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> com.google.gwt.rpc.server.RpcServlet.processCall(RpcServlet.java:172)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> com.google.gwt.rpc.server.RpcServlet.processPost(RpcServlet.java:233)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
> > > > > > > > > > at
> > > > > > > > > >
> javax.servlet.http.HttpServlet.service(HttpServlet.java:754)
> > > > > > > > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
> > > > > > > > > > at
> > > > > > > > > >
> javax.servlet.http.HttpServlet.service(HttpServlet.java:847)
> > > > > > > > > > [jboss-servlet-api_3.0_spec-1.0.0.Final.jar:1.0.0.Final]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.java:94)
> > > > > > > > > > [utils.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.ui.frontend.server.gwt.GwtCachingFilter.doFilter(GwtCachingFilter.java:132)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java:72)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.java:64)
> > > > > > > > > > [utils.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.filters.SessionMgmtFilter.doFilter(SessionMgmtFilter.java:31)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.filters.LoginFilter.doFilter(LoginFilter.java:73)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.filters.NegotiationFilter.doFilter(NegotiationFilter.java:131)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:75)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.ovirt.engine.core.aaa.filters.SessionValidationFilter.doFilter(SessionValidationFilter.java:63)
> > > > > > > > > > [aaa.jar:]
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:280)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:489)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> > > > > > > > > > at
> > > > org.jboss.web.rewrite.RewriteValve.invoke(RewriteValve.java:466)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368)
> > > > > > > > > > at
> > > > > > org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:505)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> > > >
> org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:445)
> > > > > > > > > > at
> > > > > > > > > >
> > > > > >
> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930)
> > > > > > > > > > at java.lang.Thread.run(Thread.java:744)
> [rt.jar:1.7.0_51]
> > > > > > > > > >
> > > > > > > > > > I have not changed any password from any of my AD users.
> > > > > > > > > >
> > > > > > > > > > I have removed from my oVirt 3.5 the domain with:
> > > > > > > > > >
> > > > > > > > > > engine-manage-domains delete --domain=siee.local
> > > > > > --user=Administrator
> > > > > > > > > >
> > > > > > > > > > And I have removed the domain without problems. But I
> want to
> > > > add
> > > > > > it
> > > > > > > > > > again
> > > > > > > > > > but I can't. I execute the bellow command, put the
> password
> > > > > > > > > > of
> > > > my
> > > > > > > > > > Administrator domain and I receive the error showed
> bellow:
> > > > > > > > > >
> > > > > > > > > > engine-manage-domains add --domain=SIEE.LOCAL
> --provider=ad
> > > > > > > > > > --user=Administrator
> > > > > > > > > > Enter password:
> > > > > > > > > > No user in Directory was found for
> Administrator at SIEE.LOCAL.
> > > > > > Trying
> > > > > > > > > > next
> > > > > > > > > > LDAP
> > > > > > > > > > server in list
> > > > > > > > > > Failure while testing domain siee.local. Details: No user
> > > > > > information
> > > > > > > > > > was
> > > > > > > > > > found for user
> > > > > > > > > >
> > > > > > > > > > The password that I use is correct because I can login
> with
> > > > user
> > > > > > > > > > Administrator in the domain siee.local through a Windows
> 7
> > > > > > Enterprise
> > > > > > > > > > client. All this issue comes after my upgrade to oVirt
> 3.5.
> > > > Does
> > > > > > > > > > someone
> > > > > > > > > > help me with this problem?. If more info is needed or
> logs,
> > > > please
> > > > > > ask
> > > > > > > > > > me.
> > > > > > > > > >
> > > > > > > > > > Many thanks in advanced,
> > > > > > > > > >
> > > > > > > > > > Juanjo
> > > > > > > > > >
> > > > > > > > > > _______________________________________________
> > > > > > > > > > Users mailing list
> > > > > > > > > > Users at ovirt.org
> > > > > > > > > > http://lists.ovirt.org/mailman/listinfo/users
> > > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > >
> > >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20141125/c609599f/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: AuthenticationError.png
Type: image/png
Size: 95697 bytes
Desc: not available
URL: <http://lists.ovirt.org/pipermail/users/attachments/20141125/c609599f/attachment-0001.png>


More information about the Users mailing list