[ovirt-users] ovirtvm-console : Failed to execute login on behalf - for user

[Ravi Nori]

Hi,

Can you enable debug logging for sso and give me the debug logs when the
error occurs.

You can enable debug logging for sso by adding the following to
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in, just
below the entry for bll

       <logger category="org.ovirt.engine.core.sso">
        <level name="DEBUG"/>
      </logger>

Thanks

On Wed, Mar 29, 2017 at 3:21 AM, Francesco Romani <fromani at redhat.com>
wrote:

> Hi,
>
> On 03/02/2017 12:21 PM, Eduardo Mayoral wrote:
>
> Hi,
>
>     I am getting exactly the same issue here with 4.1 , when trying to log
> in to the serial console over SSH.
>
>
> The user with domain is "emayoral_adm at arsyslan.es"
> <emayoral_adm at arsyslan.es> (please note mailman may translate the "at"
> character to a textual "_at_"). The First name and last name as read from
> active directory is "Eduardo Mayoral" (with no quotes)
>
> The password is: 08.HJYqoce,nrW (OK, this is not the real password, but it
> has the same special characters and approximate structure and length)
>
> This is the engine.log output.
>
> 2017-03-02 11:13:31,917Z INFO  [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand]
> (default task-25) [5d9b7d18] Running command: LoginOnBehalfCommand
> internal: true.
> 2017-03-02 11:13:31,938Z ERROR [org.ovirt.engine.core.sso.utils.SsoUtils]
> (default task-33) [] OAuthException server_error: java.text.ParseException:
> Invalid character ' ' encountered.
> 2017-03-02 11:13:31,939Z ERROR [org.ovirt.engine.core.bll.aaa.LoginOnBehalfCommand]
> (default task-25) [5d9b7d18] Unable to create engine session:
> EngineException:  user emayoral_adm at arsyslan.es in domain
> 'arsyslan.es-authz (Failed with error PRINCIPAL_NOT_FOUND and code 5200)
> 2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.dal.
> dbbroker.auditloghandling.AuditLogDirector] (default task-25) [5d9b7d18]
> EVENT_ID: USER_LOGIN_ON_BEHALF_FAILED(1,402), Correlation ID: 5d9b7d18,
> Call Stack: null, Custom Event ID: -1, Message: Failed to execute login on
> behalf - for user emayoral_adm at arsyslan.es.
> 2017-03-02 11:13:31,945Z ERROR [org.ovirt.engine.core.services.VMConsoleProxyServlet]
> (default task-25) [5d9b7d18] Error processing request: :
> java.lang.RuntimeException: Unable to create session using LoginOnBehalf
>
>
> This smells like one engine internal bug. Please make sure to file one
> bugzilla entry.
>
> Bests,
>
> --
> Francesco Romani
> Senior SW Eng., Virtualization R&D
> Red Hat
> IRC: fromani github: @fromanirh
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20170329/464ce644/attachment.html>