[ovirt-users] Problems to log into portal

[Yedidyah Bar David]

On Tue, Oct 24, 2017 at 5:19 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
> Thanks Yedidyah for your reply. The FQDN is correct:
>
> /etc/ovirt-engine/engine.conf.d/10-setup-protocols.conf:ENGINE_FQDN=ovirt01.tecnica.tnu.com.uy
>
> I managed to connect to the admin portal using a ssh tunnel, but I can't
> do it via a regular connection. Any other hint?

Not sure I follow.

How did you connect with the ssl tunnel?

Assuming you ssh from machine A (e.g. your laptop) to the engine
machine B using:

ssh -L 443:localhost:443 user at B

And then point a browser at https://localhost, if this works, it means that
the FQDN was set, during engine-setup, to 'localhost'.

If, OTOH, you used ovirt01.tecnica.tnu.com.uy both with and without the
tunnel (and with the tunnel, added '127.0.0.1 ovirt01.tecnica.tnu.com.uy'
to your local /etc/hosts, or something like that), then there should be
no difference.

Please explain in more details what worked, what didn't work, etc. Thanks.

Regards,

>
> Regards,
>
>
>
> El 23/10/17 a las 02:40, Yedidyah Bar David escribió:
>> On Mon, Oct 23, 2017 at 2:04 AM, Juan Pablo Lorier <jplorier at gmail.com> wrote:
>>> Hi,
>>>
>>> I'm trying to log into a fresh install (4.1 on centos 7) but though I've
>>> set the hostname-ip mapping in /etc/hosts of the server and my desktop,
>>> it keep complaining with the error:
>>>
>>> The client is not authorized to request an authorization. It's required
>>> to access the system using FQDN.
>>>
>>> Engine log shows the same error:
>>>
>>> ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-9) [] The
>>> client is not authorized to request an authorization. It's required to
>>> access the system using FQDN
>>>
>>> What else should I do to get access?
>> Do you use the exact same name you provided when prompted by engine-setup?
>>
>> Check this:
>>
>> grep ^ENGINE_FQDN /etc/ovirt-engine/engine.conf.d/*.conf
>>
>> If you want/need to use a different name, search the list archives
>> for "SSO_ALTERNATE_ENGINE_FQDNS".
>>
>> Regards,
>



-- 
Didi