[ovirt-users] admin account constantly gets locked

[Käfer Marcel]

Hello,

a few days ago I installed an ovirt-engine 4.2.2.6 following the steps of the documentation. After the installation I logged in to the admin page, configured a datadomain and changed the admin password. After a few hours I tried to login again, using the new password and got "Unable to log in because the user account is disabled or locked. Contact the system administrator." So I unlocked the admin account from the shell using "ovirt-aaa-jdbc-tool user unlock admin" which worked fine and I was able to continue working till the next login.

I traced the /var/log/ovirt-engine/engine.log and found this after unlocking the admin account again.

2018-04-12 09:06:19,984+02 INFO  [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Lock Acquired to object 'EngineLock:{exclusiveLocks='[e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=PROVIDER]', sharedLocks=''}'
2018-04-12 09:06:19,991+02 INFO  [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Running command: SyncNetworkProviderCommand internal: true.
2018-04-12 09:06:20,102+02 INFO  [org.ovirt.engine.extension.aaa.jdbc.core.Authentication] (default task-239) [] locking user: admin due to interval failures
2018-04-12 09:06:25,046+02 ERROR [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-239) [] OAuthException access_denied: Cannot authenticate user 'admin at internal': The username or password is incorrect..
2018-04-12 09:06:25,049+02 ERROR [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Command 'org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand' failed: EngineException: (Failed with error Unauthorized and code 5050)
2018-04-12 09:06:25,050+02 INFO  [org.ovirt.engine.core.bll.provider.network.SyncNetworkProviderCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-87) [2ed5aa42] Lock freed to object 'EngineLock:{exclusiveLocks='[e37c0b9e-09bc-4893-9b0c-c70f56d6ecfc=PROVIDER]', sharedLocks=''}'

It seems like the SyncNetworkProviderCommand is somehow locking the admin account. I already restarted the whole machine but it didn't help.

Can someone please point me in the right direction, where to find the error?

Thanks in advance
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20180412/88524160/attachment.html>