Bug 1143041

Summary: Plugin prompts for authentication of engine user
Product: [oVirt] ovirt-engine Reporter: Ravi Nori <rnori>
Component: Frontend.WebAdminAssignee: Ramesh N <rnachimu>
Status: CLOSED CURRENTRELEASE QA Contact: RamaKasturi <knarra>
Severity: medium Docs Contact:
Priority: medium    
Version: ---CC: bugs, gklein, knarra, mgoldboi, rbalakri, rnachimu, sabose, vszocs, yeylon, ykaul
Target Milestone: ovirt-3.6.0-rcFlags: rule-engine: ovirt-3.6.0+
ylavi: planning_ack+
rule-engine: devel_ack+
knarra: testing_ack+
Target Release: 3.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 3.6.0-9 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1144018 (view as bug list) Environment:
Last Closed: 2016-02-12 09:54:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Gluster RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1144018    
Attachments:
Description Flags
Authentication popup none

Description Ravi Nori 2014-09-17 19:30:29 UTC 
Created attachment 938616 [details]
Authentication popup

Description of problem: Plugin prompt admin for password


Version-Release number of selected component (if applicable): 3.5


How reproducible: 


Steps to Reproduce:
1. Install plugin following instructions on http://www.ovirt.org/Features/Nagios_Integration#HOW_TO
2. Refresh webadmin
3. Click on trends tab

Actual results: User is prompted for authentication


Expected results: User should be automatically authenticated


Additional info:
Comment 1 Sahina Bose 2014-09-18 05:41:56 UTC 
SSO to be setup between ovirt-engine and nagios to address this.
Comment 2 Vojtech Szocs 2014-09-18 11:36:03 UTC 
"Auth required" screenshot mentions "ENGINE" so I assume this is related to UI plugin attempting to request Engine REST API.

I've discussed a similar issue with Ramesh (Gluster monitoring via Nagios UI plugin). Very likely, the problem is that UI plugin requests:

  /api/xxx

instead of:

  /ovirt-engine/api/xxx

Upon WebAdmin login, UI plugin infra acquires REST API session (represented by JSESSIONID cookie) for /ovirt-engine/api, so UI plugins must make sure to use /ovirt-engine/api in order for that cookie to be sent along request.

Long story short, maintainer of this UI plugin should ensure that requests are using /ovirt-engine/api prefix.

If the problem persists, please post browser network monitor logs for given request (auth popup is consequence of HTTP 401 request).
Comment 3 Ramesh N 2014-09-18 13:06:11 UTC 
This issue is because of using wrong api as in previous comment by vszocs. We should change the url to /ovirt-engine/api.
Comment 4 Vojtech Szocs 2014-09-19 12:15:57 UTC 
As discussed with Ramesh, please also ensure that any request to REST backend includes "Prefer: persistent-auth" header, so that the shared REST session isn't closed and therefore other plugins/infra won't break.
Comment 5 Eyal Edri 2015-08-13 10:36:58 UTC 
moving old bug fixed before ovirt alpha release as fixed in current beta2, 
3.6.0-9.
Comment 6 RamaKasturi 2016-02-12 09:54:01 UTC 
closing this bug as it is fixed. Please reopen if you see this issue