Bug 1192044

Summary:	admin is not authorized to log into webadmin after new db setup.
Product:	[Retired] oVirt	Reporter:	Vered Volansky <vered>
Component:	ovirt-engine-core	Assignee:	Eli Mesika <emesika>
Status:	CLOSED DUPLICATE	QA Contact:	Pavel Stehlik <pstehlik>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	3.6	CC:	alonbl, amureini, ecohen, emesika, gklein, iheim, lsurette, rbalakri, yeylon
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	infra
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-02-12 16:32:44 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Vered Volansky 2015-02-12 13:54:42 UTC

Description of problem:
When trying to work with a clean DB, either after dropdb or engine_cleanup on everything - can't log into webadmin.
I also tried overriding the password in the db directly for AdminPassword and LocalAdminPassrod, but still no go.

Version-Release number of selected component (if applicable):
master. Current master for me is: 
b6b9993120c887645c81e1343fe3dcc300d9d559
But this started happening for me yesterday.
My last rebase + setup prior to that was a week ago, maybe two.
Tested again with 109ef459deece93575c3e5c3c5625a2da4f05219 and that's still OK.

How reproducible:
100%

Steps to Reproduce:
1. drop db / engine_cleanup including db
2. run engine setup
3. start engine and try to connect as admin

Actual results:
Red user alert in webadmin:
"User is not authorized to perform this action."

Engine log:
2015-02-12 15:55:56,724 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (http--0.0.0.0-8080-1) [] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User admin@internal failed to log in.
2015-02-12 15:55:56,726 WARN  [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (http--0.0.0.0-8080-1) [] CanDoAction of action 'LoginAdminUser' failed for user admin@internal. Reasons: USER_NOT_AUTHORIZED_TO_PERFORM_ACTION

Comment 1 Allon Mureinik 2015-02-12 16:12:12 UTC

Eli, this seems like a possible duplicate of bug 1191204 which you are handling. Can you take a look at this one too please?

Comment 2 Alon Bar-Lev 2015-02-12 16:31:07 UTC

Root cause[1], 00100_insert_users.sql change.

[1] http://gerrit.ovirt.org/#/c/37668/

Comment 3 Alon Bar-Lev 2015-02-12 16:32:44 UTC


*** This bug has been marked as a duplicate of bug 1191204 ***