Bug 1242366

Summary: Can not login RHEV-H after automatic installation with rhevm_admin_password parameter
Product: Red Hat Enterprise Virtualization Manager Reporter: cshao <cshao>
Component: ovirt-nodeAssignee: Douglas Schilling Landgraf <dougsland>
Status: CLOSED DUPLICATE QA Contact: Virtualization Bugs <virt-bugs>
Severity: urgent Docs Contact:
Priority: high    
Version: 3.5.4CC: cshao, dougsland, ecohen, fdeutsch, gklein, lsurette, mgoldboi, ycui, ylavi
Target Milestone: ovirt-3.6.0-rc3Keywords: TestBlocker, ZStream
Target Release: 3.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: node
Fixed In Version: ovirt-node-3.3.0-0.4.20150906git14a6024.el7ev Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1254510 (view as bug list) Environment:
Last Closed: 2015-10-09 05:58:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Node RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1254510    
Attachments:
Description Flags
rhevm_admin_password.tar.gz
none
0928-build-error none

Description cshao 2015-07-13 07:51:22 UTC
Description of problem:
Can not login RHEV-H after automatic installation with rhevm_admin_password parameter.

You are required to change your password immediately (root enforced)
WARNING: Your password has expired.
You must change your password now and login again!
Changing password for user admin.
Changing password for admin.
(current) UNIX password: 
New password: 
Retype new password: 
passwd: Authentication token manipulation error

Version-Release number of selected component (if applicable):
rhev-hypervisor7-7.1-20150709.0.el7ev + ovirt-node-3.2.3-11.el7.noarch
rhev-hypervisor6-6.7-20150707.0.el6ev + ovirt-node-3.2.3-11.el6.noarch

How reproducible:
100%

Steps to Reproduce:
1. Auto install RHEV-H with below parameters:
BOOTIF=xxx storage_init=/dev/sda adminpw=xxx ssh_pwauth=1 rhevm_admin_passowrd=xxx firstboot
2. Login the hypervisor.
3. Change password.

Actual results:
1. Can not login RHEV-H after automatic installation with rhevm_admin_password parameter

Expected results:
Can login RHEV-H after automatic installation with rhevm_admin_password parameter

Additional info:
Can login RHEV-H after automatic installation without rhevm_admin_password parameter.

Comment 2 cshao 2015-07-13 07:52:49 UTC
Created attachment 1051306 [details]
rhevm_admin_password.tar.gz

/var/log/*.*
sosreport

Comment 7 Fabian Deutsch 2015-07-24 12:30:37 UTC
This can actually be another symptom of the cause also causing bug 1246117.

Comment 8 Douglas Schilling Landgraf 2015-07-24 17:50:14 UTC
I have reproduced the report. As was used rhevm_admin_password param as soon I have reproduced I logged into the other shell and executed:

# audit2allow -a
#============= syslogd_t ==============
allow syslogd_t tmpfs_t:file read;


From audit.log
------------------
type=AVC msg=audit(1437759267.325:56): avc:  denied  { read } for  pid=1941 comm="rsyslogd" name="resolv.conf" dev="tmpfs" ino=16161 scontext=system_u:system_r:syslogd_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file

We already have a patch in upstream for such case:
https://gerrit.ovirt.org/#/c/39589/
https://gerrit.ovirt.org/#/c/41363/

Comment 9 Fabian Deutsch 2015-07-24 18:11:02 UTC
It is not sure that this is the only problem. Have you verified that the patches also fix this bug?

Please also see my comment 7

Comment 10 Douglas Schilling Landgraf 2015-07-24 20:13:38 UTC
(In reply to Fabian Deutsch from comment #9)
> It is not sure that this is the only problem. Have you verified that the
> patches also fix this bug?
> 
> Please also see my comment 7

Let me move to assign, I can give a test/build with both patches for the bugs and if there is something missing I will let you know.

Thanks!

Comment 11 Douglas Schilling Landgraf 2015-08-11 21:03:57 UTC
I cannot reproduce it anymore in our current 3.5 branch. This week we probably will build a new ISO, so I will share here for testing.

Comment 16 cshao 2015-10-08 07:37:06 UTC
I have to assigned this bug due to I still can reproduce this issue with below build.

Test version:
rhev-hypervisor7-7.2-20150928.0
ovirt-node-3.3.0-0.10.20150928gite7ee3f1.el7ev.noarch

Test steps:
1. Auto install RHEV-H with below parameters:
BOOTIF=xxx storage_init=/dev/sda adminpw=xxx ssh_pwauth=1 rhevm_admin_passowrd=xxx firstboot
2. Login the hypervisor.
3. Change password.

Test results:
1. Can not login RHEV-H after automatic installation with rhevm_admin_password parameter


You are required to change your password immediately (root enforced)
WARNING: Your password has expired.
You must change your password now and login again!
Changing password for user admin.
Changing password for admin.
(current) UNIX password: 
New password: 
Retype new password: 
passwd: Authentication token manipulation error

Comment 17 Fabian Deutsch 2015-10-08 11:07:46 UTC
This can be a dupe of bug 1251151.

Douglas, can you check this?

Comment 18 cshao 2015-10-09 05:20:19 UTC
Created attachment 1081188 [details]
0928-build-error

Attach the rhev-h 0928 build error screen shot for you reference.

Comment 19 cshao 2015-10-09 05:50:54 UTC
(In reply to Fabian Deutsch from comment #17)
> This can be a dupe of bug 1251151.

I think they are the same issue.

Comment 20 Fabian Deutsch 2015-10-09 05:58:26 UTC
I agree.

*** This bug has been marked as a duplicate of bug 1251151 ***