Bug 1344272
| Summary: | Failed to execute login on behalf - for user admin. | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [oVirt] ovirt-engine | Reporter: | Nikolai Sednev <nsednev> | ||||||
| Component: | Backend.Core | Assignee: | Ravi Nori <rnori> | ||||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Nikolai Sednev <nsednev> | ||||||
| Severity: | high | Docs Contact: | |||||||
| Priority: | high | ||||||||
| Version: | 4.0.0 | CC: | bugs, dfediuck, mavital, michal.skrivanek, mperina, nsednev, rnori | ||||||
| Target Milestone: | ovirt-4.0.1 | Keywords: | Regression, Triaged | ||||||
| Target Release: | 4.0.0 | Flags: | rule-engine:
ovirt-4.0.z+
rule-engine: blocker+ rule-engine: planning_ack+ mperina: devel_ack+ mavital: testing_ack+ |
||||||
| Hardware: | x86_64 | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2016-07-19 06:26:31 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | Infra | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | |||||||||
| Bug Blocks: | 1281283, 1328854 | ||||||||
| Attachments: |
|
||||||||
|
Description
Nikolai Sednev
2016-06-09 09:55:45 UTC
Created attachment 1166228 [details]
sosreport from host alma03
Created attachment 1166229 [details]
sosreport from engine
External link for sosreport from second host alma04 provided here, because of Bugzilla file size limitations: https://drive.google.com/a/redhat.com/file/d/0B85BEaDBcF88RVRHLURlcmVQNUk/view?usp=sharing If you see error in engine log why are you pasting tons of data _other_ than e.g. excerpt from engine.log or webadmin events? I was able to reproduce it and as far as I can tell it looks ok in vmconsole code, LoginOnBehalfCommand is invoked with the right userGuid which does exist. It looks like the command is simply failing when invoked from the vmconsole servlet now. (In reply to Michal Skrivanek from comment #4) > If you see error in engine log why are you pasting tons of data _other_ than > e.g. excerpt from engine.log or webadmin events? I see several errors and providing fully detailed logs, so nothing will be missing, especially as my environment is running on top of the HE, and there are several related components on hosts and engine like ovirt-vmconsole-proxy-sshd service on engine and ovirt-vmconsole-host-sshd service on hosts. Using SSH to a physical machine and to a VM should work the same. Are you sure this is related to HE and will not happen on non-HE setup? (In reply to Doron Fediuck from comment #7) > Using SSH to a physical machine and to a VM should work the same. > Are you sure this is related to HE and will not happen on non-HE setup? Its not related to HE only, but was seen first on it. The authentication AAA component, which being used by serial-console is not working properly. This bug report has Keywords: Regression or TestBlocker. Since no regressions or test blockers are allowed between releases, it is also being identified as a blocker for this release. Please resolve ASAP. Moving back to POST, this needs to be backported to ovirt-engine-4.0 Please specify in which version of ovirt-engine this bug was fixed. Works for me on these components on host: ovirt-setup-lib-1.0.2-1.el7ev.noarch qemu-kvm-rhev-2.3.0-31.el7_2.16.x86_64 mom-0.5.4-1.el7ev.noarch rhev-release-4.0.0-19-001.noarch vdsm-4.18.4-2.el7ev.x86_64 ovirt-vmconsole-host-1.0.3-1.el7ev.noarch ovirt-hosted-engine-ha-2.0.0-1.el7ev.noarch ovirt-engine-sdk-python-3.6.7.0-1.el7ev.noarch libvirt-client-1.2.17-13.el7_2.5.x86_64 ovirt-host-deploy-1.5.0-1.el7ev.noarch ovirt-hosted-engine-setup-2.0.0.2-1.el7ev.noarch sanlock-3.2.4-2.el7_2.x86_64 ovirt-vmconsole-1.0.3-1.el7ev.noarch rhev-release-4.0.1-1-001.noarch Linux version 3.10.0-327.22.2.el7.x86_64 (mockbuild.eng.bos.redhat.com) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC) ) #1 SMP Thu Jun 9 10:09:10 EDT 2016 Linux 3.10.0-327.22.2.el7.x86_64 #1 SMP Thu Jun 9 10:09:10 EDT 2016 x86_64 x86_64 x86_64 GNU/Linux Red Hat Enterprise Linux Server release 7.2 (Maipo) Engine: rhevm-doc-4.0.0-2.el7ev.noarch rhevm-setup-plugins-4.0.0.1-1.el7ev.noarch rhevm-spice-client-x64-msi-4.0-2.el7ev.noarch rhevm-4.0.2-0.2.rc1.el7ev.noarch rhev-release-4.0.0-19-001.noarch rhev-release-4.0.1-1-001.noarch rhevm-guest-agent-common-1.0.12-2.el7ev.noarch rhevm-dependencies-4.0.0-1.el7ev.noarch rhevm-branding-rhev-4.0.0-2.el7ev.noarch rhevm-spice-client-x86-msi-4.0-2.el7ev.noarch rhev-guest-tools-iso-4.0-2.el7ev.noarch Linux version 3.10.0-327.22.2.el7.x86_64 (mockbuild.eng.bos.redhat.com) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC) ) #1 SMP Thu Jun 9 10:09:10 EDT 2016 Linux 3.10.0-327.22.2.el7.x86_64 #1 SMP Thu Jun 9 10:09:10 EDT 2016 x86_64 x86_64 x86_64 GNU/Linux Red Hat Enterprise Linux Server release 7.2 (Maipo) I've successfully established serial-console connectivity with one of the VMs, that was running on host and my user passed authentication on engine. It should be in 4.0.1 Since the problem described in this bug report should be resolved in oVirt 4.0.1 released on July 19th 2016, it has been closed with a resolution of CURRENT RELEASE. For information on the release, and how to update to this release, follow the link below. If the solution does not work for you, open a new bug report. http://www.ovirt.org/release/4.0.1/ |