| Summary: | cannot reset admin password, using ovirt-aaa-jdbc-tool | ||
|---|---|---|---|
| Product: | [oVirt] ovirt-engine | Reporter: | gzcwnk <thing.thing> |
| Component: | AAA | Assignee: | Ravi Nori <rnori> |
| Status: | CLOSED WORKSFORME | QA Contact: | Gonza <grafuls> |
| Severity: | urgent | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 4.0.4 | CC: | bugs, mperina, thing.thing |
| Target Milestone: | --- | Flags: | mperina:
needinfo?
(thing.thing) rule-engine: planning_ack? rule-engine: devel_ack? rule-engine: testing_ack? |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-10-31 09:47:24 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Infra | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
gzcwnk
2016-10-21 02:12:12 UTC
Cannot login, useraccount has expired, contact your system administrator, which , is um....me! This is on Centos 7.2 How do I upload a sosreport? Dont seem to be able to set a password, :( ======= [root@ovirt1 ovirt-engine]# engine-config -s AdminPassword=interactive Error setting AdminPassword's value. No such entry. [root@ovirt1 ovirt-engine]# ======= engine log, ======= 2016-10-21 15:49:16,935 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-53) [] Cannot authenticate user 'admin@internal': Cannot Login. User Account has expired, Please contact your system administrator. ======= Is the password set before or after the clock fix? After, as after changing the time back 1 hour I could not login. Hi, so oVirt is depending on correct and synchronised date/time setting. Anyway back to your issue: > [root@ovirt1 ovirt-engine]# ovirt-aaa-jdbc-tool user password-reset admin --password-valid-to='2300-10-22 22:22:22Z' > Password: > Reenter password: > new password already used You have specified the same password as currently set. By default we remember last 3 password (option PASSWORD_HISTORY_LIMIT), we require a password to be 6 characters long at least (option MIN_LENGTH). For more information about those options please take a look at: ovirt-aaa-jdbc-tool settings show Anyway if you don't want to change the default and just set the password bypassing the checks, please use --force option: ovirt-aaa-jdbc-tool user password-reset admin --password-valid-to='2300-10-22 22:22:22Z' --force > [root@ovirt1 ovirt-engine]# ovirt-aaa-jdbc-tool user password-reset admin --password-valid-to='2300-10-22 22:22:22Z' > Password: > Reenter password: > updating user admin... > user updated successfully This time you have probably entered different password, so password change was successful. But according to Comment 5, the problem is not in the password: > 2016-10-21 15:49:16,935 ERROR [org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default task-53) [] Cannot authenticate user 'admin@internal': Cannot Login. User Account has expired, Please contact your system administrator. Due to time shift you 'admin@internal' account has expired, you can verify that by executing: ovirt-aaa-jdbc-tool user show admin and check 'Account Valid From' and 'Account Valid To' dates (be aware that both are specified using UTC time). If you need to change those values please use --account-valid-from or --acount-valid-to options: ovirt-aaa-jdbc-tool user edit --account-valid-from='...' --acount-valid-to='...' You can find more information about ovirt-aaa-jdbc-tool at http://www.ovirt.org/develop/release-management/features/infra/aaa-jdbc/ One small correction: ovirt-aaa-jdbc-tool user edit admin --account-valid-from='...' --acount-valid-to='...' Closing this as WORKSFORME, feel free to reopen, if hints provided in above comments doesn't work for you. |