Bug 1789733
Summary: | Host console SSO not working at all! | ||||||
---|---|---|---|---|---|---|---|
Product: | [oVirt] ovirt-engine | Reporter: | Maciej Skrzetuski <m.skrzetuski> | ||||
Component: | Frontend.WebAdmin | Assignee: | Liran Rotenberg <lrotenbe> | ||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Beni Pelled <bpelled> | ||||
Severity: | high | Docs Contact: | |||||
Priority: | unspecified | ||||||
Version: | 4.3.7.0 | CC: | bpelled, bugs, michal.skrivanek, rbarry | ||||
Target Milestone: | ovirt-4.4.0 | Flags: | pm-rhel:
ovirt-4.4+
|
||||
Target Release: | --- | ||||||
Hardware: | x86_64 | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | ovirt-cockpit-sso-0.1.3 | Doc Type: | No Doc Update | ||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2020-05-20 20:02:17 UTC | Type: | Bug | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | Virt | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | 1826248 | ||||||
Bug Blocks: | |||||||
Attachments: |
|
Description
Maciej Skrzetuski
2020-01-10 09:53:31 UTC
The start.sh script of the SSO service has errors. usr/share/ovirt-cockpit-sso/start.sh ++ rpm -q --queryformat '%{VERSION}' cockpit-ws + COCKPIT_VERSION=195.1 + echo Installed cockpit version: 195.1 Installed cockpit version: 195.1 + '[' 195.1 -ge 140 ']' /usr/share/ovirt-cockpit-sso/start.sh: line 10: [: 195.1: integer expression expected + logger Installed cockpit-ws version is 195.1 but at least 140 is required. Cockpit-ovirt-sso will be effectively disabled. + echo Installed Cockpit version 195.1 is old, at least 140 is required for ovirt-cockpit SSO Installed Cockpit version 195.1 is old, at least 140 is required for ovirt-cockpit SSO + tail -f /dev/null Even when fixed the single sign on is not working for me with "Authentication failed: internal-error: Error validating auth token" error in the web ui. The documentation text flag should only be set after 'doc text' field is provided. Please provide the documentation text and set the flag to '?' again. Can you please attach sos report from the host running the engine? This is on a private machine at home. Can I upload sos report privately somehow? I don't want to expose my hostnames. And can you provide sos reports for CentOS? sos is already included in CentOS. You can cleanup the reports using tools like https://github.com/soscleaner/soscleaner Created attachment 1651345 [details]
sosreport as requested (on clean ovirt install)
This is on a clean 4.3.7 install. Host console opens but login is requested so SSO is not working.
I just notice when I go to https://myhost.com:9090/machines then there is no connection to oVirt. When I enter myhost.com as FQDN and 443 as port then I get the error "Please provide valid oVirt engine fully qualified domain name (FQDN) and port (443 by default)". Beni, reproducible? Yes, Verified on: - RHV 4.3.9.4-11.el7 - Red Hat Enterprise Linux Server 7.8 (Maipo) - ovirt-cockpit-sso-0.1.1-1.el7.noarch (not sure is the right ) The ovirt-cockpit-sso wasn't installed so I installed http://people.redhat.com/mlibra/repos/ovirt-cockpit-sso/epel-7-x86_64/ovirt-cockpit-sso-0.1.1-1.el7.noarch.rpm, And the ovirt-cockpit-sso service doesn't start due to an issue with the COCKPIT_VERSION (float number): [root@ocelot05 ~]# bash /usr/share/ovirt-cockpit-sso/start.sh Installed cockpit version: 195.6 /usr/share/ovirt-cockpit-sso/start.sh: line 8: [: 195.6: integer expression expected Installed Cockpit version 195.6 is old, at least 140 is required for ovirt-cockpit SSO After I manually fixed the problem, I see two missing directory (and certificates) issues: [root@ocelot05 ~]# bash /usr/share/ovirt-cockpit-sso/start.sh Installed cockpit version: 195 Cockpit version check passed /usr/share/ovirt-cockpit-sso/start.sh: line 11: /var/run/ovirt-cockpit-sso/ovirt-cockpit-sso.pid: No such file or directory cockpit-ws: Error loading certificates from /usr/share/ovirt-cockpit-sso/config/cockpit/ws-certs.d: Error opening directory ?/usr/share/ovirt-cockpit-sso/config/cockpit/ws-certs.d?: No such file or directory Worth a try with https://resources.ovirt.org/pub/ovirt-master-snapshot/rpm/el7/noarch/ovirt-cockpit-sso-0.1.2-1.el7.noarch.rpm Same issues with ovirt-cockpit-sso-0.1.2-1.el7.noarch Verified with: - ovirt-engine-4.4.0-0.37.master.el8ev.noarch - ovirt-cockpit-sso-0.1.4-1.el8ev.noarch - libvirt-6.0.0-17.module+el8.2.0+6257+0d066c28.x86_64 - vdsm-4.40.14-1.el8ev.x86_64 Verification steps: 1. Make sure 'ovirt-cockpit-sso.service' is running on the engine 2. Go to the Hosts window, select one of the hosts and select 'Host Console' Result: - A new windows opens for the cockpit service - authenticated by SSO PS> The cockpit service page presents 'Not Found' but it has nothing with this bug. This bugzilla is included in oVirt 4.4.0 release, published on May 20th 2020. Since the problem described in this bug report should be resolved in oVirt 4.4.0 release, it has been closed with a resolution of CURRENT RELEASE. If the solution does not work for you, please open a new bug report. |