Bug 1143041 - Plugin prompts for authentication of engine user
Summary: Plugin prompts for authentication of engine user
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: ovirt-engine
Classification: oVirt
Component: Frontend.WebAdmin
Version: ---
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ovirt-3.6.0-rc
: 3.6.0
Assignee: Ramesh N
QA Contact: RamaKasturi
URL:
Whiteboard:
Depends On:
Blocks: 1144018
TreeView+ depends on / blocked
 
Reported: 2014-09-17 19:30 UTC by Ravi Nori
Modified: 2016-02-12 09:54 UTC (History)
10 users (show)

Fixed In Version: 3.6.0-9
Clone Of:
: 1144018 (view as bug list)
Environment:
Last Closed: 2016-02-12 09:54:01 UTC
oVirt Team: Gluster
Embargoed:
rule-engine: ovirt-3.6.0+
ylavi: planning_ack+
rule-engine: devel_ack+
knarra: testing_ack+


Attachments (Terms of Use)
Authentication popup (79.36 KB, application/octet-stream)
2014-09-17 19:30 UTC, Ravi Nori
no flags Details


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 35065 0 None None None Never

Description Ravi Nori 2014-09-17 19:30:29 UTC
Created attachment 938616 [details]
Authentication popup

Description of problem: Plugin prompt admin for password


Version-Release number of selected component (if applicable): 3.5


How reproducible: 


Steps to Reproduce:
1. Install plugin following instructions on http://www.ovirt.org/Features/Nagios_Integration#HOW_TO
2. Refresh webadmin
3. Click on trends tab

Actual results: User is prompted for authentication


Expected results: User should be automatically authenticated


Additional info:

Comment 1 Sahina Bose 2014-09-18 05:41:56 UTC
SSO to be setup between ovirt-engine and nagios to address this.

Comment 2 Vojtech Szocs 2014-09-18 11:36:03 UTC
"Auth required" screenshot mentions "ENGINE" so I assume this is related to UI plugin attempting to request Engine REST API.

I've discussed a similar issue with Ramesh (Gluster monitoring via Nagios UI plugin). Very likely, the problem is that UI plugin requests:

  /api/xxx

instead of:

  /ovirt-engine/api/xxx

Upon WebAdmin login, UI plugin infra acquires REST API session (represented by JSESSIONID cookie) for /ovirt-engine/api, so UI plugins must make sure to use /ovirt-engine/api in order for that cookie to be sent along request.

Long story short, maintainer of this UI plugin should ensure that requests are using /ovirt-engine/api prefix.

If the problem persists, please post browser network monitor logs for given request (auth popup is consequence of HTTP 401 request).

Comment 3 Ramesh N 2014-09-18 13:06:11 UTC
This issue is because of using wrong api as in previous comment by vszocs. We should change the url to /ovirt-engine/api.

Comment 4 Vojtech Szocs 2014-09-19 12:15:57 UTC
As discussed with Ramesh, please also ensure that any request to REST backend includes "Prefer: persistent-auth" header, so that the shared REST session isn't closed and therefore other plugins/infra won't break.

Comment 5 Eyal Edri 2015-08-13 10:36:58 UTC
moving old bug fixed before ovirt alpha release as fixed in current beta2, 
3.6.0-9.

Comment 6 RamaKasturi 2016-02-12 09:54:01 UTC
closing this bug as it is fixed. Please reopen if you see this issue


Note You need to log in before you can comment on or make changes to this bug.