[ovirt-users] Re: oVirt Version 4.2.3.5-1.el7.centos cannot change password from user (Bad Request)

2018-06-10 Thread Alejandro Cortina 
Hi Martin,

thanks for the link. That worked, if you need here are the logs (removed
org.ovirt.engine.core.vdsbroker.gluster* and
org.ovirt.engine.core.bll.lock.InMemoryLockManager*, etc):


2018-06-08 13:33:44,453+09 INFO
[org.ovirt.engine.core.bll.aaa.AddUserCommand] (default task-15)
[588403fe-0957-48dc-87fa-60bdb618953c] Running command: AddUserCommand
internal: false. Entities affected :  ID:
aaa0----123456789aaa Type: SystemAction group
MANIPULATE_USERS with role type ADMIN
2018-06-08 13:33:44,482+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-15) [588403fe-0957-48dc-87fa-60bdb618953c] EVENT_ID:
USER_ADD(149), User 'svc_foreman' was added successfully to the system.
2018-06-08 13:35:05,631+09 INFO
[org.ovirt.engine.core.bll.AddSystemPermissionCommand]
(EE-ManagedThreadFactory-engine-Thread-115246)
[e5f309f8-c349-4244-b2a6-94d8ef187b0c] Running command:
AddSystemPermissionCommand internal: false. Entities affected :  ID:
aaa0----123456789aaa Type: SystemAction group
MANIPULATE_PERMISSIONS with role type USER,  ID:
aaa0----123456789aaa Type: SystemAction group
ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER
2018-06-08 13:35:05,666+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(EE-ManagedThreadFactory-engine-Thread-115246)
[e5f309f8-c349-4244-b2a6-94d8ef187b0c] EVENT_ID:
USER_ADD_SYSTEM_PERMISSION(866), User/Group svc_foreman was granted
permission for Role ReadOnlyAdmin on System by admin@internal-authz.
2018-06-08 13:35:14,756+09 INFO
[org.ovirt.engine.core.bll.aaa.LogoutSessionCommand] (default task-16)
[5de285fc] Running command: LogoutSessionCommand internal: false.
2018-06-08 13:35:14,768+09 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-16) [5de285fc] EVENT_ID: USER_VDC_LOGOUT(31), User
admin@internal-authz connected from 'IP_FOREMAN' using session
'J/o5sSeEdvL7qPnoF16wGQHZ61Kc0NvfQ+/s9GdvDufSkPdO0kc0gJ31OYBCUF+dQTWTGVBc3LZow/S3DIBSEA=='
logged out.
2018-06-08 13:35:14,784+09 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-14)
[] User admin@internal successfully logged out
2018-06-08 13:35:14,794+09 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-17) [2c86b5cf] Running command: TerminateSessionsForTokenCommand
internal: true.
2018-06-08 13:35:36,087+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-42) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. Change the
password to proceed.'.
2018-06-08 13:35:36,087+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-19) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. Change the password to proceed.
2018-06-08 13:36:06,094+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-50) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'UNKNOWN' failed to log in : 'Unable
to log in because the password has expired. Change the
password to proceed.'.
2018-06-08 13:36:06,095+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-49) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'UNKNOWN': Unable to log in because the password has expired. Change the password to proceed.
2018-06-08 13:39:01,638+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-40) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. Change the
password to proceed.'.
2018-06-08 13:39:01,639+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-64) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. Change the password to proceed.
2018-06-08 13:44:06,575+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-16) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
svc_foreman@internal connecting from 'IP_FOREMAN' failed to log in :
'Unable to log in because the password has expired. Change the
password to proceed.'.
2018-06-08 13:44:06,576+09 ERROR
[org.ovirt.engine.core.sso.servlets.InteractiveAuthServlet] (default
task-14) [] Cannot authenticate user 'svc_foreman@internal' connecting from
'IP_FOREMAN': Unable to log in because the password has expired. Change the password to proceed.
2018-06-08 13:50:36,239+09 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(default task-17) [] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User
bot_virt-who@internal

[ovirt-users] Re: oVirt Version 4.2.3.5-1.el7.centos cannot change password from user (Bad Request)

2018-06-08 Thread Martin Perina 
On Fri, Jun 8, 2018 at 6:47 AM, Alejandro Cortina <
alejandro.corti...@gmail.com> wrote:

> Hi there,
>
> I have created a new user from hosted engine by:
>
> ovirt-aaa-jdbc-tool user add test_user --attribute=description='test user'
> --attribute=firstName=test_user
> ovirt-aaa-jdbc-tool user password-reset test_user --password=pass:changeme
>

​You need to specify password expiration date, otherwise it's expired at
the same moment you set it. Please take a look at [1]
​

>
> then I try to login and I get the message:
>
>  *Unable to log in because the password has expired. Change the password
> to proceed. *
>
> When I click "Change the password" the browser redirects to:
>
> https://FQDN/ovirt-engine/sso/%s
>
> and I get
>
>
>
>
> *Bad RequestYour browser sent a request that this server could not
> understand.*
>
> Last time I tried with 4.2.1 and it was working with no issues.
>

​Could you please share engine.log so we can get more details about the
issue?
​

Thanks

Martin

​[1]
https://www.ovirt.org/develop/release-management/features/infra/aaa-jdbc/#password-management
​


> Cheers,
>
> Alex
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-
> guidelines/
> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/
> message/JALESO5IC4PMEJPX5UMOZUZPKSC2SDYT/
>
>



-- 
Martin Perina
Associate Manager, Software Engineering
Red Hat Czech s.r.o.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KCQPFZNUO2C3IV3DLB5QARREZCUSR3BG/