[ovirt-users] Re: Need to renew ovirt engine certificate

2024-01-15 Thread Cyril VINH-TUNG
Hello Just launch engine-setup --offline It will detect the certificate expiration and ask you to renew Cyril VINH-TUNG INVITU Computer & Network Engineering BP 32 - 98713 Papeete - French Polynesia Tél: +689 40 46 11 99 cont...@invitu.com www.invitu.com Le lun.

[ovirt-users] Need to renew ovirt engine certificate

2024-01-15 Thread Sachendra Shukla
Hi Team, The oVirt Engine certificate is scheduled to expire on February 1, 2024. Consequently, we need to initiate the certificate upgrade process. Could you please share the steps and process for the certificate upgrade? I have attached a snapshot below for your reference. [image: image.png]

[ovirt-users] oVirt nodes with local storage

2024-01-15 Thread Wild Star
On the weekend I upgraded my self-hosted oVirt engine to 4.56. All went well with that! I also spotted that there was an update for all my 4.54 nodes, but something has changed with the repo overnight because none of my nodes see updates anymore, though the update remains available here …

[ovirt-users] Re: Internal pentest result : Ovirt-engine authentication bypass

2024-01-15 Thread Sandro Bonazzola
Thanks for the report Jirka, I forwarded your email to secur...@ovirt.org ; they'll investigate on your report and get back to you eventually. Il giorno lun 15 gen 2024 alle ore 10:09 Jirka Simon ha scritto: > Hello ovirt comunity. > > We had an internal pentest here and one finding is > >

[ovirt-users] Internal pentest result : Ovirt-engine authentication bypass

2024-01-15 Thread Jirka Simon
Hello ovirt comunity. We had an internal pentest here and one finding is *Ovirt-engine authentication bypass.* Ovirt-engine, as deployed on ovirtm.XXX.XXX.cz, contains an authentication bypass. It is possible to directly call the CreateUserSessionCommand using runAction exposed by /ovirt-