[ovirt-users] oVirt Metrics Store Installation - Error during SSO authentication

[Markus Schaufler]

Hi,

oVirt 4.3.5
changed certificate to one from an official CA
configured active directory auth
no kerberos / no ldapS

as per: 
https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.3/html-single/metrics_store_installation_guide/index#Installing_metrics_store

ANSIBLE_JINJA2_EXTENSIONS="jinja2.ext.do" 
./configure_ovirt_machines_for_metrics.sh 
--playbook=ovirt-metrics-store-installation.yml --ask-vault-pass -


During installation of the metrics store following error appears:

TASK [oVirt.image-template : Login to oVirt] 
*
task path: 
/usr/share/ansible/roles/ovirt.image-template/tasks/qcow2_image.yml:41
 ESTABLISH LOCAL CONNECTION FOR USER: root
 EXEC /bin/sh -c 'echo ~root && sleep 0'
 EXEC /bin/sh -c '( umask 77 && mkdir -p "` echo 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944 `" && echo 
ansible-tmp-1571121133.7-63276692983944="` echo 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944 `" ) && sleep 0'
Using module file 
/usr/lib/python2.7/site-packages/ansible/modules/cloud/ovirt/ovirt_auth.py
 PUT /root/.ansible/tmp/ansible-local-32046wbKds4/tmpyM5Ro2 TO 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944/AnsiballZ_ovirt_auth.py
 EXEC /bin/sh -c 'chmod u+x 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944/ 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944/AnsiballZ_ovirt_auth.py
 && sleep 0'
 EXEC /bin/sh -c '/usr/bin/python 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944/AnsiballZ_ovirt_auth.py
 && sleep 0'
 EXEC /bin/sh -c 'rm -f -r 
/root/.ansible/tmp/ansible-tmp-1571121133.7-63276692983944/ > /dev/null 2>&1 && 
sleep 0'
The full traceback is:
Traceback (most recent call last):
  File "/tmp/ansible_ovirt_auth_payload_2cmBY9/__main__.py", line 276, in main
token = connection.authenticate()
  File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 382, in 
authenticate
self._sso_token = self._get_access_token()
  File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 628, in 
_get_access_token
sso_error[1]
AuthError: Error during SSO authentication access_denied : Cannot authenticate 
user 'xxx@.LOCAL': No valid profile found in credentials..

fatal: [localhost]: FAILED! => {
"changed": false,
"invocation": {
"module_args": {
"ca_file": "/etc/pki/ovirt-engine/apache-ca.pem",
"compress": true,
"headers": null,
"hostname": "ovirt-poc..at",
"insecure": false,
"kerberos": false,
"ovirt_auth": null,
"password": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
"state": "present",
"timeout": 0,
"token": null,
"url": "https://ovirt-poc..at/ovirt-engine/api;,
"username": "xxx@xxx.LOCAL"
}
},
"msg": "Error during SSO authentication access_denied : Cannot authenticate 
user 'xxx@xxx.LOCAL': No valid profile found in credentials.."
}

TASK [oVirt.image-template : Remove downloaded image] 

task path: 
/usr/share/ansible/roles/ovirt.image-template/tasks/qcow2_image.yml:210
skipping: [localhost] => {
"changed": false,
"skip_reason": "Conditional result was False"
}

TASK [oVirt.image-template : Remove vm] 
**
task path: 
/usr/share/ansible/roles/ovirt.image-template/tasks/qcow2_image.yml:216
fatal: [localhost]: FAILED! => {
"msg": "The conditional check 'ovirt_templates | length == 0' failed. The 
error was: error while evaluating conditional (ovirt_templates | length == 0): 
'ovirt_templates' is undefined\n\nThe error appears to be in 
'/usr/share/ansible/roles/ovirt.image-template/tasks/qcow2_image.yml': line 
216, column 7, but may\nbe elsewhere in the file depending on the exact syntax 
problem.\n\nThe offending line appears to be:\n\n\n- name: Remove vm\n  
^ here\n"
}

###


Double-checked the credentials in "metrics-store-config.yml" and 
"secure_vars.yaml" and tried with admin@internal with same error. 

Any hints on this?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/TN72E7YVV3EGO2UKYAIU35KSA6QEA5QO/

[ovirt-users] oVirt Metrics Store installation

[Markus Schaufler]

Hi!

I'm having trouble installing the oVirt Metrics Store following this 
https://www.ovirt.org/develop/release-management/features/metrics/metrics-store-installation/
 respectively this guide 
https://www.ovirt.org/develop/release-management/features/metrics/setting-up-viaq-logging/

When executing the test script
ANSIBLE_LOG_PATH=/tmp/ansible-prereq.log ansible-playbook -vvv -e 
@/root/vars.yaml -i /root/ansible-inventory-origin-39-aio 
playbooks/prerequisites.yml

following error occurs:


Using module file 
/usr/lib/python2.7/site-packages/ansible/modules/packaging/os/yum.py
 EXEC /bin/sh -c '/usr/bin/python && sleep 0'
fatal: [localhost]: FAILED! => {
"attempts": 3,
"changed": false,
"invocation": {
"module_args": {
"allow_downgrade": false,
"bugfix": false,
"conf_file": null,
"disable_gpg_check": false,
"disable_plugin": [],
"disablerepo": null,
"enable_plugin": [],
"enablerepo": null,
"exclude": null,
"install_repoquery": true,
"installroot": "/",
"list": null,
"name": [
"docker",
"atomic",
"skopeo"
],
"security": false,
"skip_broken": false,
"state": "present",
"update_cache": false,
"update_only": false,
"validate_certs": true
}
},
"msg": "Error: Package: 1:atomic-1.22.1-22.git5a342e3.el7.x86_64 
(centosplus)\n   Requires: python-docker-py >= 1.7.2-1\n   
Available: docker-python-1.4.0-115.el7.x86_64 (centosplus)\n   
python-docker-py = 1.4.0-115.el7\n   Available: 
python-docker-py-1.10.6-3.el7.noarch (centosplus)\n   
python-docker-py = 1.10.6-3.el7\n   Available: 
python-docker-py-1.10.6-4.el7.noarch (centosplus)\n   
python-docker-py = 1.10.6-4.el7\n   Available: 
python2-docker-2.4.2-1.2.el7.noarch (centos-openshift-origin-testing-cbs)\n 
  python-docker-py = 2.4.2-1.2.el7\n   Installed: 
python2-docker-3.3.0-1.el7.noarch (@centos-openshift-origin-testing)\n  
 Not found\n",
"rc": 1,
"results": [
"2:docker-1.13.1-74.git6e3bb8e.el7.centos.x86_64 providing docker is 
already installed",
"Loaded plugins: fastestmirror\nLoading mirror speeds from cached 
hostfile\nResolving Dependencies\n--> Running transaction check\n---> Package 
atomic.x86_64 1:1.22.1-22.git5a342e3.el7 will be installed\n--> Processing 
Dependency: python-docker-py >= 1.7.2-1 for package: 
1:atomic-1.22.1-22.git5a342e3.el7.x86_64\nPackage 
python-docker-py-1.10.6-4.el7.noarch is obsoleted by 
python2-docker-3.3.0-1.el7.noarch which is already installed\n--> Processing 
Dependency: runc for package: 1:atomic-1.22.1-22.git5a342e3.el7.x86_64\n--> 
Processing Dependency: python-dateutil for package: 
1:atomic-1.22.1-22.git5a342e3.el7.x86_64\n--> Processing Dependency: ostree for 
package: 1:atomic-1.22.1-22.git5a342e3.el7.x86_64\n--> Processing Dependency: 
gomtree for package: 1:atomic-1.22.1-22.git5a342e3.el7.x86_64\n---> Package 
skopeo.x86_64 1:0.1.31-1.dev.gitae64ff7.el7.centos will be installed\n--> 
Running transaction check\n---> Package atomic.x86_64 
1:1.22.1-22.git5a342e3.el7 will be installed\n--
 > Processing Dependency: python-docker-py >= 1.7.2-1 for package: 
 > 1:atomic-1.22.1-22.git5a342e3.el7.x86_64\nPackage 
 > python-docker-py-1.10.6-4.el7.noarch is obsoleted by 
 > python2-docker-3.3.0-1.el7.noarch which is already installed\n---> Package 
 > gomtree.x86_64 0:0.5.0-0.2.git16da0f8.el7 will be installed\n---> Package 
 > ostree.x86_64 0:2018.5-1.el7 will be installed\n--> Processing Dependency: 
 > libarchive.so.13()(64bit) for package: ostree-2018.5-1.el7.x86_64\n---> 
 > Package python-dateutil.noarch 0:1.5-7.el7 will be installed\n---> Package 
 > runc.x86_64 0:1.0.0-37.rc5.dev.gitad0f525.el7 will be installed\n--> 
 > Processing Dependency: criu for package: 
 > runc-1.0.0-37.rc5.dev.gitad0f525.el7.x86_64\n--> Running transaction 
 > check\n---> Package atomic.x86_64 1:1.22.1-22.git5a342e3.el7 will be 
 > installed\n--> Processing Dependency: python-docker-py >= 1.7.2-1 for 
 > package: 1:atomic-1.22.1-22.git5a342e3.el7.x86_64\nPackage 
 > python-docker-py-1.10.6-4.el7.noarch is obsoleted by 
 > python2-docker-3.3.0-1.el7.
 noarch which is already installed\n---> Package criu.x86_64 0:3.5-4.el7 will 
be installed\n--> Processing Dependency: 
libprotobuf-c.so.1(LIBPROTOBUF_C_1.0.0)(64bit) for package: 
criu-3.5-4.el7.x86_64\n--> Processing Dependency: libprotobuf-c.so.1()(64bit) 
for package: criu-3.5-4.el7.x86_64\n--> Processing Dependency: 
libnet.so.1()(64bit) for package: criu-3.5-4.el7.x86_64\n---> Package 
libarchive.x86_64 0:3.1.2-10.el7_2 will be installed\n--> Running transaction 
check\n---> Package atomic.x86_64 1:1.22.1-22.git5a342e3.el7 will be