Hi Eiji,

If I read the source code right, account roles were hard-coded in 4.2.

Can you post the result of the following query?

select * from cloud.account where id = 2;

"type" is an enum that can take the following values: 
https://github.com/apache/cloudstack/blob/4.2/api/src/com/cloud/user/Account.java#L42-L47

"state" should be "enabled"

"removed" should be NULL

Hope this helps!

Regards,
Gregor

On Tue, 2019-07-16 at 08:33 +0000, sagawa_e...@fujitsu.com wrote:
> Hi Liridon,
> 
> Thank you for your reply.
> 
> > select * from cloud.account where id = 2; and select * from roles
> > where
> > id in (select role_id from account where id = 2);
> 
>   I did not find the role table and account.role_id column.
>   The cloudstack version of my system is 4.2.1.
>   Is there no table/column in this version?
> 
> > As it seems that your user Admin can log in but maybe your account
> > or
> > role is inactive or not properly configured. Can you check if you
> > are
> > able to log in with another account / user which is not under the
> > admin
> > account?
> 
>   I confirmed login with another account.
>   I tried with multiple accounts, but I couldn't log in all.
> 
> Best regards,
> Eiji Sagawa
> 
> 
> 
> > -----Original Message-----
> > From: Ismaili, Liridon (SWISS TXT) [mailto:
> > liridon.isma...@swisstxt.ch]
> > Sent: Friday, July 5, 2019 6:00 PM
> > To: users@cloudstack.apache.org
> > Cc: Shigemoto, Yasumasa/重元 康昌 <shigemoto.ya...@fujitsu.com>;
> > Hoshikawa, Toyohiko/星川 豊彦 <t-hoshik...@fujitsu.com>
> > Subject: AW: Unable to log in to the cloudstack management page
> > (Web UI)
> > 
> > Hi Eiji
> > 
> > the JSON inside the body tells the same as the error you posted
> > already.
> > May you check the DB if there is something misconfigured with the
> > accounts
> > or roles?
> > Please run this query and post the results:
> > select * from cloud.account where id = 2; and select * from roles
> > where
> > id in (select role_id from account where id = 2);
> > 
> > As it seems that your user Admin can log in but maybe your account
> > or
> > role is inactive or not properly configured. Can you check if you
> > are
> > able to log in with another account / user which is not under the
> > admin
> > account?
> > 
> > Regards
> > Liridon
> > ________________________________
> > Von: sagawa_e...@fujitsu.com <sagawa_e...@fujitsu.com>
> > Gesendet: Freitag, 5. Juli 2019 10:31
> > An: users@cloudstack.apache.org
> > Cc: shigemoto.ya...@fujitsu.com; t-hoshik...@fujitsu.com
> > Betreff: RE: Unable to log in to the cloudstack management page
> > (Web UI)
> > 
> > Hi Gregor,
> > 
> > Thank you very much for answering my questions.
> > 
> > 
> > > >     192.168.122.1 - - [01/Jul/2019:06:13:10 +0900] "GET
> > > > 
> > /client/api?command=listCapabilities&response=json&sessionkey=h1Lws
> > k
> > > 9
> > > > dqVwZxGAwk0owzFDtmi4%3D&_=1561961591972 HTTP/1.1" 432 151
> > > 
> > > This happens just after login and indicates something is wrong.
> > > It might not help much, but can you post the JSON body of the
> > > response?
> > 
> >   This JSON body was returned.
> >   -----------------------
> >   { "errorresponse" :
> > {"uuidList":[],"errorcode":432,"cserrorcode":9999,"errortext":"The
> > given command does not exist or it is not available for user"} }
> >   -----------------------
> > 
> >   Do you know anything from this JSON body?
> > 
> > 
> > Best regards,
> > Eiji Sagawa
> > 
> > 
> > > -----Original Message-----
> > > From: Riepl, Gregor (SWISS TXT) [mailto:gregor.ri...@swisstxt.ch]
> > > Sent: Wednesday, July 3, 2019 10:00 PM
> > > To: users@cloudstack.apache.org
> > > Cc: Shigemoto, Yasumasa/重元 康昌 <shigemoto.ya...@fujitsu.com>;
> > > Hoshikawa, Toyohiko/星川 豊彦 <t-hoshik...@fujitsu.com>
> > > Subject: Re: Unable to log in to the cloudstack management page
> > > (Web
> > > UI)
> > > 
> > > Hi Eiji,
> > > 
> > > >     192.168.122.1 - - [01/Jul/2019:06:09:22 +0900] "GET
> > > > 
> > /client/api?command=listCapabilities&response=json&sessionkey=null&
> > _
> > > =
> > > > 1561961364158 HTTP/1.1" 401 101
> > > 
> > > This happens before login and is ok.
> > > I see that too when I open the login page without an active
> > > session.
> > > 
> > > >     ==> /var/log/cloudstack/management/access_log.2019-07-
> > > > 01.txt
> > > <==
> > > >     192.168.122.1 - - [01/Jul/2019:06:13:10 +0900] "POST
> > > > /client/api
> > > > HTTP/1.1" 200 321
> > > 
> > > This is the actual login call, and returns status 200 (success).
> > > 
> > > >     192.168.122.1 - - [01/Jul/2019:06:13:10 +0900] "GET
> > > > 
> > /client/api?command=listCapabilities&response=json&sessionkey=h1Lws
> > k
> > > 9
> > > > dqVwZxGAwk0owzFDtmi4%3D&_=1561961591972 HTTP/1.1" 432 151
> > > 
> > > This happens just after login and indicates something is wrong.
> > > It might not help much, but can you post the JSON body of the
> > > response?
> > > 
> > > >     2019-07-01 06:13:10,963 DEBUG [cloud.api.ApiServlet]
> > > > (catalina-
> > > > exec-22:null) ===START===  192.168.122.1 -- GET
> > > > command=listCapabilities&response=json&sessionkey=h1Lwsk9dqVwZx
> > > > G
> > > > Awk0owzFDtmi4%3D&_=1561961591972
> > > >     2019-07-01 06:13:10,976 DEBUG [cloud.api.ApiServer]
> > > > (catalina-
> > > > exec-22:null) The given command:listCapabilities does not exist
> > > > or
> > > > it is not available for user with id:2
> > > > 
> > > >     ==> /var/log/cloudstack/management/apilog.log <==
> > > >     2019-07-01 06:13:10,979 INFO  [cloud.api.ApiServer]
> > > > (catalina-
> > > > exec-22:null)  192.168.122.1 -- GET
> > > > 
> > command=listCapabilities&response=json&sessionkey=h1Lwsk9dqVwZxGAwk
> > 0
> > > o
> > > > wzFDtmi4%3D&_=1561961591972 432 The given command does not
> > > > exist or
> > > it
> > > > is not available for user
> > > 
> > > These log messages relate to the failing listCapabilities call
> > > after
> > login.
> > > I think you should focus on these.
> > > 
> > > Regards,
> > > Gregor

Reply via email to