You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by Sonali Jadhav <so...@servercentralen.se> on 2015/03/13 11:33:26 UTC
VM console access denied
Hello,
I have two management servers. Problem is I am able to connect VM consoles from one and from another I can't, it gives access denied error. I checked CPVM logs,
2015-03-13 08:00:40,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:40,177 DEBUG [cloud.agent.Agent] (Agent-Handler-1:null) Received response: Seq 2-1517: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
2015-03-13 08:00:45,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:48,105 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. host: 172.16.5.199
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. port: -1
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. tag: b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103
2015-03-13 08:00:48,111 DEBUG [cloud.agent.Agent] (Agent-Handler-2:null) Received response: Seq 2-1518: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.ConsoleAccessAuthenticationAnswer":{"_success":false,"_isReauthenticating":false,"_port":0,"result":true,"wait":0}}] }
2015-03-13 08:00:48,111 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-2973:null) External authenticator failed authencation request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
2015-03-13 08:00:48,112 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-2973:null) Failed to create viewer due to External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:511)
at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:444)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:138)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:49)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:83)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80)
at sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:677)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:649)
at java.lang.Thread.run(Thread.java:745)
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:50,088 DEBUG [resource.consoleproxy.ConsoleProxyResource] (Console Proxy GC Thread:null) Report proxy load info, proxy : 1, load: {
"connections": []
}
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:50,180 DEBUG [cloud.agent.Agent] (Agent-Handler-3:null) Received response: Seq 2-1519: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
What is wrong here?
/Sonali
RE: VM console access denied
Posted by Sonali Jadhav <so...@servercentralen.se>.
Thanks, time sync was issue, weird that timezone of CPVM was different than what I have on mgmt. servers.
/Sonali
-----Original Message-----
From: Anshul Gangwar [mailto:anshul.gangwar@citrix.com]
Sent: Friday, March 13, 2015 4:28 PM
To: users@cloudstack.apache.org
Subject: Re: VM console access denied
Is your CPVM time in sync with management server time?
Regards,
Anshul
On 13-Mar-2015, at 4:03 pm, Sonali Jadhav <so...@servercentralen.se>> wrote:
Hello,
I have two management servers. Problem is I am able to connect VM consoles from one and from another I can't, it gives access denied error. I checked CPVM logs,
2015-03-13 08:00:40,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:40,177 DEBUG [cloud.agent.Agent] (Agent-Handler-1:null) Received response: Seq 2-1517: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
2015-03-13 08:00:45,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:48,105 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. host: 172.16.5.199
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. port: -1
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. tag: b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103
2015-03-13 08:00:48,111 DEBUG [cloud.agent.Agent] (Agent-Handler-2:null) Received response: Seq 2-1518: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.ConsoleAccessAuthenticationAnswer":{"_success":false,"_isReauthenticating":false,"_port":0,"result":true,"wait":0}}] }
2015-03-13 08:00:48,111 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-2973:null) External authenticator failed authencation request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
2015-03-13 08:00:48,112 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-2973:null) Failed to create viewer due to External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:511)
at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:444)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:138)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:49)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:83)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80)
at sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:677)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:649)
at java.lang.Thread.run(Thread.java:745)
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:50,088 DEBUG [resource.consoleproxy.ConsoleProxyResource] (Console Proxy GC Thread:null) Report proxy load info, proxy : 1, load: {
"connections": []
}
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:50,180 DEBUG [cloud.agent.Agent] (Agent-Handler-3:null) Received response: Seq 2-1519: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
What is wrong here?
/Sonali
Re: VM console access denied
Posted by Anshul Gangwar <an...@citrix.com>.
Is your CPVM time in sync with management server time?
Regards,
Anshul
On 13-Mar-2015, at 4:03 pm, Sonali Jadhav <so...@servercentralen.se>> wrote:
Hello,
I have two management servers. Problem is I am able to connect VM consoles from one and from another I can't, it gives access denied error. I checked CPVM logs,
2015-03-13 08:00:40,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:40,177 DEBUG [cloud.agent.Agent] (Agent-Handler-1:null) Received response: Seq 2-1517: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
2015-03-13 08:00:45,087 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:48,105 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. host: 172.16.5.199
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. port: -1
2015-03-13 08:00:48,106 DEBUG [cloud.consoleproxy.ConsoleProxyHttpHandlerHelper] (Thread-2973:null) decode token. tag: b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103
2015-03-13 08:00:48,111 DEBUG [cloud.agent.Agent] (Agent-Handler-2:null) Received response: Seq 2-1518: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.ConsoleAccessAuthenticationAnswer":{"_success":false,"_isReauthenticating":false,"_port":0,"result":true,"wait":0}}] }
2015-03-13 08:00:48,111 WARN [cloud.consoleproxy.ConsoleProxy] (Thread-2973:null) External authenticator failed authencation request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
2015-03-13 08:00:48,112 WARN [cloud.consoleproxy.ConsoleProxyAjaxHandler] (Thread-2973:null) Failed to create viewer due to External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
com.cloud.consoleproxy.AuthenticationException: External authenticator failed request for vm b4bc2a41-cd4a-4ba1-9702-03f8f2ccd103 with sid 87cc6b6ea219c47e
at com.cloud.consoleproxy.ConsoleProxy.authenticationExternally(ConsoleProxy.java:511)
at com.cloud.consoleproxy.ConsoleProxy.getAjaxVncViewer(ConsoleProxy.java:444)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.doHandle(ConsoleProxyAjaxHandler.java:138)
at com.cloud.consoleproxy.ConsoleProxyAjaxHandler.handle(ConsoleProxyAjaxHandler.java:49)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.AuthFilter.doFilter(AuthFilter.java:83)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:80)
at sun.net.httpserver.ServerImpl$Exchange$LinkHandler.handle(ServerImpl.java:677)
at com.sun.net.httpserver.Filter$Chain.doFilter(Filter.java:77)
at sun.net.httpserver.ServerImpl$Exchange.run(ServerImpl.java:649)
at java.lang.Thread.run(Thread.java:745)
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) connMap={}
2015-03-13 08:00:50,088 DEBUG [resource.consoleproxy.ConsoleProxyResource] (Console Proxy GC Thread:null) Report proxy load info, proxy : 1, load: {
"connections": []
}
2015-03-13 08:00:50,088 DEBUG [cloud.consoleproxy.ConsoleProxyGCThread] (Console Proxy GC Thread:null) Report load change : {
"connections": []
}
2015-03-13 08:00:50,180 DEBUG [cloud.agent.Agent] (Agent-Handler-3:null) Received response: Seq 2-1519: { Ans: , MgmtId: 59778234354585, via: 2, Ver: v1, Flags: 100010, [{"com.cloud.agent.api.AgentControlAnswer":{"result":true,"wait":0}}] }
What is wrong here?
/Sonali