Hi,
Does the admin@internal user have all the permissions?
Cause it seems like you are able to login with it, but then it fails
somehow.
Eventually you could try to add an additional user (in keycloak), and
then use user@internalsso in veeam (after you granted it all the
permissions).
This should work fine.
Jean-Louis
On 3/06/2025 23:27, victorda...@hotmail.com wrote:
Good morning dear community. We are experiencing a problem when taking a backup
through Veeam backup. I share the logs:
Engine.log
2025-06-03 16:09:52,158-05 ERROR [org.ovirt.engine.core.sso.service.SsoService]
(default task-2019) [53762455] OAuthException invalid_grant: The provided
authorization grant for the auth code has expired.
2025-06-03 16:09:52,160-05 ERROR
[org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter] (default task-2006) []
Cannot authenticate using authentication Headers: invalid_grant: The provided
authorization grant for the auth code has expired.
2025-06-03 16:09:52,429-05 INFO
[org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006)
[] User admin@internal-authz with profile [internal] successfully logged in
with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2025-06-03 16:09:52,518-05 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006)
[60f224da] Running command: CreateUserSessionCommand internal: false.
2025-06-03 16:09:52,530-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default
task-2006) [60f224da] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz
connecting from '192.168.170.52' using session
'dYQlOCMThsTOInKjX8GKWUpAk/SFspOh5vuX0efK1slxzWloBoK9jGqt7TwOapfxUR1kzGg0ctoofUC7/pjeVg=='
logged in.
2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper] (default
task-2006) [] Can't find relative path for class
"org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will
return null
2025-06-03 16:09:52,784-05 WARN [org.ovirt.engine.api.restapi.util.LinkHelper] (default
task-2006) [] Can't find relative path for class
"org.ovirt.engine.api.resource.StorageDomainVmDiskAttachmentsResource", will
return null
2025-06-03 16:10:05,258-05 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) []
User admin@internal-authz with profile [internal] successfully logged out
2025-06-03 16:10:05,267-05 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-2019) [78785b84] Running command: TerminateSessionsForTokenCommand
internal: true.
2025-06-03 16:10:05,305-05 INFO
[org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-2006) []
User admin@internal-authz with profile [internal] successfully logged out
2025-06-03 16:10:05,310-05 INFO
[org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default
task-2019) [4a6cfc6] Running command: TerminateSessionsForTokenCommand
internal: true.
2025-06-03 16:10:28,401-05 INFO
[org.ovirt.engine.core.sso.service.AuthenticationService] (default task-2006)
[] User admin@internal-authz with profile [internal] successfully logged in
with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal
ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all
ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search
ovirt-ext=token-info:validate ovirt-ext=token:password-access
2025-06-03 16:10:28,453-05 INFO
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-2006)
[152dcb43] Running command: CreateUserSessionCommand internal: false.
2025-06-03 16:10:28,466-05 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default
task-2006) [152dcb43] EVENT_ID: USER_VDC_LOGIN(30), User admin@internal-authz
connecting from '192.168.170.52' using session
'1WDL5jCeJNVnQCOSAJu8hd+M1IJJp5AChx3SQnpNjG+v2cZHNRYBsrQpmfhNAuB5KAHUun7HKUxbRQcs5OCalQ=='
logged in.
2025-06-03 16:10:50,031-05 WARN
[org.ovirt.engine.core.utils.virtiowin.VirtioWinReader]
(EE-ManagedScheduledExecutorService-engineScheduledThreadPool-Thread-19)
[6b0bdae7] Directory '/usr/share/virtio-win' doesn't exist.
---------
Veeam Proxy:
2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: <== Request "Get"
"https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk";,
body: "{}"
2025-06-03 16:10:21.0156 00023 [194115] ERROR | [RhvCluster][myengine.co]: ==> Response "Get"
"https://myengine.co/ovirt-engine/api/vms/0a5b4e0e-477c-494a-ba43-1e6c48565a49?all_content=true&follow=tags%2cnics.reporteddevices%2cdisk_attachments.disk";,
"code: 401", duration: "163 msec", body: "[binary data]"
Note that the user I use is admin@internal. I have read other forums that it is
recommended to use admin@ovirt@internalsso or others, but veeam does not allow
me to use admin@ovirt@internalsso.
I appreciate your help or recommendations. Regards!
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5UDYFIGVQZN6FDLSG2LKQL5GEBCYXINS/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/SWS2MWN6QFNZIFRA75B2PVQHT4N5MLOV/
