[GH-ISSUE #27] Authentication Issue #21

Closed
opened 2026-02-27 16:00:42 +03:00 by kerem · 9 comments
Owner

Originally created by @ghost on GitHub (Feb 27, 2013).
Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/27

Found this today and am amazed!

I installed on one KVM host, no problem. I installed on another and get authentication error.

I can launch the web page and connect to a host, but when clicking overview I get an "authentication failed: authentication failed". Very similar to issue #19.

I've gone through all the settings twice and don't know why it would be failing. The only difference between machines is that one is using my personal creds for dev that worked, and the one for production uses the username "administrator" for the main account.
Running Ubuntu 12.04 64bit Server in both environments.
What info would help troubleshoot?
Thanks.

Originally created by @ghost on GitHub (Feb 27, 2013). Original GitHub issue: https://github.com/retspen/webvirtmgr/issues/27 Found this today and am amazed! I installed on one KVM host, no problem. I installed on another and get authentication error. I can launch the web page and connect to a host, but when clicking overview I get an "authentication failed: authentication failed". Very similar to issue #19. I've gone through all the settings twice and don't know why it would be failing. The only difference between machines is that one is using my personal creds for dev that worked, and the one for production uses the username "administrator" for the main account. Running Ubuntu 12.04 64bit Server in both environments. What info would help troubleshoot? Thanks.
kerem closed this issue 2026-02-27 16:00:43 +03:00
Author
Owner

@retspen commented on GitHub (Feb 27, 2013):

Try in console
$ virsh -c qemu://ip adress/system nodeinfo
What show?

<!-- gh-comment-id:14199489 --> @retspen commented on GitHub (Feb 27, 2013): Try in console $ virsh -c qemu://ip adress/system nodeinfo What show?
Author
Owner

@ghost commented on GitHub (Feb 27, 2013):

I will get the exact output as soon as I can. But it gives the same
authenticate failure text followed by a unable to connect to hyper visor.
I'll get the exact text soon.

On Wednesday, February 27, 2013, Anatoliy Guskov wrote:

Try in console
$ virsh -c qemu://ip adress/system nodeinfo
What show?


Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14199489
.

<!-- gh-comment-id:14208093 --> @ghost commented on GitHub (Feb 27, 2013): I will get the exact output as soon as I can. But it gives the same authenticate failure text followed by a unable to connect to hyper visor. I'll get the exact text soon. On Wednesday, February 27, 2013, Anatoliy Guskov wrote: > Try in console > $ virsh -c qemu://ip adress/system nodeinfo > What show? > > — > Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14199489 > .
Author
Owner

@ghost commented on GitHub (Feb 28, 2013):

Ok, your output gives:
administrator@qp-kvm-ibm:~$ virsh -c qemu://10.20.5.1/system nodeinfo
error: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or
directory
error: failed to connect to the hypervisor

the output I tested with earlier with the test command from the
installation instructions:
administrator@qp-kvm-ibm:~$ virsh -c qemu+tcp://10.20.5.1/system nodeinfo
Please enter your authentication name: administrator
Please enter your password:
error: authentication failed: authentication failed
error: failed to connect to the hypervisor

and since it's barking about Certificate problems, I double checked my
libvirtd.conf file to ensure I uncommented the line to disable TLS.
administrator@qp-kvm-ibm:~$ cat /etc/libvirt/libvirtd.conf | grep tls
listen_tls = 0
#tls_port = "16514"
#auth_tls = "none"
#tls_no_sanity_certificate = 1
#tls_no_verify_certificate = 1
#tls_allowed_dn_list = ["DN1", "DN2"]

Hope that helps to find a solution. Like I said, I'm lovin this web
interface. Thanks,
Greg

On Wed, Feb 27, 2013 at 4:04 PM, Anatoliy Guskov
notifications@github.comwrote:

Try in console
$ virsh -c qemu://ip adress/system nodeinfo
What show?


Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14199489
.

<!-- gh-comment-id:14209144 --> @ghost commented on GitHub (Feb 28, 2013): Ok, your output gives: administrator@qp-kvm-ibm:~$ virsh -c qemu://10.20.5.1/system nodeinfo error: Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory error: failed to connect to the hypervisor the output I tested with earlier with the test command from the installation instructions: administrator@qp-kvm-ibm:~$ virsh -c qemu+tcp://10.20.5.1/system nodeinfo Please enter your authentication name: administrator Please enter your password: error: authentication failed: authentication failed error: failed to connect to the hypervisor and since it's barking about Certificate problems, I double checked my libvirtd.conf file to ensure I uncommented the line to disable TLS. administrator@qp-kvm-ibm:~$ cat /etc/libvirt/libvirtd.conf | grep tls listen_tls = 0 #tls_port = "16514" #auth_tls = "none" #tls_no_sanity_certificate = 1 #tls_no_verify_certificate = 1 #tls_allowed_dn_list = ["DN1", "DN2"] Hope that helps to find a solution. Like I said, I'm lovin this web interface. Thanks, Greg On Wed, Feb 27, 2013 at 4:04 PM, Anatoliy Guskov notifications@github.comwrote: > Try in console > $ virsh -c qemu://ip adress/system nodeinfo > What show? > > — > Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14199489 > .
Author
Owner

@retspen commented on GitHub (Feb 28, 2013):

$ telent ip_adress 16509

what show ?

<!-- gh-comment-id:14232033 --> @retspen commented on GitHub (Feb 28, 2013): $ telent ip_adress 16509 what show ?
Author
Owner

@ghost commented on GitHub (Feb 28, 2013):

From another machine:
gregs@gregsKDE1204:~$ telnet 10.20.5.1 16509
Trying 10.20.5.1...
Connected to 10.20.5.1.
Escape character is '^]'.

From Localhost:(same)
administrator@qp-kvm-ibm:~$telnet 10.20.5.1 16509
Trying 10.20.5.1...
Connected to 10.20.5.1.
Escape character is '^]'.

On Thu, Feb 28, 2013 at 7:58 AM, Anatoliy Guskov
notifications@github.comwrote:

$ telent ip_adress 16509

what show ?


Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14232033
.

<!-- gh-comment-id:14233400 --> @ghost commented on GitHub (Feb 28, 2013): From another machine: gregs@gregsKDE1204:~$ telnet 10.20.5.1 16509 Trying 10.20.5.1... Connected to 10.20.5.1. Escape character is '^]'. From Localhost:(same) administrator@qp-kvm-ibm:~$telnet 10.20.5.1 16509 Trying 10.20.5.1... Connected to 10.20.5.1. Escape character is '^]'. On Thu, Feb 28, 2013 at 7:58 AM, Anatoliy Guskov notifications@github.comwrote: > $ telent ip_adress 16509 > > what show ? > > — > Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14232033 > .
Author
Owner

@retspen commented on GitHub (Feb 28, 2013):

Try input login with @domain:
$ virsh -c qemu+tcp://10.20.5.1/system nodeinfo
Please enter your authentication name: admin@domain

Where @domain - hostname server or show domain in password.db:
$ sasldblistusers2 -f /etc/libvirt/passwd.db
admin@domain: userPassword

<!-- gh-comment-id:14233767 --> @retspen commented on GitHub (Feb 28, 2013): Try input login with @domain: $ virsh -c qemu+tcp://10.20.5.1/system nodeinfo Please enter your authentication name: admin@domain Where @domain - hostname server or show domain in password.db: $ sasldblistusers2 -f /etc/libvirt/passwd.db admin@domain: userPassword
Author
Owner

@ghost commented on GitHub (Feb 28, 2013):

Success!

It works if I use the full user@domain login. Any idea why it worked this
way on one machine and only user was needed on another?
Thanks,
Greg

On Thu, Feb 28, 2013 at 8:47 AM, Anatoliy Guskov
notifications@github.comwrote:

Try input login with @domain https://github.com/domain:

$ virsh -c qemu+tcp://10.20.5.1/system nodeinfo
Please enter your authentication name: admin@domain

Where @domain https://github.com/domain - hostname server or show
domain in password.db:
$ sasldblistusers2 -f /etc/libvirt/passwd.db
admin@domain: userPassword


Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14233767
.

<!-- gh-comment-id:14233976 --> @ghost commented on GitHub (Feb 28, 2013): Success! It works if I use the full user@domain login. Any idea why it worked this way on one machine and only user was needed on another? Thanks, Greg On Thu, Feb 28, 2013 at 8:47 AM, Anatoliy Guskov notifications@github.comwrote: > Try input login with @domain https://github.com/domain: > > $ virsh -c qemu+tcp://10.20.5.1/system nodeinfo > Please enter your authentication name: admin@domain > > Where @domain https://github.com/domain - hostname server or show > domain in password.db: > $ sasldblistusers2 -f /etc/libvirt/passwd.db > admin@domain: userPassword > > — > Reply to this email directly or view it on GitHubhttps://github.com/retspen/webvirtmgr/issues/27#issuecomment-14233767 > .
Author
Owner

@retspen commented on GitHub (Feb 28, 2013):

This problem with local DNS.

<!-- gh-comment-id:14234066 --> @retspen commented on GitHub (Feb 28, 2013): This problem with local DNS.
Author
Owner

@scalemonks-support commented on GitHub (Oct 7, 2014):

HI,
I am not able to open webvirtmgr console with the help of eliknks.
root@web-virtmgr:/var/www/webvirtmgr# netstat -tulnp | grep LISTEN
tcp 0 0 0.0.0.0:16509 0.0.0.0:* LISTEN 7938/libvirtd
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 7550/nginx
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 710/sshd
tcp6 0 0 :::22 :::* LISTEN 710/sshd
root@web-virtmgr:/var/www/webvirtmgr# elinks http://192.168.122.54:8000/

<!-- gh-comment-id:58147508 --> @scalemonks-support commented on GitHub (Oct 7, 2014): HI, I am not able to open webvirtmgr console with the help of eliknks. root@web-virtmgr:/var/www/webvirtmgr# netstat -tulnp | grep LISTEN tcp 0 0 0.0.0.0:16509 0.0.0.0:\* LISTEN 7938/libvirtd tcp 0 0 0.0.0.0:80 0.0.0.0:\* LISTEN 7550/nginx tcp 0 0 0.0.0.0:22 0.0.0.0:\* LISTEN 710/sshd tcp6 0 0 :::22 :::\* LISTEN 710/sshd root@web-virtmgr:/var/www/webvirtmgr# elinks http://192.168.122.54:8000/
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/webvirtmgr#21
No description provided.