Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't login to console using generated kubeadmin password #839

Closed
gnufied opened this issue Dec 7, 2018 · 5 comments
Closed

Can't login to console using generated kubeadmin password #839

gnufied opened this issue Dec 7, 2018 · 5 comments
Assignees

Comments

@gnufied
Copy link
Member

gnufied commented Dec 7, 2018

I guess, it is just me and I am not sure what I am doing wrong. I created a libvirt install successfully and followed #411 (comment) to get web console and I can open the web page but logging in use kubeadmin credentials printed in auth/kubeadmin-password doesn't work:

─installer/auth> oc login -v 10 -u kubeadmin -p foobar                   
I1207 15:52:48.280583    8285 loader.go:359] Config loaded from file /home/shared/go_projects/src/github.com/openshift/installer/auth/kubeconfig
I1207 15:52:48.280951    8285 loader.go:359] Config loaded from file /home/shared/go_projects/src/github.com/openshift/installer/auth/kubeconfig                                                                     
I1207 15:52:48.281093    8285 round_trippers.go:386] curl -k -v -XHEAD  'https://test1-api.tt.testing:6443/'                                                                                                         
I1207 15:52:48.293591    8285 round_trippers.go:405] HEAD https://test1-api.tt.testing:6443/ 403 Forbidden in 12 milliseconds
I1207 15:52:48.293615    8285 round_trippers.go:411] Response Headers:                                                                                                                                               
I1207 15:52:48.293624    8285 round_trippers.go:414]     Audit-Id: 028db86d-fba1-48ed-8a31-8876b85a0cff                                                                                                             
I1207 15:52:48.293635    8285 round_trippers.go:414]     Cache-Control: no-store
I1207 15:52:48.293645    8285 round_trippers.go:414]     Content-Type: application/json                                                        
I1207 15:52:48.293654    8285 round_trippers.go:414]     X-Content-Type-Options: nosniff                                                                                                                            
I1207 15:52:48.293664    8285 round_trippers.go:414]     Content-Length: 210                    
I1207 15:52:48.293673    8285 round_trippers.go:414]     Date: Fri, 07 Dec 2018 20:52:48 GMT                                                                                                                        
I1207 15:52:48.293757    8285 round_trippers.go:386] curl -k -v -XGET  -H "X-Csrf-Token: 1" 'https://test1-api.tt.testing:6443/.well-known/oauth-authorization-server'
I1207 15:52:48.294566    8285 round_trippers.go:405] GET https://test1-api.tt.testing:6443/.well-known/oauth-authorization-server 200 OK in 0 milliseconds                                         
I1207 15:52:48.294594    8285 round_trippers.go:411] Response Headers:                                                                                                          
I1207 15:52:48.294605    8285 round_trippers.go:414]     Audit-Id: f085ecec-1d8c-4168-8466-efb8a36f7ece                                                                                                             
I1207 15:52:48.294615    8285 round_trippers.go:414]     Cache-Control: no-store
I1207 15:52:48.294625    8285 round_trippers.go:414]     Content-Type: application/json                                                                                                                              
I1207 15:52:48.294634    8285 round_trippers.go:414]     Content-Length: 552                           
I1207 15:52:48.294643    8285 round_trippers.go:414]     Date: Fri, 07 Dec 2018 20:52:48 GMT                                                                                                                        
I1207 15:52:48.294853    8285 round_trippers.go:386] curl -k -v -XGET  -H "X-Csrf-Token: 1" 'https://test1-api.tt.testing:6443/oauth/authorize?client_id=openshift-challenging-client&code_challenge=tJSwft9QFIug7sM5
_M6_C8WVNBbOX9cQhW6-HbNZrdU&code_challenge_method=S256&redirect_uri=https%3A%2F%2Ftest1-api.tt.testing%3A6443%2Foauth%2Ftoken%2Fimplicit&response_type=code'
I1207 15:52:48.303855    8285 round_trippers.go:405] GET https://test1-api.tt.testing:6443/oauth/authorize?client_id=openshift-challenging-client&code_challenge=tJSwft9QFIug7sM5_M6_C8WVNBbOX9cQhW6-HbNZrdU&code_cha
llenge_method=S256&redirect_uri=https%3A%2F%2Ftest1-api.tt.testing%3A6443%2Foauth%2Ftoken%2Fimplicit&response_type=code 401 Unauthorized in 8 milliseconds
I1207 15:52:48.303902    8285 round_trippers.go:411] Response Headers:
I1207 15:52:48.303913    8285 round_trippers.go:414]     Content-Length: 0                               
I1207 15:52:48.303922    8285 round_trippers.go:414]     Date: Fri, 07 Dec 2018 20:52:48 GMT
I1207 15:52:48.303930    8285 round_trippers.go:414]     Audit-Id: d84c92c7-450a-424c-aa73-04b60aa6ab1a  
I1207 15:52:48.303939    8285 round_trippers.go:414]     Www-Authenticate: Basic realm="openshift"
I1207 15:52:48.303947    8285 round_trippers.go:414]     Content-Type: text/plain; charset=utf-8
I1207 15:52:48.304033    8285 round_trippers.go:386] curl -k -v -XGET  -H "Authorization: Basic a3ViZWFkbWluOnlFbW5yLThKbzk2LXpSOXNWLWFGd0hXJQ==" -H "X-Csrf-Token: 1" 'https://test1-api.tt.testing:6443/oauth/autho
rize?client_id=openshift-challenging-client&code_challenge=tJSwft9QFIug7sM5_M6_C8WVNBbOX9cQhW6-HbNZrdU&code_challenge_method=S256&redirect_uri=https%3A%2F%2Ftest1-api.tt.testing%3A6443%2Foauth%2Ftoken%2Fimplicit&r
esponse_type=code'                             
I1207 15:52:48.369769    8285 round_trippers.go:405] GET https://test1-api.tt.testing:6443/oauth/authorize?client_id=openshift-challenging-client&code_challenge=tJSwft9QFIug7sM5_M6_C8WVNBbOX9cQhW6-HbNZrdU&code_cha
llenge_method=S256&redirect_uri=https%3A%2F%2Ftest1-api.tt.testing%3A6443%2Foauth%2Ftoken%2Fimplicit&response_type=code 401 Unauthorized in 65 milliseconds                                                         
I1207 15:52:48.369803    8285 round_trippers.go:411] Response Headers:   
I1207 15:52:48.369815    8285 round_trippers.go:414]     Audit-Id: 843bf076-d0af-412f-990c-1b5d94621f67                                        
I1207 15:52:48.369825    8285 round_trippers.go:414]     Www-Authenticate: Basic realm="openshift"                                                                                                                  
I1207 15:52:48.369835    8285 round_trippers.go:414]     Content-Type: text/plain; charset=utf-8
I1207 15:52:48.369844    8285 round_trippers.go:414]     Content-Length: 0                                                                                                                                          
I1207 15:52:48.369853    8285 round_trippers.go:414]     Date: Fri, 07 Dec 2018 20:52:48 GMT
I1207 15:52:48.369883    8285 basicauth.go:51] already handled basic challenge                                                                                                                     
Login failed (401 Unauthorized)                                                                                                                                                 
Verify you have provided correct credentials.                                

I can't even login from CLI using kubeadmin account.

Running master installer - ./bin/openshift-install v0.5.0-master-44-g015ac0f9569212654e5f031ed9e742aeb6d2c91d

@gnufied
Copy link
Member Author

gnufied commented Dec 8, 2018

/assign @sallyom for triaging.

@gnufied
Copy link
Member Author

gnufied commented Dec 8, 2018

/assign @sallyom

@crawford
Copy link
Contributor

crawford commented Jan 4, 2019

Is this still an issue?

@wking
Copy link
Member

wking commented Jan 18, 2019

This is exercised in CI since openshift/release#2361 and openshift/origin#21733.

/close

@openshift-ci-robot
Copy link
Contributor

@wking: Closing this issue.

In response to this:

This is exercised in CI since openshift/release#2361 and openshift/origin#21733.

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants