# One.zone.raftstatus result FAILURE \[one.zone.raftstatus\] User couldn't be authenticated, aborting call

**URL:** <https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635>\
**Category:** Product Support\
**Created:** [July 23, 2017, 2:30pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635 "2017-07-23T14:30:02Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 2:30pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/1 "2017-07-23T14:30:03Z")

</div>

Hello,

Trying the latest Medusa with MySQL

GUI works fine, downloading images from market works fine. Added localhost successfully.

Tried to instantiate Ubuntu LXD from market and it get in stuck in PROLOG phase.

It seems like authentication of serveradmin does not work?

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 2:38pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/3 "2017-07-23T14:38:52Z")

</div>

sched.log:

[https://pastebin.com/raw/jGKVZ3z0](https://pastebin.com/raw/jGKVZ3z0)

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 2:42pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/4 "2017-07-23T14:42:54Z")

</div>

oned.log:

[https://pastebin.com/raw/LY5N7Fm0](https://pastebin.com/raw/LY5N7Fm0)

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 3:21pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/5 "2017-07-23T15:21:45Z")

</div>

hash in /var/lib/one/.one/  
serveradmin:f8f2d76754b656e326b8ca99c1bb780d6372d2aa

is different from the hash in the user\_pool table:  
100oneadminserveradmin\<[CDATA[4127bf79c34a2384eb1d936b674a8fe104501b5f]]\>\<AUTH\_DRIVER\>\</AUTH\_DRIVER\>1\<TOKEN\_PASSWORD\>\</TOKEN\_PASSWORD\>

! removed by hand for the forum

Is it correct?

If I change the hash in the database, I cannot login to GUI anymore.

Shall I change the hash in files to the:  
4127bf79c34a2384eb1d936b674a8fe104501b5f  
?

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 3:33pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/6 "2017-07-23T15:33:29Z")

</div>

Tried to change hash in files, it does not help.

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 3:43pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/7 "2017-07-23T15:43:36Z")

</div>

How to verify connection from scheduler to oned from command line manually?

CLI commands like

oneuser list  
onevm list

work fine

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 4:12pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/8 "2017-07-23T16:12:53Z")

</div>

Shall I do the same as:

> [@User couldn't be authenticated, aborting call](https://forum.opennebula.io/t/user-couldnt-be-authenticated-aborting-call/344/12):
>
> These calls are probably coming from the scheduler, but the scheduler uses ONE\_AUTH.

> Thank you kindly for your patience and assistance :-). I have updated the OpenNebula DB with hash of oneadmin new password and things got back to normal. Honestly I don’t know what happened, I have just inherited this ONE deployment.

???

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 23, 2017, 4:21pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/9 "2017-07-23T16:21:19Z")

</div>

cat one\_auth  
oneadmin:XXX

echo XXX | openssl sha1  
(stdin)= a3e2b09a9908bc5e7c17b5fcdb50718db9f8891e

000oneadminoneadmin\<[CDATA[36269af6e5468a375b1998ffcc55d24178673da0]]\>\<AUTH\_DRIVER\>\</AUTH\_DRIVER\>1\<TABLE\_DEFAULT\_PAGE\_LENGTH\>\</TABLE\_DEFAULT\_PAGE\_LENGTH\>\<TOKEN\_PASSWORD\>\</TOKEN\_PASSWORD\>

Why hashes are different?

---

<div class="post-metadata">

**Author:** ![atodorov\_storpool](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/atodorov_storpool/32/5327_2.png) [@atodorov\_storpool](https://forum.opennebula.io/u/atodorov_storpool)\
**Post date:** [July 25, 2017, 7:05pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/10 "2017-07-25T19:05:20Z")

</div>

Hi,

‘echo XXX’ appends an line termination character at the end  
you should try with ‘echo -n XXX | openssl sha1’

Best Regards,  
Anton Todorov

---

<div class="post-metadata">

**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\
**Post date:** [July 27, 2017, 7:56am UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/11 "2017-07-27T07:56:47Z")

</div>

From you log files, it seems that the problem is just with the scheduler. The scheduler should be run as oneadmin with access to the oneadmin credentials.

---

<div class="post-metadata">

**Author:** ![sanyo](https://avatars.discourse-cdn.com/v4/letter/s/71e660/32.png) [@sanyo](https://forum.opennebula.io/u/sanyo)\
**Post date:** [July 28, 2017, 2:43pm UTC](https://forum.opennebula.io/t/one-zone-raftstatus-result-failure-one-zone-raftstatus-user-couldnt-be-authenticated-aborting-call/4635/12 "2017-07-28T14:43:21Z")

</div>

Problem with scheduler was related to fireholl settigns strict even to localhost connections

About hashes, I will try once again, but if I remember correct later I tried bash -n too