# \[Solved\] Sunstone authentication bad decrypt **URL:** \ **Category:** Product Support\ **Created:** [October 12, 2016, 3:27pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121 "2016-10-12T15:27:56Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 12, 2016, 3:27pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/1 "2016-10-12T15:27:56Z")
Hello, after I upgrade my OpenNebula System from 5.0.2 to version 5.1.80 using CentOS/RHEL 7 repository, according **[Front-end Installation — OpenNebula 5.2.1 documentation](http://docs.opennebula.org/5.2/deployment/opennebula_installation/frontend_installation.html)** (yum -y update) I’m getting the following errors when I tri authenticate by Sunstone: > Wed Oct 12 16:10:11 2016 [Z0][ReM][D]: Req:1520 UID:0 VirtualMachinePoolInfo invoked , -2, -1, -1, -1 > Wed Oct 12 16:10:11 2016 [Z0][ReM][D]: Req:1520 UID:0 VirtualMachinePoolInfo result SUCCESS, “\24\<…” > Wed Oct 12 16:10:11 2016 [Z0][ReM][D]: Req:4560 UID:0 VirtualMachinePoolInfo invoked , -2, -1, -1, -1 > Wed Oct 12 16:10:11 2016 [Z0][ReM][D]: Req:4560 UID:0 VirtualMachinePoolInfo result SUCCESS, “\24\<…” > Wed Oct 12 16:10:17 2016 [Z0][ReM][D]: Req:0 UID:2 UserInfo invoked , -1 > Wed Oct 12 16:10:17 2016 [Z0][ReM][D]: Req:0 UID:2 UserInfo result SUCCESS, “2\ Wed Oct 12 16:10:17 2016 [Z0][AuM][D]: Message received: LOG I 2 Command execution fail: /var/lib/one/remotes/auth/server\_cipher/authenticate serveradmin 15c7ae542d8de1ed95eaa87e03e1c61e4857298e \*\*\*\* > Wed Oct 12 16:10:17 2016 [Z0][AuM][I]: Command execution fail: /var/lib/one/remotes/auth/server\_cipher/authenticate serveradmin 15c7ae542d8de1ed95eaa87e03e1c61e4857298e \*\*\*\* > Wed Oct 12 16:10:17 2016 [Z0][AuM][D]: Message received: LOG E 2 bad decrypt > Wed Oct 12 16:10:17 2016 [Z0][AuM][I]: bad decrypt > Wed Oct 12 16:10:17 2016 [Z0][AuM][D]: Message received: LOG I 2 ExitCode: 255 > Wed Oct 12 16:10:17 2016 [Z0][AuM][I]: ExitCode: 255 > Wed Oct 12 16:10:17 2016 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 2 bad decrypt > Wed Oct 12 16:10:17 2016 [Z0][AuM][E]: Auth Error: bad decrypt > Wed Oct 12 16:10:17 2016 [Z0][ReM][D]: Req:4000 UID:-1 UserInfo invoked , -1 > Wed Oct 12 16:10:17 2016 [Z0][ReM][E]: Req:4000 UID:- UserInfo result FAILURE [UserInfo] User couldn’t be authenticated, aborting call. > Wed Oct 12 16:10:35 2016 [Z0][MKP][D]: Monitoring marketplace OpenNebula Public (0) > Wed Oct 12 16:10:35 2016 [Z0][MKP][D]: Marketplace OpenNebula Public (0) successfully monitored. > Wed Oct 12 16:10:41 2016 [Z0][ReM][D]: Req:4752 UID:0 VirtualMachinePoolInfo invoked , -2, -1, -1, -1 > Wed Oct 12 16:10:41 2016 [Z0][ReM][D]: Req:4752 UID:0 VirtualMachinePoolInfo result SUCCESS, “\24\<…” > Wed Oct 12 16:10:41 2016 [Z0][ReM][D]: Req:5024 UID:0 VirtualMachinePoolInfo invoked , -2, -1, -1, -1 > Wed Oct 12 16:10:41 2016 [Z0][ReM][D]: Req:5024 UID:0 VirtualMachinePoolInfo result SUCCESS, “\24\<…” > Wed Oct 12 16:11:01 2016 [Z0][InM][D]: Monitoring datastore default (1) > Wed Oct 12 16:11:01 2016 [Z0][InM][D]: Monitoring datastore files (2) > Wed Oct 12 16:11:01 2016 [Z0][InM][D]: Monitoring datastore datastore1 (100) > Wed Oct 12 16:11:01 2016 [Z0][ImM][D]: Datastore default (1) successfully monitored. > Wed Oct 12 16:11:01 2016 [Z0][ImM][D]: Datastore files (2) successfully monitored. > Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:9936 UID:0 HostPoolInfo invoked > Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:9936 UID:0 HostPoolInfo result SUCCESS, “\\ Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:9136 UID:0 SystemConfig invoked > Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:9136 UID:0 SystemConfig result SUCCESS, “\…” > Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:6224 UID:0 HostInfo invoked , 0 > Wed Oct 12 16:11:01 2016 [Z0][ReM][D]: Req:6224 UID:0 HostInfo result SUCCESS, “0\ Wed Oct 12 16:11:01 2016 [Z0][ImM][I]: Command execution fail: /var/lib/one/remotes/datastore/vcenter/monitor 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 100 > Wed Oct 12 16:11:01 2016 [Z0][ImM][I]: Error monitoring datastore1. Reason: Error decrypting vCenter password > Wed Oct 12 16:11:01 2016 [Z0][ImM][I]: ExitCode: 255 > Wed Oct 12 16:11:01 2016 [Z0][ImM][E]: Error monitoring datastore 100: LQ==. Decoded info: - **Currently the system are running these packages versions:** > opennebula-sunstone-5.1.80-1.x86\_64 > opennebula-common-5.1.80-1.x86\_64 > opennebula-5.1.80-1.x86\_64 > opennebula-server-5.1.80-1.x86\_64 > opennebula-ruby-5.1.80-1.x86\_64 > opennebula-flow-5.1.80-1.x86\_64 Using **CLI** i can run the **one\*** commands without problem. There are any procedure to fix it? I did not found nothing in official documentation. Thanks in advance -Carlos ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 12, 2016, 11:34pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/2 "2016-10-12T23:34:19Z")
Additional info: ``` [root@localhost one]# oneuser show 1 -x 1 0 0 oneadmin serveradmin 1 [root@localhost .one]# for file in $(ls); do echo $file; cat $file; echo -----; done ec2_auth serveradmin:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- occi_auth serveradmin:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- one_auth oneadmin:password ----- oneflow_auth serveradmin:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- onegate_auth serveradmin:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- one_key 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- sunstone_auth serveradmin:5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 ----- ``` Any tip folks? Best regards, -Carlos ---
**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\ **Post date:** [October 13, 2016, 10:07am UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/3 "2016-10-13T10:07:11Z")
Somehow, the password for opennebula services has been changed, this should not happen during an upgrade.Can you confirm that you did not change them? Reset serveradmin password: 1. Change it in oned, note that passwd is hashed ```auto oneuser passwd --sha1 serveradmin ``` 1. Update auth files wit passwd in plain text ```auto echo "serveradmin:" > sunstone_auth ``` Cheers ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 13, 2016, 11:40am UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/4 "2016-10-13T11:40:23Z")
Hello @ruben, Thank you by your answer! > [@ruben](#): > > Somehow, the password for opennebula services has been changed, this should > not happen during an upgrade.Can you confirm that you did not change them? Yes, I did not change none. I did not touched in none config. Only using yum tool. Even following your suggests, the problem persist. ``` [root@localhost ~]# oneuser passwd --sha1 serveradmin password [root@localhost ~]# echo "serveradmin:password" > /var/lib/one/.one/sunstone_auth [root@localhost ~]# systemctl restart opennebula.service [root@localhost ~]# systemctl restart opennebula-sunstone.service [root@localhost ~]# oneuser list ID NAME GROUP AUTH VMS MEMORY CPU 0 oneadmin oneadmin core - - - 1 serveradmin oneadmin server_c 0 / - 0M / - 0.0 / - 2 demo demo core 0 / 5 0M / 4.9G 0.0 / 6.0 [root@localhost ~]# ``` **The log result:** > Thu Oct 13 12:33:22 2016 [Z0][ReM][D]: Req:1120 UID:3 UserInfo invoked , -1 > Thu Oct 13 12:33:22 2016 [Z0][ReM][D]: Req:1120 UID:3 UserInfo result SUCCESS, “3\ Thu Oct 13 12:33:22 2016 [Z0][AuM][D]: Message received: LOG I 4 Command execution fail: /var/lib/one/remotes/auth/server\_cipher/authenticate serveradmin 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 \*\*\*\* > Thu Oct 13 12:33:22 2016 [Z0][AuM][I]: Command execution fail: /var/lib/one/remotes/auth/server\_cipher/authenticate serveradmin 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 \*\*\*\* > Thu Oct 13 12:33:22 2016 [Z0][AuM][D]: Message received: LOG E 4 bad decrypt > Thu Oct 13 12:33:22 2016 [Z0][AuM][I]: bad decrypt > Thu Oct 13 12:33:22 2016 [Z0][AuM][D]: Message received: LOG I 4 ExitCode: 255 > Thu Oct 13 12:33:22 2016 [Z0][AuM][I]: ExitCode: 255 > Thu Oct 13 12:33:22 2016 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 4 bad decrypt > Thu Oct 13 12:33:22 2016 [Z0][AuM][E]: Auth Error: bad decrypt > Thu Oct 13 12:33:22 2016 [Z0][ReM][D]: Req:8240 UID:-1 UserInfo invoked , -1 > Thu Oct 13 12:33:22 2016 [Z0][ReM][E]: Req:8240 UID:- UserInfo result FAILURE [UserInfo] User couldn’t be authenticated, aborting call. Any other tip? Best regards, -Carlos ---
**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\ **Post date:** [October 13, 2016, 1:40pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/5 "2016-10-13T13:40:48Z")
Sorry, I cannot reproduce it. Your fisrt setup was wrong because the password in OpenNebula and sunstone\_auth were the same; and OpenNebula stores a hash of the password. try to restart again sunstone, (make sure it is not running)… ---
**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\ **Post date:** [October 13, 2016, 1:42pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/6 "2016-10-13T13:42:37Z")
Also make sure that you updated the right files, as they are read by Sunstone server /var/lib/one/.one/sunstone.auth ---
**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\ **Post date:** [October 13, 2016, 1:48pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/7 "2016-10-13T13:48:05Z")
Hold on, there were a bug with serveradmin auth in beta, and now I’m not sure if the packages got that. can you check line 167 of one\_auth\_mad.rb, timeout = arg.to\_i ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 13, 2016, 2:02pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/8 "2016-10-13T14:02:16Z")
Hi @ruben, I already restart several times the service and recheck the files. In the line 167 of one\_auth\_mad.rb file I got this [root@localhost one]# sed -n ‘167p’ /usr/lib/one/mads/one\_auth\_mad.rb rc = LocalCommand.run(command, log\_method(request\_id)) [root@localhost one]# best regards, Carlos ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 13, 2016, 6:22pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/9 "2016-10-13T18:22:19Z")
Hi @ruben, Only to report the procedure: After remove all packs and reinstall (using yum) and restore database content, I’m able to login on Sunstone. I needed to change the vCenter credentials, because I was getting error bad decrypt on vCenter monitoring. But, even Sunstone are working, I still see these errors in log file. ``` Thu Oct 13 19:19:29 2016 [Z0][AuM][D]: Message received: LOG I 257 Command execution fail: /var/lib/one/remotes/auth/server_cipher/authenticate serveradmin 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 **** Thu Oct 13 19:19:29 2016 [Z0][AuM][I]: Command execution fail: /var/lib/one/remotes/auth/server_cipher/authenticate serveradmin 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 **** Thu Oct 13 19:19:29 2016 [Z0][AuM][D]: Message received: LOG D 257 authenticate: Authenticating serveradmin, with password 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 (f1oj2j5DSlygv4b6iM2AiurwcRjcMCZQXJ7s8fVR598pcQO5XxNOodx1i3V/DyhV) Thu Oct 13 19:19:29 2016 [Z0][AuM][I]: authenticate: Authenticating serveradmin, with password 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8 (f1oj2j5DSlygv4b6iM2AiurwcRjcMCZQXJ7s8fVR598pcQO5XxNOodx1i3V/DyhV) Thu Oct 13 19:19:29 2016 [Z0][AuM][D]: Message received: LOG E 257 bad decrypt Thu Oct 13 19:19:29 2016 [Z0][AuM][I]: bad decrypt Thu Oct 13 19:19:29 2016 [Z0][AuM][D]: Message received: LOG I 257 ExitCode: 255 Thu Oct 13 19:19:29 2016 [Z0][AuM][I]: ExitCode: 255 Thu Oct 13 19:19:29 2016 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 257 bad decrypt Thu Oct 13 19:19:29 2016 [Z0][AuM][E]: Auth Error: bad decrypt Thu Oct 13 19:19:29 2016 [Z0][ReM][D]: Req:6560 UID:-1 DocumentPoolInfo invoked , -2, -1, -1, 100 Thu Oct 13 19:19:29 2016 [Z0][ReM][E]: Req:6560 UID:- DocumentPoolInfo result FAILURE [DocumentPoolInfo] User couldn't be authenticated, aborting call. ``` But I don’t see errors in Sunstone GUI. Any other tip!? best regards, -Carlos ---
**Author:** ![ruben](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/ruben/32/19_2.png) [@ruben](https://forum.opennebula.io/u/ruben)\ **Post date:** [October 14, 2016, 8:55am UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/10 "2016-10-14T08:55:41Z")
> [@ccesario](#): > > Thu Oct 13 19:19:29 2016 [Z0][ReM][D]: Req:6560 UID:-1 DocumentPoolInfo invoked , -2, -1, -1, 100 This is probably from oneflow server, oneflow\_auth not updated? ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 14, 2016, 2:59pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/11 "2016-10-14T14:59:05Z")
Hi @ruben, All packs were updated. Look ``` [root@localhost one]# rpm -qa | grep -i opennebul opennebula-sunstone-5.1.80-1.x86_64 opennebula-common-5.1.80-1.x86_64 opennebula-5.1.80-1.x86_64 opennebula-server-5.1.80-1.x86_64 opennebula-ruby-5.1.80-1.x86_64 opennebula-flow-5.1.80-1.x86_64 ``` Best regards, -Carlos ---
**Author:** ![ccesario](https://avatars.discourse-cdn.com/v4/letter/c/f19dbf/32.png) [@ccesario](https://forum.opennebula.io/u/ccesario)\ **Post date:** [October 14, 2016, 7:19pm UTC](https://forum.opennebula.io/t/solved-sunstone-authentication-bad-decrypt/3121/12 "2016-10-14T19:19:39Z")
Hi @ruben, After update the /var/lib/one/.one/oneflow\_auth file the log does not show errors `echo "serveradmin:" > oneflow_auth` I will try investigate the root cause of this. Thank you by your help! -Carlos