If you get the following issue:

Wed Mar 30 22:14:39 2016 [Z0][AuM][I]: Command execution fail: /var/lib/one/remotes/auth/server_cipher/authenticate serveradmin e34bdac1163cc24bd334cc925dc16cf24b716963 ****

Wed Mar 30 22:14:39 2016 [Z0][AuM][D]: Message received: LOG E 4 bad decrypt

Wed Mar 30 22:14:39 2016 [Z0][AuM][I]: bad decrypt
Wed Mar 30 22:14:39 2016 [Z0][AuM][D]: Message received: LOG I 4 ExitCode: 255

Wed Mar 30 22:14:39 2016 [Z0][AuM][I]: ExitCode: 255
Wed Mar 30 22:14:39 2016 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 4 bad decrypt

Wed Mar 30 22:14:39 2016 [Z0][AuM][E]: Auth Error: bad decrypt
Wed Mar 30 22:14:39 2016 [Z0][ReM][D]: Req:3584 UID:-1 UserInfo invoked , -1
Wed Mar 30 22:14:39 2016 [Z0][ReM][E]: Req:3584 UID:- UserInfo result FAILURE [UserInfo] User couldn't be authenticated, aborting call.

Here's a few steps to resolve it:

[oneadmin@opennebula01 .one]$ oneuser passwd –sha1 –driver server_cipher serveradmin "<SECRET>"
[oneadmin@opennebula01 .one]$ oneuser passwd –sha1 –driver server_cipher oneadmin "<SECRET>"
[oneadmin@opennebula01 .one]$

In our case we restarted the controller after making above changes and ensuring the files under ~/.one/ were set to the cleartext <SECRET> but a restart of the services should do this as well:

$ one stop
$ one start

# systemctl stop opennebula
# systemctl stop opennebula-sunstone

# systemctl enable opennebula
# systemctl enable opennebula-sunstone

# systemctl start opennebula
# systemctl start opennebula-sunstone

Cheers,
TK