<html><body><div style="font-family: georgia,serif; font-size: 12pt; color: #000000"><div>Answering to message 2 (bond mode 4):</div><div><ul style="box-sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; line-height: 28px; list-style-position: outside; font-family: 'Open Sans', sans-serif; color: #4c4c4c; background-color: #ffffff;" data-mce-style="box-sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; line-height: 28px; list-style-position: outside; font-family: 'Open Sans', sans-serif; color: #4c4c4c; background-color: #ffffff;"><li style="box-sizing: border-box; margin: 0px; padding: 0px;" data-mce-style="box-sizing: border-box; margin: 0px; padding: 0px;">Mode 4 (802.3ad)<br style="box-sizing: border-box;" data-mce-style="box-sizing: border-box;">This mode is known as Dynamic Link Aggregation mode. It creates aggregation groups that share the same speed and duplex settings. This mode requires a switch that supports IEEE 802.3ad Dynamic link.</li></ul></div><div>Please try configuring your 4 Cisco ports as port-channel/channel-group in active with LACP enabled capability on its ports.</div><div><br></div><div><span name="x"></span><br>Thanks in advance.<br><div><br></div>Best regards,<br>Nikolai<br>____________________<br>Nikolai Sednev<br>Senior Quality Engineer at Compute team<br>Red Hat Israel<br>34 Jerusalem Road,<br>Ra'anana, Israel 43501<br><div><br></div>Tel: +972 9 7692043<br>Mobile: +972 52 7342734<br>Email: nsednev@redhat.com<br>IRC: nsednev<span name="x"></span><br></div><div><br></div><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>users-request@ovirt.org<br><b>To: </b>users@ovirt.org<br><b>Sent: </b>Wednesday, December 10, 2014 12:57:20 PM<br><b>Subject: </b>Users Digest, Vol 39, Issue 50<br><div><br></div>Send Users mailing list submissions to<br> users@ovirt.org<br><div><br></div>To subscribe or unsubscribe via the World Wide Web, visit<br> http://lists.ovirt.org/mailman/listinfo/users<br>or, via email, send a message with subject or body 'help' to<br> users-request@ovirt.org<br><div><br></div>You can reach the person managing the list at<br> users-owner@ovirt.org<br><div><br></div>When replying, please edit your Subject line so it is more specific<br>than "Re: Contents of Users digest..."<br><div><br></div><br>Today's Topics:<br><div><br></div> 1. Fwd: Fwd: run ovirt-shell script like background job -<br> problem (Grzegorz Szypa)<br> 2. oVirt bonding mode4 + cisco 2960 XR (??????? ????????)<br> 3. Re: ??: 3.5 hosted engine: 2nd host Cannot acquire bridge<br> address (Sandro Bonazzola)<br> 4. [QE][ACTION REQUIRED] oVirt 3.6.0 status (Sandro Bonazzola)<br> 5. [QE][ACTION REQUIRED] oVirt 3.5.1 RC status (Sandro Bonazzola)<br> 6. Re: [QE][ACTION REQUIRED] oVirt 3.5.1 RC status<br> (Francesco Romani)<br> 7. Re: Adding domain to oVirt to 3.5 issue (Alon Bar-Lev)<br><div><br></div><br>----------------------------------------------------------------------<br><div><br></div>Message: 1<br>Date: Wed, 10 Dec 2014 07:33:32 +0100<br>From: Grzegorz Szypa <grzegorz.szypa@gmail.com><br>To: users@ovirt.org<br>Subject: [ovirt-users] Fwd: Fwd: run ovirt-shell script like<br> background job - problem<br>Message-ID:<br> <CACL97+jXMDgCqCyWB79E=MaMwEn1Xx3ew4BiRTHYtfbphy=veg@mail.gmail.com><br>Content-Type: text/plain; charset="utf-8"<br><div><br></div>Problem is solved.<br><div><br></div>It must be install this:<br><div><br></div>yum update packages<br><div><br></div>not like this<br>rpm -i *.rpm<br><div><br></div><br>---------- Forwarded message ----------<br>From: Grzegorz Szypa <grzegorz.szypa@gmail.com><br>Date: 2014-12-09 20:42 GMT+01:00<br>Subject: Re: [ovirt-users] Fwd: run ovirt-shell script like background job<br>- problem<br>To: Juan Hern?ndez <jhernand@redhat.com><br><div><br></div><br>So i have a question:<br><div><br></div>When i install:<br><div><br></div>rpm -i ovirt-engine-sdk-python-3.5.0.7-1.el6.noarch.rpm<br>ovirt-engine-cli-3.5.0.5-1.el6.noarch.rpm<br><div><br></div>i got error conflict with current package ovirt-engine-3.4.x<br><div><br></div>It was all-in-one instalation in one server.<br><div><br></div><br><div><br></div>2014-12-09 10:32 GMT+01:00 Juan Hern?ndez <jhernand@redhat.com>:<br><div><br></div>> On 12/08/2014 08:05 PM, Grzegorz Szypa wrote:<br>> > So, i have a question.<br>> ><br>> > Is ovirt-engine-cli-3.5.0.2-1.el6.noarch compatible in ovirt-engine-3.4?<br>> ><br>> > Can install ovirt-engine-cli-3.5 on ovirt-engine-cli-3.4 and using him<br>> > with landscape based on ovirt 3.4 ??<br>> ><br>><br>> Yes, versions 3.5.x of ovirt-engine-cli and ovirt-engine-sdk-python (you<br>> will need both) are compatible with version 3.4 of the engine.<br>><br>> > 2014-12-07 17:33 GMT+01:00 Juan Hern?ndez <jhernand@redhat.com<br>> > <mailto:jhernand@redhat.com>>:<br>> ><br>> > On 12/07/2014 05:05 PM, Grzegorz Szypa wrote:<br>> > > Hi,<br>> > ><br>> > > I have a problem with running ovirt-shell script, that it starting<br>> > VMs.<br>> > > In dialog mode it's fine, but in background no :(<br>> > ><br>> > > Example script:<br>> > > ovirt-shell -E 'action vm WinSrv2012r2 start'<br>> > ><br>> > > I start this job in cron as root.<br>> > ><br>> > ><br>> > > Have somebody idea??<br>> > ><br>> > > --<br>> > > G.Sz.<br>> > ><br>> ><br>> > We used to have bug that made ovirt-shell fail when there wasn't a<br>> tty<br>> > available (like when running from cron):<br>> ><br>> > ovirt-shell cannot run in cron (/dev/tty missing)<br>> > https://bugzilla.redhat.com/1119412<br>> ><br>> > That was fixed in version 3.5.0.2, so make sure that you have at<br>> least<br>> > that version.<br>> ><br>> > If you still have problems please share the output of the ovirt-shell<br>> > command.<br>> ><br>> > --<br>> > Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> > 3?D, 28016 Madrid, Spain<br>> > Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat<br>> > S.L.<br>> ><br>> ><br>> ><br>> ><br>> > --<br>> > G.Sz.<br>> ><br>> ><br>> ><br>> > --<br>> > G.Sz.<br>> ><br>> ><br>> > _______________________________________________<br>> > Users mailing list<br>> > Users@ovirt.org<br>> > http://lists.ovirt.org/mailman/listinfo/users<br>> ><br>><br>><br>> --<br>> Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> 3?D, 28016 Madrid, Spain<br>> Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat S.L.<br>><br><div><br></div><br><div><br></div>-- <br>G.Sz.<br><div><br></div><br><div><br></div>-- <br>G.Sz.<br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/76801a84/attachment-0001.html><br><div><br></div>------------------------------<br><div><br></div>Message: 2<br>Date: Wed, 10 Dec 2014 10:20:01 +0300<br>From: ??????? ???????? <mail.griffon@gmail.com><br>To: "users@ovirt.org" <users@ovirt.org><br>Subject: [ovirt-users] oVirt bonding mode4 + cisco 2960 XR<br>Message-ID:<br> <CAE85BH-VkK0PsdS=WQzmP61nYX2B-cE09tOEK8NpcuqYbANtCA@mail.gmail.com><br>Content-Type: text/plain; charset="utf-8"<br><div><br></div>Hi, community!<br><div><br></div>I have made bond0 mode4 (eth0+eth1+eth2+eth3) by oVirt portal. It's work<br>well on CentOS 7 node.<br><div><br></div>How I can setup my cisco 2960 XR switch for work with this bond0 for<br>loadbalancing + aggregation (802.3ad)?<br>-------------- next part --------------<br>An HTML attachment was scrubbed...<br>URL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/9fcded22/attachment-0001.html><br><div><br></div>------------------------------<br><div><br></div>Message: 3<br>Date: Wed, 10 Dec 2014 08:37:32 +0100<br>From: Sandro Bonazzola <sbonazzo@redhat.com><br>To: Robert Story <rstory@tislabs.com><br>Cc: "users@ovirt.org" <users@ovirt.org><br>Subject: Re: [ovirt-users] ??: 3.5 hosted engine: 2nd host Cannot<br> acquire bridge address<br>Message-ID: <5487F83C.2020704@redhat.com><br>Content-Type: text/plain; charset=UTF-8<br><div><br></div>Il 09/12/2014 20:16, Robert Story ha scritto:<br>> On Tue, 09 Dec 2014 10:33:51 +0100 Sandro wrote:<br>> SB> > Looking at setup logs, you have:<br>> SB> > OVEHOSTED_NETWORK/bridgeIf=str:'eth1.79'<br>> SB> > [...]<br>> SB> > which seems to fail matching REGEXP:<br>> SB> > <br>> SB> > _ADDRESS_RE = re.compile(<br>> SB> > flags=re.VERBOSE,<br>> SB> > pattern=r"""<br>> SB> > \s+<br>> SB> > inet<br>> SB> > \s<br>> SB> > (?P<address>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})<br>> SB> > .+<br>> SB> > \s+<br>> SB> > (?P<interface>\w+)<br>> SB> > $<br>> SB> > """<br>> SB> > )<br>> SB> > <br>> SB> > I guess the match is failing due to the '.' in 'eth1.79'<br>> SB> <br>> SB> If you haven't already opened a BZ about it, please open one, thanks<br>> <br>> https://bugzilla.redhat.com/show_bug.cgi?id=1172287<br>> <br><div><br></div>Thanks<br><div><br></div>> <br>> Robert<br>> <br><div><br></div><br>-- <br>Sandro Bonazzola<br>Better technology. Faster innovation. Powered by community collaboration.<br>See how it works at redhat.com<br><div><br></div><br>------------------------------<br><div><br></div>Message: 4<br>Date: Wed, 10 Dec 2014 09:02:13 +0100<br>From: Sandro Bonazzola <sbonazzo@redhat.com><br>To: "Users@ovirt.org" <Users@ovirt.org>, "devel@ovirt.org"<br> <devel@ovirt.org><br>Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.6.0 status<br>Message-ID: <5487FE05.3010703@redhat.com><br>Content-Type: text/plain; charset=iso-8859-15<br><div><br></div>Hi,<br><div><br></div>Release criteria discussion has been closed and wiki has been updated accordingly by Brian [1][2].<br><div><br></div>Release management for 3.6.0 [3] has been updated with the accepted changes in release criteria.<br><div><br></div>ACTION: Feature proposed for 3.6.0 must now be collected in the 3.6 Google doc [4] and reviewed by maintainers.<br>Finished the review process, the remaining key milestones for this release will be scheduled.<br><div><br></div>For reference, external project schedules we're tracking are:<br> Fedora 21: 2014-12-09 (RELEASED)<br> Fedora 22: no earlier than 2015-05-19<br> Foreman 1.8.0: 2015-03-01<br> GlusterFS 3.7: 2015-04-29<br> OpenStack Kilo: 2015-04-30<br><div><br></div><br>Two different proposals have been made about above scheduling [5]:<br>1) extend the cycle to 10 months for allowing to include a large feature set<br>2) reduce the cycle to less than 6 months and split features over 3.6 and 3.7<br><div><br></div>and we can also add<br><div><br></div>3) keep current 6 months cycle<br><div><br></div>The tracker bug for 3.6.0 [6] currently shows no blockers.<br><div><br></div>There are 460 bugs [7] targeted to 3.6.0.<br>Excluding node and documentation bugs we have 436 bugs [8] targeted to 3.6.0.<br><div><br></div><br>[1] http://www.ovirt.org/Release_Criteria_Template<br>[2] http://www.ovirt.org/Release_process<br>[3] http://www.ovirt.org/OVirt_3.6_Release_Management<br>[4] http://goo.gl/9X3G49<br>[5] http://lists.ovirt.org/pipermail/users/2014-November/028875.html<br>[6] https://bugzilla.redhat.com/show_bug.cgi?id=1155425<br>[7] http://goo.gl/zwkF3r<br>[8] http://goo.gl/ZbUiMc<br><div><br></div><br>-- <br>Sandro Bonazzola<br>Better technology. Faster innovation. Powered by community collaboration.<br>See how it works at redhat.com<br><div><br></div><br>------------------------------<br><div><br></div>Message: 5<br>Date: Wed, 10 Dec 2014 09:07:54 +0100<br>From: Sandro Bonazzola <sbonazzo@redhat.com><br>To: "Users@ovirt.org" <Users@ovirt.org>, "devel@ovirt.org"<br> <devel@ovirt.org><br>Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status<br>Message-ID: <5487FF5A.6050809@redhat.com><br>Content-Type: text/plain; charset=iso-8859-15<br><div><br></div>Hi,<br>We have still blockers for oVirt 3.5.1 RC release so we need to postpone it until they'll be fixed.<br>ACTION: Being so near to winter's holidays we need to discuss the new tentative date for RC in today sync meeting.<br><div><br></div>The bug tracker [1] shows 2 open blocker:<br>Bug ID Whiteboard Status Summary<br>1160846 sla NEW Can't add disk to VM without specifying disk profile when the storage domain has more than one disk profile<br>1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from 3.4.4 to 3.5.1 snapshot<br><div><br></div>In order to stabilize the release a new branch ovirt-engine-3.5.1 will be created from the same git hash used for composing the RC.<br><div><br></div>- ACTION: assignee please provide ETA on above blockers<br><div><br></div>Maintainers:<br>- Please be sure that 3.5 snapshot allow to create VMs<br>- Please be sure that no pending patches are going to block the release<br>- If any patch must block the RC release please raise the issue as soon as possible.<br><div><br></div>There are still 63 bugs [2] targeted to 3.5.1.<br>Excluding node and documentation bugs we still have 42 bugs [3] targeted to 3.5.1.<br><div><br></div>Maintainers / Assignee:<br>- Please add the bugs to the tracker if you think that 3.5.1 should not be released without them fixed.<br>- ACTION: Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1:<br> it will ease gathering the blocking bugs for next releases.<br>- ACTION: Please fill release notes, the page has been created here [4]<br><div><br></div>Community:<br>- If you're testing oVirt 3.5 nightly snapshot, please add yourself to the test page [5]<br><div><br></div><br>[1] http://bugzilla.redhat.com/1155170<br>[2] http://goo.gl/7G0PDV<br>[3] http://goo.gl/6gUbVr<br>[4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes<br>[5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing<br><div><br></div>-- <br>Sandro Bonazzola<br>Better technology. Faster innovation. Powered by community collaboration.<br>See how it works at redhat.com<br><div><br></div><br>------------------------------<br><div><br></div>Message: 6<br>Date: Wed, 10 Dec 2014 03:12:20 -0500 (EST)<br>From: Francesco Romani <fromani@redhat.com><br>To: Sandro Bonazzola <sbonazzo@redhat.com><br>Cc: Users@ovirt.org, devel@ovirt.org<br>Subject: Re: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status<br>Message-ID:<br> <805014182.8558086.1418199140322.JavaMail.zimbra@redhat.com><br>Content-Type: text/plain; charset=utf-8<br><div><br></div>----- Original Message -----<br>> From: "Sandro Bonazzola" <sbonazzo@redhat.com><br>> To: Users@ovirt.org, devel@ovirt.org<br>> Sent: Wednesday, December 10, 2014 9:07:54 AM<br>> Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status<br>> <br>> Hi,<br>> We have still blockers for oVirt 3.5.1 RC release so we need to postpone it<br>> until they'll be fixed.<br>> ACTION: Being so near to winter's holidays we need to discuss the new<br>> tentative date for RC in today sync meeting.<br>> <br>> The bug tracker [1] shows 2 open blocker:<br>> Bug ID Whiteboard Status Summary<br>> 1160846 sla NEW Can't add disk to VM without specifying disk profile when<br>> the storage domain has more than one disk profile<br>> 1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from<br>> 3.4.4 to 3.5.1 snapshot<br>> <br>> In order to stabilize the release a new branch ovirt-engine-3.5.1 will be<br>> created from the same git hash used for composing the RC.<br>> <br>> - ACTION: assignee please provide ETA on above blockers<br><div><br></div>1168709 - patch seems simple, posted and verified (BZ entry just updated to POST).<br>needs review. ETA for merge: definitely within the week, worst case.<br><div><br></div>Bests,<br><div><br></div>-- <br>Francesco Romani<br>RedHat Engineering Virtualization R & D<br>Phone: 8261328<br>IRC: fromani<br><div><br></div><br>------------------------------<br><div><br></div>Message: 7<br>Date: Wed, 10 Dec 2014 05:57:14 -0500 (EST)<br>From: Alon Bar-Lev <alonbl@redhat.com><br>To: Juan Jose <jj197005@gmail.com><br>Cc: users <users@ovirt.org><br>Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue<br>Message-ID:<br> <1512532550.7193502.1418209034660.JavaMail.zimbra@redhat.com><br>Content-Type: text/plain; charset=utf-8<br><div><br></div><br><div><br></div>----- Original Message -----<br>> From: "Juan Jose" <jj197005@gmail.com><br>> To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" <yzaslavs@redhat.com><br>> Sent: Wednesday, December 10, 2014 12:30:34 PM<br>> Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue<br>> <br>> Hello Alon and Yair,<br>> <br>> Many thanks for your help, finally It works properly. My problem, after<br>> last Alon indications was that my user "Juanjo" was defined with SuperUser<br>> role in the previous domain configuration. I have loggen in with admin user<br>> from internal and I have removed old configuration and I have configured my<br>> user "Juanjo" with all administrators roles in folder "Permission" and I<br>> can log in in administration portal without problems and it works properly.<br>> <br>> My final configuration I have is an emulated *AD based on Samba 4* and the<br>> final configuration files are:<br><div><br></div>Good!<br>So samba is not emulating active directory entirely :)<br>But good to know it is working.<br>Please also checkout group membership.<br><div><br></div>> ovirt-engine-extension-aaa-ldap.noarch<br>> 1.0.1-0.0.master.20141209141731.git0437701.el6<br><div><br></div>this fix for samba ad will be released in 1.0.1.<br><div><br></div>> <br>> */etc/ovirt-engine/extensions.d/siee-local-authn.properties*:<br>> <br>> ovirt.engine.extension.name = siee-local-authn<br>> ovirt.engine.extension.bindings.method = jbossmodule<br>> ovirt.engine.extension.binding.jbossmodule.module =<br>> org.ovirt.engine-extensions.aaa.ldap<br>> ovirt.engine.extension.binding.jbossmodule.class =<br>> org.ovirt.engineextensions.aaa.ldap.AuthnExtension<br>> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn<br>> ovirt.engine.aaa.authn.profile.name = siee<br>> ovirt.engine.aaa.authn.authz.plugin = siee-local-authz<br>> config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties<br>> <br>> */etc/ovirt-engine/extensions.d/siee-local-authz.properties*:<br>> <br>> ovirt.engine.extension.name = siee-local-authz<br>> ovirt.engine.extension.bindings.method = jbossmodule<br>> ovirt.engine.extension.binding.jbossmodule.module =<br>> org.ovirt.engine-extensions.aaa.ldap<br>> ovirt.engine.extension.binding.jbossmodule.class =<br>> org.ovirt.engineextensions.aaa.ldap.AuthzExtension<br>> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz<br>> config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties<br>> <br>> */etc/ovirt-engine/aaa/siee.properties*:<br>> <br>> include = <ad.properties><br>> <br>> #<br>> # Active directory domain name.<br>> #<br>> vars.domain = siee.local<br>> <br>> #<br>> # Search user and its password.<br>> #<br>> vars.user = searcher@${global:vars.domain}<br>> vars.password = xxxx<br>> <br>> #<br>> # Optional DNS servers, if enterprise<br>> # DNS server cannot resolve the domain srvrecord.<br>> #<br>> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}<br>> <br>> pool.default.serverset.type = srvrecord<br>> pool.default.serverset.srvrecord.domain = ${global:vars.domain}<br>> pool.default.auth.simple.bindDN = ${global:vars.user}<br>> pool.default.auth.simple.password = ${global:vars.password}<br>> <br>> # Uncomment if using custom DNS<br>> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url<br>> = ${global:vars.dns}<br>> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns}<br>> <br>> # Create keystore, import certificate chain and uncomment<br>> # if using ssl/tls.<br>> #pool.default.ssl.startTLS = true<br>> #pool.default.ssl.truststore.file =<br>> ${local:_basedir}/${global:vars.domain}.jks<br>> #pool.default.ssl.truststore.password = changeit<br><div><br></div>You should enable SSL for production use... as you do not want passwords to be transmitted in clear.<br>Not sure how you install ssl on the samba ldap... but once you do, follow the README instructions[1]<br><div><br></div>[1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l141<br><div><br></div>> <br>> */etc/krb5.conf*:<br><div><br></div>You are not using kerberos, so there is no reason to configure it for setup to work.<br><div><br></div>> <br>> [logging]<br>> default = FILE:/var/log/krb5libs.log<br>> kdc = FILE:/var/log/krb5kdc.log<br>> admin_server = FILE:/var/log/kadmind.log<br>> <br>> [libdefaults]<br>> default_realm = SIEE.LOCAL<br>> dns_lookup_realm = true<br>> dns_lookup_kdc = true<br>> ticket_lifetime = 24h<br>> renew_lifetime = 7d<br>> forwardable = no<br>> default_tkt_enctypes = arcfour-hmac-md5<br>> udp_preference_limit = 1<br>> <br>> #[realms]<br>> <br>> #[domain_realm]<br>> # .siee.local = SIEE.LOCAL<br>> # siee.local = SIEE.LOCAL<br>> <br>> <br>> Many thanks again to everybody,<br>> <br>> Juanjo.<br>> <br>> On Tue, Dec 9, 2014 at 5:31 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:<br>> <br>> ><br>> ><br>> > ----- Original Message -----<br>> > > From: "Juan Jose" <jj197005@gmail.com><br>> > > To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" <<br>> > yzaslavs@redhat.com><br>> > > Sent: Tuesday, December 9, 2014 5:42:56 PM<br>> > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue<br>> > ><br>> > > Hello Alon,<br>> > ><br>> > > In my firsts e-mails I had already said that I have an emulation of AD<br>> > > based on Samba 4. I have tested the last version ov<br>> > > ovirt-engine-extension-aaa-ldap package and I think the problem is the<br>> > same<br>> > > although the error is "User is not authorized to perform this action".<br>> > ><br>> > > I attach the enginle.log.<br>> ><br>> > USER_NOT_AUTHORIZED_TO_PERFORM_ACTION means user is not superuser or can<br>> > manage objects as far as I know.<br>> ><br>> > I see siee0@siee.local is trying to login which is CN=siee0<br>> > siee0,CN=Users,DC=siee,DC=local<br>> ><br>> > Login succeeds.<br>> ><br>> > I do not see any groups it belongs to.<br>> ><br>> > Are you sure you added this user role within the webadmin or that user<br>> > belongs to groups that were added to engine with such roles?<br>> ><br>> > ><br>> > > In case that the new oVirt version 3.5 doesn't work with an AD emulation<br>> > > based on Samba 4, is it possible to do user authentication with an<br>> > OpenLDAP<br>> > > directly with this 3.5 version?, if it is so, could you give me the link<br>> > to<br>> > > the documentation to configure OpenLDAP authentication?<br>> ><br>> > Sure, just use the<br>> > /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple copy recursive<br>> > into /etc/ovirt-engine, then modify /etc/ovirt-engine/aaa/ldap1.properties<br>> > set vars.server, vars.user, vars.password.<br>> ><br>> > Until 3.5.1 you should also<br>> > /etc/ovirt-engine/extensions.d/domain1*.properties and replace ../aaa to<br>> > /etc/ovirt-engine/aaa<br>> ><br>> ><br>> > > Many thanks in advanced,<br>> > ><br>> > > Juanjo.<br>> > ><br>> > > On Tue, Dec 9, 2014 at 3:16 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:<br>> > ><br>> > > ><br>> > > ><br>> > > > ----- Original Message -----<br>> > > > > From: "Alon Bar-Lev" <alonbl@redhat.com><br>> > > > > To: "Juan Jose" <jj197005@gmail.com><br>> > > > > Cc: "users" <users@ovirt.org><br>> > > > > Sent: Tuesday, December 9, 2014 3:59:33 PM<br>> > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue<br>> > > > ><br>> > > > > We start over...<br>> > > > ><br>> > > > > This is not active directory... it is samba.<br>> > > > ><br>> > > > > Attribute(name=vendorName, values={'Samba Team (http://samba.org)'})<br>> > > > ><br>> > > > > Only now I realized this, maybe you mentioned it earlier not sure.<br>> > > > ><br>> > > > > Of course this was never tested, so probably not working.<br>> > > > ><br>> > > > > I see that samba does not return a list of extended operations, I<br>> > will<br>> > > > > workaround this and we can see what's else differ from active<br>> > directory.<br>> > > ><br>> > > > Can you please checkout the following rpm[1]?<br>> > > ><br>> > > > [1]<br>> > > ><br>> > http://jenkins.ovirt.org/job/ovirt-engine-extension-aaa-ldap_master_create-rpms-el6-x86_64_merged/<br>> > > ><br>> > ><br>> ><br>> <br><div><br></div><br>------------------------------<br><div><br></div>_______________________________________________<br>Users mailing list<br>Users@ovirt.org<br>http://lists.ovirt.org/mailman/listinfo/users<br><div><br></div><br>End of Users Digest, Vol 39, Issue 50<br>*************************************<br></div><div><br></div></div></body></html>