<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I have exactly the same problem after an upgrade from CentOS 7.3 to 7.4, but I don’t want to plan now the migration to oVirt 4.x.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Can you help me to correct the bug and keep oVirt 3.6 for a few months ?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">It really seems to be a modification in libvirt authentication because when I comment out
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">#auth_unix_rw="sasl"
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">in libvirtd.conf, libvirtd starts but my Host is still unresponsive in oVirt.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">My production environment is running on a single Hypervisor and I need the second one.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">De :</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> users-bounces@ovirt.org [mailto:users-bounces@ovirt.org]
<b>De la part de</b> Yaniv Kaul<br>
<b>Envoyé :</b> mardi 19 septembre 2017 13:36<br>
<b>À :</b> Ozan Uzun <ozanuzun@gmail.com><br>
<b>Cc :</b> Ovirt Users <users@ovirt.org><br>
<b>Objet :</b> Re: [ovirt-users] libvirt: XML-RPC error : authentication failed: Failed to start SASL<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Sep 19, 2017 at 12:24 PM, Ozan Uzun <<a href="mailto:ozanuzun@gmail.com" target="_blank">ozanuzun@gmail.com</a>> wrote:<o:p></o:p></p>
<div>
<table style="BORDER-COLLAPSE: collapse" class="3a8ded91-40ea-4011-8a93-273b83b3e250Table" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="TEXT-DECORATION: ">
<td style="WIDTH: auto">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="3a8ded91-40ea-4011-8a93-273b83b3e250">
</p>
<hr color="#0099ff" size="1">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt"></p>
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt"></p>
<p></p>
</td>
</tr>
<tr style="TEXT-DECORATION: ">
<td style="WIDTH: auto">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d">
</p>
<table style="BORDER-BOTTOM: medium none; WIDTH: 507px; BORDER-COLLAPSE: collapse; HEIGHT: 211px; BORDER-TOP: medium none" class="d25f83d3-f6d0-434b-863d-6b70d6fe505dTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr style="TEXT-DECORATION: ">
<td style="WIDTH: auto">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="left">
<font color="#0099ff" size="2" face="Arial"><strong>Alain VONDRA </strong></font><br>
<font color="#808080" size="1" face="Arial"><strong>Chargé d'Exploitation et de Sécurité des Systèmes d'Information </strong></font><br>
<font color="#808080" size="1" face="Arial"><strong>Direction Administrative et Financière</strong></font><strong><br>
<font color="#808080" size="1">+33 1 44 39 77 76 </font></strong><strong><font color="#808080" size="1"></font></strong><strong><br>
</strong><strong><font color="#808080" size="1">UNICEF France</font><br>
<font color="#808080" size="1">3 rue Duguay Trouin 75006 PARIS</font></strong><strong><br>
<font color="#0099ff" size="1" face="Arial"><strong><a href="http://www.unicef.fr/">www.unicef.fr</a></strong></font>
</strong></p>
</td>
<td style="WIDTH: auto"><a href="http://www.unicef.fr"></a>
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
<a href="http://www.unicef.fr/"></a></p>
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
<a href="http://www.unicef.fr/"></a><a href="http://www.unicef.fr/"></a><a title="" href="https://don.unicef.fr/b?cid=73"><img style="WIDTH: 100px; HEIGHT: 100px" border="0" src="cid:signature_Unicef-France_ade377bf-317d-4502-9e2f-a0b487c09563.gif"></a></p>
</td>
<td style="WIDTH: auto">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
</p>
</td>
</tr>
</tbody>
</table>
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt"></p>
</td>
</tr>
<tr style="TEXT-DECORATION: ">
<td style="WIDTH: auto">
<p style="FONT-FAMILY: Arial; FONT-SIZE: 10pt" class="d25f83d3-f6d0-434b-863d-6b70d6fe505d">
</p>
<hr color="#0099ff" size="1">
<a href="http://www.unicef.fr"></a>
<p></p>
</td>
</tr>
</tbody>
</table>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">After hours of struggle, I removed all the hosts.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Installed a fresh centos 6.x on a host. Now it works like a charm.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I will install a fresh ovirt 4.x, and start migration my vm's on new centos 7.4 hosts.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The only supported way seems exporting/importing vm's for different ovirt engines. I wish I had plain qcow2 images to copy...<o:p></o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">You could detach and attach a whole storage domain.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Y.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal">On Tue, 19 Sep 2017 at 10:18, Yaniv Kaul <<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<p class="MsoNormal">On Mon, Sep 18, 2017 at 11:47 PM, Ozan Uzun <<a href="mailto:ozanuzun@gmail.com" target="_blank">ozanuzun@gmail.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hello,<o:p></o:p></p>
</div>
<p class="MsoNormal">Today I updated my ovirt engine v3.5 and all my hosts on one datacenter (centos 7.4 ones).<o:p></o:p></p>
</div>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">You are mixing an ancient release (oVirt 3.5) with the latest CentOS. This is not supported at best, and who knows if it works.<o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">and suddenly my vdsm and vdsm-network services stopped working.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">btw: My other DC is centos 6 based (managed from the same ovirt engine), everything works just fine there.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">vdsm fails dependent on vdsm-network service, with lots of RPC error.<o:p></o:p></p>
</div>
<p class="MsoNormal">I tried to configure vdsm-tool configure --force, deleted everything (vdsm-libvirt), reinstalled.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Could not make it work.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">My logs are filled with the follogin<br>
<br>
Sep 18 23:06:01 node6 python[5340]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: KEYRING:persistent:0))<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">This may sound like a change that happened in libvirt authentication, which we've adjusted to in oVirt 4.1.5 (specifically VDSM) I believe. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Y.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal">Sep 18 23:06:01 node6 vdsm-tool[5340]: libvirt: XML-RPC error : authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No
Kerberos credent<br>
Sep 18 23:06:01 node6 libvirtd[4312]: 2017-09-18 20:06:01.954+0000: 4312: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
<br>
-------<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">journalctl -xe output for vdsm-network<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: libvirt: XML-RPC error : authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credent<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: Traceback (most recent call last):<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/bin/vdsm-tool", line 219, in main<br>
Sep 18 23:06:02 node6 libvirtd[4312]: 2017-09-18 20:06:02.558+0000: 4312: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return tool_command[cmd]["command"](*args)<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-packages/vdsm/tool/upgrade_300_networks.py", line 83, in upgrade_networks<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: networks = netinfo.networks()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-packages/vdsm/netinfo.py", line 112, in networks<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: conn = libvirtconnection.get()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 159, in get<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: conn = _open_qemu_connection()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 95, in _open_qemu_connection<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return utils.retry(libvirtOpen, timeout=10, sleep=0.2)<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1108, in retry<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return func()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib64/python2.7/site-packages/libvirt.py", line 105, in openAuth<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: if ret is None:raise libvirtError('virConnectOpenAuth() failed')<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: libvirtError: authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials availa<br>
Sep 18 23:06:02 node6 systemd[1]: vdsm-network.service: control process exited, code=exited status=1<br>
Sep 18 23:06:02 node6 systemd[1]: Failed to start Virtual Desktop Server Manager network restoration.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-----<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">libvirt is running but throws some errors.<br>
<br>
[root@node6 ~]# systemctl status libvirtd<br>
● libvirtd.service - Virtualization daemon<br>
Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; vendor preset: enabled)<br>
Drop-In: /etc/systemd/system/libvirtd.service.d<br>
└─unlimited-core.conf<br>
Active: active (running) since Mon 2017-09-18 23:15:47 +03; 19min ago<br>
Docs: man:libvirtd(8)<br>
<a href="http://libvirt.org" target="_blank">http://libvirt.org</a><br>
Main PID: 6125 (libvirtd)<br>
CGroup: /system.slice/libvirtd.service<br>
└─6125 /usr/sbin/libvirtd --listen<br>
<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.195+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.396+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.597+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
<br>
<br>
----------------<br>
<br>
<br>
[root@node6 ~]# virsh<br>
Welcome to virsh, the virtualization interactive terminal.<br>
<br>
Type: 'help' for help with commands<br>
'quit' to quit<br>
<br>
virsh # list<br>
error: failed to connect to the hypervisor<br>
error: authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: KEYRING:persistent:0)))<br>
<br>
<br>
=================<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">I do not want to lose all my virtual servers, is there any way to recover them? Currenty everything is down. I am ok to install a new ovirt engine if somehow I can restore my virtual servers. I can also split centos 6 and centos 7 ovirt
engine's.<o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</blockquote>
</div>
</div>
</div>
<div>
<div>
<div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt">
<p class="MsoNormal" style="margin-bottom:12.0pt">_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><o:p></o:p></p>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>