<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Fixed it by downgrading libvirt, I had the libvirt latest repo
<a class="moz-txt-link-rfc2396E" href="http://mirror.centos.org/centos-7/7.3.1611/virt/x86_64/libvirt-latest/">"http://mirror.centos.org/centos-7/7.3.1611/virt/x86_64/libvirt-latest/"</a>
configured on our Katello</p>
Working packages:<br>
<br>
<blockquote>libvirt-daemon-driver-network-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-config-nwfilter-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-qemu-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-lxc-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-interface-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-secret-2.0.0-10.el7_3.9.x86_64<br>
libvirt-lock-sanlock-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-kvm-2.0.0-10.el7_3.9.x86_64<br>
libvirt-client-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-driver-storage-2.0.0-10.el7_3.9.x86_64<br>
libvirt-daemon-config-network-2.0.0-10.el7_3.9.x86_64<br>
libvirt-2.0.0-10.el7_3.9.x86_64<br>
libvirt-python-2.0.0-2.el7.x86_64<br>
<br>
</blockquote>
<div class="moz-cite-prefix">On 10/10/2017 07:41 PM, Jorick Astrego
wrote:<br>
</div>
<blockquote
cite="mid:fafe11d8-458c-9ae6-8660-5ebb5aebda52@netbulae.eu"
type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<p>Hi,</p>
<p>I've redeployed a node with 7.3 to fix this issue but got the
same errors with ovirt 4.0. <br>
</p>
<blockquote>
<p>MainThread::DEBUG::2017-10-10
18:30:30,945::upgrade::90::upgrade::(apply_upgrade) Running
upgrade upgrade-unified-persistence<br>
MainThread::DEBUG::2017-10-10
18:30:30,951::libvirtconnection::160::root::(get) trying to
connect libvirt<br>
MainThread::ERROR::2017-10-10
18:30:41,125::upgrade::94::upgrade::(apply_upgrade) Failed to
run upgrade-unified-persistence<br>
Traceback (most recent call last):<br>
File
"/usr/lib/python2.7/site-packages/vdsm/tool/upgrade.py", line
92, in apply_upgrade<br>
upgrade.run(ns, args)<br>
File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 195, in run<br>
run()<br>
File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 46, in run<br>
networks, bondings = _getNetInfo()<br>
File
"/usr/lib/python2.7/site-packages/vdsm/tool/unified_persistence.py",
line 132, in _getNetInfo<br>
netinfo = NetInfo(netswitch.netinfo())<br>
File
"/usr/lib/python2.7/site-packages/vdsm/network/netswitch.py",
line 298, in netinfo<br>
_netinfo = netinfo_get(compatibility=compatibility)<br>
File
"/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
line 109, in get<br>
return _get(vdsmnets)<br>
File
"/usr/lib/python2.7/site-packages/vdsm/network/netinfo/cache.py",
line 70, in _get<br>
libvirt_nets = libvirt.networks()<br>
File
"/usr/lib/python2.7/site-packages/vdsm/network/libvirt.py",
line 113, in networks<br>
conn = libvirtconnection.get()<br>
File
"/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py",
line 163, in get<br>
password)<br>
File
"/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py",
line 99, in open_connection<br>
return utils.retry(libvirtOpen, timeout=10, sleep=0.2)<br>
File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line
547, in retry<br>
return func()<br>
File "/usr/lib64/python2.7/site-packages/libvirt.py", line
105, in openAuth<br>
if ret is None:raise libvirtError('virConnectOpenAuth()
failed')<br>
libvirtError: authentication failed: authentication failed<br>
</p>
<p><br>
</p>
<p>Oct 10 19:35:55 host1 sasldblistusers2: _sasldb_getkeyhandle
has failed<br>
</p>
<p>Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+0000:
13660: error : virNetSASLSessionListMechanisms:390 : internal
error: cannot list SASL mechanisms -4 (SASL(-4): no mechanism
available: Internal Error -4 in server.c near line 1757)<br>
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+0000:
13660: error : remoteDispatchAuthSaslInit:3411 :
authentication failed: authentication failed<br>
Oct 10 19:36:20 host1 libvirtd: 2017-10-10 17:36:20.002+0000:
13650: error : virNetSocketReadWire:1808 : End of file while
reading data: Input/output error<br>
Oct 10 19:36:20 host1 vdsm-tool: libvirt: XML-RPC error :
authentication failed: authentication failed<br>
Oct 10 19:36:20 host1 systemd: vdsm-network.service: control
process exited, code=exited status=1<br>
Oct 10 19:36:20 host1 systemd: Failed to start Virtual Desktop
Server Manager network restoration.<br>
Oct 10 19:36:20 host1 systemd: Dependency failed for Virtual
Desktop Server Manager.<br>
Oct 10 19:36:20 host1 systemd: Dependency failed for MOM
instance configured for VDSM purposes.<br>
Oct 10 19:36:20 host1 systemd: Job mom-vdsm.service/start
failed with result 'dependency'.<br>
Oct 10 19:36:20 host1 systemd: Job vdsmd.service/start failed
with result 'dependency'.<br>
Oct 10 19:36:20 host1 systemd: Unit vdsm-network.service
entered failed state.<br>
Oct 10 19:36:20 host1 systemd: vdsm-network.service failed.<br>
</p>
</blockquote>
<p><br>
</p>
<p>cat /etc/redhat-release <br>
CentOS Linux release 7.3.1611 (Core) <br>
</p>
<p>cat /etc/libvirt/passwd.db<br>
cat: /etc/libvirt/passwd.db: No such file or directory<br>
</p>
<blockquote>
<p>vdsm-4.18.21-1.el7.centos.x86_64<br>
vdsm-api-4.18.21-1.el7.centos.noarch<br>
vdsm-xmlrpc-4.18.21-1.el7.centos.noarch<br>
vdsm-hook-vmfex-dev-4.18.21-1.el7.centos.noarch<br>
vdsm-cli-4.18.21-1.el7.centos.noarch<br>
vdsm-python-4.18.21-1.el7.centos.noarch<br>
vdsm-yajsonrpc-4.18.21-1.el7.centos.noarch<br>
vdsm-infra-4.18.21-1.el7.centos.noarch<br>
vdsm-jsonrpc-4.18.21-1.el7.centos.noarch</p>
<p>libvirt-daemon-driver-storage-scsi-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-rbd-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-nodedev-3.2.0-1.el7.x86_64<br>
libvirt-client-3.2.0-1.el7.x86_64<br>
libvirt-python-2.0.0-2.el7.x86_64<br>
libvirt-daemon-driver-network-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-mpath-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-iscsi-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-logical-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-secret-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-interface-3.2.0-1.el7.x86_64<br>
libvirt-daemon-kvm-3.2.0-1.el7.x86_64<br>
libvirt-libs-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-core-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-qemu-3.2.0-1.el7.x86_64<br>
libvirt-daemon-config-nwfilter-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-disk-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-storage-gluster-3.2.0-1.el7.x86_64<br>
libvirt-lock-sanlock-3.2.0-1.el7.x86_64<br>
libvirt-daemon-3.2.0-1.el7.x86_64<br>
libvirt-daemon-driver-nwfilter-3.2.0-1.el7.x86_64<br>
</p>
<p>ovirt-imageio-common-0.4.0-1.el7.noarch<br>
ovirt-release40-4.0.6-2.el7.centos.noarch<br>
ovirt-vmconsole-1.0.4-1.el7.centos.noarch<br>
ovirt-imageio-daemon-0.4.0-1.el7.noarch<br>
ovirt-vmconsole-host-1.0.4-1.el7.centos.noarch<br>
<br>
</p>
</blockquote>
<p>Also tried with "mech_list: digest-md5"<br>
</p>
<blockquote>
<p>cat /etc/sasl2/libvirt.conf |grep mech_list<br>
#mech_list: gssapi<br>
mech_list: digest-md5<br>
#mech_list: scram-sha-1<br>
#mech_list: scram-sha-1 gssapi<br>
<br>
</p>
</blockquote>
<p><br>
</p>
<blockquote> </blockquote>
<div class="moz-cite-prefix">On 10/05/2017 01:26 PM, Pavel Gashev
wrote:<br>
</div>
<blockquote
cite="mid:762B546B-3999-4786-893A-B57F3CE8A312@acronis.com"
type="cite">
<pre wrap="">Full /etc/sasl2/libvirt.conf:
mech_list: digest-md5
sasldb_path: /etc/libvirt/passwd.db
Also note that VDSM has to be patched to work on 7.4 with no issues. oVirt 3.6 and 4.1 have required fixes, but oVirt 4.0 doesn’t.
On 04/10/2017, 18:44, <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:users-bounces@ovirt.orgonbehalfofAlanGriffiths">"users-bounces@ovirt.org on behalf of Alan Griffiths"</a> <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:users-bounces@ovirt.orgonbehalfofapgriffiths79@gmail.com"><users-bounces@ovirt.org on behalf of apgriffiths79@gmail.com></a> wrote:
That didn't seem to make any difference.
I can make it work by disabling authentication
auth_unix_rw="none" in /etc/libvirt/libvirtd.conf
On 4 October 2017 at 15:05, VONDRA Alain <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:AVONDRA@unicef.fr"><AVONDRA@unicef.fr></a> wrote:
> Hi,
> Did you modify your /etc/sasl2/libvirt.conf, because the update has modify the way to authenticate from md5 to gssapi.
>
> If not just change this line :
> mech_list: gssapi
> to
> mech_list: digest-md5
>
> And restart services
>
> As mentioned in the libvirt.conf file :
>
> # NB, previously DIGEST-MD5 was set as the default mechanism for
> # libvirt. Per RFC 6331 this is vulnerable to many serious security
> # flaws and should no longer be used. Thus GSSAPI is now the default.
> #
> # To use GSSAPI requires that a libvirtd service principal is
> # added to the Kerberos server for each host running libvirtd.
> # This principal needs to be exported to the keytab file listed below
>
> Alain
>
>
>
> Alain VONDRA
>
> Chargé d'Exploitation et de Sécurité des Systèmes d'Information
> Direction Administrative et Financière
> +33 1 44 39 77 76
>
> UNICEF France
> 3 rue Duguay Trouin 75006
> PARIS
> <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="http://www.unicef.fr">www.unicef.fr</a>
> -----Message d'origine-----
> De : <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:users-bounces@ovirt.org">users-bounces@ovirt.org</a> [<a moz-do-not-send="true" class="moz-txt-link-freetext" href="mailto:users-bounces@ovirt.org">mailto:users-bounces@ovirt.org</a>] De la part de Alan Griffiths
> Envoyé : mercredi 4 octobre 2017 15:50
> À : Ovirt Users <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:users@ovirt.org"><users@ovirt.org></a>
> Objet : [ovirt-users] Ovirt 4.0 and EL 7.4
>
> Hi,
>
> Is 4.0 supported/known to work on CentOS 7.4?
>
> I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and now vdsm-network fails to start with
>
> vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication failed
>
> To even get this far I had to exclude gluster packages as 7.4 introduces 3.8 but ovirt 4.0 repo is still on 3.7.
>
> So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is the best ordering for getting to ovirt 4.1 and EL 7.4?
>
> Thanks,
>
> Alan
> _______________________________________________
> Users mailing list
> <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users@ovirt.org</a>
> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a>
_______________________________________________
Users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a>
_______________________________________________
Users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users@ovirt.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</blockquote>
<br>
<BR />
<BR />
<b style="color:#604c78"></b><br><br><span style="color:#604c78;"><font color="000000"><span style="mso-fareast-language:en-gb;" lang="NL">Met vriendelijke groet, With kind regards,<br><br>Jorick Astrego<br></span></font></span><b style="color:#604c78"><br>Netbulae Virtualization Experts </b><br><hr style="border:none;border-top:1px solid #ccc;"><table style="width: 522px"><tbody><tr><td style="width: 130px;font-size: 10px">Tel: 053 20 30 270</td> <td style="width: 130px;font-size: 10px">info@netbulae.eu</td> <td style="width: 130px;font-size: 10px">Staalsteden 4-3A</td> <td style="width: 130px;font-size: 10px">KvK 08198180</td></tr><tr> <td style="width: 130px;font-size: 10px">Fax: 053 20 30 271</td> <td style="width: 130px;font-size: 10px">www.netbulae.eu</td> <td style="width: 130px;font-size: 10px">7547 TA Enschede</td> <td style="width: 130px;font-size: 10px">BTW NL821234584B01</td></tr></tbody></table><br><hr style="border:none;border-top:1px solid #ccc;"><BR />
</body>
</html>