- Devel - oVirt List Archives

[Engine-devel] error install on centos
by Paco qw 23 May '13

23 May '13

Hello everyone. Ovirt install on Centos 6.2 Run engine-setup and get the error. Installing: Configuring oVirt Engine... [ DONE ] Configuring JVM... [ DONE ] Creating CA... [ DONE ] Updating ovirt-engine service... [ DONE ] Setting Database Configuration... [ DONE ] Setting Database Security... [ DONE ] Creating Database... [ ERROR ] Database creation failed Please check log file /var/log/ovirt-engine/engine-setup_2011_11_24_05_36_26.log for more information In log engine-db-install #engine db installer log file on rhevm8.lab.topsonline.ru [engine-db-install] verifying required rpms are installed. postgresql-server-8.4.9-1.el6_1.1.x86_64 postgresql-8.4.9-1.el6_1.1.x86_64 postgresql-libs-8.4.9-1.el6_1.1.x86_64 [engine-db-install] verifying postgres service exists. [engine-db-install] init postgres db. [engine-db-install] psgql db already been initialized. [engine-db-install] changing authentication scheme from peer to ident. [engine-db-install] changing authentication scheme from ident to trust. [engine-db-install] stop postgres service. Stopping postgresql service: [ OK ] [engine-db-install] starting postgres service. Starting postgresql service: [ OK ] [engine-db-install] validating that postgres service is running...retry 1 ?column? ---------- 1 (1 row) [engine-db-install] checking if engine db exists already.. psql: FATAL: database "engine" does not exist [engine-db-install] engine not installed. [engine-db-install] updating db admin credentials DROP ROLE CREATE ROLE [engine-db-install] creating engine db on postgres. /usr/share/ovirt-engine/dbscripts ~ /usr/share/ovirt-engine/dbscripts /usr/share/ovirt-engine/dbscripts Creating the database: engine dropdb: database removal failed: ERROR: database "engine" does not exist user name is: engine Creating tables... Creating functions... Creating common functions... Inserting data ... Inserting pre-defined roles ... Running upgrade scripts... upgrade script detected a change in Config, View or Stored Procedure... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0000_config.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0010_custom.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0020_add_comment_col_to_schema_version.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/pre_upgrade/0030_add_materialized_views_table.sql ... Dropping materialized views... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0010_add_group_ids_to_users.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0030_change_storage_format_type_to_str.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0040_change_vm_dynamic_vm_ip_type.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0050_make_blank_template_pulic.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0060_add_group_everyone.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0100_add_device_size_to_luns.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0120_add_update_date_to_vm_templates.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0130_change_dwh_history_timekeeping_date_type.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0150_update_roles.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0180_add_guest_disk_size.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0190_add_latency_vm_disks.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0220_add_MaxAuditLogMessageLength_to_config.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0260_change_app_list_type_to_text.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0270_change_users_group_ids_field_to_text.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0280_change_blank_template_default_display_type_to_spice.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0300_add_local_admin_user.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0330_add_configuration_action_group_to_super_user_role.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0360_upgrade_default_vds_group_thp.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0380_add_otp_validity_to_vds_static.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0410_add_disks_usage.sql ... ./dbfunctions.sh: line 199: file: command not found Running upgrade sql script upgrade/03_00_0420_encrypt_pm_passwd.sh ... psql:upgrade/03_00_0420_encrypt_pm_passwd.sh:25: ERROR: syntax error at or near "#!/" LINE 1: #!/bin/bash ^ What am I doing wrong?

2 1

[Engine-devel] about user roles
by wlbleaboy＠126 23 May '13

23 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_0012_01CE5723.E5FA2190 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: I have a question about user role. Recently, I connect to ovirt-engine by ovirt-engine-sdk, use the admin@internal login is ok, because admin have System Permissions. But , when I have a domain named ovirt.test.com, and have a user name leaboy in ovirt.test.com, leaboy(a)ovirt.test.com can't to login ovirt-engine. I think maybe leaboy don't have permissions to login ovirt-engine. So , I want to know how can I do let leaboy login ovirt-engine, or some exist roles can let leaboy login. Thanks. ------=_NextPart_000_0012_01CE5723.E5FA2190 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> Hi all:<o:p></o:p>          I have a question about user role.<o:p></o:p> Recently, I connect to = ovirt-engine by ovirt-engine-sdk, use the admin@internal <o:p></o:p> login is ok, because admin have = System Permissions. <o:p></o:p> <o:p> </o:p>          But , when I have a domain named ovirt.test.com, and have a user name = leaboy<o:p></o:p> in ovirt.test.com, <a href=3D"mailto:leaboy@ovirt.test.com">leaboy(a)ovirt.test.com</a> = can’t to login ovirt-engine. I think maybe leaboy<o:p></o:p> don’t have permissions to = login ovirt-engine. So , I want to know how can I do let = leaboy<o:p></o:p> login ovirt-engine, or some = exist roles can let leaboy login.<o:p></o:p> <o:p> </o:p>           =             &= nbsp;           &n= bsp;            = Thanks. <o:p></o:p> <o:p> </o:p> <o:p> </o:p> </div> </body> </html> ------=_NextPart_000_0012_01CE5723.E5FA2190--

2 2

[Engine-devel] Any reason to use UUID instead of name or dn?
by Juan Hernandez 22 May '13

22 May '13

Hello all, I am working on a series of changes with the objective to simplify the LDAP layer and make it more generic. One of the things that I would like to do is to use the name or dn attributes to identify the users/group instead of the UUIDs as we currently do. Can someone explain me if there is any powerful reason to use the directory specific UUIDs (objectGUID in ActiveDirectory, nsUniqueId in RHDS, etc) instead of user/group names or distinguished names? Thanks in advance, Juan Hernandez -- Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.

3 2

[Engine-devel] about ovirt-shell
by wlbleaboy＠126 22 May '13

22 May '13

ÕâÊÇÒ»·â MIME žñÊœµÄ¶à²¿·ÖÓÊŒþ¡£ ------=_NextPart_000_000B_01CE56FC.F4262150 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi all: When I connect to ovirt-engine use ovirt-shell like this: It's failed, I don't know why. The ovirt-engine is build and deployed by myself and base ovirt-engine 3.2 But when I connect to the ovirt-engine use rmp installed, ovirt-shell work well. ++++++++++++++++++++++++++++++++++++++++++ Welcome to oVirt shell ++++++++++++++++++++++++++++++++++++++++++ [oVirt shell (disconnected)]# connect --url http://192.168.1.201 --user admin@internal --password 111111 error: [ERROR]::No response returned from server. If you're using HTTP protocol against a SSL secured server, then try using HTTPS instead. [oVirt shell (disconnected)]# ------=_NextPart_000_000B_01CE56FC.F4262150 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style>  </style>  </head> <body lang=3DZH-CN link=3Dblue vlink=3Dpurple = style=3D'text-justify-trim:punctuation'> <div class=3DSection1> Hi all:<o:p></o:p>          When I connect to ovirt-engine use ovirt-shell like this: It’s failed, = I don’t know why.<o:p></o:p> The ovirt-engine is build and = deployed by myself and base ovirt-engine 3.2<o:p></o:p> <o:p> </o:p>          But when I connect to the ovirt-engine use rmp installed, ovirt-shell work = well.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p>=  <o:p></o:p>           = Welcome to oVirt shell<o:p></o:p>  <o:p></o:p>  ++++++++++++++++++++++++++++++++++++++++++<o:p></o:p><= /span>         = <o:p></o:p>     = <o:p></o:p> [oVirt shell (disconnected)]# = connect --url http://192.168.1.201 --user admin@internal --password = 111111<o:p></o:p> <o:p> </o:p> <o:p> </o:p> error: [ERROR]::No response = returned from server. If you're using HTTP protocol<o:p></o:p> against a SSL secured server, = then try using HTTPS instead.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> [oVirt shell = (disconnected)]#<o:p></o:p> <o:p> </o:p> <o:p> </o:p> </div> </body> </html> ------=_NextPart_000_000B_01CE56FC.F4262150--

4 5

[Engine-devel] for a few clicks less
by Laszlo Hornyak 22 May '13

22 May '13

Hi, Today the default memory size when creating a VM is 512 MB, this is coming from the Blank template, which is not modifiable by user. This amount of memory is not enough for a installation for most Linux distros (and possibly for other mainstream OS either) so I think it would make sense to increase the default memory size to 1024 MB, for most users, it would save some time. This patch changes the memory size for new installations. http://gerrit.ovirt.org/14747 Thx, Laszlo

3 4

[Engine-devel] searchbackend cleanup
by Laszlo Hornyak 22 May '13

22 May '13

Hi, I have a patchset for the searchbackend waiting for review. Anyone could give me +2? http://gerrit.ovirt.org/14616/ http://gerrit.ovirt.org/14617/ http://gerrit.ovirt.org/14618/ http://gerrit.ovirt.org/14619/ http://gerrit.ovirt.org/14620/ Thx, Laszlo

1 0

[Engine-devel] Any tips for running ovirt from trunk on Fedora 19 Beta RC2?
by Dax Kelson 21 May '13

21 May '13

I did a git checkout and created rpms with "make rpm". I used engine-setup-2. Is that correct? engine-setup fails btw Going to the web page gives a error 503 "The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later." Under /var/log/ovirt-egine/ I see: console.log Exception in thread "main" javax.management.JMRuntimeException: Failed to load MBeanServerBuilder class org.jboss.as.jmx.PluggableMBeanServerBuilder: java.lang.ClassNotFoundException: org.jboss.as.jmx.PluggableMBeanServerBuilder from [Module "org.jboss.as.standalone:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules)] at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:502) at javax.management.MBeanServerFactory.getNewMBeanServerBuilder(MBeanServerFactory.java:538) at javax.management.MBeanServerFactory.newMBeanServer(MBeanServerFactory.java:315) at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:230) at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:191) at java.lang.management.ManagementFactory.getPlatformMBeanServer(ManagementFactory.java:466) at org.jboss.modules.Main.main(Main.java:286) Caused by: java.lang.ClassNotFoundException: org.jboss.as.jmx.PluggableMBeanServerBuilder from [Module "org.jboss.as.standalone:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules)] at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:190) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at javax.management.MBeanServerFactory.loadBuilderClass(MBeanServerFactory.java:445) at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:487) ... 6 more Traceback (most recent call last): File "/usr/lib64/python2.7/logging/handlers.py", line 859, in emit self._connect_unixsocket(self.address) File "/usr/lib64/python2.7/logging/handlers.py", line 777, in _connect_unixsocket self.socket.connect(address) File "/usr/lib64/python2.7/socket.py", line 224, in meth return getattr(self._sock,name)(*args) error: [Errno 9] Bad file descriptor Logged from file service.py, line 557 from boot.log 11:35:03,354 INFO [org.jboss.modules] JBoss Modules version 1.1.1.GA 11:35:03,499 WARN [org.jboss.modules] Failed to define class org.jboss.as.jmx.PluggableMBeanServerBuilder in Module "org.jboss.as.jmx:main" from local module loader @72e1c560 (roots: /usr/share/ovirt-engine/modules,/var/tmp/ovirt-engine/modules): org.jboss.modules.ModuleLoadError: Error loading module from /var/tmp/ovirt-engine/modules/org/jboss/logging/main/module.xml at org.jboss.modules.ModuleLoadException.toError(ModuleLoadException.java:78) at org.jboss.modules.Module.getPathsUnchecked(Module.java:1181) at org.jboss.modules.Module.loadModuleClass(Module.java:512) at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:182) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at java.lang.ClassLoader.defineClass1(Native Method) [rt.jar:1.7.0_19] at java.lang.ClassLoader.defineClass(ClassLoader.java:791) [rt.jar:1.7.0_19] at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) [rt.jar:1.7.0_19] at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:327) at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:391) at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:243) at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:73) at org.jboss.modules.Module.loadModuleClass(Module.java:517) at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:182) at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:468) at org.jboss.modules.ConcurrentClassLoader.performLoadClassChecked(ConcurrentClassLoader.java:456) at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:398) at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:120) at javax.management.MBeanServerFactory.loadBuilderClass(MBeanServerFactory.java:445) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.checkMBeanServerBuilder(MBeanServerFactory.java:487) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.getNewMBeanServerBuilder(MBeanServerFactory.java:538) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.newMBeanServer(MBeanServerFactory.java:315) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:230) [rt.jar:1.7.0_19] at javax.management.MBeanServerFactory.createMBeanServer(MBeanServerFactory.java:191) [rt.jar:1.7.0_19] at java.lang.management.ManagementFactory.getPlatformMBeanServer(ManagementFactory.java:466) [rt.jar:1.7.0_19] at org.jboss.modules.Main.main(Main.java:286) Caused by: javax.xml.stream.XMLStreamException: ParseError at [row,col]:[27,50] Message: Failed to add resource root 'jboss-logging.jar' at path 'jboss-logging.jar' at org.jboss.modules.ModuleXmlParser.parseResourceRoot(ModuleXmlParser.java:898) at org.jboss.modules.ModuleXmlParser.parseResources(ModuleXmlParser.java:854) at org.jboss.modules.ModuleXmlParser.parseModuleContents(ModuleXmlParser.java:676) at org.jboss.modules.ModuleXmlParser.parseDocument(ModuleXmlParser.java:548) at org.jboss.modules.ModuleXmlParser.parseModuleXml(ModuleXmlParser.java:287) at org.jboss.modules.ModuleXmlParser.parseModuleXml(ModuleXmlParser.java:242) at org.jboss.modules.LocalModuleLoader.parseModuleInfoFile(LocalModuleLoader.java:138) at org.jboss.modules.LocalModuleLoader.findModule(LocalModuleLoader.java:122) at org.jboss.modules.ModuleLoader.loadModuleLocal(ModuleLoader.java:275) at org.jboss.modules.ModuleLoader.preloadModule(ModuleLoader.java:222) at org.jboss.modules.LocalModuleLoader.preloadModule(LocalModuleLoader.java:94) at org.jboss.modules.Module.addPaths(Module.java:841) at org.jboss.modules.Module.link(Module.java:1196) at org.jboss.modules.Module.getPaths(Module.java:1156) at org.jboss.modules.Module.getPathsUnchecked(Module.java:1179) ... 27 more

1 0

[Engine-devel] [REST-API] Support passing auth information without having to use HTTP Authorization header #958874
by Michael Pasternak 21 May '13

21 May '13

https://bugzilla.redhat.com/show_bug.cgi?id=958874 Hi Alon, (In reply to comment #2) > > Regardless of this specific RFE I would like to write that I don't like the > REST API session mechanism > [http://wiki.ovirt.org/Features/RESTSessionManagement] solution, as it > relays on cookies and not explicit API interaction. authentication in RESTful application is a matter of debate, it can be achieved in various ways, but session + cookie auth. method is very common and usually effective, it's biggest disadvantage is that it's not exactly RESfull cause client have to maintain (story) the cookie and not the server (but i wouldn't call it an issue at all), besides that it's works perfectly well from the REST PoV, also some may say that cookies are not strong enough and OAuth for instance should be used instead, but this is a different story cause in our case, cookie are for the clients (not browsers [1]) that can store them in a secure way or even not to store at all (in-memory cookie). [1] another disadvantage is that webbrowsers not able to access cookie namespace, but lately i've suggested URI based authentication [2] to support web browsers as well. [2] http://lists.ovirt.org/pipermail/engine-devel/2013-April/004235.html the biggest advantage of the cookie is a session expiration that maintained by the server and abstracted from the client what is much better from security PoV than standard authentication mechanisms such as HTTP basic auth for instance which can be potentially cached. > I would have expected a > 'ticket' to be retrieved and that 'ticket' to be disconnected from the > application server objects. Although we can refer the 'cookie' as a ticket, > however the requirement to parse it should not be required, there be a > conflict between two separate applications running on same server, and there > may be a problem to transfer credentials between servers. well, this is not exactly correct: 1. client desn't have to decode/parse the cookie and pass credentials, all it need is just to store the cookie and pass it as is to server on every request. 2. "conflict between two separate applications running on same server"? different cookie uses different domain & path by spec., can you pls explain what do you mean by this? > > If we modify authentication we should support more authentication types, at > least SPNEGO. > > In order to allow SPNEGO and other authentication mechanisms, we better > force people to use single URI to perform the login and return authenticated > 'ticket' to continue interaction with application. this is good for the backend authentication, but is not for the RESTful application, it's like buying an aeroplane and driving it on a road, "force people to use single URI to perform the login" means SOAP while we wanted REST where any URI is considered as entry point and actually a resource address that should be accessible/manipulatable and authentication should be abstracted/disconnected from this concept. SPNEGO is only an implementation detail that can be abstracted for the API. > This will be much simpler > implementation at the api side and much more efficient, and as we are > discussion application-to-application interaction there should be no user > experience visible issues. i'm not sure: "force people to use single URI to perform the login" and no "no user experience visible issues."? > > What I recommend is purely applicative rest login command... IIUC this is SOAP and not REST ... > --- > Input: authentication type, authentication credentials > authentication=http > authentication=password > credentials: > user=user > password=password > [OPTIONALLY] HTTP authentication headers > Output: > ticket > ticket issue time (required to avoid clock sync) > ticket expiration time > Logic: > if authentication is http, use http authentication headers to establish user > authentication. This will allow future SSO. > if authentication is password, use embedded credentials. > --- > > For every other rest call add http header: > oVirt-Authentication-Ticket: <ticket> this is not any different from the today's session based auth. only instead of oVirt-Authentication-Ticket added cookie. > > The backend side will attach the correct security context to the action if > the header is received. this is how it's works today. > > No need for the prefer mechanism nor multiple authentications. It should be > easy for javascript implementation to perform the authentication via the > designated URI, and then pass the ticket if not expired, when expired to > perform re-authentication with or without involving the user. again this is how it works today, and you not solving web browser problem as when ticket expires, they cannot re-authenticate with new oVirt-Authentication-Ticket cause this header is cached and cannot be changed by the browser in runtime. -- Michael Pasternak RedHat, ENG-Virtualization R&D

4 9

[Engine-devel] SQL procedure - row mapper
by Sahina Bose 21 May '13

21 May '13

Hi all, In org.ovirt.engine.core.dal.dbbroker.SimpleJdbcCallsHandler , there's a map maintained for procedure name and SimpleJdbcCall. If I have the same procedure with different row mappers, this results in an error - because the map already contains a mapping for the procedure name but with different row mapper. Do we intend to support calling the same procedure with different RowMappers? If so, I can change this class to handle this. thanks sahina

3 3

[Engine-devel] how to let engine run scripts with root privilege
by bigclouds 20 May '13

20 May '13

------=_Part_335625_1891521110.1369064678119 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: 7bit hi, engine run as a normal user, but sometimes we need it to run scripts(start,stop services) which require root privilege. how to do that? thanks. ------=_Part_335625_1891521110.1369064678119 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: 7bit <div style="line-height:1.7;color:#000000;font-size:14px;font-family:arial"><div>hi,</div><div>engine run as a normal user, but sometimes we need it to run scripts(start,stop services) which require root privilege.</div><div>how to do that?</div><div> </div><div>thanks.</div></div> ------=_Part_335625_1891521110.1369064678119--

3 2