Re: ldaps-config
by Budur Nagaraju
can some one help me on the issue ? badly stuck on this have not got any
pointer on fix .
An error occurred while attempting to query DNS in order to retrieve SRV
records with name '_ldaps._tcp.abc.net <http://tcp.psecure.net>':
NameNotFoundException(DNS name not found [response code 3]),
ldapSDKVersion=4.0.7, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58
Thanks,
Nagaraju
On Thu, Feb 27, 2020 at 8:48 PM Budur Nagaraju <nbudoor(a)gmail.com> wrote:
> Hi Lucie,
>
> Can you please help me on this issue? am using ldaps for the configuration.
>
> Thanks,
> Nagaraju
>
>
> On Thu, Feb 27, 2020 at 4:00 PM Budur Nagaraju <nbudoor(a)gmail.com> wrote:
>
>> Hi Lucie,
>>
>> Have tried the option but when trying to logon from the browser getting
>> the below error.
>> Any tweaks can be made ?
>>
>>
>> An error occurred while attempting to query DNS in order to retrieve SRV
>> records with name '_ldaps._tcp.psecure.net': NameNotFoundException(DNS
>> name not found [response code 3]), ldapSDKVersion=4.0.7,
>> revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58
>>
>> Thanks,
>> Nagaraju
>>
>>
>>
>> On Thu, Feb 27, 2020 at 3:51 PM Lucie Leistnerova <lleistne(a)redhat.com>
>> wrote:
>>
>>> Hi Budur,
>>>
>>> or just use the tool for it - Configuring an External LDAP Provider
>>> https://www.ovirt.org/documentation/admin-guide/chap-Users_and_Roles.html
>>>
>>> Best regards,
>>>
>>> Lucie
>>> On 2/27/20 9:32 AM, Eduardo Mayoral wrote:
>>>
>>> Should be as simple as this:
>>>
>>>
>>> [root@ovirt-hc0 ~]# cat /etc/ovirt-engine/aaa/*activedirectory*
>>> .properties
>>> include = <ad.properties>
>>>
>>> vars.domain = XXXXXX
>>> vars.user = YYYYYYYYYYY
>>> vars.password = ZZZZZZZZZ
>>>
>>> *pool.default.ssl.startTLS = true*
>>> *pool.default.ssl.startTLSProtocol = TLSv1.2*
>>>
>>> pool.default.auth.simple.bindDN = ${global:vars.user}
>>> pool.default.auth.simple.password = ${global:vars.password}
>>> pool.default.serverset.type = srvrecord
>>> pool.default.serverset.srvrecord.domain = ${global:vars.domain}
>>>
>>>
>>>
>>> Just remember to trust the certificate authority for the ldaps
>>> certificate in the ovirt engine server.
>>>
>>>
>>> https://stackoverflow.com/questions/37043442/how-to-add-certificate-autho...
>>>
>>>
>>> On 27/2/20 4:42, Budur Nagaraju wrote:
>>>
>>> Hi
>>>
>>> Can someone help me in configuring ldaps in oVirt Engine 4.x ?
>>>
>>> Thanks,
>>> Nagaraju
>>>
>>>
>>> _______________________________________________
>>> Users mailing list -- users(a)ovirt.org
>>> To unsubscribe send an email to users-leave(a)ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/P6QHPSFZLOZ...
>>>
>>> --
>>> Eduardo Mayoral Jimeno
>>> Systems engineer, platform department. Arsys Internet.emayoral(a)arsys.es - +34 941 620 105 - ext 2153
>>>
>>>
>>> _______________________________________________
>>> Users mailing list -- users(a)ovirt.org
>>> To unsubscribe send an email to users-leave(a)ovirt.org
>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
>>> oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/ADWCGNS353C...
>>>
>>> --
>>> Lucie Leistnerova
>>> Senior Quality Engineer, QE Cloud, RHVM
>>> Red Hat EMEA
>>>
>>> IRC: lleistne @ #rhev-qe
>>>
>>>
5 years, 1 month
Info on python SDK variable definition
by Gianluca Cecchi
Hello,
suppose in a .py using sdk I have
my_var1 = 'prefix'
then in the workflow I get at runtime another my_var2 that for example has
the attribute
my_var2.name that equals "suffix"
Then I want to define a new variable my_var3 with value "prefix_suffix",
where the string "suffix" is known only at runtime, how can I get it?
my_var3 = ???
Can I use something similar to what I do when using the print function?
print ("My storage domain is %s..." % sd.name)
?
Thanks,
Gianluca
5 years, 1 month
oVirt Python SDK and monitor export as OVA task
by Gianluca Cecchi
Hello,
sometimes I have environments (typically with Oracle RDBMS on virtual
machines) where there is one boot disk and one (often big, such as 500Gb or
more) data disk.
The data disk has already its application backup (typically RMAN) and I
want to complement it with a backup of only the boot disk of the operating
system and VM configuration.
I'm almost done completing a script using oVirt Python SDK and sharing for
comments.
I could be wrong, but I didn't find any ansible module to do this with
Ansible playbooks: I can only save all the VM, that in my case wouldn't be
necessary and instead time and storage wasting.
The basic steps are:
- make a snapshot of the target vm, composed only by the boot disk
- clone the snapshot
- export the clone as OVA
- delete clone
- delete snapshot
There are some things to discuss about, probably when I will share the
overall job (such as the name to give to the boot disk, if not using the
bootable flag, the way to import the OVA in case of actual need, where you
will have to comment out some fs entries related to missing disks, ecc.).
The only thing missing is how to monitor the export to ova task that, as
with Ansible, it completes almost immediately, while the export is actually
altready running.
I need to monitor it, so only at its real end I can run the last 2 steps of
the above list of tasks.
Can you give me any hint? Not found very much in guide or docs on the web.
I'm currently using a sleep because my boot disk is about 20Gb in size and
I know that in less than 2 minutes it normally completes.
The export as ova is very similar to what found in the examples and they
don't contain a monitor for it but only the connection.close() call:
cloned_vm_service.export_to_path_on_host(
host=types.Host(id=host.id),
directory = export_as_ova_dir,
filename = cloned_vm.name + '.ova'
)
Thanks in advance,
Gianluca
5 years, 1 month
EqualLogic SAN controller switchover
by Chris Adams
How well does oVirt handle an EqualLogic SAN controller switchover
event? IIRC that can result in a short iSCSI "pause" (can't remember
how long it takes) - I'm not sure what oVirt's threshold before VMs
(including the hosted engine) get paused for storage timeouts.
I've got a small setup where the active SAN controller's battery has
gone bad, so I need to switch to the other controller, and I'm trying to
figure out the impact - do I need to shut all VMs (including the engine)
down first, will they just briefly pause and then continue, etc.
--
Chris Adams <cma(a)cmadams.net>
5 years, 1 month
oVirt 4.3.8 ovn vms doesn't ping
by Gianluca Cecchi
Hello,
I have an environment with oVirt 4.3.8.
All seems ok from a configuration point of view, but if I use OVN based
interfaces on two VMs, they are not able to ping, both if I put them on the
same host and if I put on different hosts.
At this point they are both running on the same host and their only vnic is
on ovn172 network (defined as 192.168.172.0/24).
I have this
manager
# ovn-nbctl show
switch fc2fc4e8-ff71-4ec3-ba03-536a870cd483
(ovirt-ovn192-1e252228-ade7-47c8-acda-5209be358fcf)
switch 87012fa6-ffaa-4fb0-bd91-b3eb7c0a2fc1
(ovirt-ovn193-d43a7928-0dc8-49d3-8755-5d766dff821a)
port 8141047d-10c0-41f6-bedc-130552a115ef
addresses: ["00:1a:4a:17:01:54 dynamic"]
port 90559419-cb8e-45ae-ad61-6c16c4aff598
addresses: ["00:1a:4a:17:01:52 dynamic"]
port b3db190f-086a-4c79-99a0-77f811f66c80
addresses: ["00:1a:4a:17:01:53 dynamic"]
switch 9e77163a-c4e4-4abf-a554-0388e6b5e4ce
(ovirt-ovn172-4ac7ba24-aad5-432d-b1d2-672eaeea7d63)
port 3641cae4-18df-4fba-a2bd-7b0c60a87162
addresses: ["00:1a:4a:19:01:59 dynamic"]
port aaddc425-3a38-49bf-bfc7-9eaeab82906e
addresses: ["00:1a:4a:19:01:58 dynamic"]
The two macs correspond to what I see for VMs in web admin gui and at os
level of the two VMs.
On the host where VMs are running I have:
# ovs-vsctl show
f1a41e9c-16fb-4aa2-a386-2f366ade4d3c
Bridge br-int
fail_mode: secure
Port "ovn-b8872a-0"
Interface "ovn-b8872a-0"
type: geneve
options: {csum="true", key=flow, remote_ip="10.4.192.34"}
Port br-int
Interface br-int
type: internal
Port "vnet0"
Interface "vnet0"
Port "ovn-1dce5b-0"
Interface "ovn-1dce5b-0"
type: geneve
options: {csum="true", key=flow, remote_ip="10.4.192.32"}
Port "vnet1"
Interface "vnet1"
ovs_version: "2.11.0"
So apparently I see the vnet0 and vnet1 ports associated with the two VMs
How can I check more in depth the reason why they don't ping?
Both VMs are CentOS 8.1 but I don't know if it is relevant.
Thanks,
Gianluca
5 years, 1 month
oVirt 4.3.8 and almost unpredictable export as ova duration
by Gianluca Cecchi
Hello,
on a test oVirt environment I have export as ova task that, based on same
disk size (20Gb) it could last 35 seconds or 11 minutes....
During the long lasting test I see on host that almost all and only I/O (in
the measure of 6-7 MB/s) is done by a [loop0] process that has ppid 2 and
apparently (with "fuser" command on /dev/loop0 file) is uses by noone.
Is it implicitly used by the "qemu-img convert " command of the export as
ova?
Why so great difference in elapsed time? The disk is the same of the same
VM.
The oVirt env has almost nothing running only 2 CentOS 8.1 VMs doing
nothing.
Same host used for export as ova in the two runs in a 20 minutes timeframe.
As the path for OVA I'm temporarily using a connected export domain
subdirectory, using
directory='/rhev/data-center/mnt/10.4.192.69:_export_ovirt/dump'
Donna if it can have a role in the problem...
Thanks,
Gianluca
5 years, 1 month
Re: Windows deployment
by Dominik Holler
On Wed, Feb 26, 2020 at 11:45 PM <eevans(a)digitaldatatechs.com> wrote:
> It is a Red Hat Virtio Ethernet Adapter.
>
>
>
Would a e1000 or rtl8139 work for your scenario?
> Eric Evans
>
> Digital Data Services LLC.
>
> 304.660.9080
>
>
>
> *From:* Dominik Holler <dholler(a)redhat.com>
> *Sent:* Wednesday, February 26, 2020 11:55 AM
> *To:* eevans(a)digitaldatatechs.com
> *Cc:* users <users(a)ovirt.org>
> *Subject:* [ovirt-users] Re: Windows deployment
>
>
>
>
>
>
>
> On Wed, Feb 26, 2020 at 4:45 PM <eevans(a)digitaldatatechs.com> wrote:
>
> I have a Windows Deployment server that works with Hyper-V. I am tryng to
> see if it will bare metal provision to Ovirt.
>
>
>
> Do you want to provision Windows into an oVirt VM?
>
>
>
> I have the necessary drivers loaded
>
>
>
> I am not familiar with the Windows deployment server.
>
> Would you help me to understand which drivers are loaded to what?
>
>
>
> and initially it gets an IP and starts the installation.
>
>
>
> I understand that the windows installer is starting. Where does he get the
> files from?
>
>
>
> When it comes to the screen starting setup, I get an IP error. I have
> included a screenshot.
>
>
>
> Might this be related to network drivers?
>
> If Windows in an oVirt VM, what is the type of the virtual NIC?
>
> Maybe using the e1000 or rtl8139 as type of the virtual NIC helps until
> the VirtIO drivers are ins
> talled?
>
>
>
> Has anyone see this before?
>
> I also considered provisioning from Foreman but I would rather use what I
> have instead of recreating the entire installation.
> Any help would be appreciated.
>
> Here is a link to the actual error:
>
> ftp://ftp.digitaldatatechs.com/pub/Windows%20Provision.jpg
> _______________________________________________
> Users mailing list -- users(a)ovirt.org
> To unsubscribe send an email to users-leave(a)ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BGGJTCK7PZK...
>
>
>
>
5 years, 1 month
Re: Huge increase of CPU load on hosted engine VM after upgrade to 4.3.8 and cluster compatibility version
by Florian Schmid
Hi,
no, fortunately, the bug didn't came back.
It looks like, that the engine needs its time to settle after changing the cluster compatibility version. After about 2 hours, the CPU load was as low as before.
The time to load the VM UI takes a little bit more time, but I think this is also normal, because all VMs still have the orange triangle and need a reboot.
Sorry for the false positive, but I was really afraid about the high load.
BR Florian
Von: "p staniforth" <P.Staniforth(a)leedsbeckett.ac.uk>
An: "Florian Schmid" <fschmid(a)ubimet.com>, "users" <users(a)ovirt.org>
Gesendet: Donnerstag, 6. Februar 2020 18:22:51
Betreff: Re: Huge increase of CPU load on hosted engine VM after upgrade to 4.3.8 and cluster compatibility version
Has this bug come back
engine.log flooded with "Field 'foo' can not be updated when status is 'Up'"
[ https://lists.ovirt.org/archives/list/users@ovirt.org/thread/MKFQRCKHRT6N... | https://lists.ovirt.org/archives/list/users@ovirt.org/thread/MKFQRCKHRT6N... ]
Regards,
Paul S.
From: Florian Schmid <fschmid(a)ubimet.com>
Sent: 06 February 2020 15:53
To: users <users(a)ovirt.org>
Subject: [ovirt-users] Huge increase of CPU load on hosted engine VM after upgrade to 4.3.8 and cluster compatibility version
Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe.
Hi,
I have upgraded yesterday one of our ovirt environments from 4.2.8 to 4.3.8.
We have a hosted engine, 25 hosts and about 150 VMs running there.
After upgrading the cluster compatibility version from 4.2 to 4.3, I have seen a huge increase of CPU load on the engine VM.
The engine had 4 cores (16GB mem) and never had load issues, but after the upgrade, the system has a load of 6 and more. I have increased the CPUs to 8, because working in the UI was impossible.
I have noticed, that the load always increase, when I load the VM UI tab, where now all VMs have the orange triangle with pending changes: Custom compatibility version
The problem I have, is, that I can't reboot now all VMs, maybe in the next 3 or 4 weeks.
Working now with the UI is quite problematic, because of the slowness.
The engine VM was already rebooted, but didn't solve the problem.
What logs do you need and is there a workaround available? I have some more oVirt environments to upgrade, all with even more VMs.
BR Florian
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: [ https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi... |
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi... ]
oVirt Code of Conduct: [ https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi... |
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovi... ]
List Archives: [ https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.o... |
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.o... ]
To view the terms under which this email is distributed, please go to:-
[ http://leedsbeckett.ac.uk/disclaimer/email/ | http://leedsbeckett.ac.uk/disclaimer/email/ ]
5 years, 1 month
ldaps-config
by Budur Nagaraju
Hi
Can someone help me in configuring ldaps in oVirt Engine 4.x ?
Thanks,
Nagaraju
5 years, 1 month
oVirt Storage quota questions
by Vrgotic, Marko
Dear oVirt,
My platform is running SHE oVirt version 4.3.8.
Why is my StorageQuota consumption still showing “ 0 out of 3700” ? Did I forget something?
[A screenshot of a cell phone Description automatically generated]
I have setup storage quota “StorageQuota” for one of domains.
It has 4400GB actual storage.
* Quota is set to 3700GB.
* Treshold for Quota is 85% and Grace is set to 110%.
* Datacenter Quota is set to Enforced
* The template image has been changed from Default to StorageQuota
* I see that Vms created from Template are automatically assigned StorageQuota
To present the following situation in screenshots:
* Actual Quota:
[A screenshot of a social media post Description automatically generated]
* VMs (more than on the screenshot) which have the StorageQuota assigned:
[A screenshot of a social media post Description automatically generated]
* Templates which have the StorageQuota assigned
[cid:image004.png@01D5ED57.6C02ACF0]
Kindly awaiting your reply.
Additionally – is there an easy&safe way to update all running VMs quota?
-----
kind regards/met vriendelijke groeten
Marko Vrgotic
Sr. System Engineer @ System Administration
ActiveVideo
o: +31 (35) 6774131
e: m.vrgotic(a)activevideo.com<mailto:m.vrgotic@activevideo.com>
w: www.activevideo.com<http://www.activevideo.com>
ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ Hilversum, The Netherlands. The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited. If you have received this message in error, please immediately notify the sender and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or destroy any copy of this message.
5 years, 1 month
