Re: [ovirt-users] Ovirt 4.0 and EL 7.4
Hi,
Did you modify your /etc/sasl2/libvirt.conf, because the update has modify the way to
authenticate from md5 to gssapi.
If not just change this line :
mech_list: gssapi
to
mech_list: digest-md5
And restart services
As mentioned in the libvirt.conf file :
# NB, previously DIGEST-MD5 was set as the default mechanism for
# libvirt. Per RFC 6331 this is vulnerable to many serious security
# flaws and should no longer be used. Thus GSSAPI is now the default.
#
# To use GSSAPI requires that a libvirtd service principal is
# added to the Kerberos server for each host running libvirtd.
# This principal needs to be exported to the keytab file listed below
Alain
Alain VONDRA
Chargé d'Exploitation et de Sécurité des Systèmes d'Information
Direction Administrative et Financière
+33 1 44 39 77 76
UNICEF France
3 rue Duguay Trouin 75006
PARIS
www.unicef.fr
-----Message d'origine-----
De : users-bounces(a)ovirt.org [mailto:users-bounces@ovirt.org] De la part de Alan
Griffiths
Envoyé : mercredi 4 octobre 2017 15:50
À : Ovirt Users <users(a)ovirt.org>
Objet : [ovirt-users] Ovirt 4.0 and EL 7.4
Hi,
Is 4.0 supported/known to work on CentOS 7.4?
I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and now
vdsm-network fails to start with
vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication failed
To even get this far I had to exclude gluster packages as 7.4 introduces 3.8 but ovirt 4.0
repo is still on 3.7.
So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is the best
ordering for getting to ovirt 4.1 and EL 7.4?
Thanks,
Alan
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users