June 2015 - Users - oVirt List Archives

[Users] Cant assign Quotas to groups anymore?
by Maurice James 28 Sep '15

28 Sep '15

--_c1bf2036-7c19-43f7-bca5-b1f997d755b7_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable 3.4.0-0.13.rc.el6See the error below User admin failed to grant permission for Role QuotaConsumer on Quota Mobil= ePolicy to User/Group Non interactive user. = --_c1bf2036-7c19-43f7-bca5-b1f997d755b7_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <style></style></head> <body class=3D'hmmessage'><div dir=3D'ltr'><div>&nbsp=3B3.4.0-0.13.rc.el6</div><div>See the error below</div><d= iv> </div><div> </div>User admin failed to grant permission for Role = QuotaConsumer on Quota MobilePolicy to User/Group Non interactive user. = </div></body> </html>= --_c1bf2036-7c19-43f7-bca5-b1f997d755b7_--

6 15

Foreman: Add external provider (Failed with error PROVIDER_FAILURE and code 5050)
by Daniel Helgenberger 25 Sep '15

25 Sep '15

Hello, did anyone actually get this working in oVirt 3.5 / EL6 - Engine? I am trying this for two days now. Setup: Engine; EL6.5 Foreman; EL6.5 Foreman seems to do it's as I can use it to deploy hosts and also smart proxies are running fine. I have opened a BZ [1]; because this really can not work out of the box with EL6 plain vanilla packages. I wonder if this was ever tested... ? Java 7 used i n EL6 [4] does only support DH keys up to 1024byte. This is known issue in Foreman [2] as longer DH keys are now used by default in Foreman / PuppetCA. A dirty fix confirmed working is adding default DH parameters to the foreman cert; effectively disabling it [3]. So I got SSL working and I get beyond the authentication (entering wrong data gets me auth errors)- however, I am still not able to add the external provider. Pressing 'test' results in (Failed with error PROVIDER_FAILURE and code 5050) Sample engine.log 2014-10-28 23:49:40,860 ERROR [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-1) [6a3da4e7] Command org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand throw Vdc Bll exception. With error message VdcBLLException: PROVIDER_FAILURE (Failed with error PROVIDER_FAILURE and code 5050) I can't find any more hints in oVirt; access logs in Foreman are telling me API queries by the engine. Did I miss a crucial step in the foreman setup? How can I debug this issue? I am willing to upgrade openjdk; provided this does not break my engine... Thanks! [1] https://bugzilla.redhat.com/show_bug.cgi?id=1157749 [2] https://tickets.puppetlabs.com/browse/SERVER-17 [3] http://httpd.apache.org/docs/current/ssl/ssl_faq.html#javadh [4] java-1.7.0-openjdk-1.7.0.65-2.5.1.2.el6_5.x86_64 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767

6 10

R: PXE boot of a VM on vdsm don't read DHCP offer
by NUNIN Roberto 20 Aug '15

20 Aug '15

--_000_8C2CD99696B62B409EBEBFDF87C83FBF59B5604A10DENU1XMAIL02p_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Further info about this case: An already installed and running VM (Centos7) with static IPv4 assignment, = if changed to DHCP mode, do not acquire the IP address. In this case, tcpdump taken on the VM, do not show DHCP offer packets that = are instead seen on the host bond interface. Seems that something is filtering DHCP offers between host physical eth int= erfaces and VM virtio eth interface. Physical servers on the same VLAN keep DHCP offers and boot from PXE correc= tly. Roberto >Hi all >We are using oVirt engine 3.5.1-0.0 on Centos 6.6 >We are deploying two hosts with vdsm-4.16.10-8.gitc937927.el7.x86_64 >No hosted-engine, it run on a dedicates VM, outside oVirt. >Behavior: PXE boot of a VM, ends in timeout (0x4c106035), instead to accep= t the DHCP offer coming from DHCP server. >Tcpdump capture started on the vdsm host, bond0 interface shows clearly th= at DHCP offers reach the vdsm interfaces >three times before PXE client end= s in timeout. >Incoming DHCP offer is correctly tagged when it comes to the bond0 interfa= ce and forwarded to the bond0.bridge >interface. >PXE simply ignore it. PXE version is gPXE 0.9.7. >bond0.bridge interface is already setup with STP=3Doff and DELAY=3D0. >If we install a VM using command line boot parameters, VM install & run f= ine. The issue is only related to PXE process, >when it is expected to use = the DHCP offer. >I can provide tcpdump capture, but I've not attached to the email because = I'm quite new of the community and don't >know if it is allowed/correct. >On another host, under the same engine, running vdsm-4.16.12-7.gita30da75.= el6.x86_64 on Centos6.6, this behavior is >not happening, everything works = fine. >Any idea/suggestion/further investigation ? >Thanks for attention >Best regards Roberto Nunin Infrastructure Manager Italy Here are interfaces configs: eno1: DEVICE=3D"eno1" HWADDR=3D"38:63:bb:4a:47:b0" MASTER=3D"bond0" NM_CONTROLLED=3D"no" ONBOOT=3D"yes" SLAVE=3D"yes" eno2: DEVICE=3D"eno2" HWADDR=3D"38:63:bb:4a:47:b4" MASTER=3D"bond0" NM_CONTROLLED=3D"no" ONBOOT=3D"yes" SLAVE=3D"yes" bond0: BONDING_OPTS=3D"mode=3D4 miimon=3D100" DEVICE=3D"bond0" NM_CONTROLLED=3D"no" ONBOOT=3D"yes" TYPE=3D"Bond" bond0.3500: DEVICE=3Dbond0.3500 VLAN=3Dyes BRIDGE=3DDMZ3_DEV ONBOOT=3Dno MTU=3D1500 NM_CONTROLLED=3Dno HOTPLUG=3Dno DMZ3_DEV: DEVICE=3DDMZ3_DEV TYPE=3DBridge DELAY=3D0 STP=3Doff ONBOOT=3Dno MTU=3D1500 DEFROUTE=3Dno NM_CONTROLLED=3Dno HOTPLUG=3Dno ________________________________ Questo messaggio e' indirizzato esclusivamente al destinatario indicato e p= otrebbe contenere informazioni confidenziali, riservate o proprietarie. Qua= lora la presente venisse ricevuta per errore, si prega di segnalarlo immedi= atamente al mittente, cancellando l'originale e ogni sua copia e distruggen= do eventuali copie cartacee. Ogni altro uso e' strettamente proibito e potr= ebbe essere fonte di violazione di legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibit= ed and may be unlawful. --_000_8C2CD99696B62B409EBEBFDF87C83FBF59B5604A10DENU1XMAIL02p_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"IT" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Further= info about this case:<o:p></o:p> <o:p>&n= bsp;</o:p> An alre= ady installed and running VM (Centos7) with static IPv4 assignment, if&nbsp= ; changed to DHCP mode, do not acquire the IP address.<o:p></o:p></p= > <o:p>&n= bsp;</o:p> In this= case, tcpdump taken on the VM, do not show DHCP offer packets that are ins= tead seen on the host bond interface.<o:p></o:p> Seems t= hat something is filtering DHCP offers between host physical eth interfaces= and VM virtio eth interface.<o:p></o:p> Physica= l servers on the same VLAN keep DHCP offers and boot from PXE correctly.<o:= p></o:p> <o:p>&n= bsp;</o:p> Roberto= <o:p></o:p> <o:p>&n= bsp;</o:p> <div> <o:p> </o:p> </div> <o:p> </o:p> >Hi all<o:p></o:p></sp= an> <o= :p> </o:p> >We are using oVirt en= gine 3.5.1-0.0 on Centos 6.6<o:p></o:p> >We are deploying two = hosts with vdsm-4.16.10-8.gitc937927.el7.x86_64<o:p></o:p> >No hosted-engine, it = run on a dedicates VM, outside oVirt.<o:p></o:p> <o= :p> </o:p> >Behavior: PXE boot of= a VM, ends in timeout (0x4c106035), instead to accept the DHCP offer comin= g from DHCP server.<o:p></o:p> >Tcpdump capture start= ed on the vdsm host, bond0 interface shows clearly that DHCP offers reach t= he vdsm interfaces >three times before PXE client ends= in timeout.<o:p></o:p> >Incoming DHCP offer i= s correctly tagged when it comes to the bond0 interface and forwarded to th= e bond0.bridge >interface.<o:p></o:p> >PXE simply ignore it.= PXE version is gPXE 0.9.7.<o:p></o:p> >bond0.bridge interfac= e is already setup with STP=3Doff and DELAY=3D0.<o:p></o:p> <o= :p> </o:p> >If we install a VM us= ing command  line boot parameters, VM install & run fine. The issu= e is only related to PXE process, >when it is expected to use the DHC= P offer.<o:p></o:p> <o= :p> </o:p> >I can provide tcpdump= capture, but I’ve not attached to the email because I’m quite = new of the community and don’t >know if it is allowed/correct.<o:p= ></o:p> <o= :p> </o:p> >On another host, unde= r the same engine, running vdsm-4.16.12-7.gita30da75.el6.x86_64 on Centos6.= 6, this behavior is >not happening, everything works fi= ne.<o:p></o:p> <o= :p> </o:p> >Any idea/suggestion/f= urther investigation ?<o:p></o:p> >Thanks for attention<= o:p></o:p> >Best regards<o:p></o:= p> <o= :p> </o:p> <o= :p> </o:p> <sp= an style=3D"font-size:10.0pt;font-family:Consolas;mso-fareast-language:IT">= Roberto Nunin<o:p></o:p> <sp= an style=3D"font-size:10.0pt;font-family:Consolas;mso-fareast-language:IT">= Infrastructure Manager<o:p></o:p> <sp= an style=3D"font-size:10.0pt;font-family:Consolas;mso-fareast-language:IT">= Italy<o:p></o:p> <o= :p> </o:p> <o:p> </o:p> Here are interfaces configs:<o:= p></o:p> eno1:<o:p></o:p><= /p> DEVICE=3D"eno1"<o:p><= /o:p> HWADDR=3D"38:63:bb:4a:47:b= 0"<o:p></o:p> MASTER=3D"bond0"<o:p>= </o:p> NM_CONTROLLED=3D"no"<= o:p></o:p> ONBOOT=3D"yes"<o:p></= o:p> SLAVE=3D"yes"<o:p></o= :p> eno2:<o:p></o:p> DEVICE=3D"eno2"<o:p></o:p> HWADDR=3D"38:63:bb:4a:47:b4"<o:p></o:p></p= > MASTER=3D"bond0"<o:p>= </o:p> NM_CONTROLLED=3D"no"<= o:p></o:p> ONBOOT=3D"yes"<o:p></= o:p> SLAVE=3D"yes"<o:p></o= :p> bond0:<o:p></o:p>= BONDING_OPTS=3D"mode=3D4 m= iimon=3D100"<o:p></o:p> DEVICE=3D"bond0"<o:p>= </o:p> NM_CONTROLLED=3D"no"<= o:p></o:p> ONBOOT=3D"yes"<o:p></= o:p> TYPE=3D"Bond"<o:p></o= :p> bond0.3500:<o:p></o:p></span= > DEVICE=3Dbond0.3500<o:p></o:p><= /span> VLAN=3Dyes<o:p></o:p></p= > BRIDGE=3DDMZ3_DEV<o:p></o:p></s= pan> ONBOOT=3Dno<o:p></o:p></= p> MTU=3D1500<o:p></o:p></p= > NM_CONTROLLED=3Dno<o:p></o:p></= span> HOTPLUG=3Dno<o:p></o:p><= /p> DMZ3_DEV:<o:p></o:p><= /b> DEVICE=3DDMZ3_DEV<o:p></o:p></s= pan> TYPE=3DBridge<o:p></o:p>= DELAY=3D0<o:p></o:p> STP=3Doff<o:p></o:p> ONBOOT=3Dno<o:p></o:p></= p> MTU=3D1500<o:p></o:p></p= > DEFROUTE=3Dno<o:p></o:p>= NM_CONTROLLED=3Dno<o:p></o:p></= span> HOTPLUG=3Dno<o:p></o:p><= /p> <o:p> </o:p> <o:p> </o:p> <o:p> </o:p> </div> <hr> Questo messaggio e' i= ndirizzato esclusivamente al destinatario indicato e potrebbe contenere inf= ormazioni confidenziali, riservate o proprietarie. Qualora la presente veni= sse ricevuta per errore, si prega di segnalarlo immediatamente al mittente, cancellando l'originale e ogni sua copia e dis= truggendo eventuali copie cartacee. Ogni altro uso e' strettamente proibito= e potrebbe essere fonte di violazione di legge. This message is for the designated recipient only and may contain privilege= d, proprietary, or otherwise private information. If you have received it i= n error, please notify the sender immediately, deleting the original and al= l copies and destroying any hard copies. Any other use is strictly prohibited and may be unlawful. </body> </html> --_000_8C2CD99696B62B409EBEBFDF87C83FBF59B5604A10DENU1XMAIL02p_--

6 30

vlan-tagging on non-tagged network
by Felix Pepinghege 19 Aug '15

19 Aug '15

Hi everybody! I am experiencing a behaviour of ovirt, of which I don't know whether it is expected or not. My setup is as follows: A virtual machine has a logical network attached to it, which is configured without vlan-tagging and listens to the name 'trunk'. The VM is running an openvpn server. It is a patched openvpn version, including vlan-tagging. That is, openvpn clients get a vlan tag. This should not really be an issue but should satisfy the "why do you want to do it in the first place"-questions. Anyhow, effectively, the VM simply puts vlan-tagged ethernet-frames on the virtual network. These frames, however, never make it to the host's network bridge, which represents the logical network. My observations are: According to tcpdump, the vlan-tagged packages arrive at the "eth1"-interface inside the VM (which *is* the correct interface). Again, according to tcpdump, these packages never arrive at the corresponding network-bridge (i.e., the interface 'trunk') on the host. I know that the setup itself is feasible with KVM---I have it working on a proxmox-machine. Therefore, my conclusion is, that ovirt doesn't like vlan-tagged ethernet-frames on non-tagged logical networks, and somehow filters them out, though I don't really see on what "level" that would happen (Handling the ethernet frames should be a concern of KVM/QEMU/Linux only, once ovirt has started the VM). So this problem could be a CentOS issue, but I really don't see why CentOS should act differently than debian does (proxmox is debian-based). Is this a known/wanted/expected behaviour of ovirt, and can I somehow prevent or elude it? Any help is much appreciated! Of course I am happy to provide more information if that helps helping me :) Regards, Felix

3 8

IO Threads + 3.6 Second Alpha Release
by Roman Nikolayevich Drovalev 30 Jul '15

30 Jul '15

Ýòî ñîîáùåíèå èç íåñêîëüêèõ ÷àñòåé â ôîðìàòå MIME. --=_alternative 00459B0D43257E74_= Content-Type: text/plain; charset="US-ASCII" Hi, This functions (IO Threads) is present in 3.6 Second Alpha Release oVirt version? http://www.ovirt.org/Features/IOThreads_Support Thanks, Drovalev Roman --=_alternative 00459B0D43257E74_= Content-Type: text/html; charset="US-ASCII" Hi, This functions (IO Threads) is present in 3.6 Second Alpha Release  oVirt version? <a href=http://www.ovirt.org/Features/IOThreads_Support>http://www.ovirt.org/Features/IOThreads_Support</a> Thanks, Drovalev Roman --=_alternative 00459B0D43257E74_=--

3 3

Error in Upload Image
by Xie, Chao 10 Jul '15

10 Jul '15

--_000_EE4D679B9474414187D2E27D8B6890F6969D8BG08CNEXMBPEKD01g0_ Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 aGksYWxsDQogICBJIHVzZSBlbmdpbmUtaW1hZ2UtdXBsb2FkZXIgdG8gdXBsb2FkIGEgd2luNyBv dmYgdG8gZXhwb3J0IGRvbWFpbiBidXQgZmFpbGVkLg0KVGhlIEVycm9yIE1lc3NhZ2UgYXMgYmVs b3c6DQoNCj09PT09PT09PT09PQ0KW3Jvb3RAcmhldm0gfl0jIGVuZ2luZS1pbWFnZS11cGxvYWRl ciAtZSBleHBvcnRfZGVidWcgLS1pbnNlY3VyZSAtZiB1cGxvYWQgd2luN19zaWt1bGkub3ZmDQpQ bGVhc2UgcHJvdmlkZSB0aGUgUkVTVCBBUEkgcGFzc3dvcmQgZm9yIHRoZSBhZG1pbkBpbnRlcm5h bCBvVmlydCBFbmdpbmUgdXNlciAoQ1RSTCtEIHRvIGFib3J0KToNCkVSUk9SOiBVbmFibGUgdG8g dXBkYXRlIHRoZSBkaXNrIElEIGluIHRoZSBPVkYgWE1MLiBNZXNzYWdlOiBnbG9iYWwgbmFtZSAn bl9pZF9kJyBpcyBub3QgZGVmaW5lZA0KPT09PT09PT09PT09DQoNCkhvdyBjYW4gSSBmaXggaXQ/ DQo= --_000_EE4D679B9474414187D2E27D8B6890F6969D8BG08CNEXMBPEKD01g0_ Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dgb2312"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"ZH-CN" link=3D"blue" vlink=3D"purple" style=3D"text-justify-t= rim:punctuation"> <div class=3D"WordSection1"> hi,all<o:p></o:p>    I use engine-image= -uploader to upload a win7 ovf to export domain but failed. <o:p></o:p> The Error Message as below:<o:p= ></o:p> <o:p> </o:p> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D<o:p></o:p> [root@rhevm ~]# engine-image-up= loader -e export_debug --insecure -f upload win7_sikuli.ovf <o:p></o:p> Please provide the REST API pas= sword for the admin@internal oVirt Engine user (CTRL+D to abort): <o:p></o:p> ERROR: Unable to update the dis= k ID in the OVF XML. Message: global name 'n_id_d' is not defined<o:p></o:p= > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D<o:p></o:p> <o:p> </o:p> How can I fix it?<o:p></o:p></s= pan> </div> </body> </html> --_000_EE4D679B9474414187D2E27D8B6890F6969D8BG08CNEXMBPEKD01g0_--

2 1

Autostart VM
by Koen Vanoppen 06 Jul '15

06 Jul '15

Hi Guys, I couldn't find anything directly concerning my following question, so If it was asked before, I'm sorry... Is there a way to config ovirt in a way that when you created a new vm, it will automatically boot? Because now, when you create a VM it stays in down state. Kind regards, Koen

3 3

how can i setup hosted engine on the ovirt-node-3.5-201504280933
by Zhong Qiang 06 Jul '15

06 Jul '15

I 'm installing oVirt Node using a CD(ovirt-node-iso-3.5-0.999.201504280933.el6.iso),and Ovirt Node is worked. How can i setup hosted engine by using OVirt Node Console?or where can i get the Engine OVA? I can't find any description about this in the " www.ovirt.org". The Console looks like this: " Hosted Engine Setup Hosted Engine: Not configured Engine VM Name: Engine Status: Hosted engine not configured Engine ISO/OVA URL for download: _____________ PXE Boot Engine VM [ ] " Thanks.

3 17

oVirt iSCSI
by Arthur Cezar Lima de Melo 01 Jul '15

01 Jul '15

Hey guys, Can anyone help me about this problem? " Error while executing action: Cannot add iSCSI Bond. Required network cannot be a part of an iSCSI bond. " Thanx! -- *Arthur Cezar Lima de Melo* Tel: (21) 9 8142 -9079 | (21) 3553-8214 Ramal: 7008 arthur.melo(a)gigacom.com.br <jorge(a)gigacom.com.br> www.gigacom.com.br

3 4

ovirt w/ gluster replace-brick
by Frank Rothenstein 01 Jul '15

01 Jul '15

Hi, I just added a gluster-node. I wanted to replace one brick of the data domain. I did with "gluster vol replace-brick <old_brick> <new_brick> commit force" and all gluster processes did well. My Cluster volumes now shows this one <old_brick> down and does not show the <new_brick>, where as gluster vol status is fine. Is there any service I forgot to restart? Frank ______________________________________________________________________________ BODDEN-KLINIKEN Ribnitz-Damgarten GmbH Sandhufe 2 18311 Ribnitz-Damgarten Telefon: 03821-700-0 Fax: 03821-700-240 E-Mail: info(a)bodden-kliniken.de Internet: http://www.bodden-kliniken.de Sitz: Ribnitz-Damgarten, Amtsgericht: Stralsund, HRB 2919, Steuer-Nr.: 081/126/00028 Aufsichtsratsvorsitzende: Carmen Schröter, Geschäftsführer: Dr. Falko Milski Der Inhalt dieser E-Mail ist ausschließlich für den bezeichneten Adressaten bestimmt. Wenn Sie nicht der vorge- sehene Adressat dieser E-Mail oder dessen Vertreter sein sollten, beachten Sie bitte, dass jede Form der Veröf- fentlichung, Vervielfältigung oder Weitergabe des Inhalts dieser E-Mail unzulässig ist. Wir bitten Sie, sofort den Absender zu informieren und die E-Mail zu löschen. Bodden-Kliniken Ribnitz-Damgarten GmbH 2014 *** Virenfrei durch Kerio Mail Server und Sophos Antivirus ***

2 3

Re: [ovirt-users] User is not authorized, ldap OK, but no user VM
by Donny Davis 01 Jul '15

01 Jul '15

Can you assign a specific user the power user role that has no VMS assigned to them? Can that user login? On Jun 30, 2015 6:32 PM, "David Smith" <dsmith(a)mypchelp.com> wrote: > The users are attempting to log in via the user portal when they get the > error. > > > On Tue, Jun 30, 2015 at 3:28 PM, Donny Davis <donny(a)cloudspin.me> wrote: > >> The power user role covers login, so that is not your problem. Is this >> on the user portal or webadmin? >> On Jun 30, 2015 6:20 PM, "David Smith" <dsmith(a)mypchelp.com> wrote: >> >>> I used the "everyone" user at the data center level and added the >>> permissions/role of "PowerUserRole" >>> >>> What other permission/role are you saying I should assign? >>> >>> Unfortunately we aren't using an "ldap group" so there's nothing to >>> assign to an ldap group-- the users are filtered in such a manner that if >>> they auth and get through the filter they should have access. >>> >>> On Tue, Jun 30, 2015 at 3:16 PM, Donny Davis <donny(a)cloudspin.me> wrote: >>> >>>> Add login permissions only at the data center for the group. This >>>> allows them to login, but not view anything. You have to create custom >>>> permission to do what you are looking for. >>>> On Jun 30, 2015 6:13 PM, "David Smith" <dsmith(a)mypchelp.com> wrote: >>>> >>>>> Correct, each user has their own VMs. Only a few share VMs (those >>>>> permissions are assigned manually) >>>>> >>>>> The issue is that when they have 0 VMs assigned to them, the system >>>>> throws the login error that they're not authorized, at least until I add a >>>>> placeholder VM so they can log in and set themselves up. >>>>> >>>>> >>>>> On Tue, Jun 30, 2015 at 3:09 PM, Donny Davis <donny(a)cloudspin.me> >>>>> wrote: >>>>> >>>>>> You are looking for this to look like its multi tenant? >>>>>> >>>>>> I setup CloudSpin to do exactly that. Each user can only see their >>>>>> own VMS. >>>>>> Do I have your question correct? >>>>>> >>>>>> Donny D >>>>>> On Jun 30, 2015 5:27 PM, "David Smith" <dsmith(a)mypchelp.com> wrote: >>>>>> >>>>>>> version 3.5.2-1.el6 >>>>>>> using ldap authz; this piece is working OK, and verified OK. >>>>>>> >>>>>>> I use the "Everyone" user to provide default permissions; that >>>>>>> includes PowerUserRole for the data center, a bunch of >>>>>>> usertemplatebasedVMs, some VnicProfileUser, DiskProfileUser, etc. >>>>>>> >>>>>>> I add a new user in LDAP; and verify LDAP credentials work (ie, log >>>>>>> in to another system that uses the same ldap server) >>>>>>> LDAP confirmed working for *other* ovirt users-- not an LDAP issue >>>>>>> as far as I can tell. >>>>>>> >>>>>>> I do *not* specifically add each LDAP user to oVirt, they're added >>>>>>> to "groups" in LDAP, so if they have the right group, they should be able >>>>>>> to authenticate to oVirt and use the system without me adding each user >>>>>>> individually. >>>>>>> >>>>>>> In any case the narrowed down problem is this: >>>>>>> If the user doesn't have permissions (UserRole, etc) for *any* VMs, >>>>>>> instead of logging in and getting a blank VM list, they get "User is not >>>>>>> authorized to perform this action." >>>>>>> >>>>>>> If I add that specific user to a test placeholder VM, they can log >>>>>>> in. Once they have a VM created, I can erase their user-specific >>>>>>> permissions to that initial test VM and everything works as expected. They >>>>>>> are able to log in, create VMs, etc. >>>>>>> >>>>>>> If I remove all permissions for VMs from a user, they get this error. >>>>>>> >>>>>>> Expected behavior: >>>>>>> User without any permissions to any VMs should simply get a blank VM >>>>>>> list on login. That way they can create a VM and go from there. >>>>>>> >>>>>>> Thanks for any help/suggestions, >>>>>>> David >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list >>>>>>> Users(a)ovirt.org >>>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>>>> >>>>>>> >>>>> >>> >

1 0

User is not authorized, ldap OK, but no user VM
by David Smith 01 Jul '15

01 Jul '15

version 3.5.2-1.el6 using ldap authz; this piece is working OK, and verified OK. I use the "Everyone" user to provide default permissions; that includes PowerUserRole for the data center, a bunch of usertemplatebasedVMs, some VnicProfileUser, DiskProfileUser, etc. I add a new user in LDAP; and verify LDAP credentials work (ie, log in to another system that uses the same ldap server) LDAP confirmed working for *other* ovirt users-- not an LDAP issue as far as I can tell. I do *not* specifically add each LDAP user to oVirt, they're added to "groups" in LDAP, so if they have the right group, they should be able to authenticate to oVirt and use the system without me adding each user individually. In any case the narrowed down problem is this: If the user doesn't have permissions (UserRole, etc) for *any* VMs, instead of logging in and getting a blank VM list, they get "User is not authorized to perform this action." If I add that specific user to a test placeholder VM, they can log in. Once they have a VM created, I can erase their user-specific permissions to that initial test VM and everything works as expected. They are able to log in, create VMs, etc. If I remove all permissions for VMs from a user, they get this error. Expected behavior: User without any permissions to any VMs should simply get a blank VM list on login. That way they can create a VM and go from there. Thanks for any help/suggestions, David

2 5

CloudSpin is Almost back
by Donny Davis 30 Jun '15

30 Jun '15

Hey guys I know CloudSpin has been down for quite a while. Its taking me a little longer than expected to get up and running again on my new connection. Mainly the lack of ipv6 on my static connection. I am working through it. I promised some server resources to aide in processes above my level, and I am happy to report that the resources are ready. Please email me if you are interested, and we can get the ball rolling. 2x quad cores, 32gb of ram(might be able to get to 64). And 6tb of raw disk space. Dedicated for the Ovirt Project, and what you guys need it to do. This is a physical machine, and as always when I get CloudSpin back up, any VMS you might want or need. Thanks for your patience Donny D CloudSpin.me

1 0

ovirt-engine-3.5.4 branch created
by Sandro Bonazzola 30 Jun '15

30 Jun '15

Hi, just a quick note reminding that ovirt-engine 3.5.4 branch has been created today. Any further patch targeted 3.5.4 must be cherry-picked there too. Thanks, -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 2

all in one migration
by nicola.gentile.to 30 Jun '15

30 Jun '15

Good morning, I have currently a server with ovirt installed (all-in-one) and I would like to extend the structure. At the end of the work I would like that structures were composed of the following: - 1 manager (virtualized) - 2 hosts - storage Before beginning this complicated process, I would like to know if it is possible, and how, to rename the old server. I thought to do the following: - change the hostname to the old server (all-in-one) - update the dns server - install the new server manager virtualized with old hostname - add storage - add the new server as a host - expoxt the virtual machines from old server - import the virtual machines to new server - test the virtual machines on new server - shutdown old server - reinstall old server as a host What do you think? Best regards Nicola

3 5

[ANN] oVirt 3.6.0 Second Alpha Release is now available for testing
by Sandro Bonazzola 30 Jun '15

30 Jun '15

The oVirt Project is pleased to announce the availability of the Second Alpha release of oVirt 3.6 for testing, as of June 29, 2015. oVirt is an open source alternative to VMware vSphere, and provides an excellent KVM management interface for multi-node virtualization. The Second Alpha release is available now for Fedora 20, Red Hat Enterprise Linux 6.6, CentOS 6.6 (or similar) and Red Hat Enterprise Linux 7.1, CentOS 7.1 (or similar). The Second Alpha release can also be deployed on Hypervisor Hosts running Fedora 21 and Fedora 22. Experimental support for Debian 8.1 Jessie has been added too. This Second Alpha release of oVirt includes numerous bug fixes. See the release notes [1] for an initial list of the new features and bugs fixed. Please refer to release notes [1] for Installation / Upgrade instructions. A new oVirt Live ISO[2] and Node ISO[3] are already available. Please note that mirrors[4] may need usually one day before being synchronized. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.6_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.6-pre/iso/ovirt-live/el7-alpha2/ovir… [3] http://plain.resources.ovirt.org/pub/ovirt-3.6-pre/iso/ovirt-node/ovirt-nod… [4] http://www.ovirt.org/Repository_mirrors#Current_mirrors -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 2

VM run once API required
by Chandrahasa S 30 Jun '15

30 Jun '15

This is a multipart message in MIME format. --=_alternative 0022817E65257E74_= Content-Type: text/plain; charset="US-ASCII" Hi Experts, We are integrating RHEV(M) with our internal cloud portal using RHEV(M) API, we are able to provision Linux VM using API. But IP and Hostname not getting reflected on vm first boot. If we boot VM manually using run once its working fine. We are not able to find any run once API on RHEV end. Requested your help on this. Thanks & Regards Chandrahasa S =====-----=====-----===== Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you --=_alternative 0022817E65257E74_= Content-Type: text/html; charset="US-ASCII" Hi Experts, We are integrating RHEV(M) with our internal cloud portal using RHEV(M) API, we are able to provision Linux VM using API. But IP and Hostname not getting reflected on vm  first boot. If we boot VM manually using run once its working fine. We are not able to find any run once API on RHEV end. Requested your help on this. Thanks & Regards Chandrahasa S =====-----=====-----===== Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you --=_alternative 0022817E65257E74_=--

2 1

how can i setup hosted engine on the ovirt-node-3.5-201504280933
by Zhong Qiang 30 Jun '15

30 Jun '15

I 'm installing oVirt Node using a CD(ovirt-node-iso-3.5-0.999.201504280933.el6.iso),and Ovirt Node is worked. How can i setup hosted engine by using OVirt Node Console?or where can i get the Engine OVA? I can't find any description about this in the " www.ovirt.org". The Console looks like this: " Hosted Engine Setup Hosted Engine: Not configured Engine VM Name: Engine Status: Hosted engine not configured Engine ISO/OVA URL for download: _____________ PXE Boot Engine VM [ ] " Thanks.

1 0

ovirt foreman integration
by Tiemen Ruiten 29 Jun '15

29 Jun '15

Hello, I just tried to add a foreman instance as an external provider in the oVirt UI, but the connection test fails with "unknown error". In the engine.log I see this message: 2015-06-26 14:31:50,900 ERROR [org.ovirt.engine.core.bll.GetProviderCertificateChainQuery] (ajp--127.0.0.1-8702-3) Error in encoding certificate. Error is {} java.io.IOException: Keystore was tampered with, or password was incorrect How can I successfully connect to Foreman? The Foreman instance uses a self-signed certificate btw. -- Tiemen Ruiten Systems Engineer R&D Media

2 2

IO Threads
by Roman Nikolayevich Drovalev 29 Jun '15

29 Jun '15

Ýòî ñîîáùåíèå èç íåñêîëüêèõ ÷àñòåé â ôîðìàòå MIME. --=_alternative 002A12AA43257E73_= Content-Type: text/plain; charset="US-ASCII" Hello all! Please HELP I have big probleme! My vm perfomance very degraded in comparison with bare metall I have very hi load database server (Lotus domino base - 1T_SSD) IOPS bare metall - 150 K read (block 4K) VM - 50 K At the client the document opens 5-10 seconds, instead of 1 second on the bare metall Question: how to involve IO Threads in oVirt now, through ovirt-shell or edit directly a config files ? I know that in 3.6 will be, but it is necessary now! http://www.ovirt.org/Features/IOThreads_Support oVirt - 3.5.3.1 , host - centos 7.1, KVM 2.1.2 - 23.el7_1.3.1, libvirt-1.2.8-16.el7_1.3, vdsm-4.16.20-0.el7.centos Drovalev Roman --=_alternative 002A12AA43257E73_= Content-Type: text/html; charset="US-ASCII" Hello all! Please HELP I have big probleme! My vm perfomance very degraded in comparison with  bare metall I have very hi load database server (Lotus domino base - 1T_SSD) IOPS bare metall - 150 K read (block 4K) VM - 50 K  At the client the document opens 5-10 seconds, instead of 1 second on the bare metall Question: how to involve IO Threads in oVirt now,  through ovirt-shell or edit directly a config files ? I know that in 3.6 will be, but it is necessary now! <a href=http://www.ovirt.org/Features/IOThreads_Support>http://www.ovirt.org/Features/IOThreads_Support</a> oVirt - 3.5.3.1 , host - centos 7.1, KVM 2.1.2 - 23.el7_1.3.1, libvirt-1.2.8-16.el7_1.3, vdsm-4.16.20-0.el7.centos Drovalev Roman --=_alternative 002A12AA43257E73_=--

2 1

Lower CPU for specific VMs
by Ian Fraser 29 Jun '15

29 Jun '15

Hi, How do I set the CPU for a particular VM to be a lower family than the cluster is set to? The problem I am having is that In order to install a Windows 10 VM to run on my oVirt lab that uses Sandybridge CPUs I am having to change the cluster CPU family to Intel Westmere Family before I launch the Windows 10 VM otherwise it will throw a SYSTEM THREAD EXCEPTION NOT HANDLED. I then change the cluster's CPU family back and all is well, except I would rather not have to do that. Seemingly a known problem: https://social.technet.microsoft.com/Forums/en-US/695c8997-52cf-4c30-a3f7-f… Thanks for any assistance. Ian ________________________________ The information in this message and any attachment is intended for the addressee and is confidential. If you are not that addressee, no action should be taken in reliance on the information and you should please reply to this message immediately to inform us of incorrect receipt and destroy this message and any attachments. For the purposes of internet level email security incoming and outgoing emails may be read by personnel other than the named recipient or sender. Whilst all reasonable efforts are made, ASM (UK) Ltd cannot guarantee that emails and attachments are virus free or compatible with your systems. You should make your own checks and ASM (UK) Ltd does not accept liability in respect of viruses or computer problems experienced. Registered address: Agency Sector Management (UK) Ltd. Ashford House, 41-45 Church Road, Ashford, Middlesex, TW15 2TQ Registered in England No.2053849 ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

4 5

Foreman compute oVirt: New Host failing with action type cpu profile empty
by Daniel Helgenberger 29 Jun '15

29 Jun '15

Hello, I have configured oVirt as compute resource in foreman. This is working well to the point creating a new host, witch fails witch the error: 'Failed to create a compute oVirt (oVirt) instance wst01.int.m-box.de: action type cpu profile empty' I found a (resolved but yet not closed) BZ1160846 [1] relating to disk profiles. Versions: foreman 1.8.1 ovirt engine 3.5.3 Strangely I am unable to find anything in engine.log relating to the attempt? [1] https://bugzilla.redhat.com/show_bug.cgi?id=1160846 -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767

2 4

Making modules persistant on ovirt-node
by Tim Macy 26 Jun '15

26 Jun '15

I recently added FCOE to my oVirt-node servers and I need a way for the modprobe to persist through reboot. Thanks, Tim

3 3

Why Local mode must one host one datacenter?
by 肖力 26 Jun '15

26 Jun '15

------=_Part_404092_592866458.1435287329178 Content-Type: text/plain; charset=GBK Content-Transfer-Encoding: base64 SGksIEluIGZhY3QgLCBNb3N0IG9mIGhvc3QgdXNlIGxvY2FsIG1vZGUuCldoeSBMb2NhbCBtb2Rl IG11c3Qgb25lIGhvc3Qgb25lIGRhdGFjZW50ZXIuCkkgdGhpbmssTGlrZSBWTSB2Q2VudGVyLCBz b21lIGhvc3QgaW4gb25lIGRhdGFjZW50ZXIgLCBJdCBpcyAgbW9yZSBhZHZhbnRhZ2VvdXMsVGtz IQ== ------=_Part_404092_592866458.1435287329178 Content-Type: text/html; charset=GBK Content-Transfer-Encoding: base64 PGRpdiBzdHlsZT0ibGluZS1oZWlnaHQ6MS43O2NvbG9yOiMwMDAwMDA7Zm9udC1zaXplOjE0cHg7 Zm9udC1mYW1pbHk6QXJpYWwiPjxkaXY+SGksIEluIGZhY3QgLCBNb3N0IG9mIGhvc3QgdXNlIGxv Y2FsIG1vZGUuPC9kaXY+PGRpdj5XaHkgTG9jYWwgbW9kZSBtdXN0IG9uZSBob3N0IG9uZSBkYXRh Y2VudGVyLjwvZGl2PjxkaXY+SSB0aGluayxMaWtlIFZNIHZDZW50ZXIsIHNvbWUgaG9zdCBpbiBv bmUgZGF0YWNlbnRlciAsIEl0IGlzICZuYnNwO21vcmUmbmJzcDthZHZhbnRhZ2VvdXMsVGtzITwv ZGl2PjwvZGl2Pjxicj48YnI+PHNwYW4gdGl0bGU9Im5ldGVhc2Vmb290ZXIiPjxzcGFuIGlkPSJu ZXRlYXNlX21haWxfZm9vdGVyIj48L3NwYW4+PC9zcGFuPg== ------=_Part_404092_592866458.1435287329178--

1 0

Dropping Fedora 20 builds on master / 3.6 in 2 weeks
by Sandro Bonazzola 25 Jun '15

25 Jun '15

Hi, now that we have Wildfly support for oVirt engine and Fedora 20 reached the end of its life, it's time to drop Fedora 20 builds on master. We'll keep building for Fedora 20 on the 3.5 branch since we don't support Wildfly there. If you're still developing or testing oVirt master on Fedora 20 please upgrade to Fedora 22 in the next 2 weeks. Thanks, -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0