January 2015 - Users - oVirt List Archives

reverse lookup failure during overt engine configuration
by Faraday, Kriparam 31 Jan '15

31 Jan '15

--_000_D0F1754F1616Bkfaradayverisigncom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Hi, I am trying to configure ovirt(ver 3.5). The fqdn I provide during the step= "Host fully qualified DNS name of this server=94 is reverse resolvable. I = am able to verify that with nslookup of the IP address. But, I keep getting the following error: Host fully qualified DNS name of this server [localhost.localdomain]: xyz.x= yz.xyz.com [ ERROR ] Host name is not valid: The following addresses: 10.xx.xx.xx did = not reverseresolve into xyz.xyz.xyz.com How is ovirt-engine trying to reverse lookup the domain? If I know that, I = could probably fix the issue. Thanks, Kripa =93This message (including any attachments) is intended only for the use of= the individual or entity to which it is addressed, and may contain informa= tion that is non-public, proprietary, privileged, confidential and exempt f= rom disclosure under applicable law or may be constituted as attorney work = product. If you are not the intended recipient, you are hereby notified tha= t any use, dissemination, distribution, or copying of this communication is= strictly prohibited. If you have received this message in error, notify se= nder immediately and delete this message immediately.=94 --_000_D0F1754F1616Bkfaradayverisigncom_ Content-Type: text/html; charset="Windows-1252" Content-ID: <FA94EC580C44704B9A0087CA1BCA7549(a)verisign.com> Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DWindows-1= 252"> </head> <body style=3D"word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-lin= e-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-fami= ly: Calibri, sans-serif;"> <div>Hi,</div> <div>I am trying to configure ovirt(ver 3.5). The fqdn I provide during the= step "Host fully qualified DNS name of this server=94 is reverse reso= lvable. I am able to verify that with nslookup of the IP address. </di= v> <div><br> </div> <div>But, I keep getting the following error:</div> <div>Host fully qualified DNS name of this server [localhost.localdomain]: = xyz.xyz.xyz.com</div> <div>[ ERROR ] Host name is not valid: The following addresses: 10.xx.xx.xx= did not reverseresolve into xyz.xyz.xyz.com</div> <div><br> </div> <div>How is ovirt-engine trying to reverse lookup the domain? If I know tha= t, I could probably fix the issue.</div> <div><br> </div> <div>Thanks,</div> <div>Kripa</div> <h5><font color=3D"gray">=93This message (including any attachments) is int= ended only for the use of the individual or entity to which it is addressed= , and may contain information that is non-public, proprietary, privileged, = confidential and exempt from disclosure under applicable law or may be constituted as attorney work product. If yo= u are not the intended recipient, you are hereby notified that any use, dis= semination, distribution, or copying of this communication is strictly proh= ibited. If you have received this message in error, notify sender immediately and delete this message immedi= ately.=94 </h5> </font> </body> </html> --_000_D0F1754F1616Bkfaradayverisigncom_--

3 5

3.5 -> 3.5.1 upgrade issue
by Alan Murrell 31 Jan '15

31 Jan '15

I noticed I didn't have the reports installed, and thought in addition to installing thm I would upgrade my 3.5.0.1 installation to 3.5.1. I did a 'yum install engine-setup-dwh engine-setup-reports' and when those installed, I ran 'yum upgrade engine-setup'. This may have been my mistake. Anyway, once everything got downloaded and installed, I ran a screen session then ran 'engine-setup'. I answered the questions (leaving mostly the defaults) and let it go. The process usually gets to '[ INFO ] Deploying Jasper' then I lose my SSH session. No problem, I can just log right back in and connect to my screen session, right? Unfortunately, whatever causes my SSH session to drop also seems to kill my screen session, as there are none to be found. I cannot see anything useful in the logs for why the sessions got killed, but even after I lose the session, I can connect tot he webGUI, though it is still on 3.5.0.1 and if I click on the "Reports" link, it says the Reports module is not installed. I tried connecting to the console of the Engine (did I mention it is a self-hosted engine?), but the VNC connection cannot seem to connect, so I can't even run it from the console (even though the 'engine-setup' process shuts down the engine services, at least running it from the console should allow it to finish since it won't kill an SSH session) Any ideas on either what could be going on here and/or how to successfully run 'engine-setup'? Thanks! :-) -Alan

2 1

Foreman intergration
by Karli Sjöberg 30 Jan '15

30 Jan '15

Hey all! One thing I am keen on exploring is the Foreman/oVirt integration. I have a vision were that could be used to, as a first step, manage the updating/patching of the Hosts in our datacenter, and if that turns out successful, remove our current Puppet Dashboard as ENC in our main Puppet Master and trade it in for The Foreman. The flow I imagined was to have Foreman tell oVirt engine to set a Host in Maintenance, update all packages and reboot it, then when it´s back, put it back to Active and move on to the next Host. Is that something that´s been worked on? /K

1 0

Where can I get the ovirt-engine MIB?
by Nathanaël Blanchet 30 Jan '15

30 Jan '15

Hello, According to https://bugzilla.redhat.com/show_bug.cgi?id=1136818, we are now able to get snmtraps with the custom MIB. This thread provides the sample redhat MIB but where can I get the full ovirt-enfine mib txt file?

2 1

restore state is very long after suspending
by Nathanaël Blanchet 30 Jan '15

30 Jan '15

Hello, Suspending one vm (2 GB RAM) is quite short (about 1 minute) while restoring it is over 20 minutes... This make the suspend feature unusable. Is it a regular work? ovirt 3.5, el6 vdsm 4.16.

1 0

Re: [ovirt-users] oVirt 3.5.1 user permissions
by Oved Ourfali 29 Jan '15

29 Jan '15

1 0

Re: [ovirt-users] oVirt 3.5.1 user permissions
by Oved Ourfali 29 Jan '15

29 Jan '15

2 1

AAA
by Koen Vanoppen 29 Jan '15

29 Jan '15

Can somebody help me setting up AAA for ovirt 3.5.1? I'm getting this now: 2015-01-29 11:35:36,889 WARN [org.ovirt.engineextensions.aaa.ldap.AuthzExtension] (MSC service thread 1-1) [ovirt-engine-extension-aaa-ldap.authz::BRU_AIR-authz] Cannot initialize LDAP framework, deferring initialization. Error: An error occurred while attempting to query DNS in order to retrieve SRV records with name '_gc._tcp.brussels.airport': javax.naming.NameNotFoundException: DNS name not found [response code 3]; remaining name '_gc._tcp.brussels.airport' my 3 configs: *BRU_AIR-authn.properties* ovirt.engine.extension.name = BRU_AIR-authn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = BRU-AIR ovirt.engine.aaa.authn.authz.plugin = BRU_AIR-authz config.profile.file.1 = /etc/ovirt-engine/aaa/BRU_AIR.properties *BRU_AIR-authz.properties* ovirt.engine.extension.name = BRU_AIR-authz ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = /etc/ovirt-engine/aaa/BRU_AIR.properties *BRU_AIR.properties* include = <ad.properties> # # Active directory domain name. # vars.domain = mydomain.com # # Search user and its password. # vars.user = admin@${global:vars.domain} vars.password = *********** # # Optional DNS servers, if enterprise # DNS server cannot resolve the domain srvrecord. # vars.dns = dns://dc01.mydomain.com pool.default.serverset.type = srvrecord pool.default.serverset.srvrecord.domain = ${global:vars.domain} pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password In the GUI for adding user I get this: An error occurred while attempting to query DNS in order to retrieve SRV records with name '_gc__tcp_brussels_airport': javax_naming_NameNotFoundException: DNS name not found [response code 3]; remaining name '_gc__tcp_brussels_airport' Any ideas? I ran out... Kind regards, Koen

3 18

oVirt 3.5.1 user permissions
by Nikolai Bochev 29 Jan '15

29 Jan '15

Hello, I've been running ovirt hosted engine for around a month already without any major interruptions. Last week i tied it to freeipa, to be able to give permissions to other people, but so far no success because of the following problem : All users can see all VM's. I tried clearing all permission entries ( leaving the admin only ) and the re-adding and it didn't help at all. I am attaching a few screenshots to better describe : Most of the vm's have no permissions attached to them, but they are still visible to everyone that logs from the userpanel What am i doing wrong ? Regards,

4 5

Re: [ovirt-users] oVirt 3.5.1 user permissions
by Donny Davis 29 Jan '15

29 Jan '15

Setting that login permission at the system level is why they can see everything even if they can't control it. Copy the user permission role and remove all the permissions except login to system (the last box under login) create instance, and attach to storage domains. Then add it to the datacenter permission set On Jan 29, 2015 2:02 AM, Ondra Machacek <omachace(a)redhat.com> wrote: > > If you add for example 'UserRole' on VM, then your user should login to > UserPortal without any problem and see his VM. > > On 01/29/2015 09:58 AM, Nikolai Bochev wrote: > > Ok, but if i don't add "System" permissions to a user with "UserRole" > > they cannot login at all ? > > > > On Thu, Jan 29, 2015 at 10:56 AM, Ondra Machacek <omachace(a)redhat.com > > <mailto:omachace@redhat.com>> wrote: > > > > > > > > On 01/29/2015 09:35 AM, Nikolai Bochev wrote: > > > > Hello, > > > > I've been running ovirt hosted engine for around a month already > > without > > any major interruptions. Last week i tied it to freeipa, to be > > able to > > give permissions to other people, but so far no success because > > of the > > following problem : > > > > All users can see all VM's. I tried clearing all permission > > entries ( > > leaving the admin only ) and the re-adding and it didn't help at > > all. > > > > I am attaching a few screenshots to better describe : > > > > > > > > The problem is that you are assigning system permissions. > > If you assign system permissions you have permission to whole system. > > > > If you want to assign a permission to user on a specific vm(or object), > > you have to select the object, then click 'permissions' subtab, then > > click 'add', then find your user and choose the role for him. > > > > > > > > > > > > Most of the vm's have no permissions attached to them, but they are > > still visible to everyone that logs from the userpanel > > What am i doing wrong ? > > > > Regards, > > > > > > _________________________________________________ > > Users mailing list > > Users(a)ovirt.org <mailto:Users@ovirt.org> > > http://lists.ovirt.org/__mailman/listinfo/users > > <http://lists.ovirt.org/mailman/listinfo/users> > > > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users

1 0