June 2017 - Users - oVirt List Archives

Feature: Hosted engine VM management
by Roy Golan 27 Feb '19

27 Feb '19

Hi all, Upcoming in 3.6 is enhancement for managing the hosted engine VM. In short, we want to: * Allow editing the Hosted engine VM, storage domain, disks, networks etc * Have a shared configuration for the hosted engine VM * Have a backup for the hosted engine VM configuration please review and comment on the wiki below: http://www.ovirt.org/Hosted_engine_VM_management Thanks, Roy

2 3

Re: [ovirt-users] Large DWH Database, how to empty
by Matt . 26 Feb '19

26 Feb '19

Hi, OK thanks! I saw that after upgrading to 4.0.5 from 4.0.4 the DB already dropped with around 500MB directly and is now at 2GB smaller. Does this sounds familiar to you with other settings in 4.0.5 ? Thanks, Matt 2017-01-08 10:45 GMT+01:00 Shirly Radco <sradco(a)redhat.com>: > No. That will corrupt your database. > > Are you using the full dwh or the smaller version for the dashboards? > > Please set the delete thresholds to save less data and the data older then > the time you set will be deleted. > Add a file to /ovirt-engine-dwhd.conf.d/ > update_time_to_keep_records.conf > > Add these lines with the new configurations. The numbers represent the hours > to keep the data. > > DWH_TABLES_KEEP_SAMPLES=24 > DWH_TABLES_KEEP_HOURLY=1440 > DWH_TABLES_KEEP_DAILY=43800 > > > These are the configurations for a full dwh. > > The smaller version configurations are: > DWH_TABLES_KEEP_SAMPLES=24 > DWH_TABLES_KEEP_HOURLY=720 > DWH_TABLES_KEEP_DAILY=0 > > The delete process by default at 3am every day (DWH_DELETE_JOB_HOUR=3) > > Best regards, > > Shirly Radco > > BI Software Engineer > Red Hat Israel Ltd. > 34 Jerusalem Road > Building A, 4th floor > Ra'anana, Israel 4350109 > > > On Fri, Jan 6, 2017 at 6:35 PM, Matt . <yamakasi.014(a)gmail.com> wrote: >> >> Hi, >> >> I seem to have some large database for the DWH logging and I wonder >> how I can empty it safely. >> >> Can I just simply empty the database ? >> >> Have a good weekend! >> >> Cheers, >> >> Matt >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > >

1 0

Re: [ovirt-users] Packet loss
by Doron Fediuck 26 Feb '19

26 Feb '19

----_com.android.email_640187878761650 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 SGkgS3lsZSzCoApXZSBtYXkgaGF2ZSBzZWVuIHNvbWV0aGluZyBzaW1pbGFyIGluIHRoZSBwYXN0 IGJ1dCBJIHRoaW5rIHRoZXJlIHdlcmUgdmxhbnMgaW52b2x2ZWQuwqAKSXMgaXQgdGhlIHNhbWUg Zm9yIHlvdT/CoApUb255IC8gRGFuLCBkb2VzIGl0IHJpbmcgYSBiZWxsP8Kg ----_com.android.email_640187878761650 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9VVRGLTgiPjwvaGVhZD48Ym9keSA+PGRpdj5IaSBLeWxlLCZuYnNwOzwv ZGl2PjxkaXY+V2UgbWF5IGhhdmUgc2VlbiBzb21ldGhpbmcgc2ltaWxhciBpbiB0aGUgcGFzdCBi dXQgSSB0aGluayB0aGVyZSB3ZXJlIHZsYW5zIGludm9sdmVkLiZuYnNwOzwvZGl2PjxkaXY+SXMg aXQgdGhlIHNhbWUgZm9yIHlvdT8mbmJzcDs8L2Rpdj48ZGl2PlRvbnkgLyBEYW4sIGRvZXMgaXQg cmluZyBhIGJlbGw/Jm5ic3A7PC9kaXY+PC9ib2R5PjwvaHRtbD4= ----_com.android.email_640187878761650--

2 1

Unable to backend oVirt with Cinder
by Logan Kuhn 21 Jun '18

21 Jun '18

------=_Part_51316288_608143832.1472587678781 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit I've got Cinder configured and pointed at Ceph for it's back end storage. I can run ceph commands on the cinder machine and cinder is configured for noauth and I've also tried it with Keystone for auth. I can run various cinder commands and it'll return as expected. When I configure it in oVirt it'll add the external provider fine, but when I go to create a disk it doesn't populate the volume type field, it's just empty. The corresponding command for cinder: cinder type-list and cinder type-show <name> returns fine and it is public. Ovirt and Cinder are on the same host so it isn't a firewall issue. Cinder config: [DEFAULT] rpc_backend = rabbit #auth_strategy = keystone auth_strategy = noauth enabled_backends = ceph #glance_api_servers = http://10.128.7.252:9292 #glance_api_version = 2 #[keystone_authtoken] #auth_uri = http://10.128.7.252:5000/v3 #auth_url = http://10.128.7.252:35357/v3 #auth_type = password #memcached_servers = localhost:11211 #project_domain_name = default #user_domain_name = default #project_name = services #username = user #password = pass [ceph] volume_driver = cinder.volume.drivers.rbd.RBDDriver volume_backend_name = ceph rbd_pool = ovirt-images rbd_user = cinder rbd_secret_uuid = <secret> rbd_ceph_conf = /etc/ceph/ceph.conf rbd_flatten_volume_from_snapshot = true rbd_max_clone_depth = 5 rbd_store_chunk_size = 4 rados_connect_timeout = -1 #glance_api_version = 2 [database] connection = postgresql://user:pass@10.128.2.33/cinder [oslo_concurrency] lock_path = /var/lib/cinder/tmp [oslo_messaging_rabbit] rabbit_host = localhost rabbit_port = 5672 rabbit_userid = user rabbit_password = pass Regards, Logan ------=_Part_51316288_608143832.1472587678781 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"font-family: Arial; font-size: 12pt; color: #0000= 00"><div>I've got Cinder configured and pointed at Ceph for it's back end s= torage.  I can run ceph commands on the cinder machine and cinder is c= onfigured for noauth and I've also tried it with Keystone for auth.  I= can run various cinder commands and it'll return as expected. </= div><div><br data-mce-bogus=3D"1"></div><div>When I configure it in oVirt i= t'll add the external provider fine, but when I go to create a disk it does= n't populate the volume type field, it's just empty.  The correspondin= g command for cinder: cinder type-list and cinder type-show <name> re= turns fine and it is public. </div><div><br data-mce-bogus=3D"1"></div= ><div>Ovirt and Cinder are on the same host so it isn't a firewall issue.</= div><div><br data-mce-bogus=3D"1"></div><div>Cinder config:</div><div>[DEFA= ULT]<br>rpc_backend =3D rabbit<br>#auth_strategy =3D keystone<br>auth_strat= egy =3D noauth<br>enabled_backends =3D ceph<br>#glance_api_servers =3D http= ://10.128.7.252:9292<br>#glance_api_version =3D 2<br><br>#[keystone_authtok= en]<br>#auth_uri =3D http://10.128.7.252:5000/v3<br>#auth_url =3D http://10= .128.7.252:35357/v3<br>#auth_type =3D password<br>#memcached_servers =3D lo= calhost:11211<br>#project_domain_name =3D default<br>#user_domain_name =3D = default<br>#project_name =3D services<br>#username =3D user<br>#passwo= rd =3D pass<br><br>[ceph]<br>volume_driver =3D cinder.volume.drivers.rbd.RB= DDriver<br>volume_backend_name =3D ceph<br>rbd_pool =3D ovirt-images<br>rbd= _user =3D cinder<br>rbd_secret_uuid =3D <secret><br>rbd_ceph_con= f =3D /etc/ceph/ceph.conf<br>rbd_flatten_volume_from_snapshot =3D true<br>r= bd_max_clone_depth =3D 5<br>rbd_store_chunk_size =3D 4<br>rados_connect_tim= eout =3D -1<br>#glance_api_version =3D 2<br><br>[database]<br>connection = =3D postgresql://user:pass@10.128.2.33/cinder<br><br>[oslo_concurrency]<br>= lock_path =3D /var/lib/cinder/tmp<br><br>[oslo_messaging_rabbit]<br>rabbit_= host =3D localhost<br>rabbit_port =3D 5672<br>rabbit_userid =3D <span = style=3D"color: #000000; font-family: Arial; font-size: 16px; font-style: n= ormal; font-variant-ligatures: normal; font-variant-caps: normal; font-weig= ht: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-a= lign: start; text-indent: 0px; text-transform: none; white-space: normal; w= idows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: inlin= e !important; float: none; background-color: #ffffff;" data-mce-style=3D"co= lor: #000000; font-family: Arial; font-size: 16px; font-style: normal; font= -variant-ligatures: normal; font-variant-caps: normal; font-weight: normal;= letter-spacing: normal; line-height: normal; orphans: 2; text-align: start= ; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; w= ord-spacing: 0px; -webkit-text-stroke-width: 0px; display: inline !importan= t; float: none; background-color: #ffffff;">user</span><br>rabbit_password = =3D <span style=3D"color: #000000; font-family: Arial; font-size: 16px= ; font-style: normal; font-variant-ligatures: normal; font-variant-caps: no= rmal; font-weight: normal; letter-spacing: normal; line-height: normal; orp= hans: 2; text-align: start; text-indent: 0px; text-transform: none; white-s= pace: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;= display: inline !important; float: none; background-color: #ffffff;" data-= mce-style=3D"color: #000000; font-family: Arial; font-size: 16px; font-styl= e: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-= weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; te= xt-align: start; text-indent: 0px; text-transform: none; white-space: norma= l; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; display: i= nline !important; float: none; background-color: #ffffff;">pass</span></div= ><div><br></div><div data-marker=3D"__SIG_PRE__">Regards,<br>Logan</div></d= iv></body></html> ------=_Part_51316288_608143832.1472587678781--

4 4

vdsClient is removed and replaced by vdsm-client
by Irit Goihman 16 Apr '18

16 Apr '18

Hi All, vdsClient will be removed from master branch today. It is using XMLRPC protocol which has been deprecated and replaced by JSON-RPC. A new client for vdsm was introduced in 4.1: vdsm-client. This is a simple client that uses JSON-RPC protocol which was introduced in ovirt 3.5. The client is not aware of the available methods and parameters, and you should consult the schema [1] in order to construct the desired command. Future version should parse the schema and provide online help. If you're using vdsClient, we will be happy to assist you in migrating to the new vdsm client. *vdsm-client usage:* vdsm-client [-h] [-a ADDRESS] [-p PORT] [--unsecure] [--timeout TIMEOUT] [-f FILE] namespace method [name=value [name=value] ...] Invoking simple methods: # vdsm-client Host getVMList ['b3f6fa00-b315-4ad4-8108-f73da817b5c5'] For invoking methods with many or complex parameters, you can read the parameters from a JSON format file: # vdsm-client Lease info -f lease.json where lease.json file content is: { "lease": { "sd_id": "75ab40e3-06b1-4a54-a825-2df7a40b93b2", "lease_id": "b3f6fa00-b315-4ad4-8108-f73da817b5c5" } } It is also possible to read parameters from standard input, creating complex parameters interactively: # cat <<EOF | vdsm-client Lease info -f - { "lease": { "sd_id": "75ab40e3-06b1-4a54-a825-2df7a40b93b2", "lease_id": "b3f6fa00-b315-4ad4-8108-f73da817b5c5" } } EOF *Constructing a command from vdsm schema:* Let's take VM.getStats as an example. This is the entry in the schema: VM.getStats: added: '3.1' description: Get statistics about a running virtual machine. params: - description: The UUID of the VM name: vmID type: *UUID return: description: An array containing a single VmStats record type: - *VmStats namespace: VM method name: getStats params: vmID The vdsm-client command is: # vdsm-client VM getStats vmID=b3f6fa00-b315-4ad4-8108-f73da817b5c5 *Invoking getVdsCaps command:* # vdsm-client Host getCapabilities Please consult vdsm-client help and man page for further details and options. [1] https://github.com/oVirt/vdsm/blob/master/lib/api/vdsm-api.yml -- Irit Goihman Software Engineer Red Hat Israel Ltd.

4 7

HostedEngine with HA
by Carlos Rodrigues 22 Mar '18

22 Mar '18

Hello, I have one cluster with two hosts with power management correctly configured and one virtual machine with HostedEngine over shared storage with FiberChannel. When i shutdown the network of host with HostedEngine VM, it should be possible the HostedEngine VM migrate automatically to another host? What is the expected behaviour on this HA scenario? Regards, -- Carlos Rodrigues Engenheiro de Software Sénior Eurotux Informática, S.A. | www.eurotux.com (t) +351 253 680 300 (m) +351 911 926 110

4 30

when creating VMs, I don't want hosted_storage to be an option
by Mike Farnam 09 Feb '18

09 Feb '18

Hi All - Is that a way to mark hosted_storage somehow so that it’s not available to add new VMs to? Right now it’s the default storage domain when adding a VM. At the least, I’d like to make another storage domain the default. Is there a way to do this? Thanks

6 8

Official Hyperconverged Gluster oVirt upgrade procedure?
by Hanson 23 Jan '18

23 Jan '18

Hi Guys, Just wondering if we have an updated manual or whats the current procedure for upgrading the nodes in a hyperconverged ovirt gluster pool? Ie Nodes run 4.0 oVirt, as well as GlusterFS, and hosted-engine running in a gluster storage domain. Put node in maintenance mode and disable glusterfs from ovirt gui, run yum update? Thanks!

4 4

[vdsm] status update: running containers alongside VMs
by Francesco Romani 05 Jan '18

05 Jan '18

Hi everyone, I'm happy to share some progress about the former "convirt"[1] project, which aims to let Vdsm containers alongside VMs, on bare metal. In the last couple of months I kept updating the patch series, which is approaching the readiness to be merged in Vdsm. Please read through this mail to see what the patchset can do now, how you could try it *now*, even before it is merged. Everyone is invited to share thoughts and ideas about how this effort could evolve. This will be a long mail; I will amend, enhance and polish the content and make a blog post (on https://mojaves.github.io) to make it easier to consume and to have some easy-to-find documentation. Later on the same content will appear also on the oVirt blog. Happy hacking! +++ # How to try how the experimental container support for Vdsm. Vdsm is gaining *experimental* support to run containers alongside VMs. Vdsm had since long time the ability to manage VMs which run containers, and recently gained support for [atomic guests](http://www.projectatomic.io/blog/2015/01/running-ovirt-guest-agent-as-privileged-container/). With the new support we are describing, you will be able to manage containers with the same, proven infrastructure that let you manage VMs. This feature is currently being developed and it is still not merged in the Vdsm codebase, so some extra work is needed if you want to try it out. We aiming to merge it in the oVirt 4.1.z cycle. ## What works, aka what to expect The basic features are expected to work: 1. Run any docker image on the public docker registry 2. Make the container accessible from the outside (aka not just from localhost) 3. Use file-based storage for persistent volumes ## What does not yet work, aka what NOT to expect Few things are planned and currently under active development: 1. Monitoring. Engine will not get any update from the container besides "VM" status (Up, Down...) One important drawback is that you will not be told the IP of the container from Engine, you will need to connect to the Vdsm host to discover it using standard docker tools. 2. Proper network integration. Some steps still need manual intervention 3. Stability and recovery - it's pre-alpha software after all! :) ## 1. Introduction and prerequisites Trying out container support affects only the host and the Vdsm. Besides add few custom properties (totally safe and supported since early 3.z), there are zero changes required to the DB and to Engine. Nevertheless, we recommend to dedicate one oVirt 4.y environment, or at least one 4.y host, to try out the container feature. To get started, first thing you need is to setup a vanilla oVirt 4.y installation. We will need to make changes to the Vdsm and to the Vdsm host, so hosted engine and/or oVirt node may add extra complexity, better to avoid them at the moment. The reminder of this tutorial assumes you are using two hosts, one for Vdsm (will be changed) and one for Engine (will require zero changes); furthermore, we assume the Vdsm host is running on CentOS 7.y. We require: - one test host for Vdsm. This host need to have one NIC dedicated to containers. We will use the [docker macvlan driver](https://raesene.github.io/blog/2016/07/23/Docker-MacVLAN/), so this NIC *must not be* part of one bridge. - docker >= 1.12 - oVirt >= 4.0.5 (Vdsm >= 4.18.15) - CentOS >= 7.2 Docker >= 1.12 is avaialable for download [here](https://docs.docker.com/engine/installation/linux/centos/) Caveats: 1. docker from official rpms conflicts con docker from CentOS, and has a different package name: docker-engine vs docker. Please note that the kubernetes package from CentOS, for example, require 'docker', not 'docker-engine'. 2. you may want to replace the default service file [with this one](https://github.com/mojaves/convirt/blob/master/patches/centos72/system… and to use this [sysconfig file](https://github.com/mojaves/convirt/blob/master/patches/centos72/syste…. Here I'm just adding the storage options docker requires, much like the CentOS docker is configured. Configuring docker like this can save you some troubleshooting, especially if you had docker from CentOS installed on the testing box. ## 2. Patch Vdsm to support containers You need to patch and rebuild Vdsm. Fetch [this patch](https://github.com/mojaves/convirt/blob/master/patches/vdsm/4.18.15.… and apply it against Vdsm 4.18.15.1. Vdsm 4.18.15.{1,2,...} are supported as well. Rebuild Vdsm and reinstall on your box. [centos 7.2 packages are here](https://github.com/mojaves/convirt/tree/master/rpms/centos72) Make sure you install the Vdsm command line client (vdsm-cli) Restart *both* Vdsm and Supervdsm, make sure Engine still works flawlessly with patched Vdsm. This ensure that no regression is introduced, and that your environment can run VMs just as before. Now we can proceed adding the container support. start docker: # systemctl start docker-engine (optional) # systemctl enable docker-engine Restart Vdsm again # systemctl restart vdsm Now we can check if Vdsm detects docker, so you can use it: still on the same Vdsm host, run $ vdsClient -s 0 getVdsCaps | grep containers containers = ['docker', 'fake'] This means this Vdsm can run containers using 'docker' and 'fake' runtimes. Ignore the 'fake' runtime; as the name suggests, is a test driver, kinda like /dev/null. Now we need to make sure the host network configuration is fine. ### 2.1. Configure the docker network for Vdsm PLEASE NOTE that the suggested network configuration assumes that * you have one network, `ovirtmgmt` (the default one) you use for everything * you have one Vdsm host with at least two NICs, one bound to the `ovirtmgmt` network, and one spare _This step is not yet automated by Vdsm_, so manual action is needed; Vdsm will take care of this automatically in the future. You can use [this helper script](https://github.com/mojaves/convirt/blob/master/patches/vdsm/cont-se…, which reuses the Vdsm libraries. Make sure you have patched Vdsm to support container before to use it. Let's review what the script needs: # ./cont-setup-net -h usage: cont-setup-net [-h] [--name [NAME]] [--bridge [BRIDGE]] [--interface [INTERFACE]] [--gateway [GATEWAY]] [--subnet [SUBNET]] [--mask [MASK]] optional arguments: -h, --help show this help message and exit --name [NAME] network name to use --bridge [BRIDGE] bridge to use --interface [INTERFACE] interface to use --gateway [GATEWAY] address of the gateway --subnet [SUBNET] subnet to use --mask [MASK] netmask to use So we need to feed --name, --interface, --gateway, --subnet and optionally --mask (default, /24, is often fine). For my case the default mask was indeed fine, so I used the script like this: # ./cont-setup-net --name ovirtmgmt --interface enp3s0 --gateway 192.168.1.1 --subnet 192.168.1.0 Thhis is the output I got: DEBUG:virt.containers.runtime:configuring runtime 'docker' DEBUG:virt.containers.command:* calling ['/bin/docker', 'network', 'inspect', 'ovirtmgmt'] Error: No such network: ovirtmgmt DEBUG:virt.containers.command:* called ['/bin/docker', 'network', 'inspect', 'ovirtmgmt'] DEBUG:virt.containers.runtime.Docker:config: cannot load 'ovirtmgmt', ignored DEBUG:virt.containers.command:* calling ['/bin/docker', 'network', 'create', '-d', 'macvlan', '--subnet=192.168.1.0/24', '--gateway=192.168.1.1', '--ip-range=192.168.1.0/24', '-o', 'parent=enp3s0', 'ovirtmgmt'] DEBUG:virt.containers.command:* called ['/bin/docker', 'network', 'create', '-d', 'macvlan', '--subnet=192.168.1.0/24', '--gateway=192.168.1.1', '--ip-range=192.168.1.0/24', '-o', 'parent=enp3s0', 'ovirtmgmt'] DEBUG:virt.containers.runtime:configuring runtime 'fake' You can clearly see what the script did, and why it needed the root privileges. Let's deoublecheck using the docker tools: # docker network ls NETWORK ID NAME DRIVER SCOPE 91535f3425a8 bridge bridge local d42f7e5561b5 host host local 621ab6dd49b1 none null local f4b88e4a67eb ovirtmgmt macvlan local # docker network inspect ovirtmgmt [ { "Name": "ovirtmgmt", "Id": "f4b88e4a67ebb7886ec74073333d613b1893272530cae4d407c95ab587c5fea1", "Scope": "local", "Driver": "macvlan", "EnableIPv6": false, "IPAM": { "Driver": "default", "Options": {}, "Config": [ { "Subnet": "192.168.1.0/24", "IPRange": "192.168.1.0/24", "Gateway": "192.168.1.1" } ] }, "Internal": false, "Containers": {}, "Options": { "parent": "enp3s0" }, "Labels": {} } ] Looks good! the host configuration is completed. Let's move to the Engine side. ## 3. Configure Engine As mentioned above, we need now to configure Engine. This boils down to: Add a few custom properties for VMs: In case you were already using custom properties, you need to amend the command line to not overwrite your existing ones. # engine-config -s UserDefinedVMProperties='volumeMap=^[a-zA-Z_-]+:[a-zA-Z_-]+$;containerImage=^[a-zA-Z]+(://|)[a-zA-Z]+$;containerType=^(docker|rkt)$' --cver=4.0 It is worth stressing that while the variables are container-specific, the VM custom properties are totally inuntrusive and old concept in oVirt, so this step is totally safe. Now restart Engine to let it use the new variables: # systemctl restart ovirt-engine The next step is actually configure one "container VM" and run it. ## 4. Create the container "VM" To finally run a container, you start creating a VM much like you always did, with few changes 1. most of the hardware-related configuration isn't relevant for container "VMs", besides cpu share and memory limits; this will be better documented in the future; unneeded configuration will just be ignored 2. You need to set some custom properties for your container "VM". Those are actually needed to enable the container flow, and they are documented in the next section. You *need* to set at least `containerType` and `containerImage`. ### 4.2. Custom variables for container support The container support needs some custom properties to be properly configured: 1. `containerImage` (*needed* to enable the container system). Just select the target image you want to run. You can use the standard syntax of the container runtimes. 2. `containerType` (*needed* to enable the container system). Selects the container runtime you want to use. All the available options are always showed. Please note that unavailable container options are not yet grayed out. If you *do not* have rkt support on your host, you still can select it, but it won't work. 3. `volumeMap` key:value like. You can map one "VM" disk (key) to one container volume (value), to have persistent storage. Only file-based storage is supported. Example configuration: `containerImage = redis` `containerType = docker` `volumeMap = vda:data` (this may not be needed, and the volume label is just for illustrative purposes) ### 4.2. A little bit of extra work: preload the images on the Vdsm host This step is not needed by the flow, and will be handled by oVirt in the future. The issue is how the container image are handled. They are stored by the container management system (rkt, docker) on each host, and they are not pre-downloaded. To shorten the duration of the first boot, you are advised to pre-download the image(s) you want to run. For example ## on the Vdsm host you want to use with containers # docker pull redis ## 5. Run the container "VM" You are now all set to run your "VM" using oVirt Engine, just like any existing VM. Some actions doesn't make sense for a container "VM", like live migration. Engine won't stop you to try to do those actions, but they will fail gracefully using the standard errors. ## 6. Next steps What to expect from this project in the future? For the integration with Vdsm, we want to fix the existing known issues, most notably: * add proper monitoring/reporting of the container health * ensure proper integration of the container image store with oVirt storage management * streamline the network configuration What is explicitely excluded yet is any Engine change. This is a Vdsm-only change at the moment, so fixing the following is currently unplanned: * First and foremost, Engine will not distinguish between real VMs and container VMs. Actions unavailable to container will not be hidden from UI. Same for monitoring and configuration data, which will be ignored. * Engine is NOT aware of the volumes one container can use. You must inspect and do the mapping manually. * Engine is NOT aware of the available container runtimes. You must select it carefully Proper integration with Engine may be added in the future once this feature exits from the experimental/provisional stage. Thanks for reading, make sure to share your thoughts on the oVirt mailing lists! +++ [1] we keep calling it that way _only_ internally, because it's a short name we are used to. After the merge/once we release it, we will use a different name, like "vdsm-containers" or something like it. -- Francesco Romani Red Hat Engineering Virtualization R & D Phone: 8261328 IRC: fromani

3 2

Empty cgroup files on centos 7.3 host
by Florian Schmid 18 Dec '17

18 Dec '17

Hi, I wanted to monitor disk IO and R/W on all of our oVirt centos 7.3 hypervisor hosts, but it looks like that all those files are empty. For example: ls -al /sys/fs/cgroup/blkio/machine.slice/machine-qemu\\x2d14\\x2dHostedEngine.scope/ insgesamt 0 drwxr-xr-x. 2 root root 0 30. Mai 10:09 . drwxr-xr-x. 16 root root 0 26. Jun 09:25 .. -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_merged -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_merged_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_queued -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_queued_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_service_bytes -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_service_bytes_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_serviced -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_serviced_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_service_time -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_service_time_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_wait_time -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.io_wait_time_recursive -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.leaf_weight -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.leaf_weight_device --w-------. 1 root root 0 30. Mai 10:09 blkio.reset_stats -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.sectors -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.sectors_recursive -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.io_service_bytes -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.io_serviced -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.read_bps_device -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.read_iops_device -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.write_bps_device -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.throttle.write_iops_device -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.time -r--r--r--. 1 root root 0 30. Mai 10:09 blkio.time_recursive -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.weight -rw-r--r--. 1 root root 0 30. Mai 10:09 blkio.weight_device -rw-r--r--. 1 root root 0 30. Mai 10:09 cgroup.clone_children --w--w--w-. 1 root root 0 30. Mai 10:09 cgroup.event_control -rw-r--r--. 1 root root 0 30. Mai 10:09 cgroup.procs -rw-r--r--. 1 root root 0 30. Mai 10:09 notify_on_release -rw-r--r--. 1 root root 0 30. Mai 10:09 tasks I thought, I can get my needed values from there, but all files are empty. Looking at this post: http://lists.ovirt.org/pipermail/users/2017-January/079011.html this should work. Is this normal on centos 7.3 with oVirt installed? How can I get those values, without monitoring all VMs directly? oVirt Version we use: 4.1.1.8-1.el7.centos BR Florian

3 12

Re: [ovirt-users] iSCSI domain on 4kn drives
by Martijn Grendelman 13 Nov '17

13 Nov '17

--------------DE48748F7C67E1FABE46EEAF Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Op 7-8-2016 om 8:19 schreef Yaniv Kaul: > > On Fri, Aug 5, 2016 at 4:42 PM, Martijn Grendelman > <martijn.grendelman(a)isaac.nl <mailto:martijn.grendelman@isaac.nl>> wrote: > > Op 4-8-2016 om 18:36 schreef Yaniv Kaul: >> On Thu, Aug 4, 2016 at 11:49 AM, Martijn Grendelman >> <martijn.grendelman(a)isaac.nl >> <mailto:martijn.grendelman@isaac.nl>> wrote: >> >> Hi, >> >> Does oVirt support iSCSI storage domains on target LUNs using >> a block >> size of 4k? >> >> >> No, we do not - not if it exposes 4K blocks. >> Y. > > Is this on the roadmap? > > > Not in the short term roadmap. > Of course, patches are welcome. It's mainly in VDSM. > I wonder if it'll work in NFS. > Y. I don't think I ever replied to this, but I can confirm that in RHEV 3.6 it works with NFS. Best regards, Martijn. --------------DE48748F7C67E1FABE46EEAF Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=utf-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> Op 7-8-2016 om 8:19 schreef Yaniv Kaul:<br> <blockquote cite="mid:280cfbd3a16ad1b76cc7de56bda88f45,CAJgorsbJHLV1e3fH4b4AR3GBp1oi44fDhfeii+PQ1iY1RwUStw@mail.gmail.com" type="cite"> <div dir="ltr"><br> <div class="gmail_extra">On Fri, Aug 5, 2016 at 4:42 PM, Martijn Grendelman <span dir="ltr"><<a moz-do-not-send="true" href="mailto:martijn.grendelman@isaac.nl" target="_blank">martijn.grendelman(a)isaac.nl</a>></span> wrote:<br> <div class="gmail_quote"> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div bgcolor="#FFFFFF" text="#000000"> Op 4-8-2016 om 18:36 schreef Yaniv Kaul:<br> <blockquote type="cite"> <div dir="ltr"> <div class="gmail_extra"> <div class="gmail_quote"><span class="">On Thu, Aug 4, 2016 at 11:49 AM, Martijn Grendelman <span dir="ltr"><<a moz-do-not-send="true" href="mailto:martijn.grendelman@isaac.nl" target="_blank">martijn.grendelman(a)isaac.nl</a>></span> wrote:<br> </span><span class=""> <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br> <br> Does oVirt support iSCSI storage domains on target LUNs using a block<br> size of 4k?<br> </blockquote> <div><br> </div> </span><span class=""> <div>No, we do not - not if it exposes 4K blocks.</div> <div>Y.</div> </span></div> </div> </div> </blockquote> <br> Is this on the roadmap?<br> </div> </blockquote> <div><br> </div> <div>Not in the short term roadmap.</div> <div>Of course, patches are welcome. It's mainly in VDSM.</div> <div>I wonder if it'll work in NFS.</div> <div>Y.</div> </div> </div> </div> </blockquote> <br> I don't think I ever replied to this, but I can confirm that in RHEV 3.6 it works with NFS.<br> <br> Best regards,<br> Martijn.<br> </body> </html> --------------DE48748F7C67E1FABE46EEAF--

4 4

Re: [ovirt-users] How to import a qcow2 disk into ovirt
by Martín Follonier 04 Oct '17

04 Oct '17

Hi, I've done all the recommendations in this thread, and I'm still getting the "Paused by System" message just after the transfer starts. Honestly I don't know were else to look at, cause I don't find any log entry or packet capture that give me a hint about what is happening. I'll appreciate any help! Thank you in advance! Regards Martin On Thu, Sep 1, 2016 at 5:01 PM, Amit Aviram <aavi...(a)redhat.com> wrote: > You can do both, > Through the database, the table is "vdc_options". change "option_value" > where "option_name" = 'ImageProxyAddress' . > > On Thu, Sep 1, 2016 at 4:56 PM, Gianluca Cecchi <gianluca.cec...(a)gmail.com > > wrote: > >> On Thu, Sep 1, 2016 at 3:53 PM, Amit Aviram <aavi...(a)redhat.com> wrote: >> >>> You can just replace this value in the DB and change it to the right >>> FQDN, it is a config value named "ImageProxyAddress". replace "localhost" >>> with the right address (notice that the port is there too). >>> >>> If this will keep happen after users will have the latest version, we >>> will have to open a bug and fix whatever causes the URL to be "localhost". >>> >>> >> Do you mean through "engine-config" or directly into database? >> In this second case which is the table involved? >> >> Gianluca >> > > [root@ractorshe bin]# systemctl stop ovirt-imageio-proxy engine=# select * from vdc_options where option_name='ImageProxyAddress'; option_id | option_name | option_value | version -----------+-------------------+-----------------+--------- 950 | ImageProxyAddress | localhost:54323 | general (1 row) engine=# update vdc_options set option_value='ractorshe.mydomain:54323' where option_name='ImageProxyAddress'; UPDATE 1 engine=# select * from vdc_options where option_name='ImageProxyAddress'; option_id | option_name | option_value | version -----------+-------------------+--------------------------------------+--------- 950 | ImageProxyAddress | ractorshe.mydomain:54323 | general (1 row) engine=# engine=# select * from vdc_options where option_name='ImageProxyAddress'; option_id | option_name | option_value | version -----------+-------------------+--------------------------------------+--------- 950 | ImageProxyAddress | ractorshe.mydomain:54323 | general (1 row) systemctl stop ovirt-engine (otherwise it remained localhost) systemctl start ovirt-engine systemctl start ovirt-imageio-proxy Now transfer is ok. I tried a qcow2 disck configured as 40Gb but containing about 1.6Gb of data. I'm going to connect it to a VM and see if all is ok also from a contents point of view. Gianluca _______________________________________________ Users mailing listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users

5 6

Help get oVirt's add featured on Stack Overflow
by Allon Mureinik 27 Jul '17

27 Jul '17

Hi lists, Thanks to Eldan, we have a community ad for oVirt proposed on Stack Overflow [1]. Now, we need some upvotes (current threshold is 6) before SO starts serving it. Have a SO account? Want to help? Just drop by and upvote. Have a great weekend, Allon [1] https://meta.stackoverflow.com/a/351453/2422776

3 4

ovirt-hosted-engine state transition messages
by Jim Kusznir 23 Jul '17

23 Jul '17

Hello: I find that I often get random-seeming messages. A lot of them mention "ReintializeFSM", but I also get engine down, engine start, etc. messages. All the time, nothing appears to be happening on the cluster, and I rarely can find anything wrong or any trigger/cause. Is this normal? What causes this (beyond obvious hardware issues / hosts rebooting)? Most of the time when I get these, my cluster is going along smoothly, and nothing (not even administrative access) is interrupted. Could ISP issues cause these messages to be generated? Thanks! --Jim

5 7

ISCSI storage with multiple nics on same subnet disabled on host activation
by Nelson Lameiras 17 Jul '17

17 Jul '17

------=_Part_57353689_1234561196.1496840388734 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello,=20 In our oVirt hosts, we are using DELL equallogic SAN with each server conne= cting to SAN via 2 physical interfaces. Since both interfaces share the sam= e network (Equalogic limitation) we must patch the linux kernel to to allow= iSCSI multipath with multiple NICs in the same subnet with sysctl :=20 ---------------------------------------------------------------------------= -----------------=20 net.ipv4.conf.p2p1.arp_ignore=3D1 net.ipv4.conf.p2p1.arp_announce=3D2 net.ipv4.conf.p2p1.rp_filter=3D2 net.ipv4.conf.p2p2.arp_ignore=3D1 net.ipv4.conf.p2p2.arp_announce=3D2 net.ipv4.conf.p2p2.rp_filter=3D2=20 ---------------------------------------------------------------------------= -----------------=20 This works great in most setups, but for a strange reason, on some of our s= etups, the sysctl configuration is updated by VDSM when activating a host a= nd the second interface stops working immeadiatly :=20 ---------------------------------------------------------------------------= -----------------=20 vdsm.log=20 2017-06-07 11:51:51,063+0200 INFO (jsonrpc/5) [storage.ISCSI] Setting stri= ct mode rp_filter for device 'p2p2'. (iscsi:602) 2017-06-07 11:51:51,064+0200 ERROR (jsonrpc/5) [storage.HSM] Could not conn= ect to storageServer (hsm:2392) Traceback (most recent call last): File "/usr/share/vdsm/storage/hsm.py", line 2389, in connectStorageServer conObj.connect() File "/usr/share/vdsm/storage/storageServer.py", line 433, in connect iscsi.addIscsiNode(self._iface, self._target, self._cred) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsi.py", line 232, = in addIscsiNode iscsiadm.node_login(iface.name, target.address, target.iqn) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsiadm.py", line 33= 7, in node_login raise IscsiNodeError(rc, out, err)=20 ---------------------------------------------------------------------------= -----------------=20 "strict mode" is enforced for second interface, and it no longuer works...= =20 Which means - at least - that there is no redundancy in case of hardware fa= illure and this is not acceptable for our production needs.=20 What is really strange is that we have another "twin" site on another geogr= aphic region with simillar hardware configuration and same oVirt installati= on, and this problem does not happen.=20 What can be the root cause of this behaviour? How can I correct it?=20 our setup:=20 hostedEngine : Centor 7.3, ovirt 4.1.2=20 3 physical nodes centos 7.3, ovirt 4.1.2=20 SAN DELL Equalogic=20 cordialement, regards,=20 =09Nelson LAMEIRAS=20 Ing=C3=A9nieur Syst=C3=A8mes et R=C3=A9seaux / Systems and Networks enginee= r=20 Tel: +33 5 32 09 09 70=20 nelson.lameiras(a)lyra-network.com=20 www.lyra-network.com | www.payzen.eu=20 =09 =09 =09 Lyra Network, 109 rue de l'innovation, 31670 Lab=C3=A8ge, FRANCE=20 ------=_Part_57353689_1234561196.1496840388734 Content-Type: multipart/related; boundary="----=_Part_57353690_157338222.1496840388734" ------=_Part_57353690_157338222.1496840388734 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><body><div style=3D"font-family: arial, helvetica, sans-serif; font-s= ize: 12pt; color: #000000"><div>Hello,<br></div><div><br data-mce-bogus=3D"= 1"></div><div>In our oVirt hosts, we are using DELL equallogic SAN with eac= h server connecting to SAN via 2 physical interfaces. Since both interfaces= share the same network (Equalogic limitation) we must patch the linux kern= el to to allow iSCSI multipath with multiple NICs in the same subnet with s= ysctl :<br data-mce-bogus=3D"1"></div><div><br data-mce-bogus=3D"1"></div><= div>-----------------------------------------------------------------------= ---------------------<br data-mce-bogus=3D"1"></div><div><pre>net.ipv4.conf= .p2p1.arp_ignore=3D1 net.ipv4.conf.p2p1.arp_announce=3D2 net.ipv4.conf.p2p1.rp_filter=3D2 net.ipv4.conf.p2p2.arp_ignore=3D1 net.ipv4.conf.p2p2.arp_announce=3D2 net.ipv4.conf.p2p2.rp_filter=3D2<br><br></pre><p>--------------------------= ------------------------------------------------------------------<br><br><= /p><p>This works great in most setups, but for a strange reason, on some of= our setups, the sysctl configuration is updated by VDSM when activating a = host and the second interface stops working immeadiatly :</p><div>---------= ---------------------------------------------------------------------------= --------</div><div>vdsm.log<br data-mce-bogus=3D"1"></div><div><pre id=3D"p= review"><code>2017-06-07 11:51:51,063+0200 INFO (jsonrpc/5) [storage.ISCSI= ] Setting strict mode rp_filter for device 'p2p2'. (iscsi:602) 2017-06-07 11:51:51,064+0200 ERROR (jsonrpc/5) [storage.HSM] Could not conn= ect to storageServer (hsm:2392) Traceback (most recent call last): File "/usr/share/vdsm/storage/hsm.py", line 2389, in connectStorageServer conObj.connect() File "/usr/share/vdsm/storage/storageServer.py", line 433, in connect iscsi.addIscsiNode(self._iface, self._target, self._cred) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsi.py", line 232, = in addIscsiNode iscsiadm.node_login(iface.name, target.address, target.iqn) File "/usr/lib/python2.7/site-packages/vdsm/storage/iscsiadm.py", line 33= 7, in node_login raise IscsiNodeError(rc, out, err)</code></pre><pre><br><br></pre><p st= yle=3D"margin: 0px;" data-mce-style=3D"margin: 0px;">----------------------= ----------------------------------------------------------------------</p><= /div></div><div><div><br data-mce-bogus=3D"1"></div><div>"strict mode" is e= nforced for second interface, and it no longuer works...</div><div>Which me= ans - at least - that there is no redundancy in case of hardware faillure a= nd this is not acceptable for our production needs.<br data-mce-bogus=3D"1"= ></div><div><br data-mce-bogus=3D"1"></div><div>What is really strange is t= hat we have another "twin" site on another geographic region with simillar = hardware configuration and same oVirt installation, and this problem does n= ot happen.</div><div><br data-mce-bogus=3D"1"></div><div>What can be the ro= ot cause of this behaviour? How can I correct it?<br data-mce-bogus=3D"1"><= /div><div><br data-mce-bogus=3D"1"></div><div>our setup:</div><div>hostedEn= gine : Centor 7.3, ovirt 4.1.2<br></div><div>3 physical nodes centos 7.3, o= virt 4.1.2<br data-mce-bogus=3D"1"></div><div>SAN DELL Equalogic<br data-mc= e-bogus=3D"1"></div></div><div><br data-mce-bogus=3D"1"></div><div data-mar= ker=3D"__SIG_PRE__"><div>cordialement, regards,</div><div><br data-mce-bogu= s=3D"1"></div><table style=3D"margin: 0px; table-layout: fixed; border: non= e; width: 345pt; padding: 0px;" data-mce-style=3D"margin: 0px; table-layout= : fixed; border: none; width: 345pt; padding: 0px;" width=3D"460" cellspaci= ng=3D"0" cellpadding=3D"0" border=3D"0"><tbody><tr><td style=3D"margin: 0; = font-size: 11px; font-family: Arial,sans-serif; color: #2b3c7a; line-height= : 16px; width: 86.25pt; text-align: left;" data-mce-style=3D"margin: 0; fon= t-size: 11px; font-family: Arial,sans-serif; color: #2b3c7a; line-height: 1= 6px; width: 86.25pt; text-align: left;" width=3D"115" valign=3D"top"><a hre= f=3D"https://www.lyra-network.com/" style=3D"border: none; text-decoration:= none; width: 100%; display: block; clear: both;" data-mce-href=3D"https://= www.lyra-network.com/" data-mce-style=3D"border: none; text-decoration: non= e; width: 100%; display: block; clear: both;"><img src=3D"cid:6fa8666d679e1= 8cab5e566228d0ca3519aabec27@zimbra" alt=3D"" data-mce-src=3D"/home/admin@ly= ra-network.com/corporate-documents/element-signature_logo_lyra_115x94.jpg" = doc=3D"corporate-documents/element-signature_logo_lyra_115x94.jpg" height= =3D"94" width=3D"115" border=3D"0"></a><br data-mce-bogus=3D"1"></td><td st= yle=3D"margin: 0; font-size: 11px; font-family: Arial,sans-serif; color: #2= b3c7a; line-height: 16px; width: 258.75pt;" data-mce-style=3D"margin: 0; fo= nt-size: 11px; font-family: Arial,sans-serif; color: #2b3c7a; line-height: = 16px; width: 258.75pt;" width=3D"345" valign=3D"top"><table style=3D"margin= : 0; width: 258.75pt; table-layout: fixed; border: none;" data-mce-style=3D= "margin: 0; width: 258.75pt; table-layout: fixed; border: none;" width=3D"3= 45" cellspacing=3D"0" cellpadding=3D"0" border=3D"0"><tbody><tr><td style= =3D"font-size: 16px; font-family: Arial,sans-serif; color: #2b3c7a; line-he= ight: 18px; font-weight: bold;" data-mce-style=3D"font-size: 16px; font-fam= ily: Arial,sans-serif; color: #2b3c7a; line-height: 18px; font-weight: bold= ;">Nelson LAMEIRAS</td></tr><tr><td style=3D"font-family: Arial,sans-serif;= color: #2b3c7a; font-size: 11px; line-height: 16px;" data-mce-style=3D"fon= t-family: Arial,sans-serif; color: #2b3c7a; font-size: 11px; line-height: 1= 6px;">Ing=C3=A9nieur Syst=C3=A8mes et R=C3=A9seaux<span style=3D"font-famil= y: Arial,sans-serif; color: #337ab7; font-size: 11px;" data-mce-style=3D"fo= nt-family: Arial,sans-serif; color: #337ab7; font-size: 11px;"> / Systems a= nd Networks engineer</span></td></tr><tr><td style=3D"line-height: 16px; fo= nt-family: 'Arial',sans-serif; color: #2b3c7a; font-size: 11px;" data-mce-s= tyle=3D"line-height: 16px; font-family: 'Arial',sans-serif; color: #2b3c7a;= font-size: 11px;"><span style=3D"font-family: Arial,sans-serif; color: #2b= 3c7a; font-size: 11px;" data-mce-style=3D"font-family: Arial,sans-serif; co= lor: #2b3c7a; font-size: 11px;">Tel: +33 5 32 09 09 70</span></td></tr><tr>= <td style=3D"line-height: 16px; font-family: 'Arial',sans-serif; color: #2b= 3c7a; font-size: 11px;" data-mce-style=3D"line-height: 16px; font-family: '= Arial',sans-serif; color: #2b3c7a; font-size: 11px;"><a href=3D"mailto:nels= on.lameiras(a)lyra-network.com" style=3D"font-size: 11px; font-family: Arial,= sans-serif; line-height: 16px; text-decoration: none;" data-mce-href=3D"mai= lto:nelson.lameiras@lyra-network.com" data-mce-style=3D"font-size: 11px; fo= nt-family: Arial,sans-serif; line-height: 16px; text-decoration: none;">nel= son.lameiras(a)lyra-network.com</a><br data-mce-bogus=3D"1"></td></tr><tr><td= style=3D"line-height: 16px; font-family: 'Arial',sans-serif; color: #2b3c7= a; font-size: 11px;" data-mce-style=3D"line-height: 16px; font-family: 'Ari= al',sans-serif; color: #2b3c7a; font-size: 11px;"><a href=3D"https://www.ly= ra-network.com/" style=3D"font-size: 11px; font-family: Arial,sans-serif; l= ine-height: 16px; border: none; text-decoration: none;" data-mce-href=3D"ht= tps://www.lyra-network.com/" data-mce-style=3D"font-size: 11px; font-family= : Arial,sans-serif; line-height: 16px; border: none; text-decoration: none;= ">www.lyra-network.com</a> <a href=3D"https://payzen.eu" style=3D"font-size= : 11px; font-family: Arial,sans-serif; line-height: 16px; border: none; tex= t-decoration: none;" data-mce-href=3D"https://payzen.eu" data-mce-style=3D"= font-size: 11px; font-family: Arial,sans-serif; line-height: 16px; border: = none; text-decoration: none;"> | www.payzen.eu</a><br data-mce-bogus=3D"1">= </td></tr></tbody></table></td></tr></tbody></table><table style=3D"margin:= 0; table-layout: fixed; border: none; width: 345pt;" data-mce-style=3D"mar= gin: 0; table-layout: fixed; border: none; width: 345pt;" data-mce-selected= =3D"1" width=3D"460" cellspacing=3D"0" cellpadding=3D"0"><tbody><tr><td sty= le=3D"margin: 0; font-size: 11px; font-family: Arial,sans-serif; color: #2b= 3c7a; line-height: 16px; width: 24pt; text-align: left;" data-mce-style=3D"= margin: 0; font-size: 11px; font-family: Arial,sans-serif; color: #2b3c7a; = line-height: 16px; width: 24pt; text-align: left;" width=3D"32" valign=3D"t= op"><a href=3D"https://www.youtube.com/channel/UCrVl1CO_Jlu3KbiRH-tQ_vA" st= yle=3D"border: none; text-decoration: none; margin: 0; float: left; display= : inline-block; width: 32px;" data-mce-href=3D"https://www.youtube.com/chan= nel/UCrVl1CO_Jlu3KbiRH-tQ_vA" data-mce-style=3D"border: none; text-decorati= on: none; margin: 0; float: left; display: inline-block; width: 32px;"><img= src=3D"cid:2806a89cb9fbba6f879bd3fd54a93b515defd6d2@zimbra" alt=3D"" data-= mce-src=3D"/home/admin(a)lyra-network.com/corporate-documents/element-signatu= re_logo_YouTube_32x28.jpg" doc=3D"corporate-documents/element-signature_log= o_YouTube_32x28.jpg" height=3D"28" width=3D"32" border=3D"0"></a><br data-m= ce-bogus=3D"1"></td><td style=3D"margin: 0; font-size: 11px; font-family: A= rial,sans-serif; color: #2b3c7a; line-height: 16px; width: 30.75pt; text-al= ign: left;" data-mce-style=3D"margin: 0; font-size: 11px; font-family: Aria= l,sans-serif; color: #2b3c7a; line-height: 16px; width: 30.75pt; text-align= : left;" width=3D"41" valign=3D"top"><a href=3D"https://www.linkedin.com/co= mpany/lyra-network_2" style=3D"border: none; text-decoration: none; margin:= 0; float: left; display: inline-block; width: 41px;" data-mce-href=3D"http= s://www.linkedin.com/company/lyra-network_2" data-mce-style=3D"border: none= ; text-decoration: none; margin: 0; float: left; display: inline-block; wid= th: 41px;"><img src=3D"cid:878634ba055bb6ae851a7ef4540f754afa3ff86c@zimbra"= data-mce-src=3D"/home/admin(a)lyra-network.com/corporate-documents/element-s= ignature_logo_LinkedIn_41x28.jpg" doc=3D"corporate-documents/element-signat= ure_logo_LinkedIn_41x28.jpg" height=3D"28" width=3D"41" border=3D"0"></a><b= r data-mce-bogus=3D"1"></td><td style=3D"margin: 0; font-size: 11px; font-f= amily: Arial,sans-serif; color: #2b3c7a; line-height: 16px; width: 31.5pt; = text-align: left;" data-mce-style=3D"margin: 0; font-size: 11px; font-famil= y: Arial,sans-serif; color: #2b3c7a; line-height: 16px; width: 31.5pt; text= -align: left;" width=3D"42" valign=3D"top"><a href=3D"https://twitter.com/L= yraNetwork" style=3D"border: none; text-decoration: none; margin: 0; float:= left; display: inline-block; width: 42px;" data-mce-href=3D"https://twitte= r.com/LyraNetwork" data-mce-style=3D"border: none; text-decoration: none; m= argin: 0; float: left; display: inline-block; width: 42px;"><img src=3D"cid= :18a767bbdad6a1133fc4152b03ea78228ce25a14@zimbra" alt=3D"" data-mce-src=3D"= /home/admin@lyra-network.com/corporate-documents/element-signature_logo_Twi= tter_42x28.jpg" doc=3D"corporate-documents/element-signature_logo_Twitter_4= 2x28.jpg" height=3D"28" width=3D"42" border=3D"0"></a><br data-mce-bogus=3D= "1"></td><td style=3D"margin: 0; font-size: 11px; font-family: Arial,sans-s= erif; color: #2b3c7a; line-height: 16px; width: 258.75pt; text-align: left;= " data-mce-style=3D"margin: 0; font-size: 11px; font-family: Arial,sans-ser= if; color: #2b3c7a; line-height: 16px; width: 258.75pt; text-align: left;" = width=3D"345" valign=3D"top"><a href=3D"https://payzen.eu" style=3D"border:= none; text-decoration: none; margin: 0; float: left; display: inline-block= ; width: 61px;" data-mce-href=3D"https://payzen.eu" data-mce-style=3D"borde= r: none; text-decoration: none; margin: 0; float: left; display: inline-blo= ck; width: 61px;"><img src=3D"cid:d3fc119a0aa72bf985c19ca559c993b5b4b54ca3@= zimbra" alt=3D"" data-mce-src=3D"/home/admin(a)lyra-network.com/corporate-doc= uments/element-signature_payzen_61x28.jpg" doc=3D"corporate-documents/eleme= nt-signature_payzen_61x28.jpg" height=3D"28" width=3D"61" border=3D"0"></a>= <br data-mce-bogus=3D"1"></td></tr></tbody></table><table style=3D"margin: = 0; table-layout: fixed; border: none; width: 345pt;" data-mce-style=3D"marg= in: 0; table-layout: fixed; border: none; width: 345pt;" width=3D"460" cell= spacing=3D"0" cellpadding=3D"0"><tbody><tr><td><hr style=3D"background: #29= 3b79 none repeat scroll 0% 0%; width: 100%; height: 4px; color: #293b79; ma= rgin: 0px;" data-mce-style=3D"background: #293b79 none repeat scroll 0% 0%;= width: 100%; height: 4px; color: #293b79; margin: 0px;"></td></tr></tbody>= </table><table style=3D"margin: 0; table-layout: fixed; border: none; width= : 345pt;" data-mce-style=3D"margin: 0; table-layout: fixed; border: none; w= idth: 345pt;" data-mce-selected=3D"1" width=3D"460" cellspacing=3D"0" cellp= adding=3D"0"><tbody><tr><td style=3D"margin: 0; font-size: 11px; font-famil= y: Arial,sans-serif; color: #2b3c7a; line-height: 16px; width: 30.75pt; tex= t-align: left;" data-mce-style=3D"margin: 0; font-size: 11px; font-family: = Arial,sans-serif; color: #2b3c7a; line-height: 16px; width: 30.75pt; text-a= lign: left;"><div>Lyra Network, 109 rue de l'innovation, 31670 Lab=C3=A8ge,= FRANCE</div></td></tr></tbody></table><div><br></div></div></div></body></= html> ------=_Part_57353690_157338222.1496840388734 Content-Type: image/jpeg; name=element-signature_logo_lyra_115x94.jpg Content-Disposition: attachment; filename=element-signature_logo_lyra_115x94.jpg Content-Transfer-Encoding: base64 Content-ID: <6fa8666d679e18cab5e566228d0ca3519aabec27@zimbra> /9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAAA8AAD/4QOBaHR0cDov L25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENl aGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4 OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYtYzEzMiA3OS4xNTkyODQsIDIwMTYvMDQvMTktMTM6 MTM6NDAgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5 OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHht bG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InhtcC5kaWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1LTgxYmQtMTYwMTFjZjk5YWVjIiB4bXBNTTpEb2N1 bWVudElEPSJ4bXAuZGlkOkU1QUU4Nzk1OEExMzExRTZBNTFCRjVENEYyNDYxNTQ1IiB4bXBNTTpJ bnN0YW5jZUlEPSJ4bXAuaWlkOkU1QUU4Nzk0OEExMzExRTZBNTFCRjVENEYyNDYxNTQ1IiB4bXA6 Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDQyAyMDE1LjUgKFdpbmRvd3MpIj4gPHhtcE1N OkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1 LTgxYmQtMTYwMTFjZjk5YWVjIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOmRkMGY5MmM1LTc4 YWYtY2U0NS04MWJkLTE2MDExY2Y5OWFlYyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRG PiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAYE BAQFBAYFBQYJBgUGCQsIBgYICwwKCgsKCgwQDAwMDAwMEAwODxAPDgwTExQUExMcGxsbHB8fHx8f Hx8fHx8BBwcHDQwNGBAQGBoVERUaHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f Hx8fHx8fHx8fHx8fH//AABEIAF4AcwMBEQACEQEDEQH/xACdAAEBAAIDAQEAAAAAAAAAAAAACAUH AgMGBAEBAQADAQEAAAAAAAAAAAAAAAACBAUBAxAAAAUDAgAHDQcCBwAAAAAAAAECAwQRBQYSByFR E7RWFzcxQSKS0nOT03RVlQgYYXEyQiMUFYEzsVJicmODOBEAAgECAwcEAgIDAAAAAAAAAAECEQNR EwQhgbESMlIzMUGhFHEVwQUiQzT/2gAMAwEAAhEDEQA/AKpAE9b/AGQZdF3FtNpsd4l29M2DHSll iS6w0bzsp5slqJCiLvERnTuENTRQg7bckntK15vmojj1WfMP0rc+Jy/JD7Fjt+EMueJ6bbnBN4bR lkWdkt+XPtDaHSfjKnSHyUpTZkg+TcLSdFGRjyv3rUo0iqP8EoQkntZ7fcOy5VdrXGYxuccGW2+S 3nCecYq3oUWnU2RmfhGXAPPSXLcJNzVVT8kNVbnKKUHRmppW1/zBOSXVtZS4lpSjNtP8nLKhfcSR alqdPXp+ERhauKKTe38nX1WfMP0qc+Jy/JHPsWO34RPLniOqz5h+lTnxOX5IfYsdvwhlzxHVZ8w/ Spz4nL8kPsWO34Qy54jqs+YfpU58Tl+SH2LHb8IZc8R1WfMP0qc+Jy/JD7Fjt+EMueJ2bCX3MH9y LxZr7eJdxKBCkoW0/JdfaJ5mUy2a0EszL/MRHTuGGshDLTiqVf8AAst81GUGMssgAAAAE5b89s+L +zwefPDV0fhlv4FW71oo0ZRaAAAAAAAAAAAAACdtj+3DLfNXDn7I1dX4Y7uBWtdbKJGUWQAAAACc t+e2fF/Z4PPnhq6Pwy38Crd60UaMotAAAAAAAAAAAAABO2x/bhlvmrhz9kaur8Md3ArWutlEjKLI AAAABOW/PbPi/s8Hnzw1dH4Zb+BVu9aKNGUWjAKzrGk5cnEjkq/nVo5RMbk3NOnkzd/uU0fgKvdH rky5eb2I86rQz48iQAAAAAAAAABO2x/bhlvmrhz9kaur8Md3ArWutlEjKLIAAAABOW/PbPi/s8Hn zw1dH4Zb+BVu9aKNGUWjSD//AKkj+xnzJQ0V/wA2/wDkr/7D3e7GX5DiOMfzlniMTEMPIRORIJfg tOeCladCk/nNJH94raa1GcuVnpck4qqOrJdz4dr2yazKOhDjkxhlUGMszop98i/TOlD/AE/CNX+0 x23p27nIJXKRqeeyjdnLMd27sGSzLdEO4Xd4uWifqkhDDiFut0qrUSzQlNa9wz7g9bemjK44puiI yuNRTOzGs53hud+gvzsYjwMVnqNfLuqUTrEck69bitZmStPc1NJIz4hy5ZtKLpKskIzk36bDHRt2 9yMsuMw9v8ejybNBc5M5s5Rp5Uy4aEZuMJSai4dPCZFStBN6a3BLne1nMyT6Uffgu8GQ5DnysXuN mbtZx461TG1ms3kyGiLWRHXToMz8Hg7nfMQvaWMYcydTsLjcqG2BSPYnbY/twy3zVw5+yNXV+GO7 gVrXWyiRlFkAAAAAnLfntnxf2eDz54auj8Mt/Aq3etFGjKLROmdZbAxL5g/5yey6/GjREJW2wSTc M3YpoKms0F3VcY1bNpzscqKs5UnU9pad4cG3Fefw1UWXFO7x3mULkpaJJnoM6JNC10WREak/aXGK 8tLO1/ns2HorilsNTYzar/kOQWTa+5tmmBjk+W9cKGqimkrJS68RcCkoV/yC7clGMXcXrJI8Yptq OBsj5oEpTiNmSRESSuKSJJFwUJlzgoKv9f1P8Hrf9Db1wh/vbVJh6tH7lhbOvi5RBpr/AEqKMXR1 PZrYaC2x3Jgbawp+IZjBkwpkWS480603rSslkRU7qTOuiqFlUlEfepw6WosO61ODK9ufLsZ27f36 RkG/8q9OwXbe3PgKciMPp0uHHS22hpxRf60o1f4VC9DlsUrWjEHWdSghllknbY/twy3zVw5+yNXV +GO7gVrXWyiRlFkAAAAAnLfntnxf2eDz54auj8Mt/Aq3etFGjKLRxU00o6qQlR8ZkRhUGMyO7W7H 7FOvUpCSZgMrfMqERqNJeCgj41qokvtMTtxcpJL3OSdFU1n8vFimPwbrnF18O55DIXybhlw8ihZm s08RLdqVOJJC5rZqqgvSJ42V7v3MpM3dTBnyWbtBQmHFnXFpLzdXOWjW9tWo2irwPpd0pWhVPBPU R0qILTVWx+y+STuYmQj7sxHH1Kctb7NuahnMflKW2akk3J/bvGlojqtpv8ZuJP8ACR8Ag9M8dtTu YdErdfEJTCZKrY/L5JSySbrbCdKmicdWRLeWlJK/bs8skq+ElSacJ8HVppr3OZiP2RuxFK4W5xi3 LK2T5D8NmY8baHHnWySSeTSa6to1K8JTumn3gtM6PbtQzDYYqnqTtsf24Zb5q4c/ZGrq/DHdwK1r rZRIyiyAAAAATlvz2z4v7PB588NXR+GW/gVbvWijRlFoADGZHjVmyO2Ltd4YOTAcUlbjJLcbJRoO qam2pCuA+GlROFxwdV6nJRT2M+q226DbLfHt8BkmIcRtLMdlNaJQgqEVTqZ/eYjKTbqwlQ5Hb4Bp Uk4zRpUpa1FoTQ1uEaVqPg7qiUZGffDmYodSbNZ0toaTBjk02hbTaCaQSUtu/wBxCSpQkr/MXfHe d4iiP12z2h5k2XYMdxlSkuKbW0hSTW2kkIUZGVKpSkiI+8RApPEURydtltdQpDsRlxCtepKm0mR8 qdXKkZfn/NxjnMxQ+kcOk7bH9uGW+auHP2Rq6vwx3cCta62USMosgAAAAE5b89s+L+zwefPDV0fh lv4FW71oo0ZRaAAAAAAAAAAAAACdtj+3DLfNXDn7I1dX4Y7uBWtdbKJGUWQAAAACb9/3mWN4cbff WTTLUWEt1xX4UpTNeNSj+wiGtolW1LfwKt7qRuTrY226RwfSkKH1rnaz3zI4jrZ226RwfSkH1rna xmRxHWztt0jg+lIPrXO1jMjiOtnbbpHB9KQfWudrGZHEdbO23SOD6Ug+tc7WMyOJ+o3W24WtKE5F CUpR0SknCqZmH1rnazjuxW2pnbTfbPeGnHbXMamNtK0OLaVqJKjKtDELlqUNklQ7C5GfS6mOu+f4 XZpy4F0vMWHMbJKlsOrJKyJRVTUvtIdjZnJVSOuaXqfF1sbbdI4PpSEvrXO1nMyOJp7YiQxJ3oyi RHcS9Hejz3GXUcKVoVOZNKi+wyOovaxUsx3cDwtdbKNGUWgAAAADX+4GzGPZveWbtcpsuO+xGTFS iObRINCFrcIz1oWdaun3xas6qVtUSR5ztKTqeZ+lrCvely8Zj1Q9f2M8EQyEPpawr3pcvGY9UH7G eCGQh9LWFe9Ll4zHqg/YzwQyEPpawr3pcvGY9UH7GeCGQh9LWFe9Ll4zHqg/YzwQyEc2flfwxl5t 1NzuJqbUSiI1MUqX/UOr+xmn6I5LTRaaxNg4XhNuxOHIiwX3n0SXCdWb5pMyMk6eDSlPEPDU6mV5 pteg0+nVpNI8zm+xeNZfkDt7nzprEl5Dbam2FNEgibTpKmttR97jErWslCNEkTlaUnUwP0tYV70u XjMeqHp+xngiOQj023+zGPYReXrtbZsuQ+/GVFUiQbRoJC1ocMy0IQdatF3x5XtVK4qNInC0oups AVT0AAAAAAAAAAAAAAAAAAAAAAAAAAAAD//Z ------=_Part_57353690_157338222.1496840388734 Content-Type: image/jpeg; name=element-signature_logo_YouTube_32x28.jpg Content-Disposition: attachment; filename=element-signature_logo_YouTube_32x28.jpg Content-Transfer-Encoding: base64 Content-ID: <2806a89cb9fbba6f879bd3fd54a93b515defd6d2@zimbra> /9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAAA8AAD/4QOBaHR0cDov L25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENl aGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4 OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYtYzEzMiA3OS4xNTkyODQsIDIwMTYvMDQvMTktMTM6 MTM6NDAgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5 OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHht bG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InhtcC5kaWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1LTgxYmQtMTYwMTFjZjk5YWVjIiB4bXBNTTpEb2N1 bWVudElEPSJ4bXAuZGlkOjQ1REY5Njk1OEExNzExRTY5OUVDOTI1QTU3QzAwNzI0IiB4bXBNTTpJ bnN0YW5jZUlEPSJ4bXAuaWlkOjQ1REY5Njk0OEExNzExRTY5OUVDOTI1QTU3QzAwNzI0IiB4bXA6 Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDQyAyMDE1LjUgKFdpbmRvd3MpIj4gPHhtcE1N OkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1 LTgxYmQtMTYwMTFjZjk5YWVjIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOmRkMGY5MmM1LTc4 YWYtY2U0NS04MWJkLTE2MDExY2Y5OWFlYyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRG PiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAYE BAQFBAYFBQYJBgUGCQsIBgYICwwKCgsKCgwQDAwMDAwMEAwODxAPDgwTExQUExMcGxsbHB8fHx8f Hx8fHx8BBwcHDQwNGBAQGBoVERUaHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f Hx8fHx8fHx8fHx8fH//AABEIABwAIAMBEQACEQEDEQH/xAB5AAADAQEAAAAAAAAAAAAAAAAABwgF BgEAAgMBAAAAAAAAAAAAAAAAAAQCAwUBEAABBAECBAUFAAAAAAAAAAABAgMEBQARBiESEwcxUdIU CEEik1UYEQACAQMCBQUAAAAAAAAAAAAAAQIRAwQhMVFhEiITQaHBYhX/2gAMAwEAAhEDEQA/AKpw AnD5Hbg3JA35XxKqxmxUPVrJEaI862FuqkPp4IbI5lHQDNXBhFwbaW4tebqcMIvfYjURtz6eesv1 YzWz9fYh38zR7eX2+mu5lHV3VhaNOe8aTJgTHnweVXEBba1cQRkb8IeNtJbHYN9WpW+YY2T53inQ 4HfzZk6a4lmHGaiOSHl8EoT7mSOZR+gBIzUxU3Yklz+Be4+9DRl30N3dMOxjbyro9EzHW3MqupHc L7qlaoX1SsFvlHl44moPpa6XXiW113FPuu3qrT5I7dfrJLUxllMRl15hQWjqBbiuXmTqCQlQx23F rHdSqTrNFFZlDAou7vZa43xuSNaw7CPFZZhIiKbeSsqKkOuuE/aCNNHcexspW40a9Sm5bcmcH/J1 5+0rvxOenGf0o8GQ8DN7ZXxzv9vbpqrhy0huMQJCHlstocBKU+ITqANcru50ZRao9SUbLTqPvMwv DAAwAMAP/9k= ------=_Part_57353690_157338222.1496840388734 Content-Type: image/jpeg; name=element-signature_logo_LinkedIn_41x28.jpg Content-Disposition: attachment; filename=element-signature_logo_LinkedIn_41x28.jpg Content-Transfer-Encoding: base64 Content-ID: <878634ba055bb6ae851a7ef4540f754afa3ff86c@zimbra> /9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAAA8AAD/4QOBaHR0cDov L25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENl aGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4 OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYtYzEzMiA3OS4xNTkyODQsIDIwMTYvMDQvMTktMTM6 MTM6NDAgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5 OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHht bG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InhtcC5kaWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1LTgxYmQtMTYwMTFjZjk5YWVjIiB4bXBNTTpEb2N1 bWVudElEPSJ4bXAuZGlkOjY2MEYzRTFGOEExNzExRTY5QzI5OUNGQkY1MzM2MUQ1IiB4bXBNTTpJ bnN0YW5jZUlEPSJ4bXAuaWlkOjY2MEYzRTFFOEExNzExRTY5QzI5OUNGQkY1MzM2MUQ1IiB4bXA6 Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDQyAyMDE1LjUgKFdpbmRvd3MpIj4gPHhtcE1N OkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1 LTgxYmQtMTYwMTFjZjk5YWVjIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOmRkMGY5MmM1LTc4 YWYtY2U0NS04MWJkLTE2MDExY2Y5OWFlYyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRG PiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAYE BAQFBAYFBQYJBgUGCQsIBgYICwwKCgsKCgwQDAwMDAwMEAwODxAPDgwTExQUExMcGxsbHB8fHx8f Hx8fHx8BBwcHDQwNGBAQGBoVERUaHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f Hx8fHx8fHx8fHx8fH//AABEIABwAKQMBEQACEQEDEQH/xAB2AAEBAQEAAAAAAAAAAAAAAAAABggH AQEAAwEAAAAAAAAAAAAAAAAAAwQFAhAAAQMEAgICAgMBAAAAAAAAAQIDBAARBQYhEjEHMghBE1Fh IhcRAAICAQIDCQAAAAAAAAAAAAABAgMREgQxkTIhQVGhscETMxX/2gAMAwEAAhEDEQA/ANU0Bl33 zsuzQfZcmHj8tMiMKaihDLMl1psKcQkXslSUjk8mtjZ1xdeWkVbW9RDZ/ZN8wOXkYnI7LKMuL1Lq o+RddaIWkLHVwLAPCuf4NWYVwksqPkcNtd5V+ldr2ef7MwkaZmJsqK6p/uy9JdcbUBGcULpUog8i 9Q7uuKreEjquT1GsKxC2KAUBk37B2/6y72t1tB7X8dbIvf8Aq3mtvZfVzKlvUWWw7Dr+Dfy8rCt4 d153Z8ew0FNx3kohuxmUyFtAfFPyBUOBz+arwhKWE89L9SRtLmTuns4xj7LLaxYaGNE6SYojlJZ6 rhLUf19f89eyj4qa1t7ft449ziPWairGLQoBQHFvZ/onObht0jNxclFjMPNtNpZdS4Vj9aAk36gj mtDb7yMIaWiGdTbySSfqnsKbdctAFh1Fm3Bwfx8fFT/ox8GcfAyk9dfX7OapuGNzj+SiPRoJcKmG kuBRDjS2x1uAPK71DfvYzg444nUKmnk7lWcTigFAKAUAoBQCgP/Z ------=_Part_57353690_157338222.1496840388734 Content-Type: image/jpeg; name=element-signature_logo_Twitter_42x28.jpg Content-Disposition: attachment; filename=element-signature_logo_Twitter_42x28.jpg Content-Transfer-Encoding: base64 Content-ID: <18a767bbdad6a1133fc4152b03ea78228ce25a14@zimbra> /9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAAA8AAD/4QOBaHR0cDov L25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENl aGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4 OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYtYzEzMiA3OS4xNTkyODQsIDIwMTYvMDQvMTktMTM6 MTM6NDAgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5 OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHht bG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InhtcC5kaWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1LTgxYmQtMTYwMTFjZjk5YWVjIiB4bXBNTTpEb2N1 bWVudElEPSJ4bXAuZGlkOjdDMkI3MjMyOEExNzExRTY5MDUyRTk1NEIyREUwNjVCIiB4bXBNTTpJ bnN0YW5jZUlEPSJ4bXAuaWlkOjdDMkI3MjMxOEExNzExRTY5MDUyRTk1NEIyREUwNjVCIiB4bXA6 Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDQyAyMDE1LjUgKFdpbmRvd3MpIj4gPHhtcE1N OkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1 LTgxYmQtMTYwMTFjZjk5YWVjIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOmRkMGY5MmM1LTc4 YWYtY2U0NS04MWJkLTE2MDExY2Y5OWFlYyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRG PiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAYE BAQFBAYFBQYJBgUGCQsIBgYICwwKCgsKCgwQDAwMDAwMEAwODxAPDgwTExQUExMcGxsbHB8fHx8f Hx8fHx8BBwcHDQwNGBAQGBoVERUaHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f Hx8fHx8fHx8fHx8fH//AABEIABwAKgMBEQACEQEDEQH/xAB3AAEBAQEBAAAAAAAAAAAAAAAABwUI BgEBAAMBAQAAAAAAAAAAAAAAAAMEBQIBEAABAwIEBwEBAQAAAAAAAAABAgMEAAUREhMGITFBFBUH CIEiFhEAAgIBAgQHAAAAAAAAAAAAAAERAgMxBCHBEgVBUWGBQhMV/9oADAMBAAIRAxEAPwDC9g7u 3dH33uJiNeri2wxcJQQ01JfCUNodVwCUqwSlI/AK3sGKropS0Kd7OWZMXcPsyZDdnQ7he5UFhQQ/ LZelOMoURiEqWlRAOFdumNOGqyeTYtPzFfL1df8ASm5XCTP0ey0e5eceyZu4zZc5VhjlGOFZ/cKJ dMKNeRNhbclzrOJxQCgOSW7o5a/oKXMRFXNT5iYw/EaAUtbL61tOBKTwXglWOXrW30zgj0RUmLlb 9p3rZ/r/ANd3GxWJtm3XC8B1EO2RsEqDkng88pAP8JSnEk8ugqlt6Xy5Fa3FImyNVUI8z8nJCU7o SOSRAA/O5qbuXx9+Rxg8ToGsssCgFAc/7q+b9xXrc11u7V3iNN3CW/JbQUuhaUuuFYBIHMA9K08e +rWqUPgivbC25MofK25Qoq81DKjwKlJeUT+kE13+jXyZ59DKX6a9WXPYfmO+msTPJdtp6AWMuhq4 5swHPVFVN1uFkiFoS46dJSqqEgoBQCgFAKAUAoBQH//Z ------=_Part_57353690_157338222.1496840388734 Content-Type: image/jpeg; name=element-signature_payzen_61x28.jpg Content-Disposition: attachment; filename=element-signature_payzen_61x28.jpg Content-Transfer-Encoding: base64 Content-ID: <d3fc119a0aa72bf985c19ca559c993b5b4b54ca3@zimbra> /9j/4QAYRXhpZgAASUkqAAgAAAAAAAAAAAAAAP/sABFEdWNreQABAAQAAAA8AAD/4QOBaHR0cDov L25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENl aGlIenJlU3pOVGN6a2M5ZCI/PiA8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4 OnhtcHRrPSJBZG9iZSBYTVAgQ29yZSA1LjYtYzEzMiA3OS4xNTkyODQsIDIwMTYvMDQvMTktMTM6 MTM6NDAgICAgICAgICI+IDxyZGY6UkRGIHhtbG5zOnJkZj0iaHR0cDovL3d3dy53My5vcmcvMTk5 OS8wMi8yMi1yZGYtc3ludGF4LW5zIyI+IDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiIHht bG5zOnhtcE1NPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvbW0vIiB4bWxuczpzdFJlZj0i aHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL3NUeXBlL1Jlc291cmNlUmVmIyIgeG1sbnM6eG1w PSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bXBNTTpPcmlnaW5hbERvY3VtZW50SUQ9 InhtcC5kaWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1LTgxYmQtMTYwMTFjZjk5YWVjIiB4bXBNTTpEb2N1 bWVudElEPSJ4bXAuZGlkOkU1NjczQjM2OEEzNDExRTZCOEJBQ0Y4Mzg3RTEzODkyIiB4bXBNTTpJ bnN0YW5jZUlEPSJ4bXAuaWlkOkU1NjczQjM1OEEzNDExRTZCOEJBQ0Y4Mzg3RTEzODkyIiB4bXA6 Q3JlYXRvclRvb2w9IkFkb2JlIFBob3Rvc2hvcCBDQyAyMDE1LjUgKFdpbmRvd3MpIj4gPHhtcE1N OkRlcml2ZWRGcm9tIHN0UmVmOmluc3RhbmNlSUQ9InhtcC5paWQ6ZGQwZjkyYzUtNzhhZi1jZTQ1 LTgxYmQtMTYwMTFjZjk5YWVjIiBzdFJlZjpkb2N1bWVudElEPSJ4bXAuZGlkOmRkMGY5MmM1LTc4 YWYtY2U0NS04MWJkLTE2MDExY2Y5OWFlYyIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRG PiA8L3g6eG1wbWV0YT4gPD94cGFja2V0IGVuZD0iciI/Pv/uAA5BZG9iZQBkwAAAAAH/2wCEAAYE BAQFBAYFBQYJBgUGCQsIBgYICwwKCgsKCgwQDAwMDAwMEAwODxAPDgwTExQUExMcGxsbHB8fHx8f Hx8fHx8BBwcHDQwNGBAQGBoVERUaHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8fHx8f Hx8fHx8fHx8fHx8fH//AABEIABwAPQMBEQACEQEDEQH/xABvAAABBAMAAAAAAAAAAAAAAAAAAQUG BwIDBAEBAAAAAAAAAAAAAAAAAAAAABAAAQQABAQEAgsBAAAAAAAAAQIDBAUAERIGITETFEEiFQfS I1FhcYGhMlIkRMQWhhEBAAAAAAAAAAAAAAAAAAAAAP/aAAwDAQACEQMRAD8AvqZ7q7OhzZMSS9IQ Yjy2JT/avqZbW2rSvU6lBSACOeeAljLzTzSHmVhxpxIW24k5pUlQzBBHgRgM8BBJ9fKuvcGwr3La wgxIlfGeaagyVsJ1uOOBRUBmOSRgI0bnZgfQwdx7qDrroYZSVzBrcJ0hKM2xq+7AWBU7PTXTEShc 2svRx6MuWp5o5gjigj68BombFRKmPyTfXTPXWpzoszloaRqOelCQPKkeAwEP6lp6f6V6vYaP9Z6b 3fcr7ntuhno6vPnxwGyohb2ntbpr6Y17NdKt7Bp5+YHlPJLitKyltI0KGk+XPANVgzV1Eyyqbe3s IMmnhsMbVaYcebDraY+XVbQ15XXFOghQVnkMBkbjcVPTUs6M5IkPbnpWa1hKlrWG7QZBp0hROnUh xRUfHTgJDWuwtsbptVTpC1xaqhgJfkuFTji9DjoKiTmpSlq/HAcO2d11d/cuXUySJG4C0+NvbfCH CmK2hClHUop0GQ6E+dWfAeUYBi2lY2E+zgW7twhVlHDk+7AkzFO9u2lRdjORFIEZrTmAkA+GYwDl TwLJhjZFouxsF3NzN6r7Lj7imExHUOSHWi0TpyCdORIzzwHT/J/7n+vgLVAA5YBChBUlRSCpOelR HEZ88sA2WG3YVhb1lnJW4VVJcXFjAgM9VxOjqKTlmVJTnp48M8Ax2+3N3J3TJu6KVAbRKisxnWpr brh+SpasxoKf14BBD91hxE2kB+nt5Px4AEL3VGoiZSAr4qyjyOP2+fAL2nuvw/e0vDl8iT8eAbv8 Lur0vPvYXrPrfrfU6bvb59Lp6NOev83HngLBwBgDAGAMAYAwBgP/2Q== ------=_Part_57353690_157338222.1496840388734-- ------=_Part_57353689_1234561196.1496840388734--

3 5

Fwd: Windows USB Redirection
by Abi Askushi 14 Jul '17

14 Jul '17

Hi All, I have Ovirt 4.1 with 3 nodes on top glusterfs. I Have 2 VMs: Windows 2016 64bit and Windows 10 64bit When I attach a USB flash disk to a VM (from host devices) the VM cannot see the USB drive and report driver issue at device manager (see attached). This happens with both VMs when tested. When testing with Windows 7 or Windows XP USB is attached and accessed normally. Have you encountered such issue? I have installed latest guest tools on both VMs. Many thanx

2 3

Failed to create template
by aduckers 13 Jul '17

13 Jul '17

I’m running 4.1 with a hosted engine, using FC SAN storage. I’ve uploaded a qcow2 image, then created a VM and attached that image. When trying to create a template from that VM, we get failures with: failed: low level image copy failed VDSM command DeleteImageGroupVDS failed: Image does not exist in domain failed to create template What should I be looking at to resolve this? Anyone recognize this issue? Thanks

3 11

Re: [ovirt-users] Access VM Console on a Smart Phone with User Permission
by Tomas Jelinek 10 Jul '17

10 Jul '17

On Tue, Jun 27, 2017 at 12:08 PM, Jerome R <jerzkie102030(a)gmail.com> wrote: > I tried this workaround, I tried to logon the user acct to moVirt with 1 > of the admin permission resources, it works I can access to the VM assigned > however I'm able to see what Admin can see in the portal though not able to > perform action. So far that's one of my concern the user should be able to > see just his/her VM assigned. > yes, this is a consequence of using the admin API - you can see all the entities and do actions only on the ones you have explicit rights to. Unfortunately, until the https://github.com/oVirt/moVirt/issues/282 is done, there is nothing better I can offer you. We can try to give that item a priority, just need to get the current RC out of the door (hopefully soon). > > Thanks, > Jerome > > On Tue, Jun 27, 2017 at 3:20 PM, Tomas Jelinek <tjelinek(a)redhat.com> > wrote: > >> >> >> On Tue, Jun 27, 2017 at 10:13 AM, Jerome Roque <jerzkie102030(a)gmail.com> >> wrote: >> >>> Hi Tomas, >>> >>> Thanks for your response. What do you mean by "removing the support for >>> user permissions"? I'm using >>> >> >> The oVirt permission model expects to be told explicitly by one header if >> the logged in user has some admin permissions or not. In the past the API >> behaved differently in this two cases so we needed to remove the option to >> use it without admin permissions. >> >> Now the situation is better so we may be able to bring this support back, >> but it will require some testing. >> >> >>> the latest version of moVirt 1.7.1, and ovirt-engine 4.1. >>> Is there anyone tried running user role in moVirt? >>> >> >> you will get permission denied from the API if you try to log in with a >> user which has no admin permission. If you give him any admin permission on >> any resource, it might work as a workaround. >> >> >>> >>> Best Regards, >>> Jerome >>> >>> On Tue, Jun 20, 2017 at 5:14 PM, Tomas Jelinek <tjelinek(a)redhat.com> >>> wrote: >>> >>>> >>>> >>>> On Fri, Jun 16, 2017 at 6:14 AM, Jerome Roque <jerzkie102030(a)gmail.com> >>>> wrote: >>>> >>>>> Good day oVirt Users, >>>>> >>>>> I need some little help. I have a KVM and used oVirt for the >>>>> management of VMs. What I want is that my client will log on to their >>>>> account and access their virtual machine using their Smart phone. I tried >>>>> to install mOvirt and yes can connect to the console of my machine, but it >>>>> is only accessible for admin console. >>>>> >>>> >>>> moVirt originally worked both with admin and user permissions. We had >>>> to remove the support for user permissions since the oVirt API did not >>>> provide all features moVirt needed for user permissions (search for >>>> example). But the API moved significantly since then (the search works also >>>> for users now for one) so we can move it back. I have opened an issue about >>>> it: https://github.com/oVirt/moVirt/issues/282 - we can try to do it >>>> in next version. >>>> >>>> >>>>> Tried to use web console, it downloaded console.vv but can't open it. >>>>> By any chance could make this thing possible? >>>>> >>>> >>>> If you want to use a web console for users, I would suggest to try the >>>> new ovirt-web-ui [1] - you have a link to it from oVirt landing page and >>>> since 4.1 it is installed by default with oVirt. >>>> >>>> The .vv file can not be opened using aSPICE AFAIK - adding Iordan as >>>> the author of aSPICE to comment on this. >>>> >>>> [1]: https://github.com/oVirt/ovirt-web-ui >>>> >>>> >>>>> >>>>> Thank you, >>>>> Jerome >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users(a)ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>> >>>>> >>>> >>> >> >

3 3

SQL : last time halted?
by Nicolas Ecarnot 09 Jul '17

09 Jul '17

Hello, I'm trying to find a way to clean up the VMs list of my DCs. I think some of my users have created VM they're not using anymore, but it's difficult to sort them out. In some cases, I can shutdown some of them and wait. Is there somewhere stored in the db tables the date of the last VM exctinction? Thank you. -- Nicolas ECARNOT

3 4

Very poor GlusterFS performance
by Chris Boot 09 Jul '17

09 Jul '17

Hi folks, I have 3x servers in a "hyper-converged" oVirt 4.1.2 + GlusterFS 3.10 configuration. My VMs run off a replica 3 arbiter 1 volume comprised of 6 bricks, which themselves live on two SSDs in each of the servers (one brick per SSD). The bricks are XFS on LVM thin volumes straight onto the SSDs. Connectivity is 10G Ethernet. Performance within the VMs is pretty terrible. I experience very low throughput and random IO is really bad: it feels like a latency issue. On my oVirt nodes the SSDs are not generally very busy. The 10G network seems to run without errors (iperf3 gives bandwidth measurements of >= 9.20 Gbits/sec between the three servers). To put this into perspective: I was getting better behaviour from NFS4 on a gigabit connection than I am with GlusterFS on 10G: that doesn't feel right at all. My volume configuration looks like this: Volume Name: vmssd Type: Distributed-Replicate Volume ID: d5a5ddd1-a140-4e0d-b514-701cfe464853 Status: Started Snapshot Count: 0 Number of Bricks: 2 x (2 + 1) = 6 Transport-type: tcp Bricks: Brick1: ovirt3:/gluster/ssd0_vmssd/brick Brick2: ovirt1:/gluster/ssd0_vmssd/brick Brick3: ovirt2:/gluster/ssd0_vmssd/brick (arbiter) Brick4: ovirt3:/gluster/ssd1_vmssd/brick Brick5: ovirt1:/gluster/ssd1_vmssd/brick Brick6: ovirt2:/gluster/ssd1_vmssd/brick (arbiter) Options Reconfigured: nfs.disable: on transport.address-family: inet6 performance.quick-read: off performance.read-ahead: off performance.io-cache: off performance.stat-prefetch: off performance.low-prio-threads: 32 network.remote-dio: off cluster.eager-lock: enable cluster.quorum-type: auto cluster.server-quorum-type: server cluster.data-self-heal-algorithm: full cluster.locking-scheme: granular cluster.shd-max-threads: 8 cluster.shd-wait-qlength: 10000 features.shard: on user.cifs: off storage.owner-uid: 36 storage.owner-gid: 36 features.shard-block-size: 128MB performance.strict-o-direct: on network.ping-timeout: 30 cluster.granular-entry-heal: enable I would really appreciate some guidance on this to try to improve things because at this rate I will need to reconsider using GlusterFS altogether. Cheers, Chris -- Chris Boot bootc(a)bootc.net

11 15

ovirt can't find user
by Fabrice Bacchella 09 Jul '17

09 Jul '17

--Apple-Mail=_B78E14EB-413D-4DC1-AC54-F837E05B2CF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I tried to add a user in ovirt, but it's not identified: 2017-06-28 16:48:48,505+02 ERROR = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-22) = [] External Authentication Failed: Cannot resolve principal = 'rexecutor@internal' /usr/bin/ovirt-aaa-jdbc-tool user show rexecutor -- User rexecutor(b1727291-5ad4-4575-b8ec-53bdc9ce4aef) -- Namespace: * Name: rexecutor ID: b1727291-5ad4-4575-b8ec-53bdc9ce4aef Display Name:=20 Email:=20 First Name:=20 Last Name:=20 Department:=20 Title:=20 Description:=20 Account Disabled: false Account Locked: false Account Unlocked At: 2017-06-16 13:49:31Z Account Valid From: 2017-06-15 16:41:14Z Account Valid To: 2217-06-15 16:41:14Z Account Without Password: true Last successful Login At: 1970-01-01 00:00:00Z Last unsuccessful Login At: 1970-01-01 00:00:00Z Password Valid To: 2025-08-15 10:30:00Z It's listed as a known user: <user = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e" = id=3D"49a12b6e-de03-4095-b6ed-2c1883f5542e"> <department></department> = <domain_entry_id>62313732373239312D356164342D343537352D623865632D353362646= 339636534616566</domain_entry_id> <email></email> <last_name></last_name> <name></name> <namespace>*</namespace> <principal>rexecutor</principal> <user_name>rexecutor@internal-authz</user_name> <domain href=3D"/ovirt-engine/api/domains/696E7465726E616C2D617574687A" = id=3D"696E7465726E616C2D617574687A"> <name>internal-authz</name> </domain> <permissions = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/permi= ssions"/> <roles = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/roles= "/> <ssh_public_keys = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/sshpu= blickeys"/> <tags = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/tags"= /> </user> My admin domain authentication looks OK: = config.datasource.jdbcurl=3Djdbc:postgresql://pgdb:5432/ovirt_engine?sslfa= ctory=3Dorg.postgresql.ssl.NonValidatingFactory config.datasource.dbuser=3Dovirt config.datasource.dbpassword=3DXXX config.datasource.jdbcdriver=3Dorg.postgresql.Driver config.datasource.schemaname=3Daaa_jdbc It tried to increase org.ovirt.engine.core.sso.utils debug log level by = modifying = /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in diff ovirt-engine.xml.in* 201,204d200 < <logger category=3D"org.ovirt.engine.core.sso.utils"> < <level name=3D"ALL"/> < </logger> <=20 I just got in the log: 2017-06-28 17:17:09,404+02 DEBUG = [org.ovirt.engine.core.sso.utils.NonInteractiveAuth] (default task-7) [] = Performing Negotiate Auth 2017-06-28 17:17:09,404+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = Performing external authentication 2017-06-28 17:17:09,410+02 ERROR = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication Failed: Cannot resolve principal = 'rexecutor@internal' 2017-06-28 17:17:09,410+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication Failed: Class: class = org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException= Input: {Extkey[name=3DEXTENSION_INVOKE_COMMAND;type=3Dclass = org.ovirt.engine.api.extensions.ExtUUID;uuid=3DEXTENSION_INVOKE_COMMAND[48= 5778ab-bede-4f1a-b823-77b262a2f28d];]=3DAAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5= a5bf9bb-9336-4376-a823-26efe1ba26df], = Extkey[name=3DAAA_AUTHZ_QUERY_FLAGS;type=3Dclass = java.lang.Integer;uuid=3DAAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af6= 89320907b];]=3D3, Extkey[name=3DEXTENSION_INVOKE_CONTEXT;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DEXTENSION_INVOKE_CONTEXT[886= d2ebb-312a-49ae-9cc3-e1f849834b7d];]=3D{Extkey[name=3DAAA_AUTHZ_AVAILABLE_= NAMESPACES;type=3Dinterface = java.util.Collection;uuid=3DAAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-4= 86a-bd35-0a272b45a711];]=3D[DC=3DXXX], = Extkey[name=3DEXTENSION_LICENSE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a= 4c18];]=3DASL 2.0, Extkey[name=3DEXTENSION_GLOBAL_CONTEXT;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DEXTENSION_GLOBAL_CONTEXT[979= 9e72f-7af6-4cf1-bf08-297bc8903676];]=3D*skip*, = Extkey[name=3DEXTENSION_NAME;type=3Dclass = java.lang.String;uuid=3DEXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a10318= 4];]=3Dovirt-engine-extension-aaa-ldap.authz, = Extkey[name=3DEXTENSION_MANAGER_TRACE_LOG;type=3Dinterface = org.slf4j.Logger;uuid=3DEXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-969= 5-918a3197ad83];]=3Dorg.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.exten= sions.mgr.ExtensionsManager.trace.ovirt-engine-extension-aaa-ldap.authz.XX= X-authz), = Extkey[name=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=3Dinterface = java.util.Collection;uuid=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa= 1-73ff-4204-9f9b-ebff01e35263];]=3D[], = Extkey[name=3DEXTENSION_VERSION;type=3Dclass = java.lang.String;uuid=3DEXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779c= e68c];]=3D1.3.1, Extkey[name=3DEXTENSION_PROVIDES;type=3Dinterface = java.util.Collection;uuid=3DEXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e2= 75087de91];]=3D[org.ovirt.engine.api.extensions.aaa.Authz], = Extkey[name=3DEXTENSION_AUTHOR;type=3Dclass = java.lang.String;uuid=3DEXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7f= bcc];]=3DThe oVirt Project, Extkey[name=3DEXTENSION_LOCALE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778b= b29];]=3Den_US, Extkey[name=3DEXTENSION_CONFIGURATION_FILE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98= ff-9660bd67af6a];]=3D/etc/ovirt-engine/extensions.d/XXXX-authz.properties,= Extkey[name=3DEXTENSION_HOME_URL;type=3Dclass = java.lang.String;uuid=3DEXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e= 18304];]=3Dhttp://www.ovirt.org, = Extkey[name=3DEXTENSION_CONFIGURATION;type=3Dclass = java.util.Properties;uuid=3DEXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4a= e-5068a226b0fc];]=3D***, = Extkey[name=3DEXTENSION_INTERFACE_VERSION_MAX;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-490= 1-8ee9-df362446e3e7];]=3D0, = Extkey[name=3DAAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=3Dclass = java.lang.Integer;uuid=3DAAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a= 1-a6e3-014e247595f5];]=3D50, = Extkey[name=3DEXTENSION_INTERFACE_VERSION_MIN;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497= b-a1d7-d961b9d2ce0b];]=3D0, = Extkey[name=3DEXTENSION_INSTANCE_NAME;type=3Dclass = java.lang.String;uuid=3DEXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-86= 74327f011b];]=3DXXXX-authz, = Extkey[name=3DEXTENSION_BUILD_INTERFACE_VERSION;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-4= 6f8-aed3-56a4747a8ab7];]=3D0, Extkey[name=3DEXTENSION_NOTES;type=3Dclass = java.lang.String;uuid=3DEXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4= ea];]=3DDisplay name: = ovirt-engine-extension-aaa-ldap-1.3.1-1.el7.centos}, = Extkey[name=3DAAA_AUTHN_AUTH_RECORD;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DAAA_AUTHN_AUTH_RECORD[e94621= 68-b53b-44ac-9af5-f25e1697173e];]=3D{Extkey[name=3DAAA_AUTHN_AUTH_RECORD_P= RINCIPAL;type=3Dclass = java.lang.String;uuid=3DAAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c= -958c-8bd7490b119a];]=3Drexecutor@internal}} Output: {Extkey[name=3DEXTENSION_INVOKE_MESSAGE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b= 8bdb72f5893];]=3DCannot resolve principal 'rexecutor@internal', = Extkey[name=3DEXTENSION_INVOKE_RESULT;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-0= 99c772ddd4e];]=3D2} at = org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.= java:95) [extensions-manager.jar:] at = org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.= java:109) [extensions-manager.jar:] at = org.ovirt.engine.core.sso.utils.NegotiateAuthUtils.doAuth(NegotiateAuthUti= ls.java:122) [enginesso.jar:] at = org.ovirt.engine.core.sso.utils.NegotiateAuthUtils.doAuth(NegotiateAuthUti= ls.java:68) [enginesso.jar:] at = org.ovirt.engine.core.sso.utils.NonInteractiveAuth$2.doAuth(NonInteractive= Auth.java:51) [enginesso.jar:] at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.issueTokenUsingHttpHe= aders(OAuthTokenServlet.java:183) [enginesso.jar:] at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:72) [enginesso.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) = [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at = io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.j= ava:85) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:129) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java= :73) [branding.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.jav= a:66) [utils.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.jav= a:94) [utils.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.jav= a:84) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleReq= uest(ServletSecurityRoleHandler.java:62) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(Servl= etDispatchingHandler.java:36) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.= handleRequest(SecurityContextAssociationHandler.java:78) at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.han= dleRequest(SSLInformationAssociationHandler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.han= dleRequest(ServletAuthenticationCallHandler.java:57) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AuthenticationConstraintHandler.handleReques= t(AuthenticationConstraintHandler.java:53) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest= (AbstractConfidentialityHandler.java:46) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHand= ler.handleRequest(ServletConfidentialityConstraintHandler.java:64) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.han= dleRequest(ServletSecurityConstraintHandler.java:59) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AuthenticationMechanismsHandler.handleReques= t(AuthenticationMechanismsHandler.java:60) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ha= ndleRequest(CachedAuthenticatedSessionHandler.java:77) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(No= tificationReceiverHandler.java:50) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.ha= ndleRequest(AbstractSecurityContextAssociationHandler.java:43) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRe= quest(JACCContextIdHandler.java:61) at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(Serv= letInitialHandler.java:292) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletIniti= alHandler.java:81) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:138) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:135) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(Ser= vletRequestContextThreadSetupAction.java:48) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClass= LoaderSetupAction.java:43) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(Servlet= InitialHandler.java:272) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletIniti= alHandler.java:81) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(Servlet= InitialHandler.java:104) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.Connectors.executeRootHandler(Connectors.java:202) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:= 1142) [rt.jar:1.8.0_121] at = java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java= :617) [rt.jar:1.8.0_121] at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_121] 2017-06-28 17:17:09,414+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication result: false 2017-06-28 17:17:09,414+02 ERROR = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] = OAuthException access_denied: Cannot authenticate user Authentication = failed.. 2017-06-28 17:17:09,414+02 DEBUG = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] = Exception: org.ovirt.engine.core.sso.utils.OAuthException: Cannot = authenticate user Authentication failed.. at = org.ovirt.engine.core.sso.utils.SsoUtils.sendJsonDataWithMessage(SsoUtils.= java:569) [enginesso.jar:] at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:81) [enginesso.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) = [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at = io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.j= ava:85) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:129) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java= :73) [branding.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.jav= a:66) [utils.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.jav= a:94) [utils.jar:] at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.jav= a:84) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleReq= uest(ServletSecurityRoleHandler.java:62) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(Servl= etDispatchingHandler.java:36) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.= handleRequest(SecurityContextAssociationHandler.java:78) at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.han= dleRequest(SSLInformationAssociationHandler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.han= dleRequest(ServletAuthenticationCallHandler.java:57) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AuthenticationConstraintHandler.handleReques= t(AuthenticationConstraintHandler.java:53) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest= (AbstractConfidentialityHandler.java:46) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHand= ler.handleRequest(ServletConfidentialityConstraintHandler.java:64) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.han= dleRequest(ServletSecurityConstraintHandler.java:59) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AuthenticationMechanismsHandler.handleReques= t(AuthenticationMechanismsHandler.java:60) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ha= ndleRequest(CachedAuthenticatedSessionHandler.java:77) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(No= tificationReceiverHandler.java:50) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.ha= ndleRequest(AbstractSecurityContextAssociationHandler.java:43) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRe= quest(JACCContextIdHandler.java:61) at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(Serv= letInitialHandler.java:292) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletIniti= alHandler.java:81) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:138) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:135) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(Ser= vletRequestContextThreadSetupAction.java:48) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClass= LoaderSetupAction.java:43) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(Servlet= InitialHandler.java:272) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletIniti= alHandler.java:81) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(Servlet= InitialHandler.java:104) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.Connectors.executeRootHandler(Connectors.java:202) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805) = [undertow-core-1.4.0.Final.jar:1.4.0.Final] at = java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:= 1142) [rt.jar:1.8.0_121] at = java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java= :617) [rt.jar:1.8.0_121] at java.lang.Thread.run(Thread.java:745) [rt.jar:1.8.0_121] Caused by: org.ovirt.engine.core.sso.utils.AuthenticationException: = Cannot authenticate user Authentication failed.. at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.issueTokenUsingHttpHe= aders(OAuthTokenServlet.java:214) [enginesso.jar:] at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:72) [enginesso.jar:] ... 50 more 2017-06-28 17:17:09,419+02 TRACE = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] Sending = json data {"error_code":"access_denied","error":"Cannot authenticate = user Authentication failed.."} --Apple-Mail=_B78E14EB-413D-4DC1-AC54-F837E05B2CF8 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv=3D"Content-Type" content=3D"text/html = charset=3Dus-ascii"></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" = class=3D"">I tried to add a user in ovirt, but it's not identified:<div = class=3D""><div style=3D"margin: 0px; font-size: 11px; line-height: = normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">2017-06-28 16:48:48,505+02 ERROR = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-22) = [] External Authentication Failed: Cannot resolve principal = 'rexecutor@internal'</span></div></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div><div class=3D""><br class=3D""><div = class=3D""><div style=3D"margin: 0px; font-size: 11px; line-height: = normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">/usr/bin/ovirt-aaa-jdbc-tool user  show = rexecutor</span></div><div style=3D"margin: 0px; font-size: 11px; = line-height: normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">-- User = rexecutor(b1727291-5ad4-4575-b8ec-53bdc9ce4aef) --</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Namespace: *</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Name: rexecutor</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">ID: = b1727291-5ad4-4575-b8ec-53bdc9ce4aef</span></div><div style=3D"margin: = 0px; font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Display Name: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Email: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">First Name: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Last Name: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Department: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Title: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Description: </span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Account Disabled: false</span></div><div style=3D"margin: = 0px; font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Account Locked: false</span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Account Unlocked At: 2017-06-16 13:49:31Z</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Account Valid From: 2017-06-15 = 16:41:14Z</span></div><div style=3D"margin: 0px; font-size: 11px; = line-height: normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">Account = Valid To: 2217-06-15 16:41:14Z</span></div><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Account Without Password: true</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Last successful Login At: 1970-01-01 = 00:00:00Z</span></div><div style=3D"margin: 0px; font-size: 11px; = line-height: normal; font-family: Menlo;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">Last = unsuccessful Login At: 1970-01-01 00:00:00Z</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Password Valid To: 2025-08-15 = 10:30:00Z</span></div></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">It's = listed as a known user:</span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""><user = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e" = id=3D"49a12b6e-de03-4095-b6ed-2c1883f5542e"></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <department></department></span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <domain_entry_id>62313732373239312D356164342D343537352D623865632D353= 362646339636534616566</domain_entry_id></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <email></email></span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">  = <last_name></last_name></span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <name></name></span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">  = <namespace>*</namespace></span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <principal>rexecutor</principal></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <user_name>rexecutor@internal-authz</user_name></span></div><d= iv style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = <domain href=3D"/ovirt-engine/api/domains/696E7465726E616C2D617574687A"= id=3D"696E7465726E616C2D617574687A"></span></div><div style=3D"margin:= 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  =   <name>internal-authz</name></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">  = </domain></span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">  <permissions = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/permi= ssions"/></span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">  <roles = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/roles= "/></span></div><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">  <ssh_public_keys = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/sshpu= blickeys"/></span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">  <tags = href=3D"/ovirt-engine/api/users/49a12b6e-de03-4095-b6ed-2c1883f5542e/tags"= /></span></div><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""></user></span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div></div><div class=3D"">My admin domain = authentication looks OK:</div><div class=3D""><div style=3D"margin: 0px; = font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">config.datasource.jdbcurl=3Djdbc:postgresql://pgdb:5432/ovirt_e= ngine?sslfactory=3Dorg.postgresql.ssl.NonValidatingFactory</span></div><di= v style=3D"margin: 0px; font-size: 11px; line-height: normal; = font-family: Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">config.datasource.dbuser=3Dovirt</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">config.datasource.dbpassword=3DXXX</span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">config.datasource.jdbcdriver=3Dorg.postgresql.Driver</span></di= v><div style=3D"margin: 0px; font-size: 11px; line-height: normal; = font-family: Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">config.datasource.schemaname=3Daaa_jdbc</span></div></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><br class=3D""></span></div><div = style=3D"margin: 0px; font-size: 11px; line-height: normal; font-family: = Menlo;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">It tried to = increase </span>org.ovirt.engine.core.sso.utils debug log level by = modifying = /usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in</div><di= v style=3D"margin: 0px; font-size: 11px; line-height: normal; = font-family: Menlo;" class=3D""><br class=3D""></div><div style=3D"margin:= 0px; font-size: 11px; line-height: normal; font-family: Menlo;" = class=3D""><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">diff ovirt-engine.xml.in*</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">201,204d200</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><       <logger = category=3D"org.ovirt.engine.core.sso.utils"></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">< =         <level name=3D"ALL"/></span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">< =       </logger></span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">< </span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D"">I just = got in the log:</span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">2017-06-28 17:17:09,404+02 DEBUG = [org.ovirt.engine.core.sso.utils.NonInteractiveAuth] (default task-7) [] = Performing Negotiate Auth</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">2017-06-28 17:17:09,404+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = Performing external authentication</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">2017-06-28 17:17:09,410+02 ERROR = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication Failed: Cannot resolve principal = 'rexecutor@internal'</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">2017-06-28 17:17:09,410+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication Failed: Class: class = org.ovirt.engine.core.extensions.mgr.ExtensionInvokeCommandFailedException= </span></div><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Input:</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">{Extkey[name=3DEXTENSION_INVOKE_COMMAND;type=3Dclass = org.ovirt.engine.api.extensions.ExtUUID;uuid=3DEXTENSION_INVOKE_COMMAND[48= 5778ab-bede-4f1a-b823-77b262a2f28d];]=3DAAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5= a5bf9bb-9336-4376-a823-26efe1ba26df], = Extkey[name=3DAAA_AUTHZ_QUERY_FLAGS;type=3Dclass = java.lang.Integer;uuid=3DAAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af6= 89320907b];]=3D3, Extkey[name=3DEXTENSION_INVOKE_CONTEXT;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DEXTENSION_INVOKE_CONTEXT[886= d2ebb-312a-49ae-9cc3-e1f849834b7d];]=3D{Extkey[name=3DAAA_AUTHZ_AVAILABLE_= NAMESPACES;type=3Dinterface = java.util.Collection;uuid=3DAAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-4= 86a-bd35-0a272b45a711];]=3D[DC=3DXXX], = Extkey[name=3DEXTENSION_LICENSE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a= 4c18];]=3DASL 2.0, Extkey[name=3DEXTENSION_GLOBAL_CONTEXT;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DEXTENSION_GLOBAL_CONTEXT[979= 9e72f-7af6-4cf1-bf08-297bc8903676];]=3D*skip*, = Extkey[name=3DEXTENSION_NAME;type=3Dclass = java.lang.String;uuid=3DEXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a10318= 4];]=3Dovirt-engine-extension-aaa-ldap.authz, = Extkey[name=3DEXTENSION_MANAGER_TRACE_LOG;type=3Dinterface = org.slf4j.Logger;uuid=3DEXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-969= 5-918a3197ad83];]=3Dorg.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.exten= sions.mgr.ExtensionsManager.trace.ovirt-engine-extension-aaa-ldap.authz.XX= X-authz), = Extkey[name=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=3Dinterface = java.util.Collection;uuid=3DEXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa= 1-73ff-4204-9f9b-ebff01e35263];]=3D[], = Extkey[name=3DEXTENSION_VERSION;type=3Dclass = java.lang.String;uuid=3DEXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779c= e68c];]=3D1.3.1, Extkey[name=3DEXTENSION_PROVIDES;type=3Dinterface = java.util.Collection;uuid=3DEXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e2= 75087de91];]=3D[org.ovirt.engine.api.extensions.aaa.Authz], = Extkey[name=3DEXTENSION_AUTHOR;type=3Dclass = java.lang.String;uuid=3DEXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7f= bcc];]=3DThe oVirt Project, Extkey[name=3DEXTENSION_LOCALE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778b= b29];]=3Den_US, Extkey[name=3DEXTENSION_CONFIGURATION_FILE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98= ff-9660bd67af6a];]=3D/etc/ovirt-engine/extensions.d/XXXX-authz.properties,= Extkey[name=3DEXTENSION_HOME_URL;type=3Dclass = java.lang.String;uuid=3DEXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e= 18304];]=3D<a href=3D"http://www.ovirt.org" = class=3D"">http://www.ovirt.org</a>, = Extkey[name=3DEXTENSION_CONFIGURATION;type=3Dclass = java.util.Properties;uuid=3DEXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4a= e-5068a226b0fc];]=3D***, = Extkey[name=3DEXTENSION_INTERFACE_VERSION_MAX;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-490= 1-8ee9-df362446e3e7];]=3D0, = Extkey[name=3DAAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=3Dclass = java.lang.Integer;uuid=3DAAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a= 1-a6e3-014e247595f5];]=3D50, = Extkey[name=3DEXTENSION_INTERFACE_VERSION_MIN;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497= b-a1d7-d961b9d2ce0b];]=3D0, = Extkey[name=3DEXTENSION_INSTANCE_NAME;type=3Dclass = java.lang.String;uuid=3DEXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-86= 74327f011b];]=3DXXXX-authz, = Extkey[name=3DEXTENSION_BUILD_INTERFACE_VERSION;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-4= 6f8-aed3-56a4747a8ab7];]=3D0, Extkey[name=3DEXTENSION_NOTES;type=3Dclass = java.lang.String;uuid=3DEXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4= ea];]=3DDisplay name: = ovirt-engine-extension-aaa-ldap-1.3.1-1.el7.centos}, = Extkey[name=3DAAA_AUTHN_AUTH_RECORD;type=3Dclass = org.ovirt.engine.api.extensions.ExtMap;uuid=3DAAA_AUTHN_AUTH_RECORD[e94621= 68-b53b-44ac-9af5-f25e1697173e];]=3D{Extkey[name=3DAAA_AUTHN_AUTH_RECORD_P= RINCIPAL;type=3Dclass = java.lang.String;uuid=3DAAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c= -958c-8bd7490b119a];]=3Drexecutor@internal}}</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">Output:</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" = class=3D"">{Extkey[name=3DEXTENSION_INVOKE_MESSAGE;type=3Dclass = java.lang.String;uuid=3DEXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b= 8bdb72f5893];]=3DCannot resolve principal 'rexecutor@internal', = Extkey[name=3DEXTENSION_INVOKE_RESULT;type=3Dclass = java.lang.Integer;uuid=3DEXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-0= 99c772ddd4e];]=3D2}</span></div><div style=3D"margin: 0px; line-height: = normal; min-height: 13px;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""></span><br class=3D""></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.= java:95) [extensions-manager.jar:]</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.extensions.mgr.ExtensionProxy.invoke(ExtensionProxy.= java:109) [extensions-manager.jar:]</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.utils.NegotiateAuthUtils.doAuth(NegotiateAuthUti= ls.java:122) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.utils.NegotiateAuthUtils.doAuth(NegotiateAuthUti= ls.java:68) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.utils.NonInteractiveAuth$2.doAuth(NonInteractive= Auth.java:51) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.issueTokenUsingHttpHe= aders(OAuthTokenServlet.java:183) [enginesso.jar:]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:72) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = javax.servlet.http.HttpServlet.service(HttpServlet.java:790) = [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.j= ava:85) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:129) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java= :73) [branding.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.jav= a:66) [utils.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.jav= a:94) [utils.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.jav= a:84) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleReq= uest(ServletSecurityRoleHandler.java:62) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(Servl= etDispatchingHandler.java:36) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.= handleRequest(SecurityContextAssociationHandler.java:78)</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.han= dleRequest(SSLInformationAssociationHandler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.han= dleRequest(ServletAuthenticationCallHandler.java:57) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AuthenticationConstraintHandler.handleReques= t(AuthenticationConstraintHandler.java:53) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest= (AbstractConfidentialityHandler.java:46) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHand= ler.handleRequest(ServletConfidentialityConstraintHandler.java:64) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.han= dleRequest(ServletSecurityConstraintHandler.java:59) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AuthenticationMechanismsHandler.handleReques= t(AuthenticationMechanismsHandler.java:60) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ha= ndleRequest(CachedAuthenticatedSessionHandler.java:77) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(No= tificationReceiverHandler.java:50) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.ha= ndleRequest(AbstractSecurityContextAssociationHandler.java:43) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRe= quest(JACCContextIdHandler.java:61)</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(Serv= letInitialHandler.java:292) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletIniti= alHandler.java:81) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:138) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:135) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(Ser= vletRequestContextThreadSetupAction.java:48) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClass= LoaderSetupAction.java:43) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(Servlet= InitialHandler.java:272) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletIniti= alHandler.java:81) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(Servlet= InitialHandler.java:104) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.Connectors.executeRootHandler(Connectors.java:202) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:= 1142) [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java= :617) [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = java.lang.Thread.run(Thread.java:745) = [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; line-height: = normal; min-height: 13px;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""></span><br class=3D""></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">2017-06-28 17:17:09,414+02 DEBUG = [org.ovirt.engine.core.sso.utils.NegotiateAuthUtils] (default task-7) [] = External Authentication result: false</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">2017-06-28 17:17:09,414+02 ERROR = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] = OAuthException access_denied: Cannot authenticate user Authentication = failed..</span></div><div style=3D"margin: 0px; line-height: normal;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D"">2017-06-28 17:17:09,414+02 DEBUG = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] = Exception: org.ovirt.engine.core.sso.utils.OAuthException: Cannot = authenticate user Authentication failed..</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.utils.SsoUtils.sendJsonDataWithMessage(SsoUtils.= java:569) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:81) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = javax.servlet.http.HttpServlet.service(HttpServlet.java:790) = [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.j= ava:85) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:129) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.branding.BrandingFilter.doFilter(BrandingFilter.java= :73) [branding.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.utils.servlet.LocaleFilter.doFilter(LocaleFilter.jav= a:66) [utils.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.utils.servlet.HeaderFilter.doFilter(HeaderFilter.jav= a:94) [utils.jar:]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:61) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter= Handler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.jav= a:84) [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleReq= uest(ServletSecurityRoleHandler.java:62) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(Servl= etDispatchingHandler.java:36) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.= handleRequest(SecurityContextAssociationHandler.java:78)</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.han= dleRequest(SSLInformationAssociationHandler.java:131) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.han= dleRequest(ServletAuthenticationCallHandler.java:57) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AuthenticationConstraintHandler.handleReques= t(AuthenticationConstraintHandler.java:53) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest= (AbstractConfidentialityHandler.java:46) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHand= ler.handleRequest(ServletConfidentialityConstraintHandler.java:64) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.han= dleRequest(ServletSecurityConstraintHandler.java:59) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AuthenticationMechanismsHandler.handleReques= t(AuthenticationMechanismsHandler.java:60) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ha= ndleRequest(CachedAuthenticatedSessionHandler.java:77) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(No= tificationReceiverHandler.java:50) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.ha= ndleRequest(AbstractSecurityContextAssociationHandler.java:43) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRe= quest(JACCContextIdHandler.java:61)</span></div><div style=3D"margin: = 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle= r.java:43) [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(Serv= letInitialHandler.java:292) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletIniti= alHandler.java:81) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:138) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHa= ndler.java:135) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(Ser= vletRequestContextThreadSetupAction.java:48) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClass= LoaderSetupAction.java:43) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThread= SetupActionWrapper.java:44) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(Servlet= InitialHandler.java:272) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletIniti= alHandler.java:81) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(Servlet= InitialHandler.java:104) = [undertow-servlet-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.Connectors.executeRootHandler(Connectors.java:202) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:805) = [undertow-core-1.4.0.Final.jar:1.4.0.Final]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:= 1142) [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java= :617) [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>at = java.lang.Thread.run(Thread.java:745) = [rt.jar:1.8.0_121]</span></div><div style=3D"margin: 0px; line-height: = normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">Caused by: = org.ovirt.engine.core.sso.utils.AuthenticationException: Cannot = authenticate user Authentication failed..</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.issueTokenUsingHttpHe= aders(OAuthTokenServlet.java:214) [enginesso.jar:]</span></div><div = style=3D"margin: 0px; line-height: normal;" class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><span = class=3D"Apple-tab-span" style=3D"white-space:pre"> </span>at = org.ovirt.engine.core.sso.servlets.OAuthTokenServlet.service(OAuthTokenSer= vlet.java:72) [enginesso.jar:]</span></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D""><span class=3D"Apple-tab-span" = style=3D"white-space:pre"> </span>... 50 more</span></div><div = style=3D"margin: 0px; line-height: normal; min-height: 13px;" = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""></span><br class=3D""></div><div style=3D"margin: 0px; = line-height: normal;" class=3D""><span style=3D"font-variant-ligatures: = no-common-ligatures" class=3D"">2017-06-28 17:17:09,419+02 TRACE = [org.ovirt.engine.core.sso.utils.SsoUtils] (default task-7) [] Sending = json data {"error_code":"access_denied","error":"Cannot authenticate = user Authentication failed.."}</span></div></span></div></div><div = class=3D""><span style=3D"font-variant-ligatures: no-common-ligatures" = class=3D""><br class=3D""></span></div><div class=3D""><span = style=3D"font-variant-ligatures: no-common-ligatures" class=3D""><br = class=3D""></span></div></span></div></div></body></html>= --Apple-Mail=_B78E14EB-413D-4DC1-AC54-F837E05B2CF8--

2 9

Cloning VM on NFS Leads to Locked Disks
by Charles Tassell 07 Jul '17

07 Jul '17

Hi Everyone, I'm having some issues with my oVirt 4.1 (fully updated to latest release as of yesterday) cluster. When I clone a VM the disks of both the original and the clone stay in the locked state, and the only way I can resolve it is to go into the database on the engine and run "update images set imagestatus=1 where imagestatus=2;" I'm using NFS4 as a datastore and the disks seem to copy fine (file sizes match and everything), but the locking worries me. To clone the VM I just shut the source VM down and then right click on it and select "Clone" I've attached the full VDSM log from my last attempt, but here is the excerpt of the lines just referencing the two disks (d73206ed-89ba-48a9-82ff-c107c1af60f0 is the original VMs disk and 670a7b20-fecd-45c6-af5c-3c7b98258224 is the clone.) 2017-05-10 11:36:20,120-0300 INFO (jsonrpc/2) [dispatcher] Run and protect: copyImage(sdUUID=u'20423d5e-188c-4e10-9893-588ceb81b354', spUUID=u'00000001-0001-0001-0001-000000000311', vmUUID='', srcImgUUID=u'd73206ed-89ba-48a9-82ff-c107c1af60f0', srcVolUUID=u'bba1813d-9e91-4e37-bed7-40beedda8051', dstImgUUID=u'670a7b20-fecd-45c6-af5c-3c7b98258224', dstVolUUID=u'013d8855-4e49-4984-8266-6a5e9437dff7', description=u'', dstSdUUID=u'20423d5e-188c-4e10-9893-588ceb81b354', volType=8, volFormat=5, preallocate=2, postZero=u'false', force=u'false', discard=False) (logUtils:51) 2017-05-10 11:36:20,152-0300 INFO (jsonrpc/2) [storage.Image] image d73206ed-89ba-48a9-82ff-c107c1af60f0 in domain 20423d5e-188c-4e10-9893-588ceb81b354 has vollist [u'bba1813d-9e91-4e37-bed7-40beedda8051'] (image:319) 2017-05-10 11:36:20,169-0300 INFO (jsonrpc/2) [storage.Image] sdUUID=20423d5e-188c-4e10-9893-588ceb81b354 imgUUID=d73206ed-89ba-48a9-82ff-c107c1af60f0 chain=[<storage.fileVolume.FileVolume object at 0x278e450>] (image:249) 2017-05-10 11:36:20,292-0300 INFO (tasks/0) [storage.Image] sdUUID=20423d5e-188c-4e10-9893-588ceb81b354 imgUUID=d73206ed-89ba-48a9-82ff-c107c1af60f0 chain=[<storage.fileVolume.FileVolume object at 0x302c6d0>] (image:249) 2017-05-10 11:36:20,295-0300 INFO (tasks/0) [storage.Image] sdUUID=20423d5e-188c-4e10-9893-588ceb81b354 vmUUID= srcImgUUID=d73206ed-89ba-48a9-82ff-c107c1af60f0 srcVolUUID=bba1813d-9e91-4e37-bed7-40beedda8051 dstImgUUID=670a7b20-fecd-45c6-af5c-3c7b98258224 dstVolUUID=013d8855-4e49-4984-8266-6a5e9437dff7 dstSdUUID=20423d5e-188c-4e10-9893-588ceb81b354 volType=8 volFormat=RAW preallocate=SPARSE force=False postZero=False discard=False (image:765) 2017-05-10 11:36:20,305-0300 INFO (tasks/0) [storage.Image] copy source 20423d5e-188c-4e10-9893-588ceb81b354:d73206ed-89ba-48a9-82ff-c107c1af60f0:bba1813d-9e91-4e37-bed7-40beedda8051 vol size 41943040 destination 20423d5e-188c-4e10-9893-588ceb81b354:670a7b20-fecd-45c6-af5c-3c7b98258224:013d8855-4e49-4984-8266-6a5e9437dff7 apparentsize 41943040 (image:815) 2017-05-10 11:36:20,306-0300 INFO (tasks/0) [storage.Image] image 670a7b20-fecd-45c6-af5c-3c7b98258224 in domain 20423d5e-188c-4e10-9893-588ceb81b354 has vollist [] (image:319) 2017-05-10 11:36:20,306-0300 INFO (tasks/0) [storage.Image] Create placeholder /rhev/data-center/00000001-0001-0001-0001-000000000311/20423d5e-188c-4e10-9893-588ceb81b354/images/670a7b20-fecd-45c6-af5c-3c7b98258224 for image's volumes (image:149) 2017-05-10 11:36:20,392-0300 INFO (tasks/0) [storage.Volume] Request to create RAW volume /rhev/data-center/00000001-0001-0001-0001-000000000311/20423d5e-188c-4e10-9893-588ceb81b354/images/670a7b20-fecd-45c6-af5c-3c7b98258224/013d8855-4e49-4984-8266-6a5e9437dff7 with size = 20480 sectors (fileVolume:439) 2017-05-10 11:37:58,453-0300 INFO (tasks/0) [storage.VolumeManifest] sdUUID=20423d5e-188c-4e10-9893-588ceb81b354 imgUUID=670a7b20-fecd-45c6-af5c-3c7b98258224 volUUID = 013d8855-4e49-4984-8266-6a5e9437dff7 legality = LEGAL (volume:393)

2 7

Upgrading HC from 4.0 to 4.1
by Gianluca Cecchi 05 Jul '17

05 Jul '17

Hello, I'm going to try to update to 4.1 an HC environment, currently on 4.0 with 3 nodes in CentOS 7.3 and one of them configured as arbiter Any particular caveat in HC? Are the steps below, normally used for Self Hosted Engine environments the only ones to consider? - update repos on the 3 hosts and on the engine vm - global maintenance - update engine - update also os packages of engine vm - shutdown engine vm - disable global maintenance - verify engine vm boots and functionality is ok Then - update hosts: preferred way will be from the gui itself that takes care of moving VMs, maintenance and such or to proceed manually? Is there a preferred order with which I have to update the hosts, after updating the engine? Arbiter for first or as the latest or not important at all? Any possible problem having disaligned versions of glusterfs packages until I complete all the 3 hosts? Any known bugs passing from 4.0 to 4.1 and related glusterfs components? Thanks in advance, Gianluca

3 10

ovirt-guest-agent - Ubuntu 16.04
by FERNANDO FREDIANI 05 Jul '17

05 Jul '17

This is a multi-part message in MIME format. --------------3E6DFB8B8A97AF19E5E33BB0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hello Is the maintainer of ovirt-guest-agent for Ubuntu on this mail list ? I have noticed that if you install ovirt-guest-agent package from Ubuntu repositories it doesn't start. Throws an error about python and never starts. Has anyone noticied the same ? OS in this case is a clean minimal install of Ubuntu 16.04. Installing it from the following repository works fine - http://download.opensuse.org/repositories/home:/evilissimo:/ubuntu:/16.04/x… Fernando --------------3E6DFB8B8A97AF19E5E33BB0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font face="arial, helvetica, sans-serif">Hello<br> <br> Is the maintainer of ovirt-guest-agent for Ubuntu on this mail list ?<br> <br> I have noticed that if you install ovirt-guest-agent package from Ubuntu repositories it doesn't start. Throws an error about python and never starts. Has anyone noticied the same ? OS in this case is a clean minimal install of Ubuntu 16.04.<br> <br> Installing it from the following repository works fine - <a class="moz-txt-link-freetext" href="http://download.opensuse.org/repositories/home:/evilissimo:/ubuntu:/16.04/x…">http://download.opensuse.org/repositories/home:/evilissimo:/ubuntu:/16.04/x…</a><br> <br> Fernando<br> </font> </body> </html> --------------3E6DFB8B8A97AF19E5E33BB0--

3 3

[Ovirt 4.0.6] Suggestion required for Network Throughput options
by TranceWorldLogic . 04 Jul '17

04 Jul '17

Hi, To increase network throughput we have changed txqueuelen of network device and bridge manually. And observed improved throughput. But in ovirt I not see any option to increase txqueuelen. Can someone suggest me what will be the right way to increase throughput ? Note: I am trying to increase throughput for ipsec packets. Thanks, ~Rohit

2 9