March 2017 - Users - oVirt List Archives

Extend disk in engine appliance in ovirt 4.1.0?
by gflwqs gflwqs 13 Mar '17

13 Mar '17

Hi, I have recently installed a new ovirt environment from scratch. The version is 4.1.0. I made a 90GB disk for the hosted engine. When i had installed it and log into the engine i see that it has only configured 10GB of those 90GB. So there is 80GB of unconfigured disk unused. That is fine as long as it had used lvm but it has not meaning i have to take the engine down to extend the disk? My questions is: 1. Why does it not configure all disk? 2. Why is it not using lvm? 3. What should i do to extend the disk? Regards Christian

2 1

HE in bad stauts, will not start following storage issue - HELP
by Ian Neilsen 12 Mar '17

12 Mar '17

Hi All I had a storage issue with my gluster volumes running under ovirt hosted. I now cannot start the hosted engine manager vm from "hosted-engine --vm-start". I've scoured the net to find a way, but can't seem to find anything concrete. Running Centos7, ovirt 4.0 and gluster 3.8.9 How do I recover the engine manager. Im at a loss! Engine Status = score between nodes was 0 for all, now node 1 is reading 3400, but all others are 0 {"reason": "bad vm status", "health": "bad", "vm": "down", "detail": "down"} Logs from agent.log ================== INFO::2017-03-09 19:32:52,600::state_decorators::51::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(check) Global maintenance detected INFO::2017-03-09 19:32:52,603::hosted_engine::612::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_vdsm) Initializing VDSM INFO::2017-03-09 19:32:54,820::hosted_engine::639::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_storage_images) Connecting the storage INFO::2017-03-09 19:32:54,821::storage_server::219::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Connecting storage server INFO::2017-03-09 19:32:59,194::storage_server::226::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Connecting storage server INFO::2017-03-09 19:32:59,211::storage_server::233::ovirt_hosted_engine_ha.lib.storage_server.StorageServer::(connect_storage_server) Refreshing the storage domain INFO::2017-03-09 19:32:59,328::hosted_engine::666::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_storage_images) Preparing images INFO::2017-03-09 19:32:59,328::image::126::ovirt_hosted_engine_ha.lib.image.Image::(prepare_images) Preparing images INFO::2017-03-09 19:33:01,748::hosted_engine::669::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_storage_images) Reloading vm.conf from the shared storage domain INFO::2017-03-09 19:33:01,748::config::206::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file) Trying to get a fresher copy of vm configuration from the OVF_STORE WARNING::2017-03-09 19:33:04,056::ovf_store::107::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan) Unable to find OVF_STORE ERROR::2017-03-09 19:33:04,058::config::235::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file) Unable to get vm.conf from OVF_STORE, falling back to initial vm.conf ovirt-ha-agent logs ================ ovirt-ha-agent ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config ERROR Unable to get vm.conf from OVF_STORE, falling back to initial vm.conf vdsm ====== vdsm vds.dispatcher ERROR SSL error during reading data: unexpected eof ovirt-ha-broker ============ ovirt-ha-broker cpu_load_no_engine.EngineHealth ERROR Failed to getVmStats: 'pid' -- Ian Neilsen Mobile: 0424 379 762 Linkedin: http://au.linkedin.com/in/ianneilsen Twitter : ineilsen

3 4

host-only network
by qinglong.dong＠horebdata.cn 12 Mar '17

12 Mar '17

This is a multi-part message in MIME format. ------=_001_NextPart562105536544_=---- Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: base64 SGksIGFsbA0KICAgICAgICBJIGhhdmUgbm90aWNlZCB0aGF0IGt2bSBzdXBwb3J0cyBob3N0LW9u bHkgbmV0d29yayBtb2RlLiBTbyBJIHdhbnQgdG8ga25vdyBob3cgdG8gY3JlYXRlIGEgaG9zdC1v bmx5IHZpbmMgZm9yIGEgdmlydHVhbCBtYWNoaW5lIGluIG92aXJ0Lg0KICAgICAgICBBbnlvbmUg Y2FuIGhlbHA/IFRoYW5rcyENCg== ------=_001_NextPart562105536544_=---- Content-Type: text/html; charset="ISO-8859-1" Content-Transfer-Encoding: quoted-printable <html><head><meta http-equiv=3D"content-type" content=3D"text/html; charse= t=3DISO-8859-1"><style>body { line-height: 1.5; }body { font-size: 10.5pt;= font-family: ????; color: rgb(0, 0, 0); line-height: 1.5; }body { font-si= ze: 10.5pt; color: rgb(0, 0, 0); line-height: 1.5; }</style></head><body>H= i, all<div>        I have noticed that kvm s= upports host-only network mode. So I want to know how to create a host-onl= y vinc for a virtual machine in ovirt.</div><div>   &nbsp= ;    Anyone can help? Thanks!</div></body></html> ------=_001_NextPart562105536544_=------

2 1

Re: [ovirt-users] Users Digest, Vol 66, Issue 86
by algotech 10 Mar '17

10 Mar '17

--------------7FAFD472380337AE680E33F3 Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 7bit It looks that any memory eager running and swap fails afterwards will write here who's response of this On 03/10/2017 01:56 PM, users-request(a)ovirt.org wrote: > Send Users mailing list submissions to > users(a)ovirt.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.ovirt.org/mailman/listinfo/users > or, via email, send a message with subject or body 'help' to > users-request(a)ovirt.org > > You can reach the person managing the list at > users-owner(a)ovirt.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Users digest..." > > > Today's Topics: > > 1. Error on Node upgrade 2 (FERNANDO FREDIANI) > 2. Re: oVirt VM backup and restore (Gianluca Cecchi) > 3. Re: VDSM hang (Nir Soffer) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 10 Mar 2017 09:37:00 -0300 > From: FERNANDO FREDIANI <fernando.frediani(a)upx.com> > To: "users(a)ovirt.org" <users(a)ovirt.org> > Subject: [ovirt-users] Error on Node upgrade 2 > Message-ID: <3a306136-25aa-4533-4267-f1b8be58fd87(a)upx.com> > Content-Type: text/plain; charset=utf-8; format=flowed > > I am not sure if another email I sent went through but has anyone got > problems when upgrading a running oVirt-node-ng from 4.1.0 to 4.1.1. > > Is the only solution a complete reinstall of the node ? > > Thanks > > Fernando > > > > ------------------------------ > > Message: 2 > Date: Fri, 10 Mar 2017 13:52:35 +0100 > From: Gianluca Cecchi <gianluca.cecchi(a)gmail.com> > To: Juan Hern?ndez <jhernand(a)redhat.com> > Cc: "users(a)ovirt.org" <users(a)ovirt.org> > Subject: Re: [ovirt-users] oVirt VM backup and restore > Message-ID: > <CAG2kNCwA3-jubtjcz=bzwX+V5-a5V85=HKi5pr=447Ad-tRD4w(a)mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > On Thu, Mar 9, 2017 at 11:23 AM, Juan Hern?ndez <jhernand(a)redhat.com> wrote: > >>> Very good point Gialuca, you are right, the 'persist_memorystate' >> flag >>> is 'true' by default, and that makes the pause longer. Would you be >> so >>> kind to add it to the 'vm_backup.py' example that is part of version >> 4 >>> of the SDK? >>> >>> >>> https://github.com/oVirt/ovirt-engine-sdk/blob/master/ >> sdk/examples/vm_backup.py#L143-L151 >>> <https://github.com/oVirt/ovirt-engine-sdk/blob/master/ >> sdk/examples/vm_backup.py#L143-L151> >>> (Note that that Gibhub is just a mirror, the change needs to be >> submited >>> using gerrit.ovirt.org <http://gerrit.ovirt.org>). >>> >>> >>> >>> I already verified (on a 4.1 infra) that changing vm_backup.py >>> downloaded yesterday from master this way (apart connection paramters): >>> >>> $ diff vm_backup.py vm_backup.py.orig >>> 150d149 >>> < persist_memorystate=False, >>> >>> I get the backup result and snapshot is correctly without memory saved >>> (and no pause at VM side) >>> >> [snip] >> I see that you already have a gerrit.ovirt.org, so it shouldn't be >> difficult. The initial setup should be like this: >> >> $ git config --global user.name youruser >> $ git config --global user.email your@email >> $ git clone ssh://youruser@gerrit.ovirt.org:29418/ovirt-engine-sdk >> $ gitdir=$(git rev-parse --git-dir); scp -p -P 29418 >> youruser@gerrit.ovirt.org:hooks/commit-msg ${gitdir}/hooks/ >> >> Then, to submit the patch: >> >> $ cd ovirt-engine-sdk >> $ Edit the vm_backup.py file, and make your changes. >> $ git commit -a -s >> $ git push origin HEAD:refs/for/master >> >> > Ok. I found the time to try and apparently it worked as expected. > The master (you? jenkins CI? ;-) should see my change... > Just learnt (a little...) another thing > > sys admins often try to put an eye inside devs field but the reverse seldom > happens ;-) >

1 0

PHX outage report 10.03.2017
by Evgheni Dereveanchin 10 Mar '17

10 Mar '17

Hi everyone, Tonight we experienced a hardware fault on one of our PHX storage servers. The faulty server was used to provide storage for multiple production VMs. Since automatic failover did not happen they became unavailable. The outage lasted between 09.03.2017 20:36 UTC and 10.03.2017 09:15 UTC Unavailable services included all of oVirt's CI infrastructure, mailing lists and package repositories. Services in other datecenters such as gerrit.ovirt.org and www.ovirt.org were not affected. We brought storage back up and this allowed for VMs to be restarted. If you see tests that failed or didn't run during this period please re-trigger them. If there are still persisting issues please report them to the tracker ticket that has a more detailed root cause analysis: https://ovirt-jira.atlassian.net/browse/OVIRT-1244 Sorry for the inconvenience caused. We are working on improving reliability of the environment to avoid similar incidents from happening in the future. -- Regards, Evgheni Dereveanchin

1 0

oVirt VM backup and restore
by raphael awadallah 10 Mar '17

10 Mar '17

Dears Engineers, I hope you are doing great, I wish you can help me with a tutorial that shows how to take a scheduled backups for virtual machines running on oVirt node 4 and how to restore them. Best regards

8 18

Re: [ovirt-users] Unable to add permissions for LDAP users
by Richard Neuboeck 10 Mar '17

10 Mar '17

This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --2LvNVti3HDOn1MhIrbe5B2snDhjNOnQPn Content-Type: multipart/mixed; boundary="cUgn38JlIV4VKxpoXvonH2a8Rp00918Nu"; protected-headers="v1" From: Richard Neuboeck <hawk(a)tbi.univie.ac.at> To: users <users(a)ovirt.org> Message-ID: <ce3a6463-b08d-6af6-8adc-66f236ce0bed(a)tbi.univie.ac.at> Subject: Re: [ovirt-users] Unable to add permissions for LDAP users References: <71057a13-ee3d-aba0-b005-9fcbc906f375(a)tbi.univie.ac.at> In-Reply-To: <71057a13-ee3d-aba0-b005-9fcbc906f375(a)tbi.univie.ac.at> --cUgn38JlIV4VKxpoXvonH2a8Rp00918Nu Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 03/10/2017 09:46 AM, Ondra Machacek wrote: > So what's your provider 389ds or FreeIPA? >=20 > Note that both use differrent unique ID. IPA is using 'ipaUniqueID', > and 389ds is using 'nsuniqueid'. DId you tried both? Thanks for pointing that out! It works perfectly if I use IPA. I didn't know they have different identifiers (though it might have been obvious to me since there is a separate IPA option...). I clung to the thought that FreeIPA uses 389ds internally. Thanks a lot! Richard >=20 > I can successfully run a search and also login > from the setup script. >=20 > After running the setup I rebootet the Engine VM to make sure > everything is restarted. >=20 > In the web UI configuration for 'System Permissions' I'm able to > find users from LDAP but when I try to 'Add' a selected user the UI= > shows me this error: 'User admin@internal-authz failed to grant > permission for Role SuperUser on System to User/Group <UNKNOWN>.'. >=20 > In then engine.log the following lines are generated: > 2017-03-09 14:02:49,308+01 INFO > [org.ovirt.engine.core.bll.AddSystemPermissionCommand] > (org.ovirt.thread.pool-6-thread-4) > [1ebae5e0-e5f6-49ba-ac80-95266c582893] Running command: > AddSystemPermissionCommand internal: false. Entities affected : ID= : > aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group > MANIPULATE_PERMISSIONS with role type USER, ID: > aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group > ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER > 2017-03-09 14:02:49,319+01 ERROR > [org.ovirt.engine.core.bll.AddSystemPermissionCommand] > (org.ovirt.thread.pool-6-thread-4) > [1ebae5e0-e5f6-49ba-ac80-95266c582893] Transaction rolled-back for > command 'org.ovirt.engine.core.bll.AddSystemPermissionCommand'. > 2017-03-09 14:02:49,328+01 ERROR > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirect= or] > (org.ovirt.thread.pool-6-thread-4) > [1ebae5e0-e5f6-49ba-ac80-95266c582893] EVENT_ID: > USER_ADD_SYSTEM_PERMISSION_FAILED(867), Correlation ID: > 1ebae5e0-e5f6-49ba-ac80-95266c582893, Call Stack: null, Custom Even= t > ID: -1, Message: User admin@internal-authz failed to grant > permission for Role SuperUser on System to User/Group <UNKNOWN>. >=20 >=20 > So far I've re-run the ldap-setup routine. I made sure all newly > generated files in /etc/ovirt-engine/[aaa|extensions.d] are owned b= y > ovirt:ovirt (instead of root) and have 0600 as permission (instead > of 0644). That didn't change anything. >=20 > I've also found an older bug report but for oVirt 3.5 > https://bugzilla.redhat.com/show_bug.cgi?id=3D1121954 > <https://bugzilla.redhat.com/show_bug.cgi?id=3D1121954> > That didn't reveal any new either. >=20 > Any ideas what I could try next? >=20 > Thanks! > Cheers > Richard >=20 >=20 >=20 >=20 > On 10/06/2016 04:36 PM, Ondra Machacek wrote: > > On 10/06/2016 01:47 PM, Michael Burch wrote: > >> I'm using the latest ovirt on CentOS7 with the aaa-ldap > extension. > >> I can > >> successfully authenticate as an LDAP user. I can also login as > >> admin@internal and search for, find, and select LDAP users but I= > >> cannot > >> add permissions for them. Each time I get the error "User > >> admin@internal-authz failed to grant permission for Role > UserRole on > >> System to User/Group <UNKNOWN>." > > > > This error usually means bad unique attribute used. > > > >> > >> > >> I have no control over the LDAP server, which uses custom > >> objectClasses > >> and uses groupOfNames instead of PosixGroups. I assume I need > to set > >> sequence variables to accommodate our group configuration but I'= m > >> at a > >> loss as to where to begin. the The config I have is as follows: > >> > >> > >> include =3D <rfc2307-generic.properties> > >> > >> vars.server =3D labauth.lan.lab.org <http://labauth.lan.lab.org>= > >> > >> pool.authz.auth.type =3D none > >> pool.default.serverset.type =3D single > >> pool.default.serverset.single.server =3D ${global:vars.server} > >> pool.default.ssl.startTLS =3D true > >> pool.default.ssl.insecure =3D true > >> > >> pool.default.connection-options.connectTimeoutMillis =3D 10000 > >> pool.default.connection-options.responseTimeoutMillis =3D 90000 > >> sequence-init.init.100-my-basedn-init-vars =3D my-basedn-init-va= rs > >> sequence.my-basedn-init-vars.010.description =3D set baseDN > >> sequence.my-basedn-init-vars.010.type =3D var-set > >> sequence.my-basedn-init-vars.010.var-set.variable =3D simple_bas= eDN > >> sequence.my-basedn-init-vars.010.var-set.value =3D o=3DLANLAB > >> > >> sequence-init.init.101-my-objectclass-init-vars =3D > >> my-objectclass-init-vars > >> sequence.my-objectclass-init-vars.020.description =3D set > objectClass > >> sequence.my-objectclass-init-vars.020.type =3D var-set > >> sequence.my-objectclass-init-vars.020.var-set.variable =3D > >> simple_filterUserObject > >> sequence.my-objectclass-init-vars.020.var-set.value =3D > >> (objectClass=3DlabPerson)(uid=3D*) > >> > >> search.default.search-request.derefPolicy =3D NEVER > >> > >> sequence-init.init.900-local-init-vars =3D local-init-vars > >> sequence.local-init-vars.010.description =3D override name space= > >> sequence.local-init-vars.010.type =3D var-set > >> sequence.local-init-vars.010.var-set.variable =3D > >> simple_namespaceDefault > >> sequence.local-init-vars.010.var-set.value =3D * > > > > What's this^ for? I think it's unusable. > > > >> > >> sequence.local-init-vars.020.description =3D apply filter to use= rs > >> sequence.local-init-vars.020.type =3D var-set > >> sequence.local-init-vars.020.var-set.variable =3D > >> simple_filterUserObject > >> sequence.local-init-vars.020.var-set.value =3D > >> ${seq:simple_filterUserObject}(employeeStatus=3D3) > >> > >> sequence.local-init-vars.030.description =3D apply filter to gro= ups > >> sequence.local-init-vars.030.type =3D var-set > >> sequence.local-init-vars.030.var-set.variable =3D > >> simple_filterGroupObject > >> sequence.local-init-vars.030.var-set.value =3D > >> (objectClass=3DgroupOfUniqueNames) > > > > This looks as hard to maintain file. I would suggest you to inser= t > > into this file just following: > > > > include =3D <rfc2307-mycustom.properties> > > > > vars.server =3D labauth.lan.lab.org <http://labauth.lan.lab.org>= > > > > pool.authz.auth.type =3D none > > pool.default.serverset.type =3D single > > pool.default.serverset.single.server =3D ${global:vars.server} > > pool.default.ssl.startTLS =3D true > > pool.default.ssl.insecure =3D true > > > > pool.default.connection-options.connectTimeoutMillis =3D 10000 > > pool.default.connection-options.responseTimeoutMillis =3D 90000 > > > > # Set custom base DN > > sequence-init.init.100-my-basedn-init-vars =3D my-basedn-init-va= rs > > sequence.my-basedn-init-vars.010.description =3D set baseDN > > sequence.my-basedn-init-vars.010.type =3D var-set > > sequence.my-basedn-init-vars.010.var-set.variable =3D simple_bas= eDN > > sequence.my-basedn-init-vars.010.var-set.value =3D o=3DLANLAB > > > > And then create in directory > > '/usr/share/ovirt-engine-extension-aaa-ldap/profiles/' file > > 'rfc2307-mycustom.properties' with content: > > > > include =3D <rfc2307.properties> > > > > sequence-init.init.100-rfc2307-mycustom-init-vars =3D > > rfc2307-mycustom-init-vars > > sequence.rfc2307-mycustom-init-vars.010.description =3D set > unique attr > > sequence.rfc2307-mycustom-init-vars.010.type =3D var-set > > sequence.rfc2307-mycustom-init-vars.010.var-set.variable =3D > > rfc2307_attrsUniqueId > > sequence.rfc2307-mycustom-init-vars.010.var-set.value =3D > FIND_THIS_ONE > > > > sequence.rfc2307-mycustom-init-vars.020.type =3D var-set > > sequence.rfc2307-mycustom-init-vars.020.var-set.variable =3D > > simple_filterUserObject > > sequence.rfc2307-mycustom-init-vars.020.var-set.value =3D > > > (objectClass=3DlabPerson)(employeeStatus=3D3)(${seq:simple_attrsUse= rName}=3D*) > > > > > > > > The FIND_*THIS_ONE* replace with the unique attribute of > labPerson(I > > guess). It can be extended attribute(+,++). > > > > $ LDAPTLS_REQCERT=3Dnever ldapsearch -ZZ -x -b 'o=3DLANLAB' -H > > ldap://labauth.lan.lab.org <http://labauth.lan.lab.org> > 'objectClass=3DlabPerson' > > > > maybe (or even with two +): > > $ LDAPTLS_REQCERT=3Dnever ldapsearch -ZZ -x -b 'o=3DLANLAB' -H > > ldap://labauth.lan.lab.org <http://labauth.lan.lab.org> > 'objectClass=3DlabPerson' + > > > > The question is if even your implementation has unique > attribute, does > > it? > > > > Also may you share what's your LDAP provider? And maybe if you > share > > content of some user it would help as well. > > > >> > >> > >> > >> > >> _______________________________________________ > >> Users mailing list > >> Users(a)ovirt.org <mailto:Users@ovirt.org> > >> http://lists.ovirt.org/mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users> > >> > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org <mailto:Users@ovirt.org> > > http://lists.ovirt.org/mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users> >=20 >=20 > -- > /dev/null >=20 >=20 --=20 /dev/null --cUgn38JlIV4VKxpoXvonH2a8Rp00918Nu-- --2LvNVti3HDOn1MhIrbe5B2snDhjNOnQPn Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJYwnegAAoJEA7XCanqEVqIODIQAM4IumlowJYvAoH/+vVTaUT1 pxzYVsOFYHhs32f1in9aqJ37esa1CXngUcB1gHm1QcBixq1FEH1iVEF1Iy22nyXM gNoOh4R7meoUzqpdlcqYpdTdo3F3v6KgWDRuz9yxH912MZzheXA9BGZ0qhdbQH3S a1eo2UHNm6wpyS+6CCgUirM8fbrjdb6aTGTuXNQ1px3GaqFFHkQvlWPlENatSxGw G3IqVoPHhuDNsFDyF6dG6oF2iTbQdzlvk84x3aOztX/nGnxV1dY00/73qEp+8aXK 0krTp0hjiGI0uRiOHChl0DSUuO9VvlTmmqjxYCN1z2ZYHZkMaK590v6YtXmT42tM VRIsqt6J5HpyLLiQWmCNPPkXf/s7iuG1zAmO+fi4vd5x6gQlW7ao6lLFFRqB8dVr FuJyv7DW6PcBNjNiG0zCLbGb431t2MK9AaSxF+qb8KmTluDBqQ2trdijM43J+3Jk /ptoXfpSzWmX2HkDLuaJL0NeQ6F5vqGUZRgu9IkXS2RAvQwLXflm/cvMKsj32EkZ 39gF5k1ViYAdtk9YUwBObor6uxnb0UpdrvZyA5dUEHsYaP6Yw+hVNqi0tloTN9wL Q+J6CdHK+lRkRppddoEdSmnAtBqhN5/woZEqrBZ1E1jFRUw7KTefbaeUpDbpWQvS 0csSL7D0IScsBJE2kLSA =73cu -----END PGP SIGNATURE----- --2LvNVti3HDOn1MhIrbe5B2snDhjNOnQPn--

1 0

Unable to add permissions for LDAP users
by Michael Burch 10 Mar '17

10 Mar '17

--_000_SN1PR10MB071807A20FF1DCCB62983C19D5C70SN1PR10MB0718namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I'm using the latest ovirt on CentOS7 with the aaa-ldap extension. I can su= ccessfully authenticate as an LDAP user. I can also login as admin@internal= and search for, find, and select LDAP users but I cannot add permissions f= or them. Each time I get the error "User admin@internal-authz failed to gra= nt permission for Role UserRole on System to User/Group <UNKNOWN>." I have no control over the LDAP server, which uses custom objectClasses and= uses groupOfNames instead of PosixGroups. I assume I need to set sequence = variables to accommodate our group configuration but I'm at a loss as to wh= ere to begin. the The config I have is as follows: include =3D <rfc2307-generic.properties> vars.server =3D labauth.lan.lab.org pool.authz.auth.type =3D none pool.default.serverset.type =3D single pool.default.serverset.single.server =3D ${global:vars.server} pool.default.ssl.startTLS =3D true pool.default.ssl.insecure =3D true pool.default.connection-options.connectTimeoutMillis =3D 10000 pool.default.connection-options.responseTimeoutMillis =3D 90000 sequence-init.init.100-my-basedn-init-vars =3D my-basedn-init-vars sequence.my-basedn-init-vars.010.description =3D set baseDN sequence.my-basedn-init-vars.010.type =3D var-set sequence.my-basedn-init-vars.010.var-set.variable =3D simple_baseDN sequence.my-basedn-init-vars.010.var-set.value =3D o=3DLANLAB sequence-init.init.101-my-objectclass-init-vars =3D my-objectclass-init-var= s sequence.my-objectclass-init-vars.020.description =3D set objectClass sequence.my-objectclass-init-vars.020.type =3D var-set sequence.my-objectclass-init-vars.020.var-set.variable =3D simple_filterUse= rObject sequence.my-objectclass-init-vars.020.var-set.value =3D (objectClass=3DlabP= erson)(uid=3D*) search.default.search-request.derefPolicy =3D NEVER sequence-init.init.900-local-init-vars =3D local-init-vars sequence.local-init-vars.010.description =3D override name space sequence.local-init-vars.010.type =3D var-set sequence.local-init-vars.010.var-set.variable =3D simple_namespaceDefault sequence.local-init-vars.010.var-set.value =3D * sequence.local-init-vars.020.description =3D apply filter to users sequence.local-init-vars.020.type =3D var-set sequence.local-init-vars.020.var-set.variable =3D simple_filterUserObject sequence.local-init-vars.020.var-set.value =3D ${seq:simple_filterUserObjec= t}(employeeStatus=3D3) sequence.local-init-vars.030.description =3D apply filter to groups sequence.local-init-vars.030.type =3D var-set sequence.local-init-vars.030.var-set.variable =3D simple_filterGroupObject sequence.local-init-vars.030.var-set.value =3D (objectClass=3DgroupOfUnique= Names) --_000_SN1PR10MB071807A20FF1DCCB62983C19D5C70SN1PR10MB0718namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" style=3D"display:none;"></style> </head> <body dir=3D"ltr"> <div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font= -family:Calibri,Arial,Helvetica,sans-serif;"> I'm using the latest ovirt on CentOS7 with the aaa-ldap extension. I can= successfully authenticate as an LDAP user. I can also login as admin@inter= nal and search for, find, and select LDAP users but I cannot add permission= s for them. Each time I get the error "User admin@internal-authz failed to grant permission for= Role UserRole on System to User/Group <UNKNOWN>." I have no control over the LDAP server, which uses custom objectClasses = and uses groupOfNames instead of PosixGroups. I assume I need to set sequen= ce variables to accommodate our group configuration but I'm at a loss as to= where to begin. the The config I have is as follows: <div>include =3D <rfc2307-generic.properties> vars.server =3D labauth.lan.lab.org pool.authz.auth.type =3D none pool.default.serverset.type =3D single pool.default.serverset.single.server =3D ${global:vars.server} pool.default.ssl.startTLS =3D true pool.default.ssl.insecure =3D true pool.default.connection-options.connectTimeoutMillis =3D 10000 pool.default.connection-options.responseTimeoutMillis =3D 90000 sequence-init.init.100-my-basedn-init-vars =3D my-basedn-init-vars sequence.my-basedn-init-vars.010.description =3D set baseDN sequence.my-basedn-init-vars.010.type =3D var-set sequence.my-basedn-init-vars.010.var-set.variable =3D simple_baseDN sequence.my-basedn-init-vars.010.var-set.value =3D o=3DLANLAB sequence-init.init.101-my-objectclass-init-vars =3D my-objectclass-init-var= s sequence.my-objectclass-init-vars.020.description =3D set objectClass sequence.my-objectclass-init-vars.020.type =3D var-set sequence.my-objectclass-init-vars.020.var-set.variable =3D simple_filterUse= rObject sequence.my-objectclass-init-vars.020.var-set.value =3D (objectClass=3DlabP= erson)(uid=3D*) search.default.search-request.derefPolicy =3D NEVER sequence-init.init.900-local-init-vars =3D local-init-vars sequence.local-init-vars.010.description =3D override name space sequence.local-init-vars.010.type =3D var-set sequence.local-init-vars.010.var-set.variable =3D simple_namespaceDefault<b= r> sequence.local-init-vars.010.var-set.value =3D * sequence.local-init-vars.020.description =3D apply filter to users sequence.local-init-vars.020.type =3D var-set sequence.local-init-vars.020.var-set.variable =3D simple_filterUserObject<b= r> sequence.local-init-vars.020.var-set.value =3D ${seq:simple_filterUserObjec= t}(employeeStatus=3D3) sequence.local-init-vars.030.description =3D apply filter to groups sequence.local-init-vars.030.type =3D var-set sequence.local-init-vars.030.var-set.variable =3D simple_filterGroupObject<= br> sequence.local-init-vars.030.var-set.value =3D (objectClass=3DgroupOfUnique= Names) </div> </div> </body> </html> --_000_SN1PR10MB071807A20FF1DCCB62983C19D5C70SN1PR10MB0718namp_--

3 3

HE vm fails to migrate due to host CPU incompatibility even after changing cluster CPU type
by Stefano Stagnaro 09 Mar '17

09 Mar '17

Hi guys, I've started an oVirt 4.1 HE deployment on a Broadwell based server. Then I added to HE a second, older host based on Nehalem. I've downgraded the cluster CPU type to Nehalem to accommodate host2 and it finally reached score 3400. However, when I try to migrate HE vm it fails with the following error: 2017-03-03 20:19:51,814 ERROR (migsrc/b0d38435) [virt.vm] (vmId='b0d38435-5774-4ca9-ad24-70b57b5bc25d') unsupported configuration: guest and host CPU are not compatible: Host CPU does not provide required features: pclmuldq, fma, pcid, x2apic, movbe, tsc-deadline, aes, xsave, avx, fsgsbase, bmi1, hle, avx2, smep, bmi2, erms, invpcid, rtm, rdseed, adx, smap, 3dnowprefetch; try using 'Broadwell-noTSX' CPU model (migration:265) I believe the problem is in the HE vm XML where the cpu is still configured as Broadwell. how can I change this specific setting without losing the deployment? Please find all the relevant logs at the following link: https://www.dropbox.com/sh/njl9aofhdw10ses/AADf2Ql4GKVIKcbgLivbmjC2a Besides that, I believe this is a wrong behavior because HE should follow cluster properties (otherwise do not reach score 3400); do you believe is it worth opening a issue on bugzilla? Thank you, Stefano.

3 3

cannot exceed maximum memory size
by Marcelo Leandro 09 Mar '17

09 Mar '17

Hello , I am have an script that create VM , after upgrade to 4.1 I have this erro when trying create a new VM: detail: Cannot add VM. Memory size (20480MB) cannot exceed maximum memory size (4096MB). my commando fore create VM : api.vms.add(params.VM(name="teste", memory=memo , cpu=cpu, cluster=api.clusters.get(cluster), template=api.templates.get('Blank'), type_="server")) I dont how specific the maximum memory size. Thanks Marcelo Leandro

6 8