May 2019 - Users - oVirt List Archives

reinstallation information
by nikkognt＠gmail.com 24 Jul '19

24 Jul '19

Hi, after a blackout one host of my ovirt not working properly. I tried to Reinstall it but ends with the following error "Failed to install Host ov1. Failed to execute stage 'Closing up': Failed to start service 'vdsmd'." I tried to start manually but it not start . Now, I would like to reinstall from iso ovirt node. After I put the host is in maintenance must I remove host from the cluster (Hosts -> host1 -> Remove) or I can reinstall without remove it? If I remore it from the cluster the network configurations I lose them or not? My ovirt version is oVirt Engine Version: 4.1.9.1-1.el7.centos.

2 6

Spice console very poor performance for Windows 10 vm
by Leo David 04 Jul '19

04 Jul '19

Hello Everyone, Maybe I am something wrong, but spice console seem to be very laggy and slow for windows 10 vms. I have tried both qxl and qxl-dod drivers, but no luck so far... As a notice, the Win 2012R2 vm console is running fine, the problem seems to only affect Windows 10. Any ideas, what should I do to sort this out ? Thank you very much ! Leo -- Best regards, Leo David

6 22

Windows Server 2019: Driver Signature Enforcement
by Vinícius Ferrão 19 Jun '19

19 Jun '19

Hello, I’m running oVirt 4.3.0 and installing Windows Server 2019 with UEFI Secure Boot is impossible with the bundled VirtIO drivers. Windows complains about invalid signatures on vioscsi.sys. The only way to boot the system is halting the process with F8 and them selecting: Disable Driver Signature Enforcement. So, what’s the recommended way to solve this? There’s no signed drivers? Thanks,

6 11

Metrics store install failed
by roy.morris＠ventura.org 17 Jun '19

17 Jun '19

I'm struggling installing the metrics store VMs. It appears that etcd image fails to download or build a template. Thank you ahead of time for your assistance. 2019-05-28 20:07:12,650 p=22689 u=root | Tuesday 28 May 2019 20:07:12 -0400 (0:00:00.097) 0:04:54.774 *********** 2019-05-28 20:07:12,687 p=22689 u=root | fatal: [master0.ent.co.ventura.ca.us]: FAILED! => {"msg": "The conditional check 'etcd_image != l_default_osm_etcd_image' failed. The error was: An unhandled exception occurred while templating '{{ osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ l_default_osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ etcd_image_dict[openshift_deployment_type] | lib_utils_oo_oreg_image((oreg_url | default('None'))) }}'. Error was a <class 'ansible.errors.AnsibleFilterError'>, original message: oreg_url malformed: registry.redhat.io\n\nThe error appears to have been in '/usr/share/ansible/openshift-ansible/roles/etcd/tasks/static.yml': line 5, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name: Warn if osm_etcd_image is redefined\n ^ here\n"} 2019-05-28 20:07:12,688 p=22689 u=root | NO MORE HOSTS LEFT ************************************************************************************************************************************************************************************************************************** 2019-05-28 20:07:12,689 p=22689 u=root | PLAY RECAP ********************************************************************************************************************************************************************************************************************************** 2019-05-28 20:07:12,689 p=22689 u=root | localhost : ok=35 changed=1 unreachable=0 failed=0 2019-05-28 20:07:12,689 p=22689 u=root | master0.ent.co.ventura.ca.us : ok=204 changed=16 unreachable=0 failed=1 2019-05-28 20:07:12,690 p=22689 u=root | INSTALLER STATUS **************************************************************************************************************************************************************************************************************************** 2019-05-28 20:07:12,693 p=22689 u=root | Initialization : Complete (0:00:10) 2019-05-28 20:07:12,693 p=22689 u=root | Health Check : Complete (0:00:22) 2019-05-28 20:07:12,694 p=22689 u=root | Node Bootstrap Preparation : Complete (0:01:59) 2019-05-28 20:07:12,694 p=22689 u=root | etcd Install : In Progress (0:00:28) 2019-05-28 20:07:12,694 p=22689 u=root | This phase can be restarted by running: playbooks/openshift-etcd/config.yml 2019-05-28 20:07:12,694 p=22689 u=root | Tuesday 28 May 2019 20:07:12 -0400 (0:00:00.044) 0:04:54.819 *********** 2019-05-28 20:07:12,694 p=22689 u=root | =============================================================================== 2019-05-28 20:07:12,697 p=22689 u=root | openshift_node : install needed rpm(s) ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 38.86s 2019-05-28 20:07:12,697 p=22689 u=root | Ensure openshift-ansible installer package deps are installed ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- 36.95s 2019-05-28 20:07:12,697 p=22689 u=root | openshift_node : Install node, clients, and conntrack packages ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- 23.81s 2019-05-28 20:07:12,698 p=22689 u=root | Run health checks (install) - EL ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 22.26s 2019-05-28 20:07:12,698 p=22689 u=root | container_runtime : Install Docker --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 7.10s 2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Disable all repositories ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 6.78s 2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Enable RHEL repositories ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 6.09s 2019-05-28 20:07:12,698 p=22689 u=root | openshift_node : Create credentials for registry auth -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5.57s 2019-05-28 20:07:12,698 p=22689 u=root | rhel_subscribe : Install Red Hat Subscription manager -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5.22s 2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Ensure libselinux-python is installed ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 5.09s 2019-05-28 20:07:12,698 p=22689 u=root | nickhammond.logrotate : nickhammond.logrotate | Install logrotate -------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.99s 2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install openssl --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.79s 2019-05-28 20:07:12,699 p=22689 u=root | openshift_node : Install dnsmasq ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.68s 2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install openssl --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.68s 2019-05-28 20:07:12,699 p=22689 u=root | os_firewall : Install firewalld packages --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.63s 2019-05-28 20:07:12,699 p=22689 u=root | install NetworkManager --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.59s 2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install etcd ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 4.57s 2019-05-28 20:07:12,699 p=22689 u=root | container_runtime : Create credentials for oreg_url ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.54s 2019-05-28 20:07:12,700 p=22689 u=root | openshift_node : Install NFS storage plugin dependencies ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.53s 2019-05-28 20:07:12,700 p=22689 u=root | openshift_node : Add firewalld allow rules ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 3.39s 2019-05-28 20:07:12,700 p=22689 u=root | Failure summary: 1. Hosts: master0.ent.co.ventura.ca.us Play: Configure etcd Task: Warn if osm_etcd_image is redefined Message: [0;31mThe conditional check 'etcd_image != l_default_osm_etcd_image' failed. The error was: An unhandled exception occurred while templating '{{ osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ l_default_osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ etcd_image_dict[openshift_deployment_type] | lib_utils_oo_oreg_image((oreg_url | default('None'))) }}'. Error was a <class 'ansible.errors.AnsibleFilterError'>, original message: oreg_url malformed: registry.redhat.io[0m [0;31m[0m [0;31mThe error appears to have been in '/usr/share/ansible/openshift-ansible/roles/etcd/tasks/static.yml': line 5, column 3, but may[0m [0;31mbe elsewhere in the file depending on the exact syntax problem.[0m [0;31m[0m [0;31mThe offending line appears to be:[0m [0;31m[0m [0;31m[0m [0;31m- name: Warn if osm_etcd_image is redefined[0m [0;31m ^ here[0m [0;31m[0m

2 11

oVirt survey - May 2019
by Sandro Bonazzola 10 Jun '19

10 Jun '19

As we continue to develop oVirt 4.3 and future releases, the Development and Integration teams at Red Hat would value insights on how you are deploying the oVirt environment. Please help us to hit the mark by completing this short survey. Survey will close on June 7th. If you're managing multiple oVirt deployments with very different use cases or very different deployments you can consider answering this survey multiple times. Please note the answers to this survey will be publicly accessible. This survey is under oVirt Privacy Policy available at https://www.ovirt.org/site/privacy-policy.html The survey is available here: https://forms.gle/8uzuVNmDWtoKruhm8 -- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV Red Hat EMEA <https://www.redhat.com/> sbonazzo(a)redhat.com <https://red.ht/sig> <https://redhat.com/summit>

1 1

Bond Mode 1 （Active-Backup）,vm unreachable for minutes when bond link change
by henaumars＠sina.com 06 Jun '19

06 Jun '19

Hello, I've a problem, all my ovirt hosts and vms are linked with a bonding mode 1（Active-Backup）2x10Gbps ovirt version：4.3 topology： ----------eno2 vm----------ovirtmgmt------bond0-----------eno1 ifcfg-bond0： # Generated by VDSM version 4.30.9.1 DEVICE=bond0 BONDING_OPTIOS='mode=1 miion=100' BRIDGE=ovirtmgmt MACADDR=a4:be:26:16:e9:b2 ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLER=no IPV6INIT=no ifcfg-eno1: # Generated by VDSM version 4.30.9.1 DEVICE=eno1 MASTER=bond0 SLAVE=yes ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLER=no IPV6INIT=no ifcfg-eno2: # Generated by VDSM version 4.30.9.1 DEVICE=eno2 MASTER=bond0 SLAVE=yes ONBOOT=yes MTU=1500 DEFROUTE=no NM_CONTROLLER=no IPV6INIT=no ifcfg-ovirtmgmt: # Generated by VDSM version 4.30.9.1 DEVICE=ovirtmgmt TYPE=Brodge DELAY=0 STP=off ONBOOT=yes IPADDR=x.x.x.x NEYMASK=255.255.255.0 GATEWAY=x.x.x.x BOOTPROTO=none MTU=1500 DEFROUTE=yes NM_CONTROLLER=no IPV6INIT=yes IPV6_AUTOCONF=yes cat /proc/net/bonding/bond0 Ethernet Chanel Bonding Driver:v3.7.1(April 27, 2011) Bonding Mode:fault-tolerance(active-ackup) Primary Slave:none Currently Active Slave:eno1 MII Status:up MII Polling Intercal (ms):100 Up Delay (ms) : 0 Down Delay (ms) : 0 Slave Interface :eno1 MII Status:up Speed : 10000 Mbps Link Failure Count : 0 Permanent HW addr :a4:be:26:16:e9:b2 Slave queue ID: 0 Slave Interface :eno2 MII Status:up Speed : 10000 Mbps Link Failure Count : 0 Permanent HW addr :a4:be:26:16:e9:b2 Slave queue ID: 0 ping vm from different subnet. Eveything is okay if I don't change bond link interface。When I unplug Currently Active Slave eno1,bond link change to eno2 as expected but vm become unreachable until external physical switch MAC Table ageing time expired.It seems that vm doesn't sent gratuitous ARP when bond link change. How can I fix if? vm os is Centos 7.5 ovirt version 4.2 also tested.

3 3

Uploading disk images (oVirt 4.3.3.1)
by adrianquintero＠gmail.com 03 Jun '19

03 Jun '19

Hi, I have an issue while trying to upload disk images thru the Web UI. "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser." My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to network restrictions I had to set rules in order to reach our ovirt-engine ovirt-engine.mydomain.com = 192.168.0.45 For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80 So as you can see I need to hit the ovirt-engine using ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the 11-setup-sso.conf file and adding "SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/" I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able to http://ovirt-engine.mydomain.otherstuff.com I know it might be related to the certificates but I need to be able to upload disk images using both URLs. any ideas?

3 6

Nvme over fabric array support through OVirt MANAGED_BLOCK_STORAGE Domain
by amit1.kumar＠intel.com 03 Jun '19

03 Jun '19

for an NVMe over fabric storage array that supports Cinder backend plugin, is it possible to use MANAGED_BLOCK_STORAGE domain to configure Virtual disk? in this case, is it required to have a single Virtual disk accessible from all the VDSM hosts (within the cluster) to support VM migration? Thanks, Amit

3 4

Ovirt-egine integration with OpenLDAP can't seem to find any users on Web-UI
by rubennunes12＠gmail.com 31 May '19

31 May '19

Hello everyone. So i don't know what i'm doing wrong but this doesn't seem to work, i already made the confgurations needed on the ovirt-engine-extension-aaa-ldap i'm a little desperate here. I'm going to put all the commands that i already made and the errors that they give: - ovirt-engine-extension-aaa-ldap-setup Stage: Setup validation NOTE: It is highly recommended to test drive the configuration before applying it into engine. Login sequence is executed automatically, but it is recommended to also execute Search sequence manually after successful Login sequence. Please provide credentials to test login flow: Enter user name: node1 Enter user password: [ INFO ] Executing login sequence... Login output: 2019-05-29 03:45:59,261+01 INFO ======================================================================== 2019-05-29 03:45:59,301+01 INFO ============================ Initialization ============================ 2019-05-29 03:45:59,301+01 INFO ======================================================================== 2019-05-29 03:45:59,385+01 INFO Loading extension '192.168.16.114-authn' 2019-05-29 03:45:59,540+01 INFO Extension '192.168.16.114-authn' loaded 2019-05-29 03:45:59,571+01 INFO Loading extension '192.168.16.114' 2019-05-29 03:45:59,585+01 INFO Extension '192.168.16.114' loaded 2019-05-29 03:45:59,585+01 INFO Initializing extension '192.168.16.114-authn' 2019-05-29 03:45:59,588+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] Creating LDAP pool 'authz' 2019-05-29 03:45:59,734+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] LDAP pool 'authz' information: vendor='null' version='null' 2019-05-29 03:45:59,736+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] Creating LDAP pool 'authn' 2019-05-29 03:45:59,754+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] LDAP pool 'authn' information: vendor='null' version='null' 2019-05-29 03:45:59,754+01 INFO Extension '192.168.16.114-authn' initialized 2019-05-29 03:45:59,755+01 INFO Initializing extension '192.168.16.114' 2019-05-29 03:45:59,756+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] Creating LDAP pool 'authz' 2019-05-29 03:45:59,775+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] LDAP pool 'authz' information: vendor='null' version='null' 2019-05-29 03:45:59,776+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] Available Namespaces: [ou=People,dc=lab,dc=local] 2019-05-29 03:45:59,777+01 INFO Extension '192.168.16.114' initialized 2019-05-29 03:45:59,777+01 INFO Start of enabled extensions list 2019-05-29 03:45:59,777+01 INFO Instance name: '192.168.16.114-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp7wX6s6/extensions.d/192.168.16.114-authn.properties', Initialized: 'true' 2019-05-29 03:45:59,778+01 INFO Instance name: '192.168.16.114', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp7wX6s6/extensions.d/192.168.16.114.properties', Initialized: 'true' 2019-05-29 03:45:59,778+01 INFO End of enabled extensions list 2019-05-29 03:45:59,778+01 INFO ======================================================================== 2019-05-29 03:45:59,778+01 INFO ============================== Execution =============================== 2019-05-29 03:45:59,778+01 INFO ======================================================================== 2019-05-29 03:45:59,779+01 INFO Iteration: 0 2019-05-29 03:45:59,780+01 INFO Profile='192.168.16.114' authn='192.168.16.114-authn' authz='192.168.16.114' mapping='null' 2019-05-29 03:45:59,780+01 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='192.168.16.114' user='node1' 2019-05-29 03:45:59,835+01 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='192.168.16.114' result=CREDENTIALS_INVALID 2019-05-29 03:45:59,843+01 SEVERE Authn.Result code is: CREDENTIALS_INVALID [ ERROR ] Login sequence failed Please investigate details of the failure (search for lines containing SEVERE log level). Select test sequence to execute (Done, Abort, Login, Search) [Abort]: - ovirt-engine-extensions-tool aaa login-user --profile=lab.local --user-name=node1 2019-05-29 03:57:35,194+01 INFO ======================================================================== 2019-05-29 03:57:35,224+01 INFO ============================ Initialization ============================ 2019-05-29 03:57:35,224+01 INFO ======================================================================== 2019-05-29 03:57:35,298+01 INFO Loading extension 'internal-authz' 2019-05-29 03:57:35,325+01 INFO Extension 'internal-authz' loaded 2019-05-29 03:57:35,334+01 INFO Loading extension 'internal-authn' 2019-05-29 03:57:35,336+01 INFO Extension 'internal-authn' loaded 2019-05-29 03:57:35,360+01 INFO Loading extension 'profile2-authz' 2019-05-29 03:57:35,510+01 INFO Extension 'profile2-authz' loaded 2019-05-29 03:57:35,516+01 INFO Loading extension 'profile1-authz' 2019-05-29 03:57:35,527+01 INFO Extension 'profile1-authz' loaded 2019-05-29 03:57:35,546+01 INFO Loading extension 'profile1-authn' 2019-05-29 03:57:35,558+01 INFO Extension 'profile1-authn' loaded 2019-05-29 03:57:35,586+01 INFO Loading extension 'profile2-authn' 2019-05-29 03:57:35,592+01 INFO Extension 'profile2-authn' loaded 2019-05-29 03:57:35,592+01 INFO Initializing extension 'internal-authz' 2019-05-29 03:57:35,754+01 INFO Extension 'internal-authz' initialized 2019-05-29 03:57:35,755+01 INFO Initializing extension 'internal-authn' 2019-05-29 03:57:35,771+01 INFO Extension 'internal-authn' initialized 2019-05-29 03:57:35,771+01 INFO Initializing extension 'profile2-authz' 2019-05-29 03:57:35,772+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Creating LDAP pool 'authz' 2019-05-29 03:57:35,859+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58')) 2019-05-29 03:57:35,861+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Available Namespaces: [dc=lab,dc=local] 2019-05-29 03:57:35,861+01 INFO Extension 'profile2-authz' initialized 2019-05-29 03:57:35,861+01 INFO Initializing extension 'profile1-authz' 2019-05-29 03:57:35,862+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Creating LDAP pool 'authz' 2019-05-29 03:57:35,873+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:35,874+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Available Namespaces: [dc=sybase,dc=pt] 2019-05-29 03:57:35,874+01 INFO Extension 'profile1-authz' initialized 2019-05-29 03:57:35,874+01 INFO Initializing extension 'profile1-authn' 2019-05-29 03:57:35,875+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authz' 2019-05-29 03:57:35,888+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:35,889+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authn' 2019-05-29 03:57:35,894+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:35,894+01 INFO Extension 'profile1-authn' initialized 2019-05-29 03:57:35,894+01 INFO Initializing extension 'profile2-authn' 2019-05-29 03:57:35,895+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authz' ^C2019-05-29 03:57:35,906+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58')) 2019-05-29 03:57:35,907+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authn' [root@ovirt ~]# ovirt-engine-extensions-tool aaa login-user --profile=lab.local --user-name=node1 2019-05-29 03:57:41,227+01 INFO ======================================================================== 2019-05-29 03:57:41,259+01 INFO ============================ Initialization ============================ 2019-05-29 03:57:41,260+01 INFO ======================================================================== 2019-05-29 03:57:41,311+01 INFO Loading extension 'internal-authz' 2019-05-29 03:57:41,331+01 INFO Extension 'internal-authz' loaded 2019-05-29 03:57:41,333+01 INFO Loading extension 'internal-authn' 2019-05-29 03:57:41,334+01 INFO Extension 'internal-authn' loaded 2019-05-29 03:57:41,345+01 INFO Loading extension 'profile2-authz' 2019-05-29 03:57:41,508+01 INFO Extension 'profile2-authz' loaded 2019-05-29 03:57:41,510+01 INFO Loading extension 'profile1-authz' 2019-05-29 03:57:41,551+01 INFO Extension 'profile1-authz' loaded 2019-05-29 03:57:41,552+01 INFO Loading extension 'profile1-authn' 2019-05-29 03:57:41,562+01 INFO Extension 'profile1-authn' loaded 2019-05-29 03:57:41,564+01 INFO Loading extension 'profile2-authn' 2019-05-29 03:57:41,602+01 INFO Extension 'profile2-authn' loaded 2019-05-29 03:57:41,602+01 INFO Initializing extension 'internal-authz' 2019-05-29 03:57:41,782+01 INFO Extension 'internal-authz' initialized 2019-05-29 03:57:41,783+01 INFO Initializing extension 'internal-authn' 2019-05-29 03:57:41,800+01 INFO Extension 'internal-authn' initialized 2019-05-29 03:57:41,801+01 INFO Initializing extension 'profile2-authz' 2019-05-29 03:57:41,801+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Creating LDAP pool 'authz' 2019-05-29 03:57:41,885+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58')) 2019-05-29 03:57:41,886+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Available Namespaces: [dc=lab,dc=local] 2019-05-29 03:57:41,887+01 INFO Extension 'profile2-authz' initialized 2019-05-29 03:57:41,887+01 INFO Initializing extension 'profile1-authz' 2019-05-29 03:57:41,887+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Creating LDAP pool 'authz' 2019-05-29 03:57:41,901+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:41,901+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Available Namespaces: [dc=sybase,dc=pt] 2019-05-29 03:57:41,902+01 INFO Extension 'profile1-authz' initialized 2019-05-29 03:57:41,902+01 INFO Initializing extension 'profile1-authn' 2019-05-29 03:57:41,902+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authz' 2019-05-29 03:57:41,909+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:41,910+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authn' 2019-05-29 03:57:41,915+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)')) 2019-05-29 03:57:41,916+01 INFO Extension 'profile1-authn' initialized 2019-05-29 03:57:41,916+01 INFO Initializing extension 'profile2-authn' 2019-05-29 03:57:41,917+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authz' 2019-05-29 03:57:41,962+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58')) 2019-05-29 03:57:41,963+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authn' 2019-05-29 03:57:42,010+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58')) 2019-05-29 03:57:42,011+01 INFO Extension 'profile2-authn' initialized 2019-05-29 03:57:42,011+01 INFO Start of enabled extensions list 2019-05-29 03:57:42,012+01 INFO Instance name: 'internal-authn', Extension name: '"ovirt-engine-extension-aaa-jdbc".authn', Version: '"1.1.7_master"', Notes: 'Display name: "ovirt-engine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/internal-authn.properties', Initialized: 'true' 2019-05-29 03:57:42,013+01 INFO Instance name: 'profile1-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile1-authn.properties', Initialized: 'true' 2019-05-29 03:57:42,013+01 INFO Instance name: 'profile2-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile2-authz.properties', Initialized: 'true' 2019-05-29 03:57:42,014+01 INFO Instance name: 'internal-authz', Extension name: '"ovirt-engine-extension-aaa-jdbc".authz', Version: '"1.1.7_master"', Notes: 'Display name: "ovirt-engine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/internal-authz.properties', Initialized: 'true' 2019-05-29 03:57:42,014+01 INFO Instance name: 'profile1-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile1-authz.properties', Initialized: 'true' 2019-05-29 03:57:42,014+01 INFO Instance name: 'profile2-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile2-authn.properties', Initialized: 'true' 2019-05-29 03:57:42,014+01 INFO End of enabled extensions list 2019-05-29 03:57:42,014+01 INFO ======================================================================== 2019-05-29 03:57:42,014+01 INFO ============================== Execution =============================== 2019-05-29 03:57:42,015+01 INFO ======================================================================== 2019-05-29 03:57:42,015+01 INFO Iteration: 0 2019-05-29 03:57:42,018+01 INFO Profile='lab.local' authn='profile2-authn' authz='profile2-authz' mapping='null' 2019-05-29 03:57:42,018+01 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='lab.local' user='node1' Password: 2019-05-29 03:57:45,905+01 WARNING Ignoring records from pool: 'authz' 2019-05-29 03:57:45,906+01 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='lab.local' result=CREDENTIALS_INVALID 2019-05-29 03:57:45,922+01 SEVERE Authn.Result code is: CREDENTIALS_INVALID - ldapsearch -x -h 192.168.16.114 -b "dc=ldap,dc=local" -D "cn=ldapadm,dc=lab,dc=local" -W Enter LDAP Password: # extended LDIF # # LDAPv3 # base <dc=ldap,dc=local> with scope subtree # filter: (objectclass=*) # requesting: ALL # # search result search: 2 result: 32 No such object # numResponses: 1 - [root@ovirt ~]# cat /etc/ovirt-engine/aaa/profile2.properties # # Select one # include = <openldap.properties> #include = <389ds.properties> #include = <rhds.properties> #include = <ipa.properties> #include = <iplanet.properties> #include = <rfc2307-389ds.properties> #include = <rfc2307-rhds.properties> #include = <rfc2307-openldap.properties> #include = <rfc2307-edir.properties> #include = <rfc2307-generic.properties> # # Server # vars.server = ldap.lab.local # # Search user and its password. # vars.user = ou=People,dc=lab,dc=local vars.password = abc # Uncomment in case you don't have allowed anonymous bind, # because we use anonymous bind for authn pool: pool.default.auth.type = simple pool.default.serverset.srvrecord.service = ldap pool.default.serverset.srvrecord.protocol = tcp pool.default.serverset.single.server = ${global:vars.server} pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} #pool.default.ssl.startTLS = false #pool.default.socketfactory.type = java sequence-init.init.100-my-basedn-init-vars = my-basedn-init-vars sequence.my-basedn-init-vars.010.description = set baseDN sequence.my-basedn-init-vars.010.type = var-set sequence.my-basedn-init-vars.010.var-set.variable = simple_baseDN sequence.my-basedn-init-vars.010.var-set.value = dc=lab,dc=local search.default.search-request.derefPolicy = ALWAYS # Create keystore, import root certificate and uncomment # if using ssl/tls. #pool.default.ssl.startTLS = true #pool.default.ssl.truststore.file = ${local:_basedir}/${global:vars.server}.jks #pool.default.ssl.truststore.password = changeit - [root@ovirt ~]# cat /etc/ovirt-engine/extensions.d/profile2-authn.properties ovirt.engine.extension.name = profile2-authn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = lab.local ovirt.engine.aaa.authn.authz.plugin = profile2-authz config.profile.file.1 = /etc/ovirt-engine/aaa/profile2.properties config.globals.baseDN.simple_baseDN = ou=People,dc=lab,dc=local - [root@ovirt ~]# cat /etc/ovirt-engine/extensions.d/profile2-authz.properties ovirt.engine.extension.name = profile2-authz ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = /etc/ovirt-engine/aaa/profile2.properties config.globals.baseDN.simple_baseDN = ou=People,dc=lab,dc=local Thanks all for the help!

3 20

possible to clear vm started under different name warning in gui?
by Jayme 31 May '19

31 May '19

When a VM is renamed a warning in engine gui appears with an exclamation point stating "vm was started with a different name". Is there a way to clear this warning? The VM has been restarted a few times since but it doesn't go away. Thanks!

2 2