reinstallation information
by nikkognt＠gmail.com
Hi,
after a blackout one host of my ovirt not working properly. I tried to Reinstall it but ends with the following error "Failed to install Host ov1. Failed to execute stage 'Closing up': Failed to start service 'vdsmd'." I tried to start manually but it not start .
Now, I would like to reinstall from iso ovirt node.
After I put the host is in maintenance must I remove host from the cluster (Hosts -> host1 -> Remove) or I can reinstall without remove it?
If I remore it from the cluster the network configurations I lose them or not?
My ovirt version is oVirt Engine Version: 4.1.9.1-1.el7.centos.
4 years, 9 months
Spice console very poor performance for Windows 10 vm
by Leo David
Hello Everyone,
Maybe I am something wrong, but spice console seem to be very laggy and
slow for windows 10 vms. I have tried both qxl and qxl-dod drivers, but no
luck so far...
As a notice, the Win 2012R2 vm console is running fine, the problem seems
to only affect Windows 10.
Any ideas, what should I do to sort this out ?
Thank you very much !
Leo
--
Best regards, Leo David
4 years, 9 months
Windows Server 2019: Driver Signature Enforcement
by Vinícius Ferrão
Hello,
I’m running oVirt 4.3.0 and installing Windows Server 2019 with UEFI Secure Boot is impossible with the bundled VirtIO drivers.
Windows complains about invalid signatures on vioscsi.sys.
The only way to boot the system is halting the process with F8 and them selecting: Disable Driver Signature Enforcement.
So, what’s the recommended way to solve this?
There’s no signed drivers?
Thanks,
4 years, 10 months
Metrics store install failed
by roy.morris＠ventura.org
I'm struggling installing the metrics store VMs. It appears that etcd image fails to download or build a template. Thank you ahead of time for your assistance.
2019-05-28 20:07:12,650 p=22689 u=root | Tuesday 28 May 2019 20:07:12 -0400 (0:00:00.097) 0:04:54.774 ***********
2019-05-28 20:07:12,687 p=22689 u=root | fatal: [master0.ent.co.ventura.ca.us]: FAILED! => {"msg": "The conditional check 'etcd_image != l_default_osm_etcd_image' failed. The error was: An unhandled exception occurred while templating '{{ osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ l_default_osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ etcd_image_dict[openshift_deployment_type] | lib_utils_oo_oreg_image((oreg_url | default('None'))) }}'. Error was a <class 'ansible.errors.AnsibleFilterError'>, original message: oreg_url malformed: registry.redhat.io\n\nThe error appears to have been in '/usr/share/ansible/openshift-ansible/roles/etcd/tasks/static.yml': line 5, column 3, but may\nbe elsewhere in the file depending on the exact syntax problem.\n\nThe offending line appears to be:\n\n\n- name:
Warn if osm_etcd_image is redefined\n ^ here\n"}
2019-05-28 20:07:12,688 p=22689 u=root | NO MORE HOSTS LEFT **************************************************************************************************************************************************************************************************************************
2019-05-28 20:07:12,689 p=22689 u=root | PLAY RECAP **********************************************************************************************************************************************************************************************************************************
2019-05-28 20:07:12,689 p=22689 u=root | localhost : ok=35 changed=1 unreachable=0 failed=0
2019-05-28 20:07:12,689 p=22689 u=root | master0.ent.co.ventura.ca.us : ok=204 changed=16 unreachable=0 failed=1
2019-05-28 20:07:12,690 p=22689 u=root | INSTALLER STATUS ****************************************************************************************************************************************************************************************************************************
2019-05-28 20:07:12,693 p=22689 u=root | Initialization : Complete (0:00:10)
2019-05-28 20:07:12,693 p=22689 u=root | Health Check : Complete (0:00:22)
2019-05-28 20:07:12,694 p=22689 u=root | Node Bootstrap Preparation : Complete (0:01:59)
2019-05-28 20:07:12,694 p=22689 u=root | etcd Install : In Progress (0:00:28)
2019-05-28 20:07:12,694 p=22689 u=root | This phase can be restarted by running: playbooks/openshift-etcd/config.yml
2019-05-28 20:07:12,694 p=22689 u=root | Tuesday 28 May 2019 20:07:12 -0400 (0:00:00.044) 0:04:54.819 ***********
2019-05-28 20:07:12,694 p=22689 u=root | ===============================================================================
2019-05-28 20:07:12,697 p=22689 u=root | openshift_node : install needed rpm(s) ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 38.86s
2019-05-28 20:07:12,697 p=22689 u=root | Ensure openshift-ansible installer package deps are installed ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- 36.95s
2019-05-28 20:07:12,697 p=22689 u=root | openshift_node : Install node, clients, and conntrack packages ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- 23.81s
2019-05-28 20:07:12,698 p=22689 u=root | Run health checks (install) - EL ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 22.26s
2019-05-28 20:07:12,698 p=22689 u=root | container_runtime : Install Docker --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 7.10s
2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Disable all repositories ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 6.78s
2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Enable RHEL repositories ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 6.09s
2019-05-28 20:07:12,698 p=22689 u=root | openshift_node : Create credentials for registry auth -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5.57s
2019-05-28 20:07:12,698 p=22689 u=root | rhel_subscribe : Install Red Hat Subscription manager -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 5.22s
2019-05-28 20:07:12,698 p=22689 u=root | openshift_repos : Ensure libselinux-python is installed ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 5.09s
2019-05-28 20:07:12,698 p=22689 u=root | nickhammond.logrotate : nickhammond.logrotate | Install logrotate -------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.99s
2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install openssl --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.79s
2019-05-28 20:07:12,699 p=22689 u=root | openshift_node : Install dnsmasq ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.68s
2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install openssl --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.68s
2019-05-28 20:07:12,699 p=22689 u=root | os_firewall : Install firewalld packages --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.63s
2019-05-28 20:07:12,699 p=22689 u=root | install NetworkManager --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.59s
2019-05-28 20:07:12,699 p=22689 u=root | etcd : Install etcd ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ 4.57s
2019-05-28 20:07:12,699 p=22689 u=root | container_runtime : Create credentials for oreg_url ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.54s
2019-05-28 20:07:12,700 p=22689 u=root | openshift_node : Install NFS storage plugin dependencies ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 4.53s
2019-05-28 20:07:12,700 p=22689 u=root | openshift_node : Add firewalld allow rules ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- 3.39s
2019-05-28 20:07:12,700 p=22689 u=root | Failure summary:
1. Hosts: master0.ent.co.ventura.ca.us
Play: Configure etcd
Task: Warn if osm_etcd_image is redefined
Message: [0;31mThe conditional check 'etcd_image != l_default_osm_etcd_image' failed. The error was: An unhandled exception occurred while templating '{{ osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ l_default_osm_etcd_image }}'. Error was a <class 'ansible.errors.AnsibleError'>, original message: An unhandled exception occurred while templating '{{ etcd_image_dict[openshift_deployment_type] | lib_utils_oo_oreg_image((oreg_url | default('None'))) }}'. Error was a <class 'ansible.errors.AnsibleFilterError'>, original message: oreg_url malformed: registry.redhat.io[0m
[0;31m[0m
[0;31mThe error appears to have been in '/usr/share/ansible/openshift-ansible/roles/etcd/tasks/static.yml': line 5, column 3, but may[0m
[0;31mbe elsewhere in the file depending on the exact syntax problem.[0m
[0;31m[0m
[0;31mThe offending line appears to be:[0m
[0;31m[0m
[0;31m[0m
[0;31m- name: Warn if osm_etcd_image is redefined[0m
[0;31m ^ here[0m
[0;31m[0m
4 years, 10 months
oVirt survey - May 2019
by Sandro Bonazzola
As we continue to develop oVirt 4.3 and future releases, the Development
and Integration teams at Red Hat would value insights on how you are
deploying the oVirt environment.
Please help us to hit the mark by completing this short survey. Survey will
close on June 7th.
If you're managing multiple oVirt deployments with very different use cases
or very different deployments you can consider answering this survey
multiple times.
Please note the answers to this survey will be publicly accessible. This
survey is under oVirt Privacy Policy available at
https://www.ovirt.org/site/privacy-policy.html
The survey is available here: https://forms.gle/8uzuVNmDWtoKruhm8
--
Sandro Bonazzola
MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV
Red Hat EMEA <https://www.redhat.com/>
sbonazzo(a)redhat.com
<https://red.ht/sig>
<https://redhat.com/summit>
4 years, 10 months
Bond Mode 1 （Active-Backup）,vm unreachable for minutes when bond link change
by henaumars＠sina.com
Hello,
I've a problem, all my ovirt hosts and vms are linked with a bonding mode 1（Active-Backup）2x10Gbps
ovirt version：4.3
topology：
----------eno2
vm----------ovirtmgmt------bond0-----------eno1
ifcfg-bond0：
# Generated by VDSM version 4.30.9.1
DEVICE=bond0
BONDING_OPTIOS='mode=1 miion=100'
BRIDGE=ovirtmgmt
MACADDR=a4:be:26:16:e9:b2
ONBOOT=yes
MTU=1500
DEFROUTE=no
NM_CONTROLLER=no
IPV6INIT=no
ifcfg-eno1:
# Generated by VDSM version 4.30.9.1
DEVICE=eno1
MASTER=bond0
SLAVE=yes
ONBOOT=yes
MTU=1500
DEFROUTE=no
NM_CONTROLLER=no
IPV6INIT=no
ifcfg-eno2:
# Generated by VDSM version 4.30.9.1
DEVICE=eno2
MASTER=bond0
SLAVE=yes
ONBOOT=yes
MTU=1500
DEFROUTE=no
NM_CONTROLLER=no
IPV6INIT=no
ifcfg-ovirtmgmt:
# Generated by VDSM version 4.30.9.1
DEVICE=ovirtmgmt
TYPE=Brodge
DELAY=0
STP=off
ONBOOT=yes
IPADDR=x.x.x.x
NEYMASK=255.255.255.0
GATEWAY=x.x.x.x
BOOTPROTO=none
MTU=1500
DEFROUTE=yes
NM_CONTROLLER=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
cat /proc/net/bonding/bond0
Ethernet Chanel Bonding Driver:v3.7.1(April 27, 2011)
Bonding Mode:fault-tolerance(active-ackup)
Primary Slave:none
Currently Active Slave:eno1
MII Status:up
MII Polling Intercal (ms):100
Up Delay (ms) : 0
Down Delay (ms) : 0
Slave Interface :eno1
MII Status:up
Speed : 10000 Mbps
Link Failure Count : 0
Permanent HW addr :a4:be:26:16:e9:b2
Slave queue ID: 0
Slave Interface :eno2
MII Status:up
Speed : 10000 Mbps
Link Failure Count : 0
Permanent HW addr :a4:be:26:16:e9:b2
Slave queue ID: 0
ping vm from different subnet.
Eveything is okay if I don't change bond link interface。When I unplug Currently Active Slave eno1,bond link change to eno2 as expected but vm become unreachable until external physical switch MAC Table ageing time expired.It seems that vm doesn't sent gratuitous ARP when bond link change. How can I fix if?
vm os is Centos 7.5
ovirt version 4.2 also tested.
4 years, 10 months
Nvme over fabric array support through OVirt MANAGED_BLOCK_STORAGE Domain
by amit1.kumar＠intel.com
for an NVMe over fabric storage array that supports Cinder backend plugin, is it possible to use MANAGED_BLOCK_STORAGE domain to configure Virtual disk? in this case, is it required to have a single Virtual disk accessible from all the VDSM hosts (within the cluster) to support VM migration?
Thanks,
Amit
4 years, 10 months
Ovirt-egine integration with OpenLDAP can't seem to find any users on Web-UI
by rubennunes12＠gmail.com
Hello everyone.
So i don't know what i'm doing wrong but this doesn't seem to work, i already made the confgurations needed on the ovirt-engine-extension-aaa-ldap i'm a little desperate here.
I'm going to put all the commands that i already made and the errors that they give:
- ovirt-engine-extension-aaa-ldap-setup
Stage: Setup validation
NOTE:
It is highly recommended to test drive the configuration before applying it into engine.
Login sequence is executed automatically, but it is recommended to also execute Search sequence manually after successful Login sequence.
Please provide credentials to test login flow:
Enter user name: node1
Enter user password:
[ INFO ] Executing login sequence...
Login output:
2019-05-29 03:45:59,261+01 INFO ========================================================================
2019-05-29 03:45:59,301+01 INFO ============================ Initialization ============================
2019-05-29 03:45:59,301+01 INFO ========================================================================
2019-05-29 03:45:59,385+01 INFO Loading extension '192.168.16.114-authn'
2019-05-29 03:45:59,540+01 INFO Extension '192.168.16.114-authn' loaded
2019-05-29 03:45:59,571+01 INFO Loading extension '192.168.16.114'
2019-05-29 03:45:59,585+01 INFO Extension '192.168.16.114' loaded
2019-05-29 03:45:59,585+01 INFO Initializing extension '192.168.16.114-authn'
2019-05-29 03:45:59,588+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] Creating LDAP pool 'authz'
2019-05-29 03:45:59,734+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] LDAP pool 'authz' information: vendor='null' version='null'
2019-05-29 03:45:59,736+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] Creating LDAP pool 'authn'
2019-05-29 03:45:59,754+01 INFO [ovirt-engine-extension-aaa-ldap.authn::192.168.16.114-authn] LDAP pool 'authn' information: vendor='null' version='null'
2019-05-29 03:45:59,754+01 INFO Extension '192.168.16.114-authn' initialized
2019-05-29 03:45:59,755+01 INFO Initializing extension '192.168.16.114'
2019-05-29 03:45:59,756+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] Creating LDAP pool 'authz'
2019-05-29 03:45:59,775+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] LDAP pool 'authz' information: vendor='null' version='null'
2019-05-29 03:45:59,776+01 INFO [ovirt-engine-extension-aaa-ldap.authz::192.168.16.114] Available Namespaces: [ou=People,dc=lab,dc=local]
2019-05-29 03:45:59,777+01 INFO Extension '192.168.16.114' initialized
2019-05-29 03:45:59,777+01 INFO Start of enabled extensions list
2019-05-29 03:45:59,777+01 INFO Instance name: '192.168.16.114-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp7wX6s6/extensions.d/192.168.16.114-authn.properties', Initialized: 'true'
2019-05-29 03:45:59,778+01 INFO Instance name: '192.168.16.114', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmp7wX6s6/extensions.d/192.168.16.114.properties', Initialized: 'true'
2019-05-29 03:45:59,778+01 INFO End of enabled extensions list
2019-05-29 03:45:59,778+01 INFO ========================================================================
2019-05-29 03:45:59,778+01 INFO ============================== Execution ===============================
2019-05-29 03:45:59,778+01 INFO ========================================================================
2019-05-29 03:45:59,779+01 INFO Iteration: 0
2019-05-29 03:45:59,780+01 INFO Profile='192.168.16.114' authn='192.168.16.114-authn' authz='192.168.16.114' mapping='null'
2019-05-29 03:45:59,780+01 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='192.168.16.114' user='node1'
2019-05-29 03:45:59,835+01 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='192.168.16.114' result=CREDENTIALS_INVALID
2019-05-29 03:45:59,843+01 SEVERE Authn.Result code is: CREDENTIALS_INVALID
[ ERROR ] Login sequence failed
Please investigate details of the failure (search for lines containing SEVERE log level).
Select test sequence to execute (Done, Abort, Login, Search) [Abort]:
- ovirt-engine-extensions-tool aaa login-user --profile=lab.local --user-name=node1
2019-05-29 03:57:35,194+01 INFO ========================================================================
2019-05-29 03:57:35,224+01 INFO ============================ Initialization ============================
2019-05-29 03:57:35,224+01 INFO ========================================================================
2019-05-29 03:57:35,298+01 INFO Loading extension 'internal-authz'
2019-05-29 03:57:35,325+01 INFO Extension 'internal-authz' loaded
2019-05-29 03:57:35,334+01 INFO Loading extension 'internal-authn'
2019-05-29 03:57:35,336+01 INFO Extension 'internal-authn' loaded
2019-05-29 03:57:35,360+01 INFO Loading extension 'profile2-authz'
2019-05-29 03:57:35,510+01 INFO Extension 'profile2-authz' loaded
2019-05-29 03:57:35,516+01 INFO Loading extension 'profile1-authz'
2019-05-29 03:57:35,527+01 INFO Extension 'profile1-authz' loaded
2019-05-29 03:57:35,546+01 INFO Loading extension 'profile1-authn'
2019-05-29 03:57:35,558+01 INFO Extension 'profile1-authn' loaded
2019-05-29 03:57:35,586+01 INFO Loading extension 'profile2-authn'
2019-05-29 03:57:35,592+01 INFO Extension 'profile2-authn' loaded
2019-05-29 03:57:35,592+01 INFO Initializing extension 'internal-authz'
2019-05-29 03:57:35,754+01 INFO Extension 'internal-authz' initialized
2019-05-29 03:57:35,755+01 INFO Initializing extension 'internal-authn'
2019-05-29 03:57:35,771+01 INFO Extension 'internal-authn' initialized
2019-05-29 03:57:35,771+01 INFO Initializing extension 'profile2-authz'
2019-05-29 03:57:35,772+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Creating LDAP pool 'authz'
2019-05-29 03:57:35,859+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58'))
2019-05-29 03:57:35,861+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Available Namespaces: [dc=lab,dc=local]
2019-05-29 03:57:35,861+01 INFO Extension 'profile2-authz' initialized
2019-05-29 03:57:35,861+01 INFO Initializing extension 'profile1-authz'
2019-05-29 03:57:35,862+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Creating LDAP pool 'authz'
2019-05-29 03:57:35,873+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:35,874+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Available Namespaces: [dc=sybase,dc=pt]
2019-05-29 03:57:35,874+01 INFO Extension 'profile1-authz' initialized
2019-05-29 03:57:35,874+01 INFO Initializing extension 'profile1-authn'
2019-05-29 03:57:35,875+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authz'
2019-05-29 03:57:35,888+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:35,889+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authn'
2019-05-29 03:57:35,894+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:35,894+01 INFO Extension 'profile1-authn' initialized
2019-05-29 03:57:35,894+01 INFO Initializing extension 'profile2-authn'
2019-05-29 03:57:35,895+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authz'
^C2019-05-29 03:57:35,906+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58'))
2019-05-29 03:57:35,907+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authn'
[root@ovirt ~]# ovirt-engine-extensions-tool aaa login-user --profile=lab.local --user-name=node1
2019-05-29 03:57:41,227+01 INFO ========================================================================
2019-05-29 03:57:41,259+01 INFO ============================ Initialization ============================
2019-05-29 03:57:41,260+01 INFO ========================================================================
2019-05-29 03:57:41,311+01 INFO Loading extension 'internal-authz'
2019-05-29 03:57:41,331+01 INFO Extension 'internal-authz' loaded
2019-05-29 03:57:41,333+01 INFO Loading extension 'internal-authn'
2019-05-29 03:57:41,334+01 INFO Extension 'internal-authn' loaded
2019-05-29 03:57:41,345+01 INFO Loading extension 'profile2-authz'
2019-05-29 03:57:41,508+01 INFO Extension 'profile2-authz' loaded
2019-05-29 03:57:41,510+01 INFO Loading extension 'profile1-authz'
2019-05-29 03:57:41,551+01 INFO Extension 'profile1-authz' loaded
2019-05-29 03:57:41,552+01 INFO Loading extension 'profile1-authn'
2019-05-29 03:57:41,562+01 INFO Extension 'profile1-authn' loaded
2019-05-29 03:57:41,564+01 INFO Loading extension 'profile2-authn'
2019-05-29 03:57:41,602+01 INFO Extension 'profile2-authn' loaded
2019-05-29 03:57:41,602+01 INFO Initializing extension 'internal-authz'
2019-05-29 03:57:41,782+01 INFO Extension 'internal-authz' initialized
2019-05-29 03:57:41,783+01 INFO Initializing extension 'internal-authn'
2019-05-29 03:57:41,800+01 INFO Extension 'internal-authn' initialized
2019-05-29 03:57:41,801+01 INFO Initializing extension 'profile2-authz'
2019-05-29 03:57:41,801+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Creating LDAP pool 'authz'
2019-05-29 03:57:41,885+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58'))
2019-05-29 03:57:41,886+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile2-authz] Available Namespaces: [dc=lab,dc=local]
2019-05-29 03:57:41,887+01 INFO Extension 'profile2-authz' initialized
2019-05-29 03:57:41,887+01 INFO Initializing extension 'profile1-authz'
2019-05-29 03:57:41,887+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Creating LDAP pool 'authz'
2019-05-29 03:57:41,901+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:41,901+01 INFO [ovirt-engine-extension-aaa-ldap.authz::profile1-authz] Available Namespaces: [dc=sybase,dc=pt]
2019-05-29 03:57:41,902+01 INFO Extension 'profile1-authz' initialized
2019-05-29 03:57:41,902+01 INFO Initializing extension 'profile1-authn'
2019-05-29 03:57:41,902+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authz'
2019-05-29 03:57:41,909+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:41,910+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile1-authn] Creating LDAP pool 'authn'
2019-05-29 03:57:41,915+01 WARNING Exception: An error occurred while attempting to connect to server 40.127.205.63:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server /40.127.205.63:389: IllegalArgumentException(trace='checkAddress(ResolverSocketFactory.java:35) / createSocket(ResolverSocketFactory.java:73) / run(ConnectThread.java:139)', ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58)'))
2019-05-29 03:57:41,916+01 INFO Extension 'profile1-authn' initialized
2019-05-29 03:57:41,916+01 INFO Initializing extension 'profile2-authn'
2019-05-29 03:57:41,917+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authz'
2019-05-29 03:57:41,962+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58'))
2019-05-29 03:57:41,963+01 INFO [ovirt-engine-extension-aaa-ldap.authn::profile2-authn] Creating LDAP pool 'authn'
2019-05-29 03:57:42,010+01 WARNING Exception: An error occurred while attempting to connect to server ldap.lab.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server ldap.lab.local/192.168.16.114:389: UnknownHostException(ldap.lab.local), ldapSDKVersion=4.0.5, revision=b28fb50058dfe2864171df2448ad2ad2b4c2ad58'))
2019-05-29 03:57:42,011+01 INFO Extension 'profile2-authn' initialized
2019-05-29 03:57:42,011+01 INFO Start of enabled extensions list
2019-05-29 03:57:42,012+01 INFO Instance name: 'internal-authn', Extension name: '"ovirt-engine-extension-aaa-jdbc".authn', Version: '"1.1.7_master"', Notes: 'Display name: "ovirt-engine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/internal-authn.properties', Initialized: 'true'
2019-05-29 03:57:42,013+01 INFO Instance name: 'profile1-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile1-authn.properties', Initialized: 'true'
2019-05-29 03:57:42,013+01 INFO Instance name: 'profile2-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile2-authz.properties', Initialized: 'true'
2019-05-29 03:57:42,014+01 INFO Instance name: 'internal-authz', Extension name: '"ovirt-engine-extension-aaa-jdbc".authz', Version: '"1.1.7_master"', Notes: 'Display name: "ovirt-engine-extension-aaa-jdbc"', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/internal-authz.properties', Initialized: 'true'
2019-05-29 03:57:42,014+01 INFO Instance name: 'profile1-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile1-authz.properties', Initialized: 'true'
2019-05-29 03:57:42,014+01 INFO Instance name: 'profile2-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.8', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.8-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/profile2-authn.properties', Initialized: 'true'
2019-05-29 03:57:42,014+01 INFO End of enabled extensions list
2019-05-29 03:57:42,014+01 INFO ========================================================================
2019-05-29 03:57:42,014+01 INFO ============================== Execution ===============================
2019-05-29 03:57:42,015+01 INFO ========================================================================
2019-05-29 03:57:42,015+01 INFO Iteration: 0
2019-05-29 03:57:42,018+01 INFO Profile='lab.local' authn='profile2-authn' authz='profile2-authz' mapping='null'
2019-05-29 03:57:42,018+01 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='lab.local' user='node1'
Password:
2019-05-29 03:57:45,905+01 WARNING Ignoring records from pool: 'authz'
2019-05-29 03:57:45,906+01 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='lab.local' result=CREDENTIALS_INVALID
2019-05-29 03:57:45,922+01 SEVERE Authn.Result code is: CREDENTIALS_INVALID
- ldapsearch -x -h 192.168.16.114 -b "dc=ldap,dc=local" -D "cn=ldapadm,dc=lab,dc=local" -W
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <dc=ldap,dc=local> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
# numResponses: 1
- [root@ovirt ~]# cat /etc/ovirt-engine/aaa/profile2.properties
#
# Select one
#
include = <openldap.properties>
#include = <389ds.properties>
#include = <rhds.properties>
#include = <ipa.properties>
#include = <iplanet.properties>
#include = <rfc2307-389ds.properties>
#include = <rfc2307-rhds.properties>
#include = <rfc2307-openldap.properties>
#include = <rfc2307-edir.properties>
#include = <rfc2307-generic.properties>
#
# Server
#
vars.server = ldap.lab.local
#
# Search user and its password.
#
vars.user = ou=People,dc=lab,dc=local
vars.password = abc
# Uncomment in case you don't have allowed anonymous bind,
# because we use anonymous bind for authn pool:
pool.default.auth.type = simple
pool.default.serverset.srvrecord.service = ldap
pool.default.serverset.srvrecord.protocol = tcp
pool.default.serverset.single.server = ${global:vars.server}
pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
#pool.default.ssl.startTLS = false
#pool.default.socketfactory.type = java
sequence-init.init.100-my-basedn-init-vars = my-basedn-init-vars
sequence.my-basedn-init-vars.010.description = set baseDN
sequence.my-basedn-init-vars.010.type = var-set
sequence.my-basedn-init-vars.010.var-set.variable = simple_baseDN
sequence.my-basedn-init-vars.010.var-set.value = dc=lab,dc=local
search.default.search-request.derefPolicy = ALWAYS
# Create keystore, import root certificate and uncomment
# if using ssl/tls.
#pool.default.ssl.startTLS = true
#pool.default.ssl.truststore.file = ${local:_basedir}/${global:vars.server}.jks
#pool.default.ssl.truststore.password = changeit
- [root@ovirt ~]# cat /etc/ovirt-engine/extensions.d/profile2-authn.properties
ovirt.engine.extension.name = profile2-authn
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension
ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
ovirt.engine.aaa.authn.profile.name = lab.local
ovirt.engine.aaa.authn.authz.plugin = profile2-authz
config.profile.file.1 = /etc/ovirt-engine/aaa/profile2.properties
config.globals.baseDN.simple_baseDN = ou=People,dc=lab,dc=local
- [root@ovirt ~]# cat /etc/ovirt-engine/extensions.d/profile2-authz.properties
ovirt.engine.extension.name = profile2-authz
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension
ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
config.profile.file.1 = /etc/ovirt-engine/aaa/profile2.properties
config.globals.baseDN.simple_baseDN = ou=People,dc=lab,dc=local
Thanks all for the help!
4 years, 11 months
