- Users - oVirt List Archives

[Users] Unable to log on with expired passord
by Sigbjorn Lie 01 Feb '14

01 Feb '14

Hi, I am doing a POC of RHEV 3.2 VDI for a customer. Their users are located in an IPA server, and RHEV and IPA has been connected using rhevm-manage-domains. During the POC we discovered that users which have expired password cannot log on. They receive an Incorrect password error message. 1. They should at least receive a Your password has expired error instead of the Incorrect password error message as this is confusing for the user. 2. This creates a problem, as every time a password is reset in IPA, it's automatically set to be expired so the user will change password at next logon. Is there a way around this? I would like to see the user being able to log on the User Portal with the expired password, and then he will be asked to change his password as usual once he's logging into his Linux VDI machine. Regards, Siggi

2 6

[Users] Authentication
by Maurice James 31 Jan '14

31 Jan '14

--_c5e127bf-5522-42e4-b743-d5eabf12f588_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Is anyone working on LDAP authentication that does NOT require the use of k= erberos yet? If so=2C what is the timeframe? = --_c5e127bf-5522-42e4-b743-d5eabf12f588_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <style></style></head> <body class=3D'hmmessage'><div dir=3D'ltr'>Is anyone working on LDAP authen= tication that does NOT require the use of kerberos yet? If so=2C what is th= e timeframe? </div></body> </html>= --_c5e127bf-5522-42e4-b743-d5eabf12f588_--

2 1

[Users] Share SPICE console between 2 admins
by Markus Stockhausen 31 Jan '14

31 Jan '14

This is a multi-part message in MIME format. ------=_NextPartTM-000-a66eb004-3599-4b55-94f2-34274e6be15f Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello,=0A= =0A= we want to share the spice console of our VMs for 2 or more=0A= administrators. So that they can see the same desktop. I read=0A= several articles about SPICE_DEBUG_ALLOW_MC=3D1 and think=0A= that my be the way to go. =0A= =0A= The only problem seems to be that I must set it as an environment=0A= variable on the hypervisor hosts. /etc/profile does not work. Seems=0A= to be a similar problem as in proxmox.=0A= =0A= http://forum.proxmox.com/threads/17265-Siimultaneous-Spice-Client-Connectio= ns=0A= =0A= But where to fix that in Ovirt?=0A= =0A= Markus= ------=_NextPartTM-000-a66eb004-3599-4b55-94f2-34274e6be15f Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" **************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-a66eb004-3599-4b55-94f2-34274e6be15f--

2 2

[Users] Notes on setting spice-proxy console option
by David Li 31 Jan '14

31 Jan '14

Hi, I have struggled quite a bit to get it up and running. Over the time, I have accumulated some notes on various things I did so to share with everyone who is interested in doing this. This complements the online doc in a way that might give me a complete picture in one place. However I need some clarifications as I might have forgotten to document certain steps or certain steps I did turn out to be not necessary in the end. It will be great if experts here can help me get the things straight. My setup is like: Browser (firefox 24.2 on RHEL6) ------------ ovirt-engine (3.3.2) ------------ ovirt-node (3.0.3) No direct network connectivity from the browser machine to the node machine. These are the major things I installed for spice-proxy to work: * On ovirt-engine: yum install spice-gtk, virt-viewer, spice-xpi yum-install squid /etc/squid/squid.conf updates: acl localhost src <browser IP addr> #http_access deny CONNECT !SSL_ports http_access deny !Safe_ports http_port 3128 service squid restart make sure iptables allow 3128 engine-config -s SpiceProxyDefault= http://<ovirt-engine-IP>:3128 service ovirt-engine restart * On browser machine running firefox 24.2.0 on RHEL6 for running browser console plugin client yum install spice-xpi. make sure VM's console option is set to SPICE Are the above steps reasonable? any missing or redundant? Additional questions: 1. Will spice-proxy work with the Spice HTML5 client in the browser? 2. Is the spice-proxy architecture diagram like: browser --------- squid proxy - spice-proxy ---------------------- VM 3. I didn't explicitly install any certs for the squid proxy. Is it automatically taken care of? References: http://www.ovirt.org/Console_Client_Resources http://www.ovirt.org/Features/Spice_Proxy https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtu… Thanks. David

4 8

[Users] vdsm-python-cpopen is obsoleted by python-cpopen
by Robert Story 31 Jan '14

31 Jan '14

--Sig_/Lottk3k7HLb.l+RAotF_X1I Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hello, Any status on the pthon-cpopen obsoleted issue? Or any work-arounds? BZ is here: https://bugzilla.redhat.com/show_bug.cgi?id=3D1056470. I can't instal= l add an el6 host to my cluster.. :-/ --> Processing Dependency: vdsm-python-cpopen for package: vdsm-xmlrpc-4.13= .3-2.el6.noarch Package vdsm-python-cpopen is obsoleted by python-cpopen, but obsoleting pa= ckage does not provide for requirements --> Finished Dependency Resolution Error: Package: vdsm-xmlrpc-4.13.3-2.el6.noarch (ovirt-3.3.2) Requires: vdsm-python-cpopen Available: python-cpopen-1.3-1.el6.x86_64 (epel) vdsm-python-cpopen =3D 4.13.2 Available: vdsm-python-cpopen-4.12.1-2.el6.i686 (ovirt-stable) vdsm-python-cpopen =3D 4.12.1-2.el6 Available: vdsm-python-cpopen-4.12.1-4.el6.i686 (ovirt-stable) vdsm-python-cpopen =3D 4.12.1-4.el6 Available: vdsm-python-cpopen-4.13.0-9.el6.i686 (ovirt-stable) vdsm-python-cpopen =3D 4.13.0-9.el6 Available: vdsm-python-cpopen-4.13.0-11.el6.i686 (ovirt-stable) vdsm-python-cpopen =3D 4.13.0-11.el6 Available: vdsm-python-cpopen-4.13.2-1.el6.i686 (ovirt-3.3.2) vdsm-python-cpopen =3D 4.13.2-1.el6 Available: vdsm-python-cpopen-4.13.3-2.el6.i686 (ovirt-3.3.2) vdsm-python-cpopen =3D 4.13.3-2.el6 You could try using --skip-broken to work around the problem Robert -- Senior Software Engineer @ Parsons --Sig_/Lottk3k7HLb.l+RAotF_X1I Content-Type: application/pgp-signature; name=signature.asc Content-Disposition: attachment; filename=signature.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlLqtv8ACgkQ7/fVLLY1mniCwQCfdPHEJ37Xw+LWC9A/aU0/xWJw gf4AoIMNVRg5N1Hv+tg8kD/Xg83eknxp =mx3j -----END PGP SIGNATURE----- --Sig_/Lottk3k7HLb.l+RAotF_X1I--

2 2

[Users] engine-backup restore how to
by Steve Dainard 30 Jan '14

30 Jan '14

There doesn't seem to be any solid documentation on how to use the engine-backup restore function, and I'm not able to restore a backup. The best I've come up with is: 1. Install engine on new host 2. Stop engine 3. run engine-backup --mode=restore --file=filename --log=logfile Fail. Log shows: psql: FATAL: password authentication failed for user "engine" 2014-01-29 18:20:30 10285: FATAL: Can't connect to the database 4. engine-backup --mode=restore --file=engine.bak --log=logfile --change-db-credentials --db-host=localhost --db-user=engine --db-name=engine --db-password='newpassword' Fails with same error. 5. change user to postgres, drop the old db, create a new db named engine, set password for engine user same as 'newpassword' 6. engine-backup --mode=restore --file=engine.bak --log=logfile --change-db-credentials --db-host=localhost --db-user=engine --db-name=engine --db-password='newpassword' Restoring... Rewriting /etc/ovirt-engine/engine.conf.d/10-setup-database.conf Note: you might need to manually fix: - iptables/firewalld configuration - autostart of ovirt-engine service You can now start the engine service and then restart httpd Done. 7. start ovirt-engine, restart httpd, browse to web ui Blank page, no content. 8. stop firewall, browse to web ui Blank page, no content 9. Engine log contains: 2014-01-29 18:35:56,973 INFO [org.ovirt.engine.core.utils.LocalConfig] (MSC service thread 1-40) Value of property "SENSITIVE_KEYS" is ",ENGINE_DB_PASSWORD,ENGINE_PKI_TR UST_STORE_PASSWORD,ENGINE_PKI_ENGINE_STORE_PASSWORD". 2014-01-29 18:35:57,330 ERROR [org.ovirt.engine.core.bll.Backend] (MSC service thread 1-25) Error in getting DB connection. The database is inaccessible. Original exception is: BadSqlGrammarException: CallableStatementCallback; bad SQL grammar [{call checkdbconnection()}]; nested exception is org.postgresql.util.PSQLException: ERROR: function checkdbconnection() does not exist Hint: No function matches the given name and argument types. You might need to add explicit type casts. Position: 15 2014-01-29 18:35:58,336 ERROR [org.ovirt.engine.core.bll.Backend] (MSC service thread 1-25) Error in getting DB connection. The database is inaccessible. Original exception is: UncategorizedSQLException: CallableStatementCallback; uncategorized SQLException for SQL [{call checkdbconnection()}]; SQL state [25P02]; error code [0]; ERROR: current transaction is aborted, commands ignored until end of transaction block; nested exception is org.postgresql.util.PSQLException: ERROR: current transaction is aborted, commands ignored until end of transaction block *Steve Dainard * IT Infrastructure Manager Miovision <http://miovision.com/> | *Rethink Traffic* 519-513-2407 ex.250 877-646-8476 (toll-free) *Blog <http://miovision.com/blog> | **LinkedIn <https://www.linkedin.com/company/miovision-technologies> | Twitter <https://twitter.com/miovision> | Facebook <https://www.facebook.com/miovision>* ------------------------------ Miovision Technologies Inc. | 148 Manitou Drive, Suite 101, Kitchener, ON, Canada | N2C 1L3 This e-mail may contain information that is privileged or confidential. If you are not the intended recipient, please delete the e-mail and any attachments and notify us immediately.

3 6

Re: [Users] How to setup FreeBSD 8.3 Guest on oVirt 3.3
by Dresel Christopher 30 Jan '14

30 Jan '14

Thank you, I already found your repo and I'm testing. The custom property is selectable via the GUI, the hook gets called, but I don't know why it don’t work - it seems like the custom property does not get passed to the hook :/ -----Original Message----- From: René Koch [mailto:rkoch@linuxland.at] Sent: Mittwoch, 29. Jänner 2014 20:51 To: Joop; Dresel Christopher Cc: users(a)ovirt.org Subject: Re: [Users] How to setup FreeBSD 8.3 Guest on oVirt 3.3 On Wed, 2014-01-29 at 19:27 +0100, Joop wrote: > Dresel Christopher <dresel(a)fhwn.ac.at> wrote: > >Hi, > > > >I’m using oVirt 3.3 and trying to setup a FreeBSD 8.3 Guest machine. > >The machine hangs after the booting screen - I already googled about > >this, but didn’t find any helpful articles. > > > >Cluster uses “Intel Penryn Family“, the VM is configured with 1 > >virtual CPU as suggested in one of the threads I found on the internet. > You're probably looking at x2pic cpu flag problems. A vdsm hook might help. Have posted to proxmox forum about this. Also, solaris seems affected, has been discussed on this list. > For Solaris I wrote a hook which can be found here (works fine for Solaris 10/11 on Intel CPUs): https://github.com/ovido/ovirt-stuff/tree/master/hooks Don't know if this is needed for (older versions of) FreeBSD, too. Regards, René > Joop > ________________________________ Fachhochschule Wiener Neustadt für Wirtschaft und Technik Ges.m.b.H. University of Applied Sciences Wiener Neustadt for Business and Engineering Ltd., Austria Johannes Gutenberg-Straße 3 2700 Wiener Neustadt Austria, Europe ATU: 37772406 Firmenbuchnummer: 77005v Firmenbuchgericht: Landesgericht Wiener Neustadt DVR: 0769665 Der Inhalt dieses E-Mails ist ausschliesslich fuer den bezeichneten Adressaten bestimmt. Jede Form der Kenntnisnahme, Veroeffentlichung, Vervielfaeltigung oder Weitergabe des Inhalts dieses E-Mails durch unberechtigte Dritte ist unzulaessig. Wir bitten Sie, sich mit dem Absender des E-Mails in Verbindung zu setzen, falls Sie nicht der Adressat dieses E-Mails sind und das Material von Ihrem Computer zu loeschen. This e-mail and any attachments are confidential and intended solely for the addressee. The perusal, publication, copying or dissemination of the contents of this e-mail by unauthorised third parties is prohibited. If you are not the intended recipient of this e-mail, please delete it and immediately notify the sender.

2 2

[Users] Weird crash of oVirt-3.3.2-el6
by Joop 30 Jan '14

30 Jan '14

Hi All, Just saw that something has gone 'wrong' in my oVirt installation and I can't make sense of it. Full logs are placed in a save place but I would like to start with the following from /var/log/message on ovirt04: Jan 30 07:31:52 ovirt04 vdsm TaskManager.Task ERROR Task=`2a424ca3-19f6-4e01-9e42-ec377655c6f1`::Unexpected error#012Traceback (most recent call last):#012 File "/usr/share/vdsm/storage/task.py", line 857, in _run#012 return fn(*args, **kargs)#012 File "/usr/share/vdsm/logUtils.py", line 45, in wrapper#012 res = f(*args, **kwargs)#012 File "/usr/share/vdsm/storage/hsm.py", line 3049, in get VolumeSize#012 apparentsize = str(volClass.getVSize(dom, imgUUID, volUUID, bs=1))#012 File "/usr/share/vdsm/storage/fileVolume.py", line 418, in getVSize#012 return int(sdobj.oop.os.stat(volPath ).st_size / bs)#012 File "/usr/share/vdsm/storage/remoteFileHandler.py", line 312, in callCrabRPCFunction#012 raise Exception("No free file handlers in pool")#012Exception: No free file handlers in pool From that point on it goes downhill. Ovirt04 was the SPM, that got transferred to ovirt02, all VM's on ovirt04 are set to paused, but only in the logs and the webui. In real life they are running fine (virsh -r list on ovirt04 confirms that). I can select all paused VM's and 'run' them and that clears up de webui and doesn't harm the VM's sofar as I can tell but shouldn't be necessary. Joop

3 4

[Users] Error: "The following Network Interfaces were specified more than once:"
by Alan Murrell 30 Jan '14

30 Jan '14

I have noticed what seems to me to be a quirk, but wanted to see if this is correct behaviour, or perhaps my configuration. I am running a test install ov oVirt 3.3.2 in an all-in-one install. My test box only has one physical NIC, so I am using that for management/external network access, and I have create a dummy interface called "dummy_0" to be used for the VMs. I created four networks, each assigned their own VLAN (I am wanted to simulate a "real-world" . I added the first network ("VLAN001") to "dummy_0" with no problem (I was able to save the configuration). The system created the "dummy_0.1". When I tried to add another network ("VLAN002") to "dummy_0" and save it, I got the following error: --- START --- Error while executing action: local_host: Cannot setup Networks. The following Network Interfaces were specified more than once: dummy_0.1. --- END --- I found that in the "Setup Host Network" if I dragged "VLAN001" off dummy_0 to the right under "Required", and left "VLAN002" on "dummy_0", I could save it, and "VLAN001" appeared to remain active on the host. Indeed, when I went back into "Setup Host Network", both "VLAN001" and "VLAN002" were showing up on "dummy_0". However, if I highlight "VLAN002" under "Networks" and click on the "Hosts" tab, the "Network Interface" is showing a red down arrow, indicating it is not up. The "Network Interface" for "VLAN001" is a green up arrow. I have refreshed several times and at this point in time, have left it for almost thirty minutes, but it remains as a red down arrow. The same is true for the other two networks I tried adding: I was able to add them as above, but they are also showing a red down arrow. My questions: 1.) Is doing what I had to do to add additional networks to an interface normal, or is it a quirk of using a dummy interface? 2.) Any ideas why my additional networks are showing a red down arrow? Again, maybe a quirk of using a dummy interface? I am going to leave it overnight and see what happens (maybe some background process needs to run??), but if that does not work, I am sure I can scrounge up another NIC in the next couple of days and install it into my test server to see if it does the same thing. Thanks, in advance. -Alan

3 6

[Users] two node ovirt cluster with HA
by Jaison peter 30 Jan '14

30 Jan '14

Hi all , I was setting a two node ovirt cluster with ovirt engine on seperate node . I completed the configuration and tested VM live migrations with out any issues . Then for checking cluster HA I powered down one host and expected vms running on that host to be migrated to the other one . But nothing happened , Engine detected host as un-rechable and marked it as non-operational and vm ran on that host went to 'unknown state' . Is that not possible to setup a fully HA ovirt cluster with two nodes ? or else is that my configuration problem ? please advice . Thanks & Regards Alex

6 18