- Users - oVirt List Archives

[3.6] Unable to create VM in user portal
by Maksim Naumov 22 Nov '15

22 Nov '15

Hello User in the User portal un able to create virtual machine. Everytime I see en error "User is not authorized to perform this action." I tried different roles: VmCreator + DiskCreator, PowerUserRole, UserVmManager .... even a new role with all the permissions - no way! Can you give a 100% working example how should I setup role for user to be abte to create a VM? Thank you -- Maksim Naumov Hitmeister GmbH Softwareentwickler Habsburgerring 2 50674 Köln E: maksim.naumov(a)hitmeister.de www.hitmeister.de HRB 59046, Amtsgericht Köln Geschäftsführer: Dr. Gerald Schönbucher

2 2

cluster
by Budur Nagaraju 22 Nov '15

22 Nov '15

HI Can I get the document to configure cluster for the Engine ? Thanks,, Nagaraju

2 1

UUID error
by Budur Nagaraju 21 Nov '15

21 Nov '15

HI Getting below error while adding a host, 2015-11-20 18:40:36,397 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FenceVdsVDSCommand] (ajp--127.0.0.1-8702-7) FINISH, FenceVdsVDSCommand, return: Test Succeeded, on, log id: 6495791f 2015-11-20 18:40:40,588 WARN [org.ovirt.engine.core.bll.AddVdsCommand] (ajp--127.0.0.1-8702-6) [2933038a] CanDoAction of action AddVds failed for user admin@internal. Reasons: VAR__ACTION__ADD,VAR__TYPE__HOST,$server pbuovirt2.bnglab.psecure.net,ACTION_TYPE_FAILED_VDS_WITH_SAME_UUID_EXIST Thanks, Nagaraju

2 1

oVirt 4.0 wishlist: VDSM
by Giuseppe Ragusa 21 Nov '15

21 Nov '15

Hi all, I go on with my wishlist, derived from both solitary mumblings and community talks at the the first Italian oVirt Meetup. I offer to help in coding (work/family schedules permitting) but keep in mind that I'm a sysadmin with mainly C and bash-scripting skills (but hoping to improve my less-than-newbie Python too...) I've sent separate wishlist messages for oVirt Node and Engine. VDSM: *) allow VDSM to configure/manage Samba, CTDB and Ganesha (specifically, I'm thinking of the GlusterFS integration); there are related wishlist items on configuring/managing Samba/CTDB/Ganesha on the Engine and on oVirt Node *) add Open vSwitch direct support (not Neutron-mediated); there are related wishlist items on configuring/managing Open vSwitch on oVirt Node and on the Engine *) add DRBD9 as a supported Storage Domain type; there are related wishlist items on configuring/managing DRBD9 on the Engine and on oVirt Node *) allow VDSM to configure/manage containers (maybe extend it by use of the LXC libvirt driver, similarly to the experimental work that has been put up to allow Xen vm management); there are related wishlist items on configuring/managing containers on the Engine and on oVirt Node *) add a VDSM_remote mode (for lack of a better name, but mainly inspired by pacemaker_remote) to be used inside a guest by the above mentioned container support (giving to the Engine the required visibility on the managed containers, but excluding the "virtual node" from power management and other unsuitable actions) Regards, Giuseppe

2 1

ovirt-freeipa authentication howto
by Rob Verduijn 20 Nov '15

20 Nov '15

Hi all, I found that for some reason it is hard to find a working example for integrating ovirt3.5 with freeipa using the generic aaa ldap extension. Here's what I did to get it to work: The ovirt os is centos 6 x86_64 All the latest patches have been applied. the ovirt machinet can be a member of the freeipa domain but this is not required for the ovirt-freeipa authentication to work. personally I think its nice to have the ovirt machine under freeipa supervision as wel. the freeipa os is centos7 x*86_64 All the latest patches have been applied. The ovirt environment is configured, up and running. There are two ways of single sign on for ovirt. see https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualiza… This howto is for the first option you require a search account in the freeipa domain. add a user account to the freeipa domain login with that account so it asks you to set a new password for it then reset the experation date for the password to somewhere in the far future with the procedure below # # Add the search account for ovirt to the freeipa domain. # # executed these commands on the freeipa server as root. # # first set the variables export SUFFIX='dc=example,dc=com' export OVIRT_SERVER=ovirt.example.com export FREEIPA_DOMAIN=EXAMPLE.COM export USERNAME=ovirt export YOUR_PASSWORD='top_secret_random_very_long_password' # create an ldif file cat > resetexperation.ldif << EOF dn: uid=$USERNAME,cn=users,cn=accounts,$SUFFIX changetype: modify replace: krbpasswordexpiration krbpasswordexpiration: 20380119031407Z EOF # apply the ldif file # the password requested is the directory admin password, this is NOT the same account as the freeipa admin ldapmodify -x -D "cn=directory manager" -W -vv -f resetexperation.ldif # for the second option also : # add the service for http to freeipa kinit admin ipa service-add HTTP/$OVIRT_SERVER@$FREEIPA_DOMAIN # # The following commands are executed as root on the ovirt-engine machine. # # # first install the required package : # yum install -y ovirt-engine-extension-aaa-ldap # # ovirt configuration files # examples can be found here : # /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple/. # mkdir /etc/ovirt-engine/aaa mkdir /etc/ovirt-engine/extenstions.d # # set the vars again ( exports do not work between vm's) # export SUFFIX='dc=example,dc=com' export YOUR_PASSWORD='top_secret_random_very_long_password' export FREEIPA_SERVER=freeipa.example.com export PROFILE_NAME=profile1 # # create the config files # cat > /etc/ovirt-engine/aaa/$PROFILE_NAME.properties << EOF include = <ipa.properties> vars.server = $FREEIPA_SERVER vars.user = uid=ovirt,cn=users,cn=accounts,$SUFFIX vars.password = $YOUR_PASSWORD pool.default.serverset.single.server = \${global:vars.server} pool.default.auth.simple.bindDN = \${global:vars.user} pool.default.auth.simple.password = \${global:vars.password} EOF cat > /etc/ovirt-engine/extensions.d/$PROFILE_NAME-authz.properties << EOF ovirt.engine.extension.name = $PROFILE_NAME-authz ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = ../aaa/$PROFILE_NAME.properties EOF cat > /etc/ovirt-engine/extensions.d/$PROFILE_NAME-authn.properties << EOF ovirt.engine.extension.name = $PROFILE_NAME-authn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = $PROFILE_NAME ovirt.engine.aaa.authn.authz.plugin = $PROFILE_NAME-authz config.profile.file.1 = ../aaa/$PROFILE_NAME.properties EOF # # change owner and permissions of the profile file # chown ovirt:ovirt /etc/ovirt-engine/extensions.d/$PROFILE_NAME-authn.properties chmod 400 /etc/ovirt-engine/extensions.d/$PROFILE_NAME-authn.properties # # restart the ovirt engine # service ovirt-engine restart # # done you can now add freeipa users to the rhevm portal in the users menu # after the users have been added you can assign permissions for them on the vm's # Cheers Rob Verduijn

1 0

Allowing a user to manage all machines in a pool
by Nicolás 20 Nov '15

20 Nov '15

Hi, We're running oVirt 3.5.3.1-1, and we're currently deploying some Pools for students and teachers, so each has access to one machine in the pool. Thus, each of them is granted the UserRole in the pool. Now the teacher is asking us to allow him access to all students' VMs via the Web GUI to evaluate their work. Is there a permission to accomplish that? In worst of cases I will detach the VMs from the pool and grant the teacher the UserRole on each of them, but I'd like to know if there's a "cleaner" way. Thanks. Regards, Nicolás

1 0

console ports
by Budur Nagaraju 20 Nov '15

20 Nov '15

HI can someone pls update the default vm console ports which needs to be open in firewall ? Regards, Nagaraju

3 2

Creating an oVirt tag in Stack Overflow
by Yaniv Kaul 20 Nov '15

20 Nov '15

If there's anyone with 1500+ reputation in stackoverflow, I'd be happy if he/she could create an 'oVirt' tag for oVirt related issues, such as http://stackoverflow.com/questions/33775293/how-to-transfer-vm-from-virt-ma… TIA, Y.

2 1

unable to connect to storage
by Budur Nagaraju 20 Nov '15

20 Nov '15

After rebooting engine storage is unable to connect ,below are the logs, anyways to resolve the issue ? status = finished 2015-11-20 17:54:36,865 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [24fd9594] Start SPM Task failed - result: cleanSuccess, message: VDSGenericException: VDSErrorException: Failed to HSMGetTaskStatusVDS, error = Cannot obtain lock, code = 651 2015-11-20 17:54:36,883 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [24fd9594] spmStart polling ended, spm status: Free 2015-11-20 17:54:36,898 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (DefaultQuartzScheduler_Worker-59) [24fd9594] START, HSMClearTaskVDSCommand(HostName = pbuovirt3, HostId = 2eabc525-c100-4b6e-8a0c-f4f6b0901bec, taskId=ec568c7e-44e3-4fcd-a353-85033ad3d721), log id: 484dc789 2015-11-20 17:54:36,904 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (DefaultQuartzScheduler_Worker-59) [24fd9594] FINISH, HSMClearTaskVDSCommand, log id: 484dc789 2015-11-20 17:54:36,905 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [24fd9594] FINISH, SpmStartVDSCommand, return: org.ovirt.engine.core.common.businessentities.SpmStatusResult@4123abbf, log id: 44e92a18 2015-11-20 17:54:36,910 INFO [org.ovirt.engine.core.bll.storage.SetStoragePoolStatusCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] Running command: SetStoragePoolStatusCommand internal: true. Entities affected : ID: 7816137d-e178-4998-9309-43e1c111ee1d Type: StoragePool 2015-11-20 17:54:36,929 ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] IrsBroker::Failed::GetStoragePoolInfoVDS due to: IrsSpmStartFailedException: IRSGenericException: IRSErrorException: SpmStart failed 2015-11-20 17:54:36,998 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (DefaultQuartzScheduler_Worker-59) [ce0aa02] Irs placed on server 2eabc525-c100-4b6e-8a0c-f4f6b0901bec failed. Proceed Failover 2015-11-20 17:54:37,077 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (DefaultQuartzScheduler_Worker-59) [ce0aa02] hostFromVds::selectedVds - pbuovirt2, spmStatus Free, storage pool PBU 2015-11-20 17:54:37,096 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (DefaultQuartzScheduler_Worker-59) [ce0aa02] SpmStatus on vds d6c25f14-b5af-4290-a59e-26ce669c6549: Free 2015-11-20 17:54:37,101 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] (DefaultQuartzScheduler_Worker-59) [ce0aa02] starting spm on vds pbuovirt2, storage pool PBU, prevId 3, LVER 25 2015-11-20 17:54:37,125 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] START, SpmStartVDSCommand(HostName = pbuovirt2, HostId = d6c25f14-b5af-4290-a59e-26ce669c6549, storagePoolId = 7816137d-e178-4998-9309-43e1c111ee1d, prevId=3, prevLVER=25, storagePoolFormatType=V3, recoveryMode=Manual, SCSIFencing=false), log id: 1376671f 2015-11-20 17:54:37,145 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] spmStart polling started: taskId = cb3041db-782b-45c4-b1ca-8887eba8c852 2015-11-20 17:54:38,151 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMGetTaskStatusVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] Failed in HSMGetTaskStatusVDS method 2015-11-20 17:54:38,152 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] spmStart polling ended: taskId = cb3041db-782b-45c4-b1ca-8887eba8c852 task status = finished 2015-11-20 17:54:38,152 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] Start SPM Task failed - result: cleanSuccess, message: VDSGenericException: VDSErrorException: Failed to HSMGetTaskStatusVDS, error = Cannot obtain lock, code = 651 2015-11-20 17:54:38,172 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] spmStart polling ended, spm status: Free 2015-11-20 17:54:38,191 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] START, HSMClearTaskVDSCommand(HostName = pbuovirt2, HostId = d6c25f14-b5af-4290-a59e-26ce669c6549, taskId=cb3041db-782b-45c4-b1ca-8887eba8c852), log id: 3970d6ee 2015-11-20 17:54:38,200 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.HSMClearTaskVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] FINISH, HSMClearTaskVDSCommand, log id: 3970d6ee 2015-11-20 17:54:38,201 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStartVDSCommand] (DefaultQuartzScheduler_Worker-59) [ce0aa02] FINISH, SpmStartVDSCommand, return: org.ovirt.engine.core.common.businessentities.SpmStatusResult@3334cb75, log id: 1376671f 2015-11-20 17:54:38,206 INFO [org.ovirt.engine.core.bll.storage.SetStoragePoolStatusCommand] (DefaultQuartzScheduler_Worker-59) [4f198896] Running command: SetStoragePoolStatusCommand internal: true. Entities affected : ID: 7816137d-e178-4998-9309-43e1c111ee1d Type: StoragePool 2015-11-20 17:54:38,233 ERROR [org.ovirt.engine.core.vdsbroker.irsbroker.IrsBrokerCommand] (DefaultQuartzScheduler_Worker-59) [4f198896] IrsBroker::Failed::GetStoragePoolInfoVDS due to: IrsSpmStartFailedException: IRSGenericException: IRSErrorException: SpmStart failed ^C [root@pscloud ~]#

2 1

[3.6] API - Internal Server Error
by Maksim Naumov 20 Nov '15

20 Nov '15

After some time, API stopped work. When I try to run any request I see only "Internal Server Error" and the log like this: 2015-11-18 17:53:05,634 ERROR [org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthnExtension] (default task-314) [] Unexpected Exception invoking: AAA_AUTHN_AUTHENTICATE_CREDENTIALS[d9605c75-6b43-4b00-b32c-06bdfa80244c] How can fix it? -- Maksim Naumov Hitmeister GmbH Softwareentwickler Habsburgerring 2 50674 Köln E: maksim.naumov(a)hitmeister.de www.hitmeister.de HRB 59046, Amtsgericht Köln Geschäftsführer: Dr. Gerald Schönbucher

3 7