- Users - oVirt List Archives

oVirt 3.5 - Node Non-Operational
by Marcelo Donato 10 Apr '15

10 Apr '15

*Hi everyone! Suggestions are welcome and since I thank you.* *I have the following scenario:* Host-01: sequoia.din.uem.br - 10.30.4.1 - Manager Host-02: jacaranda.din.uem.br - 10.30.4.2 - Node-01 *As indicated below, the hosts communicate normally:* [root@jacaranda ~]# ping -c 3 sequoia PING sequoia.din.uem.br (10.30.4.1) 56(84) bytes of data. 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=1 ttl=64 time=0.436 ms 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=2 ttl=64 time=0.612 ms 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=3 ttl=64 time=0.635 ms [root@sequoia ~]# ping -c 3 jacaranda PING jacaranda.din.uem.br (10.30.4.2) 56(84) bytes of data. 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=1 ttl=64 time=0.443 ms 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=2 ttl=64 time=0.587 ms 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=3 ttl=64 time=0.563 ms *Network interfaces* [root@jacaranda ~]# ifconfig ovirtmgmt ovirtmgmt Link encap:Ethernet Endereço de HW D4:AE:52:78:4C:17 inet end.: 10.30.4.2 Bcast:10.30.4.255 Masc:255.255.255.0 [root@sequoia ~]# ifconfig eth0 Link encap:Ethernet Endereço de HW 52:54:00:D2:0F:95 inet end.: 10.30.4.1 Bcast:10.30.4.255 Masc:255.255.255.0 *However engine.log, as highlighted below, the problem is in the network.* 2015-03-26 15:00:01,799 ERROR [org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] (DefaultQuartzScheduler_Worker-91) [35dba220] Host Node-01 is set to Non-Operational, it is missing the following networks: ovirtmgmt 2015-03-26 15:00:01,806 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-91) [35dba220] Correlation ID: 35dba220, Job ID: 1b3c2410-a941-4d65-b39d-1a3d2ef378b8, Call Stack: null, Custom Event ID: -1, Message: Host Node-01 does not comply with the cluster Cst-01 networks, the following networks are missing on host: 'ovirtmgmt' 2015-03-26 15:00:01,864 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-91) [6ba58858] Host 4aaf9afb-ae0e-40af-9ef8-ef098d3be91e : Node-01 is already in NonOperational status for reason NETWORK_UNREACHABLE. SetNonOperationalVds command is skipped. [image: Imagem inline 1] -- Ao encaminhar esta mensagem, por favor: 1. Apague o meu e-mail e o meu nome. 2. Apague também os endereços dos amigos antes de reenviar 3. Use Cco ou Bcc para enviar mensagens! Dificulte a disseminação de vírus e spam.

5 39

Can I somehow disable vdsms "restore_nets" ?
by Ernest Beinrohr 10 Apr '15

10 Apr '15

This is a multi-part message in MIME format. --------------060203060101020203010704 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit I use quite a lot of my own config and vdsm restores his version of /etc/sysconfig/network-scripts/ifcfg-* on each start. Can the restore_nets be disabled somehow? -- Ernest Beinrohr, AXON PRO Ing <http://www.beinrohr.sk/ing.php>, RHCE <http://www.beinrohr.sk/rhce.php>, RHCVA <http://www.beinrohr.sk/rhce.php>, LPIC <http://www.beinrohr.sk/lpic.php>, VCA <http://www.beinrohr.sk/vca.php>, +421-2-62410360 +421-903-482603 --------------060203060101020203010704 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> I use quite a lot of my own config and vdsm restores his version of /etc/sysconfig/network-scripts/ifcfg-* on each start. Can the restore_nets be disabled somehow? <div class="moz-signature">-- <div id="oernii_footer" style="color: gray;"> Ernest Beinrohr, AXON PRO <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/ing.php">Ing</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCE</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCVA</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/lpic.php">LPIC</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/vca.php">VCA</a>, +421-2-62410360 +421-903-482603 </div> <img src="http://nojsstats.appspot.com/UA-44497096-1/email.beinrohr.sk" moz-do-not-send="true" border="0" width="1" height="1"> </div> </body> </html> --------------060203060101020203010704--

1 1

RARP and Vlan problem
by Pavel Gandalipov 10 Apr '15

10 Apr '15

Hello, we have logical cluster, that consists of two servers. Each server connected to each of two switches. On the server cluster we run the virtualization farm on which testing virtual machine's migration. In our topology we separate servers's network and virtual machines' network to vlan 3 and 4, respectively. When we manually migrating VM that belongs to Vlan 4 from one host to another we are loosing access to VM because although host sends RARP packet it isn't updating arp table . So host belongs to another vlan then RARP packet from host isn't updating arp entry of VM on the switch. And i have no idea how to make it work. Pavel Gandalipov

2 1

Cancel a running task | Zombie Task
by Punit Dambiwal 10 Apr '15

10 Apr '15

Hi, I have checked and found two tasks running from last 14 hours and there is no option to kill it... [image: Inline image 1] from the SPM host :- [root@cpu11 ~]# vdsClient -s 0 getAllTasksStatuses {'status': {'message': 'OK', 'code': 0}, 'allTasksStatus': {}} [root@cpu11 ~]# Please let me know how i can kill those processes... Thanks, Punit

3 3

install IOPS limits
by Roman Nikolayevich Drovalev 10 Apr '15

10 Apr '15

Ýòî ñîîáùåíèå èç íåñêîëüêèõ ÷àñòåé â ôîðìàòå MIME. --=_alternative 0029826F43257E22_= Content-Type: text/plain; charset="US-ASCII" Hello, How it is possible to instal restrictions for everyone VM IOPS restrictions? I have read the documentation, how it can be made? http://www.ovirt.org/Features/blkio-support >From the documentation: Engine Core DB qos: added limit fields to qos table: max_throughput max_read_throughput max_write_throughput max_iops max_read_iops max_write_iops Thanks, Roman Drovalev --=_alternative 0029826F43257E22_= Content-Type: text/html; charset="US-ASCII" Hello, How it is possible to instal restrictions for everyone VM  IOPS restrictions?  I have read the documentation, how it can be made? <a href="http://www.ovirt.org/Features/blkio-support">http://www.ovirt.org/Features/blkio-support</a> From the documentation: Engine Core DB qos: added limit fields to qos table: <tt> max_throughput max_read_throughput max_write_throughput max_iops max_read_iops max_write_iops </tt> Thanks, Roman Drovalev --=_alternative 0029826F43257E22_=--

2 2

FW: gluster and multipath
by Bill Dossett 10 Apr '15

10 Apr '15

--_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Fumble fingered accidental send... From: Bill Dossett Sent: 09 April 2015 11:33 To: users(a)ovirt.org Subject: gluster and multipath Hi, Just got very confused trying to add create an additional brick on my glust= er node (I had created one yesterday and all was fine0 I had already created a partition on my /dev/sdb called sdb1 But when I tried mkfs.xfs (I am using xfs as that was in the example I was= following - if LVM or something else would be better I am open to suggesti= ons!) It said /dev/sdb1 no such file or directory - which confused me as this wor= ked yesterday. I deleted the partition recreated it and tried and then it said that the de= vice was busy. It appears that multipathd is the culprit... but what I am struggling with = is why it worked yesterday?? I may have created the partition before I pus= hed the gluster install to it from the ovirt-engine? And does that install= multipathd and it is now grabbing my devices? It is the only thing I can = think of. And if that is the case - I guess I have to blacklist these devices in mult= ipath.conf while I create the partitions? And reboot and then remove the b= lacklist and reboot - seems a bit clunky, is there a better way to add part= itions and bricks? Or I am just in a vortex wormhole of misunderstanding and grasping at stars= to try and pull myself out ? Thankyou for any advice - especially as this may not be so ovirt or a quest= ion, but it's what I am working on. Bill Dossett Systems Architect Tech Central - Global Engineering Services T +1 303 440 3523 M +44 (0)777 590 8612 bill.dossett(a)pb.com<mailto:bill.dossett@pb.com> pitneybowes.com<http://pitneybowes.com/> Pitney Bowes 4750 Walnut Street | Boulder, Colorado, 80301 | USA In Engineering? Raise a ticket via Remedy Anywhere [HERE<applewebdata://5D25CA10-0BA9-4233-= 9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCPPM/GES/Lists/Create%20Inc= ident/newIncident.aspx>] takes less than a minute CloudForms User Guide available [HERE<https://dl.dropboxusercontent.com/u/6= 219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf>] ________________________________ --_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-GB" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Fumble fingered accide= ntal send…<o:p></o:p> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm = 0cm 0cm"> From: Bill Dossett Sent: 09 April 2015 11:33 To: users(a)ovirt.org Subject: gluster and multipath<o:p></o:p> </div> </div> <o:p> </o:p> Hi,<o:p></o:p> <o:p> </o:p> Just got very confused trying to add create an addit= ional brick on my gluster node (I had created one yesterday and all was fin= e0<o:p></o:p> <o:p> </o:p> I had already created a partition on my /dev/sdb cal= led sdb1<o:p></o:p> <o:p> </o:p> But when I tried mkfs.xfs  (I am using xfs as t= hat was in the example I was following – if LVM or something else wou= ld be better I am open to suggestions!)<o:p></o:p> <o:p> </o:p> It said /dev/sdb1 no such file or directory – = which confused me as this worked yesterday.<o:p></o:p> <o:p> </o:p> I deleted the partition recreated it and tried and t= hen it said that the device was busy.<o:p></o:p> <o:p> </o:p> It appears that multipathd is the culprit… but= what I am struggling with is why it worked yesterday??  I may have cr= eated the partition before I pushed the gluster install to it from the ovir= t-engine?  And does that install multipa= thd and it is now grabbing my devices?  It is the only thing I can think = of.<o:p></o:p> <o:p> </o:p></spa= n> And if that is the cas= e – I guess I have to blacklist these devices in multipath.conf while= I create the partitions?  And reboot and then remove the blacklist an= d reboot – seems a bit clunky, is there a better way to add partitions and bricks?<o:p></o:p> <o:p> </o:p></spa= n> Or I am just in a vort= ex wormhole of misunderstanding and grasping at stars to try and pull mysel= f out ?<o:p></o:p> <o:p> </o:p></spa= n> Thankyou for any advic= e – especially as this may not be so ovirt or a question, but it&#821= 7;s what I am working on.<o:p></o:p> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0" width=3D"1280" style=3D"width:960.0pt"> <tbody> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Bill Dossett<o:p><= /o:p> Systems Archit= ect<o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Tech Centra= l – Global Engineering Services<o:p></o:p>  <o:p></o:p>= T</b= > +1 303 440 3523<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> M</b= > +44 (0)777 590 8612= <o:p></o:p> <a href= =3D"mailto:bill.dossett@pb.com">bill.dossett@= pb.com</a><o:p></o:p> <a href= =3D"http://pitneybowes.com/">pitneybowes.com<= /span></a><o:p></o:p> Pitney Bowes<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> 4750 Walnut St= reet | Boulder, Colorado, 80301 | USA<o:p></o:p>  <= span style=3D"mso-fareast-language:EN-GB"><o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm">  <o:= p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> In Engineering?<o:p></o:p> Raise a tic= ket via Remedy Anywhere [<a href=3D"applewebd= ata://5D25CA10-0BA9-4233-9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCP= PM/GES/Lists/Create%20Incident/newIncident.aspx">HERE</a>] takes less than a minute<o= :p></o:p>  </spa= n><o:p></o:p> CloudForms = User Guide available = [<a href=3D"https://dl.dropboxusercontent.= com/u/6219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf">HERE</a>]<o:p></o:p> </td> </tr> </tbody> </table> <o:p>&nbs= p;</o:p> <o:p> </o:p> </div> <hr> </body> </html> --_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_--

2 1

simple-sso w. kerberos & iplanet ldap - login slow and unreliable (ovirt 3.5.1.1)
by Alastair Neil 09 Apr '15

09 Apr '15

I have configured the simple-sso with kerberos. I can successfully login most of the time, but often the login fails and I am dropped at the portal login window and prompted for the internal account username and password. Host is FC 20. Also, adding users in the GMU-authz o=gmu.edu namespace is agonisingly slow returning from the directory lookup. I can see from the apache logs that the kerberos authentication is successful, but in the engine logs I see many errors: 2015-04-09 13:39:28,493 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-11) Cannot obtain profile for user aneil2 and eventually: 2015-04-09 13:39:28,342 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-5) Cannot obtain profile for user aneil2 > {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class > java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, > Extkey[name=EXTENSION_LICENSE;type=class > java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL > 2.0, Extkey[name=EXTENSION_NOTES;type=class > java.lang.String;uuid=EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display > name: ovirt-engine-extension-aaa-ldap-1.0.2-1.fc20, > Extkey[name=EXTENSION_HOME_URL;type=class > java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= > http://www.ovirt.org, Extkey[name=EXTENSION_LOCALE;type=class > java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, > Extkey[name=EXTENSION_NAME;type=class > java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authz, > Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class > java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, > Extkey[name=EXTENSION_CONFIGURATION;type=class > java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, > Extkey[name=EXTENSION_AUTHOR;type=class > java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The > oVirt Project, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class > java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=50, > Extkey[name=EXTENSION_INSTANCE_NAME;type=class > java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=GMU-authz, > Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class > java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, > Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface > java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], > Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, > Extkey[name=EXTENSION_VERSION;type=class > java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=1.0.2, > Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface > java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[o= > gmu.edu] Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface > org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.ovirt-engine-extension-aaa-ldap.authz.GMU-authz), > Extkey[name=EXTENSION_PROVIDES;type=interface > java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], > Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class > java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/extensions.d/GMU-authz.properties}, > Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class > java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3, > Extkey[name=EXTENSION_INVOKE_COMMAND;type=class > org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df], > Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class > java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=aneil2}} > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class > java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2, > Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class > java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=Cannot > locate principal 'aneil2'} > 2015-04-09 13:39:28,527 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-6) Cannot obtain profile for user aneil2 > 2015-04-09 13:39:28,493 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-11) Cannot obtain profile for user aneil2 > 2015-04-09 13:39:28,593 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (ajp--127.0.0.1-8702-6) Correlation ID: null, Call Stack: null, Custom > Event ID: -1, Message: User aneil2@GMU.EDU@GMU-http logged in. I suspect the ldap lookup is not working correctly. Here are the relevant config files: cat /etc/ovirt-engine/aaa/GMU.properties file: # Select one > # > #include = <openldap.properties> > #include = <389ds.properties> > #include = <rhds.properties> > #include = <ipa.properties> > include = <iplanet.properties> > #include = <rfc2307.properties> > #include = <rfc2307-openldap.properties> > # > # Server > # > vars.server = dirapps.gmu.edu > # > # Search user and its password. > # > vars.user = uid=proxy,ou=people,o=gmu.edu > vars.password = XXXXXXXXXX > pool.default.serverset.single.server = ${global:vars.server} > pool.default.auth.simple.bindDN = ${global:vars.user} > pool.default.auth.simple.password = ${global:vars.password} > # Create keystore, import certificate chain and uncomment > # if using ssl/tls. > #pool.default.ssl.startTLS = true > #pool.default.ssl.truststore.file = > ${local:_basedir}/${global:vars.server}.jks > #pool.default.ssl.truststore.password = changeit > cat /etc/ovirt-engine/extensions.d/GMU-authz.properties > ovirt.engine.extension.name = GMU-authz > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.ldap > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.ldap.AuthzExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz > config.profile.file.1 = ../aaa/GMU.properties > #config.globals.bindFormat.simple_bindFormat = realm cat /etc/ovirt-engine/extensions.d/GMU-http-authn.properties > ovirt.engine.extension.name = GMU-http-authn > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.misc > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.misc.http.AuthnExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn > ovirt.engine.aaa.authn.profile.name = GMU-http > ovirt.engine.aaa.authn.authz.plugin = GMU-authz > ovirt.engine.aaa.authn.mapping.plugin = http-mapping > config.artifact.name = HEADER > config.artifact.arg = X-Remote-User cat /etc/ovirt-engine/extensions.d/http-mapping.properties > ovirt.engine.extension.name = http-mapping > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.misc > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension > ovirt.engine.extension.provides = > org.ovirt.engine.api.extensions.aaa.Mapping > config.mapAuthRecord.type = regex > config.mapAuthRecord.regex.mustMatch = true > config.mapAuthRecord.regex.pattern = > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > config.mapAuthRecord.regex.replacement = ${user}${at}${suffix} > cat /etc/ovirt-engine/aaa/ovirt-sso.conf > # > # 1. make sure /etc/krb5.keytab is available and valid. > # 2. update KrbAuthRealms > # 3. symlink into /etc/httpd/conf.d > # > <LocationMatch ^(/ovirt-engine/(webadmin|userportal|api)|/api)> > RewriteEngine on > RewriteCond %{LA-U:REMOTE_USER} ^(.*)$ > RewriteRule ^(.*)$ - [L,P,E=REMOTE_USER:%1] > RequestHeader set X-Remote-User %{REMOTE_USER}s > LogLevel debug > AuthType Kerberos > AuthName "Kerberos Login" > Krb5Keytab /etc/httpd/http.keytab > KrbAuthRealms GMU.EDU VSNET.GMU.EDU > KrbServiceName HTTP/ovirt-admin-hosted.vsnet.gmu.edu > Require valid-user > </LocationMatch> The LDAP server is: Sun-Directory-Server/11.1.1.5.0 I have no administrative access to the ldap server, but I can successfully search via ldapsearch by binding with the proxy dn and password. Any ideas what might be wrong, or how to troubleshoot? -Alastair >

2 1

PXE boot issue
by Brandon Merjil 09 Apr '15

09 Apr '15

Hello, I am testing provisioning from foreman 1.8.0 to ovirt 3.5 with both on CentOS 7.1503 and have run into an issue after the system has been deployed to ovirt. When the guest system reboots after the kickstart completes it loads the PXE menu from a the same tftp server which tries to start localboot 0. It then tries to boot based on the order that ovirt had set for the guest, which is PXE first and HD second. The message I'm seeing is "Booting from local disk... No more network devices No bootable device" If I change the guest boot options to only the virtual HD the guest boots up without an issue. I have also done a provision to a plain libvirt/kvm server and had no issue after the reboot. Same foreman server and tftp server with PXE menu localboot 0 option were used. Any ideas what I might be running into here, and any additional information needed. Thanks.

4 8

gluster and multipath
by Bill Dossett 09 Apr '15

09 Apr '15

--_000_B47F00825D68444ABC03733078275360377AEEE2013BR1MPN1011MG_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Just got very confused trying to add create an additional brick on my glust= er node (I had created one yesterday and all was fine0 I had already created a partition on my /dev/sdb called sdb1 But when I tried mkfs.xfs (I am using xfs as that was in the example I was= following - if LVM or something else would be better I am open to suggesti= ons!) It said /dev/sdb1 no such file or directory - which confused me as this wor= ked yesterday. I deleted the partition recreated it and tried and then it said that the de= vice was busy. It appears that multipathd is the culprit... but what I am struggling with = is why it worked yesterday?? I may have created the partition before I pus= hed the gluster install to it from the ovirt-engine? And does that install= multi Bill Dossett Systems Architect Tech Central - Global Engineering Services T +1 303 440 3523 M +44 (0)777 590 8612 bill.dossett(a)pb.com<mailto:bill.dossett@pb.com> pitneybowes.com<http://pitneybowes.com/> Pitney Bowes 4750 Walnut Street | Boulder, Colorado, 80301 | USA In Engineering? Raise a ticket via Remedy Anywhere [HERE<applewebdata://5D25CA10-0BA9-4233-= 9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCPPM/GES/Lists/Create%20Inc= ident/newIncident.aspx>] takes less than a minute CloudForms User Guide available [HERE<https://dl.dropboxusercontent.com/u/6= 219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf>] ________________________________ --_000_B47F00825D68444ABC03733078275360377AEEE2013BR1MPN1011MG_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-GB" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Hi,<o:p></o:p> <o:p> </o:p> Just got very confused trying to add create an addit= ional brick on my gluster node (I had created one yesterday and all was fin= e0<o:p></o:p> <o:p> </o:p> I had already created a partition on my /dev/sdb cal= led sdb1<o:p></o:p> <o:p> </o:p> But when I tried mkfs.xfs  (I am using xfs as t= hat was in the example I was following – if LVM or something else wou= ld be better I am open to suggestions!)<o:p></o:p> <o:p> </o:p> It said /dev/sdb1 no such file or directory – = which confused me as this worked yesterday.<o:p></o:p> <o:p> </o:p> I deleted the partition recreated it and tried and t= hen it said that the device was busy.<o:p></o:p> <o:p> </o:p> It appears that multipathd is the culprit… but= what I am struggling with is why it worked yesterday??  I may have cr= eated the partition before I pushed the gluster install to it from the ovir= t-engine?  And does that install multi<o:p></o:p> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0" width=3D"1280" style=3D"width:960.0pt"> <tbody> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Bill Dossett<o:p><= /o:p> Systems Archit= ect<o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Tech Centra= l – Global Engineering Services<o:p></o:p>  <o:p></o:p>= T</b= > +1 303 440 3523<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> M</b= > +44 (0)777 590 8612= <o:p></o:p> <a href= =3D"mailto:bill.dossett@pb.com">bill.dossett@= pb.com</a><o:p></o:p> <a href= =3D"http://pitneybowes.com/">pitneybowes.com<= /span></a><o:p></o:p> Pitney Bowes<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> 4750 Walnut St= reet | Boulder, Colorado, 80301 | USA<o:p></o:p>  <= span style=3D"mso-fareast-language:EN-GB"><o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm">  <o:= p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> In Engineering?<o:p></o:p> Raise a tic= ket via Remedy Anywhere [<a href=3D"applewebd= ata://5D25CA10-0BA9-4233-9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCP= PM/GES/Lists/Create%20Incident/newIncident.aspx">HERE</a>] takes less than a minute<o= :p></o:p>  </spa= n><o:p></o:p> CloudForms = User Guide available = [<a href=3D"https://dl.dropboxusercontent.= com/u/6219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf">HERE</a>]<o:p></o:p> </td> </tr> </tbody> </table> <o:p>&nbs= p;</o:p> <o:p> </o:p> </div> <hr> </body> </html> --_000_B47F00825D68444ABC03733078275360377AEEE2013BR1MPN1011MG_--

1 0

Re: [ovirt-users] PXE boot issue
by Sven Kieske 09 Apr '15

09 Apr '15

On 09/04/15 10:30, Brandon Merjil wrote: > But my question is still why does this work with libvirt/kvm and ovirt > fails. libvirt/kvm is not doing run once, it is using the defaults provided > by the host which is PXE first HD second. Please keep the topic on the list, so the whole community can benefit. Well this could have been caused by multiple things: First: I assume you also do the libvirt install via foreman. if this is the case we have 2 possibilities here: 1. foreman does a different pxe boot for plain libvirt than for ovirt. 2. the generated libvirt xml differs between ovirt and plain libvirt. You could try to check number 2. by doing: virsh -r dumpxml $YOURVMNAME and compare that HTH -- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen

1 0