- Users - oVirt List Archives

cloud -init variable name
by Nathanaël Blanchet 05 Jul '18

05 Jul '18

Hello, I use cloud-init to provision new vm and I'd like the hostname field to be a variable so as the name disk to be based on. i.e: my vm name is toto and the disk alias is toto_Disk1 Is there a way to easlily do such a thing? Thank you. -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

1 0

VM - Disks - Table too small
by Maton, Brett 05 Jul '18

05 Jul '18

The table which displays disk info is too small when moving disks between storage domains, probably because the progress bar is added below the 'locked' status but the table doesn't resize to accommodate the taller rows. Tried in Chrome, Edge, Firefox, Internet Explorer & Safari

2 2

oVirt 4.2 Self-hosted engine deployment fails at the end - "failed liveliness check"
by Aleksander Maricq 04 Jul '18

04 Jul '18

I successfully deployed an oVirt 4.2 self-hosted engine setup just over 6 months ago, and recently tried to re-install to modify hostnames on the engine and hypervisor. After I cleaned up and re-ran hosted-engine --deploy my install failed right at the end (TASK [Wait for the engine to come up on the target VM]) with the following error: ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:98 fatal and the following engine vm status: Engine status: {"reason": "failed liveliness check", "health": "bad", "vm": "up", "detail": "Up"} I opted to do a clean re-install of CentOS 7.5 and try again, but I keep running into the same error (see the attached logs). Some details that may or may not be helpful: - I'm reusing old mount points without formatting such as /home and my previous NFS-exported storage domain LVMs. The root partition, swap, /boot, and the engine destination LVMs were all re-formatted during the CentOS 7.5 install or prior to attempted oVirt install. - I'm reusing the MAC address from the previous attempt (so that it picks up the static entry I put on my router). - I currently only have entries in /etc/hosts to map FQDNs to IPs, but the install fails the same way whether or not I tell the process to populate the engine VM's hosts file. - Prior to my re-install of CentOS 7.5 I tried, and was able, to log into the engine appliance. I saw the hosted engine VM was listed as "down", and there was some temporary VM (leftover from the install process?) that I couldn't do anything to. Thanks in advance for your help!

2 2

remote-viewer Spice Problem on MacOS
by hpeyerl＠plusline.net 04 Jul '18

04 Jul '18

Hi all, we are currently experiencing a weird problem with oVirt and the spice console on MacOS: Occasionally when our Mac Users are connecting to a Spice Console of any oVirt VM it opens the usual window but just displays the message: "Connected to graphic server". When a Linux user now connects to it and closes the connection the Mac user can also connect again normally. I have tried https://www.spice-space.org/osx-client.html and https://rizvir.com/articles/ovirt-mac-console/ with exactly the same behaviour. The Issue appears on several different MacOS Versions and we believe it started after our upgrade to oVirt 4.2. MacOS Version: 10.13.5 oVirt Version: 4.2.3.8-1.el7 Any help or suggestion is greatly appreciated. Best regards, Hendrik

10 15

LDAP login extension
by Mariusz Kozakowski 04 Jul '18

04 Jul '18

Hello, We managed to setup oVirt Engine with your help, now we're facing other issue. I'm trying to configure AD auth for web portal, but unfortunately I got error during ovirt-engine-extension-aaa-ldap-setup: 2018-06-27 09:06:21,926+02 INFO ======================================================================== 2018-06-27 09:06:21,926+02 INFO ============================== Execution =============================== 2018-06-27 09:06:21,926+02 INFO ======================================================================== 2018-06-27 09:06:21,927+02 INFO Iteration: 0 2018-06-27 09:06:21,928+02 INFO Profile='ad' authn='ad-authn' authz='ad-authz' mapping='null' 2018-06-27 09:06:21,928+02 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ad' user='username' 2018-06-27 09:06:21,945+02 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='ad' result=SUCCESS 2018-06-27 09:06:21,948+02 INFO --- Begin AuthRecord --- 2018-06-27 09:06:21,949+02 INFO AAA_AUTHN_AUTH_RECORD_PRINCIPAL: username 2018-06-27 09:06:21,949+02 INFO --- End AuthRecord --- 2018-06-27 09:06:21,950+02 INFO API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD principal='username' 2018-06-27 09:06:21,952+02 WARNING Ignoring records from pool: 'gc' 2018-06-27 09:06:21,953+02 SEVERE Cannot resolve principal 'username' Do you have any idea what's the issue and what we're missing? As it looks like credentials are correct - passing wrong username gives fail earlier, so issue is somewhere after authentication. -- Best regards/Pozdrawiam/MfG Mariusz Kozakowski Site Reliability Engineer Dansk Supermarked Group Baltic Business Park ul. 1 Maja 38-39 71-627 Szczecin dansksupermarked.com

2 1

oVirt Authentication and Authorization
by Hari Prasanth Loganathan 04 Jul '18

04 Jul '18

Hi Team, We have three components in our setup 1) Our Script (application using python) 2) Ovirt 3) LDAP (Also integrated to oVirt) 1) Our Python application is authenticating to LDAP and it creates a token for our application 2) For accessing the API's in oVIrt, I need to contact to the oVirt API which authenticates and creates a token for it 3) then I need to maintain the token of my application with its mapping to the ovirt tokenId in my application. When I want to hit any oVirt API, First I perform the token check in my application (using my application token) then I need to perform the ovirt token check in oVirt. 1) * I would like to know Is there a way to skip the authentication and authorization in oVIrt? * 2)* Or Is it possible to point the authentication check for oVirt (to my application / to some URL which I configure) which always return true and allow for all oVirt API's?* *I did some analysis and verified the oVirt code in github, Identified that it is going via a fliter in web.xml which points to the class, Is it possible to tune this? * <filter> <filter-name>RestApiSessionValidationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.RestApiSessionValidationFilter</filter-class> </filter> <filter-mapping> <filter-name>RestApiSessionValidationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SessionValidationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SessionValidationFilter</filter-class> </filter> <filter-mapping> <filter-name>SessionValidationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SsoRestApiAuthFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SsoRestApiAuthFilter</filter-class> </filter> <filter-mapping> <filter-name>SsoRestApiAuthFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> <filter> <filter-name>SsoRestApiNegotiationFilter</filter-name> <filter-class>org.ovirt.engine.core.aaa.filters.SsoRestApiNegotiationFilter</filter-class> </filter> <filter-mapping> <filter-name>SsoRestApiNegotiationFilter</filter-name> <url-pattern>/*</url-pattern> </filter-mapping> If my query is not clear, please let me know. Thanks, Hari

3 5

Re: Engine Setup Error
by Sahina Bose 04 Jul '18

04 Jul '18

vdsm.log does indicate an error connecting to the engine gluster volume. I should have been more specific - I requested for the engine volume mount logs from the host, under /var/log/glusterfs/rhev-data-center-mnt-glusterSD...engine.log Also, please provide output of "gluster volume status engine" and "gluster peer status" On Wed, Jul 4, 2018 at 1:04 PM, Sakhi Hadebe <sakhi(a)sanren.ac.za> wrote: > Thank you for your quick response. > > Attached please find the log files: > > > > On Wed, Jul 4, 2018 at 7:37 AM, Yedidyah Bar David <didi(a)redhat.com> > wrote: > >> On Tue, Jul 3, 2018 at 3:28 PM, Sakhi Hadebe <sakhi(a)sanren.ac.za> wrote: >> > Hi, >> > >> > We are deploying the hosted engine on oVirt-Node-4.2.3.1 using the >> command >> > "hosted-engine --deploy". >> > >> > After providing answers it runs the ansible script and hit the Error >> when >> > creating glusterfs storage domain. Attached the screenshot of the ERROR. >> >> Adding Sahina. >> >> Please check/share relevant logs from the host. Thanks. >> >> Best regards, >> -- >> Didi >> > > > > -- > Regards, > Sakhi Hadebe > > Engineer: South African National Research Network (SANReN)Competency Area, Meraka, CSIR > > Tel: +27 12 841 2308 <+27128414213> > Fax: +27 12 841 4223 <+27128414223> > Cell: +27 71 331 9622 <+27823034657> > Email: sakhi(a)sanren.ac.za <shadebe(a)csir.co.za> > >

1 0

API token in postgres
by Hari Prasanth Loganathan 04 Jul '18

04 Jul '18

Hi Team, Which postgres table is used to store the relation between sessionId and SSO token ? I verified the *github* : https://github.com/oVirt/ovirt-engine/blob/d910a6e14bdb9fad0f21b8d9f22723f5… *Code** :* QueryReturnValue queryRetVal = FiltersHelper.getBackend(ctx).runPublicQuery( QueryType.*GetEngineSessionIdForSsoToken*, new GetEngineSessionIdForSsoTokenQueryParameters(token)); Which table in postgres has the mapping between sessionId and sso token? Could somebody help me on this? Thanks, Hari

1 3

Error with with increasing resources of the HostedEngine. VM values that are locked
by Egor Panov 04 Jul '18

04 Jul '18

Hi, I have problem with increasing resources of the HostedEngine:"There was an attempt to change Hosted Engine VM values that are locked» I read the articles https://access.redhat.com/solutions/3023041 <https://access.redhat.com/solutions/3023041> https://access.redhat.com/solutions/3133781 <https://access.redhat.com/solutions/3133781> From thus articles "The message from the engine.log the problem comes with not editable filed.» "Inital Run" -> Uncheck "Use Cloud-Init/Sysprep» had already unchecked. And it means that another field is locked. I did support log-collector with the database dump # ovirt-log-collector --no-hypervisors But I didn’t find in output what field is not editable. Can you help me with it? Regards, Egor Panov System Administrator Skype: e.panoff Tel: + 7 (916) 182-62-13 This e-mail and the attachments, if any, are confidential and may be legally privileged, and are for the sole use of the intended recipient. If you are not the intended recipient of this e-mail or any part of it, please delete it from your computer.

2 2

Fresh 4.2 install: engine-setup skipping NFS share step
by davemintz64＠gmail.com 03 Jul '18

03 Jul '18

Any idea why the install script is not asking me if I want to set up the local ISO nfs share? I thought it might be because I am using the entire disk, but I tried creating a separate partition/mount for ti and it still didn't work. This is what I see: --== APACHE CONFIGURATION ==-- Setup can configure the default page of the web server to present the application home page. This may conflict with existing applications. Do you wish to set the application as the default page of the web server? (Yes, No) [Yes]: Setup can configure apache to use SSL using a certificate issued from the internal CA. Do you wish Setup to configure that, or prefer to perform that manually? (Automatic, Manual) [Automatic]: --== SYSTEM CONFIGURATION ==-- [The NFS questions should be here but it is blank] --== MISC CONFIGURATION ==-- Please choose Data Warehouse sampling scale: (1) Basic (2) Full Thanks in advance. Dave

4 4