- Users - oVirt List Archives

Automating VM creation
by Andrey Tepin 24 Sep '14

24 Sep '14

Hello All, I am trying to automate the procedure of creating VM from template. I am using python oVirt sdk. My script not only creates but assigns IP to VM and performes runtime configuration. All created VMs should have predefined static IP, thus i can't set ip in template. So i need to somehow modify an ip address on VM's disk image. On RHEL ip is stored in file /etc/sysconfig/network-scripts/icfg-eth0. My options are: 1). Connect to hypervisor via SSH and patch disk (assuming i know the offset of ip on disk image). This will only work for RAW disk images. 2). Connect to hypervisor vis SSH, mount image using libguestfs utils (guestmount). This works on cow disks too. Do i have any other options to modify VM files? What is the best option in terms of security and relaiability? Can i somehow mount disk images stored on hypervisor on another VM? The last step of VM creation is to run it and perform configuration(for ex. ipa-client-install) My script connects to VM using ssh and runs required commands. Is there a better way to run commands on VM? Regards Andrey

2 2

Cannon have a non-VLAN VM network and VLAN-tagged networks on one interface.
by Nathan Stratton 24 Sep '14

24 Sep '14

Why not? It works fine, all our hosts have ovirtmgmt without a vlan and all other networks with a vlan. At least with RHEL, there is nothing wrong with the following: [root@virt02a network-scripts]# more ifcfg-cogent TYPE=Bridge DEVICE=cogent VLAN=yes BOOTPROTO=none MTU=1500 [root@virt02a network-scripts]# more ifcfg-ovirtmgmt TYPE=Bridge DEVICE=ovirtmgmt BOOTPROTO=none IPADDR=10.71.1.15 NETMASK=255.255.255.0 GATEWAY=10.71.1.1 ONBOOT=yes DEFROUTE=no MTU=1500 [root@virt02a network-scripts]# more ifcfg-private TYPE=Bridge DEVICE=private BOOTPROTO=none IPADDR=10.71.0.15 NETMASK=255.255.255.0 GATEWAY=10.71.0.1 ONBOOT=yes DEFROUTE=yes MTU=9000 [root@virt02a network-scripts]# more ifcfg-cogent TYPE=Bridge DEVICE=cogent VLAN=yes BOOTPROTO=none MTU=1500 [root@virt02a network-scripts]# more ifcfg-comcast TYPE=Bridge DEVICE=comcast VLAN=yes BOOTPROTO=none MTU=1500 [root@virt02a network-scripts]# more ifcfg-eth2.100 DEVICE="eth2.100" VLAN=yes ONBOOT="yes" TYPE="Ethernet" BRIDGE=private MTU=9000 [root@virt02a network-scripts]# more ifcfg-eth2.201 DEVICE="eth2.201" VLAN=yes ONBOOT="yes" TYPE="Ethernet" BRIDGE=cogent [root@virt02a network-scripts]# more ifcfg-eth2.202 DEVICE="eth2.202" VLAN=yes ONBOOT="yes" TYPE="Ethernet" BRIDGE=comcast [root@virt02a network-scripts]# more ifcfg-eth2 DEVICE="eth2" ONBOOT="yes" TYPE="Ethernet" BRIDGE=ovirtmgmt MTU=9000 ><> nathan stratton | vp technology | broadsoft, inc | +1-240-404-6580 | www.broadsoft.com

2 1

the better way to update vdsm
by Nathanaël Blanchet 24 Sep '14

24 Sep '14

This is a multi-part message in MIME format. --------------020207020907080505090303 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hi all, I'm about to update to 3.4.4 with the associated vdsm. Updating vdsm with yum is trivial, but it usually breaks running vms on the host. So these are the steps I follow each time: * live migrating runnings vms to a another host in the cluster * putting the host in maintenance * updating vdsm * activating the host * getting back the vms * and so on with the other hosts... But sometimes it is not enough, I need to reinstall the host so as to the host be able to successfully activate. When getting back the vms on the initial host, I must do it manually to load balance vms between the hosts and this is not very convinient. So my question is : do I update in the right way, or is there any recommendations that I didn't find anyway? Thanks. --------------020207020907080505090303 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi all, I'm about to update to 3.4.4 with the associated vdsm. Updating vdsm with yum is trivial, but it usually breaks running vms on the host. So these are the steps I follow each time: <ul> <li>live migrating runnings vms to a another host in the cluster</li> <li>putting the host in maintenance</li> <li>updating vdsm</li> <li>activating the host</li> <li>getting back the vms</li> <li>and so on with the other hosts... </li> </ul> But sometimes it is not enough, I need to reinstall the host so as to the host be able to successfully activate. When getting back the vms on the initial host, I must do it manually to load balance vms between the hosts and this is not very convinient. So my question is : do I update in the right way, or is there any recommendations that I didn't find anyway? Thanks. </body> </html> --------------020207020907080505090303--

3 3

OVIRT-3.5-TEST-DAY-3: Network Custom Properties
by Ido Barkan 24 Sep '14

24 Sep '14

------=_Part_35279276_1362727715.1411380773026 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hi, Following is a summery of testing the Network custom properties feature as detailed the link at the bottom. setUp: ====== engine: F19 Hosts: F20 (virtual) REHL 6.5 (physical) - in separate clusters Network custom properties: ========================== 1. I have defined a custom property entry via 'engine-config' cli and verified it consisted. * The property was defined with a validation regular expression * note that this requires an engine restart. 2. Added a new network to the DC and set the new property with the new drop-down value of 'custom properties'. - verified that violating the regular expression validation fails the network set up (client side validation). - verified that a legal value is passed to the server using a custom hook at before_network_setup stage. [hook code attached] 3. removed the value from the DB -- verified it is no longer available in the set up networks custom properties drop down. bridge options: =============== 1. changed the bridge options at the OS level (via editing /sys/class/net/<bridge>/bridge/<options>) 2. defined overrides in the logical level using the bridge_opts drop down value (key=value comma separated list) --verified that the values are changed after setting up network 3. removed the logical level settings -- verified that the values are set back to the original ones ethtool options: ================ * note- testing this on a virtual host, or on a virtual NIC on a physical host is pretty useless. For the NIC driver to be capable of actually allowing NIC changes you need a bare metal NIC. 1. installed the vdsm-hook-ethtool-options hook on a physical host 2. set up network with the following ethtool command line arguments added: "-s eth1 speed 100 autoneg off" -- verified using ethtool that changes took place 3. set up network with the following ethtool command line arguments added: "-s eth1 autoneg on" -- verified using ethtool that changes took place feature page: http://www.ovirt.org/Features/Network_Custom_Properties Thanks, Ido ------=_Part_35279276_1362727715.1411380773026 Content-Type: text/x-python; name=print_hostonly.py Content-Disposition: attachment; filename=print_hostonly.py Content-Transfer-Encoding: base64 IyEvdXNyL2Jpbi9weXRob24KaW1wb3J0IG9zCmltcG9ydCBob29raW5nCgoKZGVmIG1haW4oKToK ICAgIHNldHVwX25ldHNfY29uZmlnID0gaG9va2luZy5yZWFkX2pzb24oKQogICAgaG9va2luZy5s b2coJ2tleXM6Jysgc3RyKHNldHVwX25ldHNfY29uZmlnLmtleXMoKSkpCiAgICBmb3IgbmV0d29y aywgYXR0cnMgaW4gc2V0dXBfbmV0c19jb25maWdbJ3JlcXVlc3QnXVsnbmV0d29ya3MnXS5pdGVt cygpOgogICAgICAgIGlmICdjdXN0b20nIGluIGF0dHJzIGFuZCAnaG9zdG9ubHknIGluIGF0dHJz WydjdXN0b20nXToKICAgICAgICAgICAgdmFsdWUgPSBhdHRyc1snY3VzdG9tJ11bJ2hvc3Rvbmx5 J10KICAgICAgICBlbHNlOgogICAgICAgICAgICB2YWx1ZSA9ICdub3QgZm91bmQnCiAgICAgICAg aG9va2luZy5sb2coJ1RFU1RJTkc6IHswfScuZm9ybWF0KHZhbHVlKSkKCmlmIF9fbmFtZV9fID09 ICdfX21haW5fXyc6CiAgICBtYWluKCk= ------=_Part_35279276_1362727715.1411380773026--

2 1

oVirt mirror health report
by Jiri Belka 24 Sep '14

24 Sep '14

Hi, oVirt mirrors are not really great, could you consider to make a health status reporting - out of sync, broken,...? This way you could remove bogus mirrors which would just make people upset. Inspiration: http://spacehopper.org/mirmon/ j.

2 2

Can not configure with simple LDAP.
by Fumihide Tani 24 Sep '14

24 Sep '14

Hello, I'm running oVirt Engine, OpenLDAP and BIND on same machine. and running oVirt host (hypervisor) on another machine. I tried to configure OpenLDAP using ovirt-engine-extension-aaa-ldap, but No LDAP users can search and add from Web Admin Portal. CentOS release 6.5 (Final) ovirt-engine.noarch 3.5.0-0.0.master.20140821064931.gitb794d66.el6 ovirt-engine-extension-aaa-ldap.noarch 0.0.0-0.0.master.20140904095149.gitc7bd415.el6 openldap-clients.x86_64 2.4.23-34.el6_5.1 openldap-servers.x86_64 2.4.23-34.el6_5.1 cyrus-sasl-gssapi.x86_64 2.1.23-13.el6_3.1 bind.x86_64 32:9.8.2-0.23.rc1.el6_5.1 My setup procedures: ------------------------------------------------------------------------------- # yum -y install openldap-servers openldap-clients # yum -y install cyrus-sasl-gssapi ------------------------------------------------------------------------------- # rm -rf /etc/openldap/slapd.d # rm -rf /var/lib/ldap/* ------------------------------------------------------------------------------- (Copy slapd.conf template) # cp /usr/share/openldap-servers/slapd.conf.obsolete /etc/openldap/slapd.conf ------------------------------------------------------------------------------- # vi /etc/openldap/slapd.conf ....(snip).... # remove comment out moduleload memberof.la ....(snip).... # modify value by dn.exact="cn=Manager,dc=rxc05271,dc=com" read ....(snip).... # add next two lines right under "database definitions" authz-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth" "cn=Manager,dc=rxc05271,dc=com" ....(snip).... # modify value suffix "dc=rxc05271,dc=com" ....(snip).... # modify value rootdn "cn=Manager,dc=rxc05271,dc=com" ....(snip).... # remove comment out rootpw secret ....(snip).... # add next line to end of the file overlay memberof loglevel 4 ------------------------------------------------------------------------------- (Enabling SSL/TLS) # vi /etc/sysconfig/ldap SLAPD_LDAPS=yes ------------------------------------------------------------------------------- (Enabling OpenLDAP log output) # echo "local4.* /var/log/ldap.log" > /etc/rsyslog.d/ldaplog.conf # service rsyslog restart ------------------------------------------------------------------------------- # service slapd start # chkconfig slapd on ------------------------------------------------------------------------------- # vi ldapconfig.ldif dn: dc=rxc05271,dc=com objectClass: dcObject objectClass: organization dc: rxc05271 o: RXC05271 dn: ou=Groups,dc=rxc05271,dc=com objectclass: organizationalUnit ou: Groups dn: ou=Users,dc=rxc05271,dc=com objectclass: organizationalUnit ou: Users dn: uid=tani,ou=Users,dc=rxc05271,dc=com objectclass: inetOrgPerson objectclass: uidObject uid: tani cn: Tani givenName: Fumihide mail: tani(a)rxc05271.com sn: 0 dn: cn=Power-Users,ou=Groups,dc=rxc05271,dc=com objectclass: groupOfNames cn: Power-Users member: uid=tani,ou=Users,dc=rxc05271,dc=com ------------------------------------------------------------------------------- # ldapadd -x -D "cn=Manager,dc=rxc05271,dc=com" -w secret -f ldapconfig.ldif ------------------------------------------------------------------------------- # vi setsasl.ldif replace: olcSaslSecProps olcSaslSecProps: noanonymous,noplain,minssf=1 - ------------------------------------------------------------------------------- # ldapmodify -x -D "cn=Manager,dc=rxc05271,dc=com" -w secret -f setsasl.ldif ------------------------------------------------------------------------------- # ldapsearch -LL -Y EXTERNAL -H ldapi:/// "(uid=tani)" -b dc=rxc05271,dc=com memberOf SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 version: 1 dn: uid=tani,ou=Users,dc=rxc05271,dc=com memberOf: cn=Power-Users,ou=Groups,dc=rxc05271,dc=com ------------------------------------------------------------------------------- # yum install ovirt-engine-extension-aaa-ldap ------------------------------------------------------------------------------- # vi /etc/ovirt-engine/extensions.d/authn-company.properties ovirt.engine.extension.name = authn-company ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = rxc05271.com ovirt.engine.aaa.authn.authz.plugin = authz-company config.profile.file.1 = /etc/ovirt-engine/aaa/rxc05271.properties ------------------------------------------------------------------------------- # vi /etc/ovirt-engine/aaa/rxc05271.properties include = <openldap.properties> vars.user = cn=Manager,dc=rxc05271,dc=com vars.password = 12345678 vars.server = ldap.rxc05271.com pool.default.ssl.startTLS = true pool.default.ssl.truststore.file = /etc/openldap/certs/ldap.jks pool.default.ssl.truststore.password = 12345678 pool.default.serverset.single.server = ${global:vars.server} pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} ------------------------------------------------------------------------------- (Add DNS records) # vi /var/named/rxc05271.com.db (snip) ldap IN A 192.168.0.5 _ldap._tcp.rxc05271.com. IN SRV 10 0 389 ovirt.rxc05271.com. # vi /var/named/0.168.192.in-addr.arpa.db (snip) 5 IN PTR ldap.rxc05271.com. # service named restart ------------------------------------------------------------------------------- # service ovirt-engine restart ------------------------------------------------------------------------------- (ldap.log outputs after ovirt-engine restart) [root@ovirt ~]# cat /var/log/ldap.log Sep 21 14:33:20 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:25 ovirt slapd[19276]: 1 0 0 Sep 21 14:33:25 ovirt slapd[19276]: filter: (objectClass=*) Sep 21 14:33:25 ovirt slapd[19276]: attrs: Sep 21 14:33:25 ovirt slapd[19276]: * Sep 21 14:33:25 ovirt slapd[19276]: + Sep 21 14:33:25 ovirt slapd[19276]: altServer Sep 21 14:33:25 ovirt slapd[19276]: changelog Sep 21 14:33:25 ovirt slapd[19276]: firstChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: lastChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: lastPurgedChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: namingContexts Sep 21 14:33:25 ovirt slapd[19276]: subschemaSubentry Sep 21 14:33:25 ovirt slapd[19276]: supportedAuthPasswordSchemes Sep 21 14:33:25 ovirt slapd[19276]: supportedControl Sep 21 14:33:25 ovirt slapd[19276]: supportedExtension Sep 21 14:33:25 ovirt slapd[19276]: supportedFeatures Sep 21 14:33:25 ovirt slapd[19276]: supportedLDAPVersion Sep 21 14:33:25 ovirt slapd[19276]: supportedSASLMechanisms Sep 21 14:33:25 ovirt slapd[19276]: vendorName Sep 21 14:33:25 ovirt slapd[19276]: vendorVersion Sep 21 14:33:25 ovirt slapd[19276]: Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:26 ovirt slapd[19276]: 1 0 0 Sep 21 14:33:26 ovirt slapd[19276]: filter: (objectClass=*) Sep 21 14:33:26 ovirt slapd[19276]: attrs: Sep 21 14:33:26 ovirt slapd[19276]: * Sep 21 14:33:26 ovirt slapd[19276]: + Sep 21 14:33:26 ovirt slapd[19276]: altServer Sep 21 14:33:26 ovirt slapd[19276]: changelog Sep 21 14:33:26 ovirt slapd[19276]: firstChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: lastChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: lastPurgedChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: namingContexts Sep 21 14:33:26 ovirt slapd[19276]: subschemaSubentry Sep 21 14:33:26 ovirt slapd[19276]: supportedAuthPasswordSchemes Sep 21 14:33:26 ovirt slapd[19276]: supportedControl Sep 21 14:33:26 ovirt slapd[19276]: supportedExtension Sep 21 14:33:26 ovirt slapd[19276]: supportedFeatures Sep 21 14:33:26 ovirt slapd[19276]: supportedLDAPVersion Sep 21 14:33:26 ovirt slapd[19276]: supportedSASLMechanisms Sep 21 14:33:26 ovirt slapd[19276]: vendorName Sep 21 14:33:26 ovirt slapd[19276]: vendorVersion Sep 21 14:33:26 ovirt slapd[19276]: Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:26 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:26 ovirt slapd[19276]: 0 0 0 Sep 21 14:33:26 ovirt slapd[19276]: filter: (&(objectClass=*)) Sep 21 14:33:26 ovirt slapd[19276]: attrs: Sep 21 14:33:26 ovirt slapd[19276]: namingContexts Sep 21 14:33:26 ovirt slapd[19276]: Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" ------------------------------------------------------------------------------- (engine.log outputs after ovirt-engine restart) # cat /var/log/ovirt-engine/engine.log | grep extensions 2014-09-21 14:33:25,591 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-15) Creating LDAP pool 'authz' for 'authn-company' 2014-09-21 14:33:25,962 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-15) Creating LDAP pool 'authn' for 'authn-company' 2014-09-21 14:33:26,195 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Start of enabled extensions list 2014-09-21 14:33:26,196 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-09-21 14:33:26,196 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'authn-company', Extension name: 'aaa.ldap.authn', Version: '0.0.0_master', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-0.0.0-0.0.master.20140904095149.gitc7bd415.el6', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/authn-company.properties', Initialized: 'true' 2014-09-21 14:33:26,197 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-09-21 14:33:26,197 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) End of enabled extensions list ------------------------------------------------------------------------------- I could not find out any erros in engine.log as well as ldap.log. And I can not search add ldap users from Web Admin Portal. Click "Users" tab, then click "Add". I can select "internal (internal)" only on [Add Users and Groups] in "Search" field. I do not know where the cause is. I'm missing another settings required? Thanks, Fumihide Tani

2 19

Problem Refreshing/Using ovirt-image-repository / 3.5 RC2
by InterNetX - Juergen Gotteswinter 24 Sep '14

24 Sep '14

Hi, when trying to refresh the ovirt glance repository i get a 500 Error Message Operation Canceled Error while executing action: A Request to the Server failed with the following Status Code: 500 engine.log says: 2014-09-23 09:23:08,960 INFO [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-10) [7fffb4bd] Running command: TestProviderConnectivityCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_STORAGE_POOL with role type ADMIN 2014-09-23 09:23:08,975 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-10) [7fffb4bd] Correlation ID: 7fffb4bd, Call Stack: null, Custom Event ID: -1, Message: Unrecognized audit log type has been used. 2014-09-23 09:23:20,173 INFO [org.ovirt.engine.core.bll.aaa.LogoutUserCommand] (ajp--127.0.0.1-8702-11) [712895c3] Running command: LogoutUserCommand internal: false. 2014-09-23 09:23:20,184 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-11) [712895c3] Correlation ID: 712895c3, Call Stack: null, Custom Event ID: -1, Message: User admin logged out. 2014-09-23 09:23:20,262 INFO [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (ajp--127.0.0.1-8702-6) Running command: LoginAdminUserCommand internal: false. anyone got an idea what is causing this? Same Network Location, Ovirt 3.4, the Repository works like expected. We also tried to start from scratch, after a engine-cleanup the error still occours. Cheers, Juergen

3 5

Re: [ovirt-users] overt viewer on mac osx
by Karli Sjöberg 24 Sep '14

24 Sep '14

Bill, remember to keep users list when replying. On Wed, 2014-09-24 at 10:16 +0000, Bill Dossett wrote: > ahhh… thanks! 2 minutes was the problem… I tried associating .vv > files with the RemoteView application, but that doesn’t work, just > brings up the remote viewer app as though it hadn’t been given a > console.vv file to configure it… any other way of doing this other > than going to a terminal and starting it? Right, it´s been explained to me in the past: http://lists.ovirt.org/pipermail/users/2014-January/019963.html @Christophe Has there been any updates to this? A newer version perhaps? /K > > > Thanks again! > > Bill Dossett > Virtualisation Architect > Pitney Bowes – Tech Central > 6 Hercules Way, 600 Leavesden Park > Watford, WD25 7GS > Phone (+44) (0)1923 279353 | VOIP: 54739353 > Mobile (+44) (0)7775 908612 > bill.dossett(a)pb.com > www.pb.com > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] takes less > than a minute > > ManageIQ User Guide available [HERE] > > Check out the ManageIQ Blog for recent enhancements and > information [HERE] > > On Sep 24, 2014, at 10:58 AM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> > wrote: > > > On Wed, 2014-09-24 at 09:28 +0000, Bill Dossett wrote: > > > Hi Karli, > > > > > > > > > I am on oVirt Engine Version 3.4.3-1.el6 is that what you mean? > > > > Yepp, that´s what I meant. Well, it´s working for us, though we´re > > still > > running 3.4.1 so that may have changed in later releases? > > > > FYI, the "authentication" that remote-viewer is referring to is the > > "ticket" (random gibberish - not the "engine" password) that > > ovirt-engine generates every time you press for console. That ticket > > has > > a 2 min timeout, so if you download a console.vv and wait more than > > that, the ticket will experired, and you´d have to download a new > > file > > for the authentication to work. Makes sense? > > > > /K > > > > > > > > > > > thanks > > > > > > Bill Dossett > > > Virtualisation Architect > > > Pitney Bowes – Tech Central > > > 6 Hercules Way, 600 Leavesden Park > > > Watford, WD25 7GS > > > Phone (+44) (0)1923 279353 | VOIP: 54739353 > > > Mobile (+44) (0)7775 908612 > > > bill.dossett(a)pb.com > > > www.pb.com > > > > > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] takes > > > less > > > than a minute > > > > > > ManageIQ User Guide available [HERE] > > > > > > Check out the ManageIQ Blog for recent enhancements and > > > information [HERE] > > > > > > On Sep 24, 2014, at 10:11 AM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> > > > wrote: > > > > > > > On Wed, 2014-09-24 at 09:07 +0000, Bill Dossett wrote: > > > > > Hi, > > > > > > > > > > > > > > > I got pretty excited when I found out there was a girt-viewer > > > > > for > > > > > mac… if this would work, it means I could manange my ovirt > > > > > stack > > > > > from > > > > > my mac without having to login to my windows VDI. > > > > > > > > > > > > > > > I have downloaded and installed per the instructions - and > > > > > then > > > > > downloaded the console.vv file and run the command line to > > > > > start > > > > > the > > > > > viewer with the console.vv - the first time it popped up and > > > > > then > > > > > said > > > > > that spice needed authentication… tried my virt-engine > > > > > password > > > > > that > > > > > didn’t work, hit cancel and it shut down. Tried it again and > > > > > now > > > > > it > > > > > just says it can’t determine the connection type from uri and > > > > > I > > > > > have > > > > > to quit. > > > > > > > > > > > > > > > I am running OSX 10.9.4 and apparently this has only been > > > > > tested > > > > > on > > > > > 10.9.1… hoping there is a fix to make this work, or am I doing > > > > > something wrong? The command I am using is > > > > > > > > > > > > > > > /Applications/RemoteViewer.app/Contents/MacOS/RemoteViewer > > > > > Downloads/console.vv > > > > > > > > > > and the console.vv is indeed in the Downloads dir off my home > > > > > dir. > > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > Bill Dossett > > > > > Virtualisation Architect > > > > > Pitney Bowes – Tech Central > > > > > 6 Hercules Way, 600 Leavesden Park > > > > > Watford, WD25 7GS > > > > > Phone (+44) (0)1923 279353 | VOIP: 54739353 > > > > > Mobile (+44) (0)7775 908612 > > > > > bill.dossett(a)pb.com > > > > > www.pb.com > > > > > > > > > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] > > > > > takes > > > > > less > > > > > than a minute > > > > > > > > > > ManageIQ User Guide available [HERE] > > > > > > > > > > Check out the ManageIQ Blog for recent enhancements and > > > > > information [HERE] > > > > > > > > > > > > > > > > > > > > > > > Hey Bill! > > > > > > > > What oVirt version are you on? > > > > > > > > > > > > > > > > -- > > > > > > > > Med Vänliga Hälsningar > > > > > > > > ------------------------------------------------------------------------------- > > > > Karli Sjöberg > > > > Swedish University of Agricultural Sciences Box 7079 (Visiting > > > > Address > > > > Kronåsvägen 8) > > > > S-750 07 Uppsala, Sweden > > > > Phone: +46-(0)18-67 15 66 > > > > karli.sjoberg(a)slu.se > > > > > > > > > > > > > > > ______________________________________________________________________ > > > > > > > > > > > -- > > > > Med Vänliga Hälsningar > > > > ------------------------------------------------------------------------------- > > Karli Sjöberg > > Swedish University of Agricultural Sciences Box 7079 (Visiting > > Address > > Kronåsvägen 8) > > S-750 07 Uppsala, Sweden > > Phone: +46-(0)18-67 15 66 > > karli.sjoberg(a)slu.se > > > > > ______________________________________________________________________ > -- Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg(a)slu.se

2 1

Re: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO
by Grzegorz Szypa 24 Sep '14

24 Sep '14

Hi. I resolved problem with connection to ovirt via Microsoft AD users, but it's stiil a problem with sign " /" before username. I attach file console.rdp generated for ovirt: and screen from logging in via native rdp first screen after running console.rdp: [image: Obraz w treści 1] and second screen after clicking "Inny użytkownik": [image: Obraz w treści 2] Have you any idea how to fix it 2014-09-24 10:19 GMT+02:00 Frantisek Kobzik <fkobzik(a)redhat.com>: > Hello, > > I don't know windows so much, but according to this [1], you can use both > formats of username. Could you try logging on manually with both formats? > > Cheers! > F. > > [1]: > http://msdn.microsoft.com/en-us/library/windows/desktop/aa380525(v=vs.85).a… > > > ----- Original Message ----- > From: "Grzegorz Szypa" <grzegorz.szypa(a)gmail.com> > To: "Frantisek Kobzik" <fkobzik(a)redhat.com> > Sent: Tuesday, September 23, 2014 3:48:34 PM > Subject: Re: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO > > Hi. > > In native rdp is still same. But I think it happens because, like this: > > user@domine, example admin@internal user is treated as a user, so if I was > logged in as a user ovirt(a)szypa.net example, where the domain is szypa.net > it probably should log in as szypa.net/ovirt me, but I'm not sure. > > But not proof, it now because I have the problem described in this thread: > [ovirt 3.4.3] No KDC can be obtained for domain... after using engine-man > age-domains edit > > > 2014-09-23 12:45 GMT+02:00 Frantisek Kobzik <fkobzik(a)redhat.com>: > > > Hi, > > > > Could you please switch to 'Native' invocation in 'Console options' and > > inspect generated .rdp file? Focus on a line that starts with > > "username:s:". What value does it contain? > > > > Also, make sure you don't reload the webpage (e.g. F5) prior to > connecting > > to the machine - SSO wouldn't work in this case. > > > > Cheers! > > F. > > > > > > ----- Original Message ----- > > From: "Grzegorz Szypa" <grzegorz.szypa(a)gmail.com> > > To: users(a)ovirt.org > > Sent: Sunday, September 21, 2014 10:08:09 PM > > Subject: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO > > > > Hi. > > > > I have a little problem with log-in to Windows VMs via SSO. When connect > > to VM in username filed i get a example text "/user@domain" What going > on > > wit this sign " / " > > > > -- > > G.Sz. > > > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > > > > > -- > G.Sz. > -- G.Sz.

1 0

[ovirt 3.4.3] No KDC can be obtained for domain... after using engine-manage-domains edit
by Grzegorz Szypa 24 Sep '14

24 Sep '14

Hi. I have a problem with losting connetction to Windows Active Directory. Normaly I connect ovirt with AD like this: "engine-manage-domains add --domain=szypa.net --provider=ad --user=ovirt --add-permissions" After period time, example when i restart ovirt, connection is lost becouse i cannot add new user created in AD, so i thinking that i refresh conf. connection to ad: "engine-manage-domains edit --domain=szypa.net --provider=ad --user=ovirt --add-permissions" and i get this error: No KDC can be obtained for domain szypa.net have any idea? I read that this problem is resolved in previous ovirt version -- G.Sz.

2 6