- Users - oVirt List Archives

Adding arbiter to hyperconverged setup
by Simon Nussbaum 27 Sep '18

27 Sep '18

Dear all We are very happily running a hyperconverged gluster ovirt setup since beginning of 2016. Because we couldn't afford 3 well-equipped servers, we've set-up replica 3 with one arbiter gluster cluster. Back then the gluster integration in oVirt wasn't where it is today. We did not add the arbiter node to oVirt. Since then a lot changed and we suspect that from time to time we run into problems because we haven't added the arbiter node as a host to oVirt. We also think that we may profit from features and higher visibility in oVirt when it is aware of all gluster nodes. Now, we are thinking of adding the third, the arbiter host. Today we are using oVirt 4.2.0.2 and GlusterFS 3.12 on CentOS 7.4. We see two ways to accomplish this: 1) Add it as a new host 2) Import it as the discovered host in Compute >> Clusters >> OurCluster The questions we have: * First of all, is this a good idea anyway? * Do we need to install vdsmd on the arbiter node? * What is or is there difference between the two ways? Will it discover the gluster configuration or break it? Before we break it we would love to hear what you guys think. Thanks a lot Simon

3 2

Re: Adding arbiter to hyperconverged setup
by smirta＠gmx.net 27 Sep '18

27 Sep '18

I think I've just found the answer myself: https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.3/h… https://access.redhat.com/documentation/en-us/red_hat_gluster_storage/3.4/h… But any inputs to my previous questions are still very welcome.

1 0

Ovirt attach serial port on VM
by Alex K 27 Sep '18

27 Sep '18

Hi all, I have a serial port on one of the servers where the guest VM is running. setserial -g /dev/ttyS0 /dev/ttyS0, UART: 16550A, Port: 0x03f8, IRQ: 4 I wanted the serial port to be connected at the VM, so as the VM to be able to use directly the serial port of the server. Thus I went at host devices to add the port but I am not able to find it, as the serial port is not listed at PCI devices. I recall that on plain KVM one could be able to attach such a serial port at a guest VM. Has anyone been able to attach a serial port to a guest VM woth ovirt? (I am running 4.2.5) Thanx, Alex

5 6

LDAP-Error
by Budur Nagaraju 27 Sep '18

27 Sep '18

Hi Have configured LDAP authentication in oVirt4.2, but unable to login facing issues below is the error log and configuration, able to search the users in the UI at same time unable to search the Group. Can someone help on the same? Error : https://pastebin.com/76cZdV7d Configuration: https://pastebin.com/nRmibZh7 Thanks, Nagaraju

2 2

migrate ovirt-engine to Self-hosted Engine
by Edoardo Mazza 27 Sep '18

27 Sep '18

Hi all, my enviroment is composed to a standalone ovirt-engine and 3 host. I would migrate my ovirt-engine to a self-hosted Engine enviroment, but I don't found any guide for this procedure. Con you help me? Thank

2 2

New Facebook Group - Virtualization HQ (oVirt, KVM, Xen, Linux HA Clusters)
by Andrei Verovski 26 Sep '18

26 Sep '18

Hi, I just created new Facebook group dedicated to virtualization and clustering solution(s) based on oVirt, KVM, Xen, Linux HA Clusters. Everyone here is welcome: https://www.facebook.com/groups/227612258112186/ Group rules: Allowed posts: tips and tricks from experts, technical questions and requests for both volunteer and paid support. Posts require prior approval: 1) Commercial services offered (only related to this group subject), with the exception of replies to paid requests for technical support from other group members. 2) Job offers / job seekers. 3) Sale of hardware owned by group members (not dealers / resellers). Classifieds from resellers of server hardware - new, used, surplus, and refurbished may be SOMETIMES allowed with prior approval (without $$$ fee), if represent an exceptional value of interest for group members. with best regards Andrei

1 0

Convert HDD to Thin
by Budur Nagaraju 26 Sep '18

26 Sep '18

Hi Am using oVirt 3.5 , and mapped 1.5TB if LUN from Dell Unity have deployed 50 vms in that lun , when I check the allocated space in storage its showing 800GB in storage whereas in oVirt its showing 1.4TB in oVirt . Is there any way to shrink the same in oVirt ? Thanks, Nagaraju

3 7

Ldap-configure
by Budur Nagaraju 26 Sep '18

26 Sep '18

Hi Can you please let us know how to configure LDAP authentication in oVirt 4.2 ? Thanks, Nagaraju

2 1

Ovirt-engine-websocket-proxy
by Hari Prasanth Loganathan 26 Sep '18

26 Sep '18

Hi Team, I was trying to install websocket proxy for ovirt engine using this ovirt documentation : https://www.ovirt.org/documentation/install-guide/appe-Installing_the_Webso… But the ovirt-engine-websocket-proxy doesn't seems to be available in yum [root@localhost ~]# *yum install ovirt-engine-websocket-proxy* Loaded plugins: fastestmirror, langpacks base | 3.6 kB 00:00 epel/x86_64/metalink | 8.6 kB 00:00 epel | 3.2 kB 00:00 extras | 3.4 kB 00:00 nodesource | 2.5 kB 00:00 treasuredata | 2.9 kB 00:00 updates | 3.4 kB 00:00 (1/4): epel/x86_64/updateinfo | 943 kB 00:00 (2/4): extras/7/x86_64/primary_db | 187 kB 00:00 (3/4): updates/7/x86_64/primary_db | 5.2 MB 00:01 (4/4): epel/x86_64/primary | 3.6 MB 00:05 Determining fastest mirrors * base: centos.myfahim.com * epel: mirror.lzu.edu.cn * extras: centos.myfahim.com * updates: centos.myfahim.com epel 12687/12687 *No package ovirt-engine-websocket-proxy available.* *Error: Nothing to do* *Also, If there is any other way to install ovirt-engine-websocket-proxy, please let me know. * Thanks, Hari -- DISCLAIMER - *MSysTechnologies LLC* This email message, contents and its attachments may contain confidential, proprietary or legally privileged information and is intended solely for the use of the individual or entity to whom it is actually intended. If you have erroneously received this message, please permanently delete it immediately and notify the sender. If you are not the intended recipient of the email message,you are notified strictly not to disseminate,distribute or copy this e-mail.E-mail transmission cannot be guaranteed to be secure or error-free as Information could be intercepted, corrupted, lost, destroyed, incomplete or contain viruses and MSysTechnologies LLC accepts no liability for the contents and integrity of this mail or for any damage caused by the limitations of the e-mail transmission.

2 1

leave
by omprakashp＠cdac.in 26 Sep '18

26 Sep '18

------------------------------------------------------------------------------------------------------------ [ C-DAC is on Social-Media too. Kindly follow us at: Facebook: https://www.facebook.com/CDACINDIA & Twitter: @cdacindia ] This e-mail is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies and the original message. Any unauthorized review, use, disclosure, dissemination, forwarding, printing or copying of this email is strictly prohibited and appropriate legal action will be taken. ------------------------------------------------------------------------------------------------------------

1 0

moving disks around gluster domain is failing
by g.vasilopoulos＠uoc.gr 25 Sep '18

25 Sep '18

Moving disk from one gluster domain to another fails, either with the vm running or down.. It strikes me that it says : File "/usr/lib64/python2.7/site-packages/libvirt.py", line 718, in blockCopy if ret == -1: raise libvirtError ('virDomainBlockCopy() failed', dom=self) I'am sending the relevant piece of log.. But it should be a file copy since it's gluster am I right?. Gluster volumes are lvm thick and have different shard sizes... 2018-09-14 15:05:53,325+0300 ERROR (jsonrpc/2) [virt.vm] (vmId='f90f6533-9d71-4102-9cd6-2d9960a4e585') Unable to start replication for sda to {u'domainID': u'd07231ca-89b8-490a -819d-8542e1eaee19', 'volumeInfo': {'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/5716acc8-7ee7-4235-aad6-345e565f3073', 'type ': 'network', 'hosts': [{'port': '0', 'transport': 'tcp', 'name': '10.252.166.129'}, {'port': '0', 'transport': 'tcp', 'name': '10.252.166.130'}, {'port': '0', 'transport': 'tc p', 'name': '10.252.166.128'}], 'protocol': 'gluster'}, 'format': 'cow', u'poolID': u'90946184-a7bd-11e8-950b-00163e11b631', u'device': 'disk', 'protocol': 'gluster', 'propagat eErrors': 'off', u'diskType': u'network', 'cache': 'none', u'volumeID': u'5716acc8-7ee7-4235-aad6-345e565f3073', u'imageID': u'3d95e237-441c-4b41-b823-48d446b3eba6', 'hosts': [ {'port': '0', 'transport': 'tcp', 'name': '10.252.166.129'}], 'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/5716acc8-7ee7-4235 -aad6-345e565f3073', 'volumeChain': [{'domainID': u'd07231ca-89b8-490a-819d-8542e1eaee19', 'leaseOffset': 0, 'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237 -441c-4b41-b823-48d446b3eba6/26214e9d-1126-42a0-85e3-c21f182b582f', 'volumeID': u'26214e9d-1126-42a0-85e3-c21f182b582f', 'leasePath': u'/rhev/data-center/mnt/glusterSD/10.252.1 66.129:_vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/26214e9d-1126-42a0-85e3-c21f182b582f.lease', 'imageID': u'3d95e237-441c-4b41-b823- 48d446b3eba6'}, {'domainID': u'd07231ca-89b8-490a-819d-8542e1eaee19', 'leaseOffset': 0, 'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d44 6b3eba6/2c6c8b45-7d70-4eff-9ea5-f2a377f0ef64', 'volumeID': u'2c6c8b45-7d70-4eff-9ea5-f2a377f0ef64', 'leasePath': u'/rhev/data-center/mnt/glusterSD/10.252.166.129:_vol3/d07231ca -89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/2c6c8b45-7d70-4eff-9ea5-f2a377f0ef64.lease', 'imageID': u'3d95e237-441c-4b41-b823-48d446b3eba6'}, {'dom ainID': u'd07231ca-89b8-490a-819d-8542e1eaee19', 'leaseOffset': 0, 'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/5716acc8-7ee7 -4235-aad6-345e565f3073', 'volumeID': u'5716acc8-7ee7-4235-aad6-345e565f3073', 'leasePath': u'/rhev/data-center/mnt/glusterSD/10.252.166.129:_vol3/d07231ca-89b8-490a-819d-8542e 1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/5716acc8-7ee7-4235-aad6-345e565f3073.lease', 'imageID': u'3d95e237-441c-4b41-b823-48d446b3eba6'}, {'domainID': u'd07231ca-89 b8-490a-819d-8542e1eaee19', 'leaseOffset': 0, 'path': u'vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/579e0033-4b94-4675-af78-d017ed2698 e9', 'volumeID': u'579e0033-4b94-4675-af78-d017ed2698e9', 'leasePath': u'/rhev/data-center/mnt/glusterSD/10.252.166.129:_vol3/d07231ca-89b8-490a-819d-8542e1eaee19/images/3d95e237-441c-4b41-b823-48d446b3eba6/579e0033-4b94-4675-af78-d017ed2698e9.lease', 'imageID': u'3d95e237-441c-4b41-b823-48d446b3eba6'}]} (vm:4710) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 4704, in diskReplicateStart self._startDriveReplication(drive) File "/usr/lib/python2.7/site-packages/vdsm/virt/vm.py", line 4843, in _startDriveReplication self._dom.blockCopy(drive.name, destxml, flags=flags) File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 98, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line 130, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 718, in blockCopy if ret == -1: raise libvirtError ('virDomainBlockCopy() failed', dom=self) libvirtError: argument unsupported: non-file destination not supported yet 2018-09-14 15:05:53,328+0300 INFO (jsonrpc/2) [api.virt] FINISH diskReplicateStart return={'status': {'message': 'Drive replication error', 'code': 55}} from=::ffff:10.252.162.200,38050, flow_id=faecfa3d-a7e1-4882-a815-dbadc1f30813, vmId=f90f6533-9d71-4102-9cd6-2d9960a4e585 (api:52) 2018-09-14 15:05:53,328+0300 INFO (jsonrpc/2) [jsonrpc.JsonRpcServer] RPC call VM.diskReplicateStart failed (error 55) in 0.11 seconds (__init__:573) 2018-09-14 15:05:53,504+0300 INFO (jsonrpc/1) [api.host] START getAllVmStats() from=::ffff:10.252.162.200,38050 (api:46)

2 2

Live Migration broken in 4.2.6 under OVS/OVN networking
by Davide Butti 25 Sep '18

25 Sep '18

Hello; despite many tests and tentative adjustments, I'm currently unable to live migrate VMs on oVirt 4.2.6. The vdsm.log contains a "failed to migrate" error, that points to an attempt to access a non-existent network port "TestOne". This is in fact the name of the (externally defined) network, and isn't anywhere to be seen as OVS port. 2018-09-24 14:32:57,059+0000 ERROR (migsrc/4c0255b5) [virt.vm] (vmId='4c0255b5-0f52-4da7-ac97-d54d815cd6ab') Cannot get interface MTU on 'TestOne': No such device (migration:290) 2018-09-24 14:32:57,793+0000 ERROR (migsrc/4c0255b5) [virt.vm] (vmId='4c0255b5-0f52-4da7-ac97-d54d815cd6ab') Failed to migrate (migration:455) Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 437, in _regular_run self._startUnderlyingMigration(time.time()) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 509, in _startUnderlyingMigration self._perform_with_conv_schedule(duri, muri) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 587, in _perform_with_conv_schedule self._perform_migration(duri, muri) File "/usr/lib/python2.7/site-packages/vdsm/virt/migration.py", line 529, in _perform_migration self._migration_flags) File "/usr/lib/python2.7/site-packages/vdsm/virt/virdomain.py", line 98, in f ret = attr(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/libvirtconnection.py", line 130, in wrapper ret = f(*args, **kwargs) File "/usr/lib/python2.7/site-packages/vdsm/common/function.py", line 92, in wrapper return func(inst, *args, **kwargs) File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1746, in migrateToURI3 if ret == -1: raise libvirtError ('virDomainMigrateToURI3() failed', dom=self) libvirtError: Cannot get interface MTU on 'TestOne': No such device The setup was previously working under OVS, and I have "migration_ovs_hook_enabled = true" under /etc/vdsm/vdsm.conf Do I need to change anything? Is this supposed to work in the first place? Many thanks for your help, have a nice day

2 3

Storage with disks 4kn issues
by Marcelo Leandro 25 Sep '18

25 Sep '18

Hello, I have cluster configured with storages NFS with disks 4kn, for sometimes its work fine, but now i am haave issues with some vps, some vps had corrupetd of SO , both linux and windows, but the raw file not have problem. can be the NFS over disks 4kn? Thanks.

1 0

Re: Hiring RHV Data Protection Product Manager
by Boaz Michaely 25 Sep '18

25 Sep '18

Thanks for asking Femi. Beta candidate selection is in process now. Beta itself is expected to start in a few weeks. If anyone is interested please drop me a note. Thanks, Boaz boaz.michaely(a)trilio.io > > ---------- Forwarded message --------- > From: femi adegoke <ovirt(a)fateknollogee.com> > Date: Mon, Sep 24, 2018 at 7:47 PM > Subject: [ovirt-users] Re: Hiring RHV Data Protection Product Manager > To: <users(a)ovirt.org> > > > When will the beta for Trilio for RHV be available? > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/RRHLMYAMQLNQN… >

1 0

ovirt-engine-extension-aaa-ldap-setup failed
by mopiel games 25 Sep '18

25 Sep '18

in the ovirt-engine-extension-aaa-ldap-setup i try to login to the ldap user but it show CREDENTIALS_INVALID ,put if i make search option it will show successful : the question is how to make login successfully ? [root@ovirt_engine home]# ovirt-engine-extension-aaa-ldap-setup [ INFO ] Stage: Initializing [ INFO ] Stage: Environment setup Configuration files: ['/etc/ovirt-engine-extension-aaa-ldap-setup.conf.d/10-packa ging.conf'] Log file: /tmp/ovirt-engine-extension-aaa-ldap-setup-20180924120156-wutrcv.log Version: otopi-1.7.8 (otopi-1.7.8-1.el7) [ INFO ] Stage: Environment packages setup [ INFO ] Stage: Programs detection [ INFO ] Stage: Environment customization Welcome to LDAP extension configuration program Available LDAP implementations: 1 - 389ds 2 - 389ds RFC-2307 Schema 3 - Active Directory 4 - IBM Security Directory Server 5 - IBM Security Directory Server RFC-2307 Schema 6 - IPA 7 - Novell eDirectory RFC-2307 Schema 8 - OpenLDAP RFC-2307 Schema 9 - OpenLDAP Standard Schema 10 - Oracle Unified Directory RFC-2307 Schema 11 - RFC-2307 Schema (Generic) 12 - RHDS 13 - RHDS RFC-2307 Schema 14 - iPlanet Please select: 9 NOTE: It is highly recommended to use DNS resolution for LDAP server. If for some reason you intend to use hosts or plain address disable DNS usage. Use DNS (Yes, No) [Yes]: Available policy method: 1 - Single server 2 - DNS domain LDAP SRV record 3 - Round-robin between multiple hosts 4 - Failover between multiple hosts Please select: 1 Please enter host address: ldap23.exalt.ps [ INFO ] Trying to resolve host 'ldap23.exalt.ps' NOTE: It is highly recommended to use secure protocol to access the LDAP server. Protocol startTLS is the standard recommended method to do so. Only in cases in which the startTLS is not supported, fallback to non standard ld aps protocol. Use plain for test environments only. Please select protocol to use (startTLS, ldaps, plain) [startTLS]: ldaps Please select method to obtain PEM encoded CA certificate (File, URL, Inline, Sys tem, Insecure): file File path: /home/server.pem [ INFO ] Connecting to LDAP using 'ldaps://ldap23.exalt.ps:636' [ INFO ] Connection succeeded Enter search user DN (for example uid=username,dc=example,dc=com or leave empty f or anonymous): cn=admin,dc=exalt,dc=ps Enter search user password: [ INFO ] Attempting to bind using 'cn=admin,dc=exalt,dc=ps' Please enter base DN (dc=exalt,dc=ps) [dc=exalt,dc=ps]: Are you going to use Single Sign-On for Virtual Machines (Yes, No) [Yes]: no Please specify profile name that will be visible to users [ldap23.exalt.ps]: [ INFO ] Stage: Setup validation NOTE: It is highly recommended to test drive the configuration before applying it into engine. Login sequence is executed automatically, but it is recommended to also execute S earch sequence manually after successful Login sequence. Please provide credentials to test login flow: Enter user name: taha Enter user password: [ INFO ] Executing login sequence... Login output: 2018-09-24 12:03:10,832+03 INFO ============================================== ========================== 2018-09-24 12:03:10,851+03 INFO ============================ Initialization == ========================== 2018-09-24 12:03:10,851+03 INFO ============================================== ========================== 2018-09-24 12:03:10,879+03 INFO Loading extension 'ldap23.exalt.ps-authn' 2018-09-24 12:03:10,930+03 INFO Extension 'ldap23.exalt.ps-authn' loaded 2018-09-24 12:03:10,934+03 INFO Loading extension 'ldap23.exalt.ps-authz' 2018-09-24 12:03:10,943+03 INFO Extension 'ldap23.exalt.ps-authz' loaded 2018-09-24 12:03:10,943+03 INFO Initializing extension 'ldap23.exalt.ps-authn' 2018-09-24 12:03:10,944+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] Creating LDAP pool 'authz' 2018-09-24 12:03:11,472+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] LDAP pool 'authz' information: vendor='null' version='null' 2018-09-24 12:03:11,473+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] Creating LDAP pool 'authn' 2018-09-24 12:03:11,745+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] LDAP pool 'authn' information: vendor='null' version='null' 2018-09-24 12:03:11,745+03 INFO Extension 'ldap23.exalt.ps-authn' initialized 2018-09-24 12:03:11,746+03 INFO Initializing extension 'ldap23.exalt.ps-authz' 2018-09-24 12:03:11,746+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] Creating LDAP pool 'authz' 2018-09-24 12:03:12,076+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] LDAP pool 'authz' information: vendor='null' version='null' 2018-09-24 12:03:12,077+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] Available Namespaces: [dc=exalt,dc=ps] 2018-09-24 12:03:12,077+03 INFO Extension 'ldap23.exalt.ps-authz' initialized 2018-09-24 12:03:12,078+03 INFO Start of enabled extensions list 2018-09-24 12:03:12,078+03 INFO Instance name: 'ldap23.exalt.ps-authn', Extens ion name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www. ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpDADej Q/extensions.d/ldap23.exalt.ps-authn.properties', Initialized: 'true' 2018-09-24 12:03:12,078+03 INFO Instance name: 'ldap23.exalt.ps-authz', Extens ion name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www. ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpDADej Q/extensions.d/ldap23.exalt.ps-authz.properties', Initialized: 'true' 2018-09-24 12:03:12,078+03 INFO End of enabled extensions list 2018-09-24 12:03:12,079+03 INFO ============================================== ========================== 2018-09-24 12:03:12,079+03 INFO ============================== Execution ===== ========================== 2018-09-24 12:03:12,079+03 INFO ============================================== ========================== 2018-09-24 12:03:12,079+03 INFO Iteration: 0 2018-09-24 12:03:12,080+03 INFO Profile='ldap23.exalt.ps' authn='ldap23.exalt. ps-authn' authz='ldap23.exalt.ps-authz' mapping='null' 2018-09-24 12:03:12,080+03 INFO API: -->Authn.InvokeCommands.AUTHENTICATE_CRED ENTIALS profile='ldap23.exalt.ps' user='taha' 2018-09-24 12:03:12,122+03 INFO API: <--Authn.InvokeCommands.AUTHENTICATE_CRED ENTIALS profile='ldap23.exalt.ps' result=CREDENTIALS_INVALID 2018-09-24 12:03:12,126+03 SEVERE Authn.Result code is: CREDENTIALS_INVALID [ ERROR ] Login sequence failed Please investigate details of the failure (search for lines containing SEVERE log level). Select test sequence to execute (Done, Abort, Login, Search) [Abort]: search Please provide parameters for Search sequence: Select entity to search (Principal, Group) [Principal]: Term to search, trailing '*' is allowed: * Resolve Groups (Yes, No) [No]: [ INFO ] Executing search sequence... Login output: 2018-09-24 12:03:27,952+03 INFO ============================================== ========================== 2018-09-24 12:03:27,970+03 INFO ============================ Initialization == ========================== 2018-09-24 12:03:27,970+03 INFO ============================================== ========================== 2018-09-24 12:03:27,997+03 INFO Loading extension 'ldap23.exalt.ps-authn' 2018-09-24 12:03:28,049+03 INFO Extension 'ldap23.exalt.ps-authn' loaded 2018-09-24 12:03:28,053+03 INFO Loading extension 'ldap23.exalt.ps-authz' 2018-09-24 12:03:28,061+03 INFO Extension 'ldap23.exalt.ps-authz' loaded 2018-09-24 12:03:28,062+03 INFO Initializing extension 'ldap23.exalt.ps-authn' 2018-09-24 12:03:28,062+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] Creating LDAP pool 'authz' 2018-09-24 12:03:28,508+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] LDAP pool 'authz' information: vendor='null' version='null' 2018-09-24 12:03:28,509+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] Creating LDAP pool 'authn' 2018-09-24 12:03:28,779+03 INFO [ovirt-engine-extension-aaa-ldap.authn::ldap23 .exalt.ps-authn] LDAP pool 'authn' information: vendor='null' version='null' 2018-09-24 12:03:28,780+03 INFO Extension 'ldap23.exalt.ps-authn' initialized 2018-09-24 12:03:28,781+03 INFO Initializing extension 'ldap23.exalt.ps-authz' 2018-09-24 12:03:28,781+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] Creating LDAP pool 'authz' 2018-09-24 12:03:29,020+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] LDAP pool 'authz' information: vendor='null' version='null' 2018-09-24 12:03:29,021+03 INFO [ovirt-engine-extension-aaa-ldap.authz::ldap23 .exalt.ps-authz] Available Namespaces: [dc=exalt,dc=ps] 2018-09-24 12:03:29,021+03 INFO Extension 'ldap23.exalt.ps-authz' initialized 2018-09-24 12:03:29,021+03 INFO Start of enabled extensions list 2018-09-24 12:03:29,021+03 INFO Instance name: 'ldap23.exalt.ps-authn', Extens ion name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www. ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpDADej Q/extensions.d/ldap23.exalt.ps-authn.properties', Initialized: 'true' 2018-09-24 12:03:29,022+03 INFO Instance name: 'ldap23.exalt.ps-authz', Extens ion name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.3.7', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.3.7-1.el7.centos', License: 'ASL 2.0', Home: 'http://www. ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/tmp/tmpDADej Q/extensions.d/ldap23.exalt.ps-authz.properties', Initialized: 'true' 2018-09-24 12:03:29,022+03 INFO End of enabled extensions list 2018-09-24 12:03:29,022+03 INFO ============================================== ========================== 2018-09-24 12:03:29,022+03 INFO ============================== Execution ===== ========================== 2018-09-24 12:03:29,022+03 INFO ============================================== ========================== 2018-09-24 12:03:29,022+03 INFO Iteration: 0 2018-09-24 12:03:29,026+03 INFO --- Begin QueryFilterRecord --- 2018-09-24 12:03:29,026+03 INFO AAA_AUTHZ_QUERY_FILTER_OPERATOR: 102 2018-09-24 12:03:29,027+03 INFO AAA_AUTHZ_QUERY_ENTITY: AAA_AUTHZ_QUERY_ENTITY _PRINCIPAL[1695cd36-4656-474f-b7bc-4466e12634e4] 2018-09-24 12:03:29,027+03 INFO --- Begin QueryFilterRecord --- 2018-09-24 12:03:29,027+03 INFO AAA_AUTHZ_QUERY_FILTER_OPERATOR: 0 2018-09-24 12:03:29,028+03 INFO AAA_AUTHZ_QUERY_FILTER_KEY: Extkey[name=AAA_ AUTHZ_PRINCIPAL_NAME;type=class java.lang.String;uuid=AAA_AUTHZ_PRINCIPAL_NAME[a0df5bcc-6ea d-40a2-8565-2f5cc8773bdd];] 2018-09-24 12:03:29,028+03 INFO AAA_AUTHZ_PRINCIPAL_NAME: * 2018-09-24 12:03:29,028+03 INFO --- End QueryFilterRecord --- 2018-09-24 12:03:29,028+03 INFO --- End QueryFilterRecord --- 2018-09-24 12:03:29,029+03 INFO API: -->Authz.InvokeCommands.QUERY_OPEN namesp ace='dc=exalt,dc=ps' 2018-09-24 12:03:29,035+03 INFO API: <--Authz.InvokeCommands.QUERY_OPEN 2018-09-24 12:03:29,035+03 INFO API: -->Authz.InvokeCommands.QUERY_EXECUTE 2018-09-24 12:03:29,059+03 INFO API: <--Authz.InvokeCommands.QUERY_EXECUTE cou nt=END 2018-09-24 12:03:29,060+03 INFO API: -->Authz.InvokeCommands.QUERY_CLOSE 2018-09-24 12:03:29,060+03 INFO API: <--Authz.InvokeCommands.QUERY_CLOSE [ INFO ] Search sequence executed successfully Please make sure that entity details are correct and that depending on the type o f the query group membership meets expectations (search for PrincipalRecord and GroupRecord titles).

2 5

Re: ovirt-engine-extension-aaa-ldap-setup failed
by mustafa taha 25 Sep '18

25 Sep '18

Hi Which log file you want ? Sent from Mail for Windows 10

1 0

Storage errors - member of pool, inaccessible and could not disconnect
by Roderick Mooi 25 Sep '18

25 Sep '18

1 2

Best way to update dns config of ovirt node
by Gianluca Cecchi 25 Sep '18

25 Sep '18

Hello, supposing to have ovirt-ng node 4.2.6 and that ovirtmgmt config regarding DNS servers has to be updated, what is the correct way to proceed? Thanks, Gianluca

3 6

Re: vm names export
by Budur Nagaraju 25 Sep '18

25 Sep '18

Hi , Have done the below modification in the script and getting the error,can you please help to fix the issue? Script : [root@cephc ovirt-scripts]# vi get_vm_names #!/usr/bin/env python # -*- coding: utf-8 -*- import logging import ovirtsdk4 as sdk import ovirtsdk4.types as types logging.basicConfig(level=logging.DEBUG, filename='example.log') connection = sdk.Connection( url='https://pscloud.bnglab.psecure.net/ovirt-engine/api ', username='admin@internal', password='password', insecure=True, # ca_file='/etc/pki/ovirt-engine/ca.pem', debug=True, log=logging.getLogger(), ) vms_service = connection.system_service().vms_service() vms = vms_service.list() for vm in vms: print("%s: %s" % (vm.name, vm.id)) connection.close() ~ ======================================================================================= Error: [root@cephc ovirt-scripts]# python get_vm_names Traceback (most recent call last): File "get_vm_names", line 22, in <module> vms = vms_service.list() File "/usr/lib64/python2.7/site-packages/ovirtsdk4/services.py", line 34154, in list return self._internal_get(headers, query, wait) File "/usr/lib64/python2.7/site-packages/ovirtsdk4/service.py", line 202, in _internal_get context = self._connection.send(request) File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 370, in send return self.__send(request) File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 388, in __send self.authenticate() File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 381, in authenticate self._sso_token = self._get_access_token() File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 617, in _get_access_token sso_response = self._get_sso_response(self._sso_url, post_data) File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 702, in _get_sso_response self._check_content_type(self.__JSON_CONTENT_TYPE_RE, 'JSON', header_lines) File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line 889, in _check_content_type raise Error(msg) ovirtsdk4.Error: The response content type 'text/html;charset=UTF-8' isn't the expected JSON. Is the path '/ovirt-engine/api ' included in the 'url' parameter correct? The typical one is '/ovirt-engine/api' [root@cephc ovirt-scripts]# Thanks, Nagaraju On Mon, Sep 24, 2018 at 11:49 PM Valentin Bajrami < valentin.bajrami(a)target-holding.nl> wrote: > Hi Budur, > > You can add insecure=True for unsigned certificates. See example > > connection = sdk.Connection( > url='https://pscloud.bnglab.psecure.net/ovirt-engine/api ', > username='admin@internal', > password='password', > insecure=True, > ca_file= '/etc/pki/ovirt-engine/ca.pem', > debug=True, > log=logging.getLogger() > ) > > > On 9/24/18 5:08 PM, Budur Nagaraju wrote: > > Below is the script and getting error while executing. > > > #!/usr/bin/env python > # -*- coding: utf-8 -*- > > import logging > import ovirtsdk4 as sdk > import ovirtsdk4.types as types > > logging.basicConfig(level=logging.DEBUG, filename='example.log') > > connection = sdk.Connection( > url='https://pscloud.bnglab.psecure.net/ovirt-engine/api ', > username='admin@internal', > password='password', > ca_file= '/etc/pki/ovirt-engine/ca.pem', > debug=True, > log=logging.getLogger(), > ) > > vms_service = connection.system_service().vms_service() > > vms = vms_service.list() > > for vm in vms: > print("%s: %s" % (vm.name, vm.id)) > connection.close() > ================================================= > > > [root@cephc ovirt-scripts]# python get_vm_names > Traceback (most recent call last): > File "get_vm_names", line 16, in <module> > log=logging.getLogger(), > File "/usr/lib64/python2.7/site-packages/ovirtsdk4/__init__.py", line > 307, in __init__ > raise Error('The CA file \'%s\' doesn\'t exist' % ca_file) > ovirtsdk4.Error: The CA file '/etc/pki/ovirt-engine/ca.pem' doesn't exist > [root@cephc ovirt-scripts]# > > On Mon, Sep 24, 2018 at 8:20 PM Staniforth, Paul < > P.Staniforth(a)leedsbeckett.ac.uk> wrote: > >> Hi Nagaraju, >> >> I meant not signed by a trusted CA, when you install >> oVirt it signs the certificates with it's own local CA, you can download it >> the CA certificate for your engine from >> https://your.engine.address/ovirt-engine/ it you are running the >> program on your engine machine I think it's in /etc/pki/ovirt-engine/ca.pem >> >> >> Regards, >> >> Paul S. >> ------------------------------ >> *From:* Budur Nagaraju <nbudoor(a)gmail.com> >> *Sent:* 24 September 2018 12:20 >> *To:* Staniforth, Paul >> *Cc:* users >> *Subject:* Re: [ovirt-users] Re: vm names export >> >> Am not using any self signed certificate, it was the default certificate >> installed at the time of ovirt-engine installation , do I need to comment >> for that also ? >> Tried commenting the line but still facing issues. >> >> On Mon, Sep 24, 2018 at 4:28 PM Staniforth, Paul < >> P.Staniforth(a)leedsbeckett.ac.uk> wrote: >> >>> Hi Nagaraju, >>> >>> if you are using the self-signed certificate have >>> you downloaded your CA certificate, if you are using a certificate from a >>> trusted CA then you should comment or remove the CA file line. >>> >>> >>> Regards, >>> >>> Paul S. >>> ------------------------------ >>> *From:* Budur Nagaraju <nbudoor(a)gmail.com> >>> *Sent:* 24 September 2018 11:16 >>> *To:* Sandro Bonazzola >>> *Cc:* users >>> *Subject:* [ovirt-users] Re: vm names export >>> >>> >>> Have tried the below URL , getting the below error >>> >>> Script: >>> >>> >>> https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/list_vms… >>> >>> Error: >>> >>> https://pastebin.com/EnJqA2Tr >>> >>> Thanks, >>> Nagaraju >>> >>> On Fri, Sep 21, 2018 at 8:50 PM Sandro Bonazzola <sbonazzo(a)redhat.com> >>> wrote: >>> >>>> >>>> >>>> Il giorno ven 21 set 2018 alle ore 17:16 Budur Nagaraju < >>>> nbudoor(a)gmail.com> ha scritto: >>>> >>>>> Hi >>>>> >>>>> I didn't understand, could you please help me on that ? >>>>> >>>> >>>> I was asking Ondra to follow up on your question >>>> >>>> >>>>> >>>>> Thanks, >>>>> Nagaraju >>>>> >>>>> >>>>> >>>>> On Fri, Sep 21, 2018 at 8:28 PM Sandro Bonazzola <sbonazzo(a)redhat.com> >>>>> wrote: >>>>> >>>>>> >>>>>> >>>>>> Il giorno gio 20 set 2018 alle ore 09:23 Budur Nagaraju < >>>>>> nbudoor(a)gmail.com> ha scritto: >>>>>> >>>>>>> >>>>>>> HI >>>>>>> >>>>>>> We have deployed vms in oVirt , is there a way to export the vm >>>>>>> names along with owner names ? any script which would help ? >>>>>>> >>>>>> >>>>>> Ondra? >>>>>> >>>>>> >>>>>>> >>>>>>> Thanks, >>>>>>> Nagaraju >>>>>>> _______________________________________________ >>>>>>> Users mailing list -- users(a)ovirt.org >>>>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >>>>>>> oVirt Code of Conduct: >>>>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>>>> List Archives: >>>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/4GC4RHEQBVGXS… >>>>>>> >>>>>> >>>>>> >>>>>> -- >>>>>> >>>>>> SANDRO BONAZZOLA >>>>>> >>>>>> MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV >>>>>> >>>>>> Red Hat EMEA <https://www.redhat.com/> >>>>>> >>>>>> sbonazzo(a)redhat.com >>>>>> <https://red.ht/sig> >>>>>> <https://www.redhat.com/en/events/red-hat-open-source-day-italia?sc_cid=701f…> >>>>>> >>>>> >>>> >>>> -- >>>> >>>> SANDRO BONAZZOLA >>>> >>>> MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV >>>> >>>> Red Hat EMEA <https://www.redhat.com/> >>>> >>>> sbonazzo(a)redhat.com >>>> <https://red.ht/sig> >>>> <https://www.redhat.com/en/events/red-hat-open-source-day-italia?sc_cid=701f…> >>>> >>> To view the terms under which this email is distributed, please go to:- >>> http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html >>> >> To view the terms under which this email is distributed, please go to:- >> http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html >> > > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ > List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z33J5NEDYWLVJ… > > -- > Met vriendelijke groeten, > > Valentin Bajrami > Target Holding > >

2 3

Hiring RHV Data Protection Product Manager
by Boaz Michaely 25 Sep '18

25 Sep '18

Hi all, A small community as we are, I hope this is the right place to reach out. I'm looking for a PM to join my team in Framingham, MA , focusing on Trilio data protection for RHV. Appreciate any references. Thanks Boaz mailto:boaz.michaely@trilio.io

3 2

Few questions for seasoned oVirt experts
by brad.riemann＠cloud5.com 24 Sep '18

24 Sep '18

Hello Everyone, I'm new to oVirt so I was hoping I could pick the brains of those that may have been around the product longer than myself. To start, I am leveraging oVirt 4.2, so all questions will be centered around them. 1. I am looking to utilize the ovirt engine for managing potentially thousands of datacenters, has anyone experienced large scale deployments or many-multi datacenter installations all managed under the same engine? FWIW: There will only be 1-2 servers per datacenter, with one cluster and 5-10 vNic assignments per cluster. 2. Has anyone dealt with the auto registration/approval process with oVirt engine? I'm finding various documentation from different generations of oVirt, but haven't felt comfortable with what i've found since my instance doesn't seem to have features that i'm reading about. My goal is to ship servers to a site with a basic image and when it boots up it reaches out to our ovirt engine, in turn I can automate a validation of pending approval requests based on host criteria, i'm just struggling to figure out if the automatic registration is even a thing in the latest version. thank you in advance, I appreciate any feedback on the matter. -Brad

3 6

vm names export
by Budur Nagaraju 24 Sep '18

24 Sep '18

HI We have deployed vms in oVirt , is there a way to export the vm names along with owner names ? any script which would help ? Thanks, Nagaraju

4 10

VLAN Trunk interface with OVN provider (ovirt HE 4.2.6.4-1.el7)
by Davide Butti 24 Sep '18

24 Sep '18

Hello; I'm having some hard time getting my oVirt cluster back to work, after the last update to 4.2.6. One thing that does not work anymore is VLAN Trunks; before the update, the cluster was running in OVS mode, and I could define logical networks without VLAN tag; then, networks packets got forwarded to the guest as "tagged". Right now version 4.2.6 won't allow me to assign the (OVS) Logical network to the guest NICs anymore, but it insists that I use a vNIC profile from an external provider. First question: Is this expected? Must I really work with externally provided networks only? Anyway, for the vNIC interfaces that only carry untagged traffic, I was able to define an external OVN network, connect it to the corresponding "Data center Network", and everything works as it did before. But the "trick" does not work for "trunk" interfaces that should carry VLAN tagged traffic. So to the second (main) question? How is this to be solved? Is there a way to define a VLAN trunk under OVN? Or is there a way to pickup a Data Center logical network to attach to the vNIC as we did before? Thanks in advance for your help!

3 5

Cannot configure local storage, network issue?
by Callum Smith 24 Sep '18

24 Sep '18

Dear All, I'lm getting this problem when trying to add local storage from the node: Cannot edit Host. Moving a host to a cluster with different management network is not allowed. That might cause connectivity loss. The cluster the host is in uses a different default network to the default cluster - is this the problem? Regards, Callum -- Callum Smith Research Computing Core Wellcome Trust Centre for Human Genetics University of Oxford e. callum(a)well.ox.ac.uk<mailto:callum@well.ox.ac.uk>

3 4

Hosted Engine - Unable to connect after deployment.
by Jeremy Tourville 24 Sep '18

24 Sep '18

I have a new installation of ovirt hyperconverged single node using glusterfs. I was able to run gdeploy and then use the web interface to run the self hosted engine setup. Ovirt node is running 4.2.5.1. If I go to localhost>ovirt machines tab from my node I see a message in the upper right corner saying "ovirt login in progress" with spinning icon after putting in the credentials. After a minute or less I am redirected to - https://engine.cyber-range.lan/ovirt-engine/web-ui/authorizedRedirect.jsp?r… where the web page says- "the connection has timed out." "The server at engine.cyber-range.lan is taking too long to respond." I also notice I no longer have the option to choose VNC or console because the web page keeps on attempting to reconnect. When I tried to connect using a console with virt-viewer it errored out on me. (I didn't make note of the message) Virtualization>hosted engine tab reports that my hosted engine is up. This is further confirmed by CLI #hosted-engine --check-liveliness. On occasion though, CLI reports HE is not up. If I try to ssh to HE sometimes I can connect, but it is VERY slow to do so. Once I connect it often appears to freeze or be very slow to enter any input commands to the HE. HE is effectively useless. I get frequent log messages in the console- "ovirt-ha-agent ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine ERROR Engine VM has bad health status, timeout in 300 seconds" This is a new setup, so I haven't lost anything if I need to start over. What do you suggest? Is there an easy way to recover or should I reinstall HE? Thanks for your advice!

2 1