- Users - oVirt List Archives

Re: [ovirt-users] Admin <at> internal inlog problems with clean install 3.6RC
by Christopher Miersma 09 Oct '15

09 Oct '15

I'm having the same problem with the latest packages for 3.6 RC. I've tried reinstalling a number of times, setting up with and without an answer file, and I always get a login denied error. Log entries: (from trying ovirt-shell) 2015-10-05 09:30:48,361 ERROR [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] (default task-1) [] User admin authentication failed. profile is internal. Invocation Result code is 0. Authn result code is ACCOUNT_EXPIRED (from web interface) 2015-10-05 10:32:25,034 INFO [org.ovirt.engine.core.bll.aaa.LoginBaseCommand] (default task-19) [] Can't login user 'admin' with authentication profile 'internal' because the authentication failed. 2015-10-05 10:32:25,040 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-19) [] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: The account for admin got expired. Please contact the system administrator. 2015-10-05 10:32:25,043 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-19) [] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User admin@internal failed to log in. 2015-10-05 10:32:25,044 WARN [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (default task-19) [] CanDoAction of action 'LoginAdminUser' failed for user admin@internal. Reasons: USER_ACCOUNT_EXPIRED I have tried using the ovirt-aaa-jdbc-tool tool, with "user edit --account-valid-to," "user password-reset --password-valid-to," and "user unlock" options with multiple different dates, passwords of varying complexity, etc. and nothing seems to work. This is all happening during the middle of a hosted-engine setup, which throws everything off. I've also done clean re-installs a number of times. Early last week, when the release candidate first came out, I did not have this issue. I was able to complete the install without any problems. Has anyone found a way to get around this if it starts happening? Christopher

3 5

Unable to install Centos6
by Budur Nagaraju 08 Oct '15

08 Oct '15

HI I have selected "RedhHat Enterprise linux 6.x x64" under operating system field and While installing centos6.4 64Bit through ISO ,unable to succeed . Is there any limitation ? or it wont support centos ? can you pls help me ? Thanks, Nagaraju

2 1

Cannot remove Host. Server having Gluster volume. in 3.6 rc
by Liam Curtis 08 Oct '15

08 Oct '15

So I got around issue with 'Enable Gluster Service' missing from cluster diagram. I am trying to create a new data center and remove previously created gluster hosts. However, I get the above error. I have seen posts about checking a force remove check box, but I do not see any such box. Is there a way to forcefully remove? Thank you.

2 1

Questions about 3.6RC
by jaumotte, styve 08 Oct '15

08 Oct '15

Hi everybody, We have planned to migrate from xen open source to ovirt and we study the differences between 3.5.4 version and 3.6. I have some questions about this differences : - In 3.6RC, we don't see anymore the HostedEngine virtual machine in ovirt. My install is correct or this feature is not available anymore ? - In 3.6RC, my windows virtual machine status show an orange exlamation point which indicates " Actual operating system type differs from the configuration ". I don't know what is wrong, the operating system is correct and my vm works well. Thanks for your answers, S.J

4 8

Support for QinQ
by Sigbjorn Lie 08 Oct '15

08 Oct '15

Hi list, I've been looking around the web for QinQ support in Ovirt. I see that QinQ is supported in CentOS 6.x and above. However I cannot see any documented support in Ovirt. I've come across the page below which details QinQ as a future feature. Is QinQ still a future feature, or is it possible to use QinQ with Ovirt today somehow? http://www.ovirt.org/Networking Regards, Siggi

3 3

Managing two DCs with ovirt
by wodel youchi 08 Oct '15

08 Oct '15

Hi, I need some help to decide which is better / feasible with ovirt to manage two or more distant DCs. Let say that we have two distant DCs to virtualize with ovirt. we have two options to manage them: 1- install two engines, one on each DC, the good side is, if one DC is down, we can still manage the other one. the down side we will have two consoles to manage. 2- install one engine to manage the two DCs, the good side is the use of one console to rule them all :-) the down side is if the DC containing the engine become down, there is way to manage the other one. is there (will be there in the future) a way for example to create a slave engine in the second DC which can takeover and let the admin to manage the second DC? thanks in advance

4 3

LDAP authentication with TLS
by Steve Dainard 08 Oct '15

08 Oct '15

Hello, Trying to configure Ovirt 3.5.3.1-1.el7.centos for LDAP authentication. I've configured the appropriate aaa profile but I'm getting TLS errors when I search for users to add via ovirt: The connection reader was unable to successfully complete TLS negotiation: javax_net_ssl_SSLHandshakeException: sun_security_validator_ValidatorException: No trusted certificate found caused by sun_security_validator_ValidatorException: No trusted certificate found I added the external CA certificate using keytool as per https://github.com/oVirt/ovirt-engine-extension-aaa-ldap with appropriate adjustments of course: keytool -importcert -noprompt -trustcacerts -alias myrootca \ -file myrootca.pem -keystore myrootca.jks -storepass changeit I know this certificate works, and can connect to LDAP with TLS as I'm using the same LDAP configuration/certificate with SSSD. Can anyone clarify whether I should be adding the external CA certificate or the LDAP host certificate with keytool or any other suggestions? Thanks, Steve

3 3

Ovirt 3.6 RC import VM
by Wolfgang Bucher 08 Oct '15

08 Oct '15

This is a multi-part message in MIME format. Your mail reader does not understand MIME message format. --=_pig3fzdG9Uvcv3g7W139nCFW2yo2eXgUypLAKLpr2p26esXt Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello=0D=0A=0D=0A=0D=0A=0D=0Ai am not able to import a vm from a exportdo= main, i can activate the exportdomain bu twhen i try to import a vm i get= following error:=0D=0A=0D=0AFailed to import Vm test to Data Center TEST= , Cluster INTEL=0D=0A=0D=0A=0D=0A=0D=0A=0D=0Aengine.log=20=0D=0A=0D=0A=0D= =0A=0D=0A015-10-01 11:53:00,809 INFO=C2=A0 [org.ovirt.engine.core.bll.Imp= ortVmCommand] (org.ovirt.thread.pool-8-thread-36) [7c844f2] Command [id=3D= b3af596c-7df0-4bdb-95d6-dffbc0a3213d]: Compensating NEW_ENTITY_ID of org.= ovirt.engine.core.common.businessentities.VmStatistics; snapshot: 1abdcfd= 8-77b2-47c3-9973-8184167b3774.=0D=0A2015-10-01 11:53:00,809 INFO=C2=A0 [o= rg.ovirt.engine.core.bll.ImportVmCommand] (org.ovirt.thread.pool-8-thread= -36) [7c844f2] Command [id=3Db3af596c-7df0-4bdb-95d6-dffbc0a3213d]: Compe= nsating NEW_ENTITY_ID of org.ovirt.engine.core.common.businessentities.Vm= Dynamic; snapshot: 1abdcfd8-77b2-47c3-9973-8184167b3774.=0D=0A2015-10-01 = 11:53:00,810 INFO=C2=A0 [org.ovirt.engine.core.bll.ImportVmCommand] (org.= ovirt.thread.pool-8-thread-36) [7c844f2] Command [id=3Db3af596c-7df0-4bdb= -95d6-dffbc0a3213d]: Compensating NEW_ENTITY_ID of org.ovirt.engine.core.= common.businessentities.VmStatic; snapshot: 1abdcfd8-77b2-47c3-9973-81841= 67b3774.=0D=0A2015-10-01 11:53:00,818 ERROR [org.ovirt.engine.core.dal.db= broker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-8-thread= -36) [7c844f2] Correlation ID: 2221ad18, Job ID: df3b9ba1-90bf-4647-9712-= f4e3eccfc256, Call Stack: null, Custom Event ID: -1, Message: Failed to i= mport Vm test to Data Center TEST, Cluster INTEL=0D=0A2015-10-01 11:53:00= ,822 INFO=C2=A0 [org.ovirt.engine.core.bll.ImportVmCommand] (org.ovirt.th= read.pool-8-thread-36) [7c844f2] Lock freed to object 'EngineLock:{exclus= iveLocks=3D'[test=3D<VM_NAME, ACTION_TYPE_FAILED_NAME_ALREADY_USED>, 1abd= cfd8-77b2-47c3-9973-8184167b3774=3D<VM, ACTION_TYPE_FAILED_VM_IS_BEING_IM= PORTED$VmName test>]', sharedLocks=3D'[1abdcfd8-77b2-47c3-9973-8184167b37= 74=3D<REMOTE_VM, ACTION_TYPE_FAILED_VM_IS_BEING_IMPORTED$VmName test>]'}'= =0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0A=0D=0AThanks=0D= =0A=0D=0A=0D=0AWolfgang Bucher=0D=0A=0D=0A=EF=BB=BF=0D=0A=EF=BB=BF=0D=0A=EF= =BB=BF=0D=0A=0D=0A=0D=0A=C2=A0=0D=0A --=_pig3fzdG9Uvcv3g7W139nCFW2yo2eXgUypLAKLpr2p26esXt Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://ww= w.w3.org/TR/html4/loose.dtd"><html>=0A<head>=0A <meta name=3D"Generator"= content=3D"Zarafa WebApp v7.1.11-46050">=0A <meta http-equiv=3D"Content= -Type" content=3D"text/html; charset=3Dutf-8">=0A <title>Ovirt 3.6 RC im= port VM</title>=0A</head>=0A<body>=0A<s= pan data-mce-bogus=3D"true" id=3D"_mce_caret">Hello</s= pan> i am not able t= o import a vm from a exportdomain, i can activate the exportdomain bu twh= en i try to import a vm i get following error:<s= pan data-mce-style=3D"font-size: 12pt; font-family: tahoma,arial,helvetic= a,sans-serif;" style=3D"font-size: 12pt; font-family: tahoma,arial,helvet= ica,sans-serif;">Failed to import Vm test to Data Center TEST, Cluster IN= TEL engine.log <= p style=3D"margin-top: 0px; margin-bottom: 0px; color: #000000; font-fami= ly: Arial, Verdana, sans-serif;"> 015-10= -01 11:53:00,809 INFO  [org.ovirt.engine.core.bll.ImportVmCommand] (= org.ovirt.thread.pool-8-thread-36) [7c844f2] Command [id=3Db3af596c-7df0-= 4bdb-95d6-dffbc0a3213d]: Compensating NEW_ENTITY_ID of org.ovirt.engine.c= ore.common.businessentities.VmStatistics; snapshot: 1abdcfd8-77b2-47c3-99= 73-8184167b3774. 2015-10-01 11:53:00,809 INFO  [org.ovirt.engine.= core.bll.ImportVmCommand] (org.ovirt.thread.pool-8-thread-36) [7c844f2] C= ommand [id=3Db3af596c-7df0-4bdb-95d6-dffbc0a3213d]: Compensating NEW_ENTI= TY_ID of org.ovirt.engine.core.common.businessentities.VmDynamic; snapsho= t: 1abdcfd8-77b2-47c3-9973-8184167b3774. 2015-10-01 11:53:00,810 INFO&= nbsp; [org.ovirt.engine.core.bll.ImportVmCommand] (org.ovirt.thread.pool-= 8-thread-36) [7c844f2] Command [id=3Db3af596c-7df0-4bdb-95d6-dffbc0a3213d= ]: Compensating NEW_ENTITY_ID of org.ovirt.engine.core.common.businessent= ities.VmStatic; snapshot: 1abdcfd8-77b2-47c3-9973-8184167b3774. 2015-1= 0-01 11:53:00,818 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandl= ing.AuditLogDirector] (org.ovirt.thread.pool-8-thread-36) [7c844f2] Corre= lation ID: 2221ad18, Job ID: df3b9ba1-90bf-4647-9712-f4e3eccfc256, Call S= tack: null, Custom Event ID: -1, Message: Failed to import Vm test to Dat= a Center TEST, Cluster INTEL 2015-10-01 11:53:00,822 INFO  [org.o= virt.engine.core.bll.ImportVmCommand] (org.ovirt.thread.pool-8-thread-36)= [7c844f2] Lock freed to object 'EngineLock:{exclusiveLocks=3D'[test=3D&l= t;VM_NAME, ACTION_TYPE_FAILED_NAME_ALREADY_USED>, 1abdcfd8-77b2-47c3-9= 973-8184167b3774=3D<VM, ACTION_TYPE_FAILED_VM_IS_BEING_IMPORTED$VmName= test>]', sharedLocks=3D'[1abdcfd8-77b2-47c3-9973-8184167b3774=3D<R= EMOTE_VM, ACTION_TYPE_FAILED_VM_IS_BEING_IMPORTED$VmName test>]'}'</sp= an> <p hasownproperty=3D"fun= ction hasOwnProperty() {=0A [native code]=0A}" valueof=3D"function val= ueOf() {=0A [native code]=0A}" isprototypeof=3D"function isPrototypeOf= () {=0A [native code]=0A}" propertyisenumerable=3D"function propertyIs= Enumerable() {=0A [native code]=0A}" tolocalestring=3D"function toLoca= leString() {=0A [native code]=0A}" tostring=3D"function toString() {=0A= [native code]=0A}" constructor=3D"function Object() {=0A [native c= ode]=0A}" style=3D"padding: 0; margin: 0;" data-mce-style=3D"padding: 0; = margin: 0;">=0A <p hasownpro= perty=3D"function hasOwnProperty() {=0A [native code]=0A}" valueof=3D"= function valueOf() {=0A [native code]=0A}" isprototypeof=3D"function i= sPrototypeOf() {=0A [native code]=0A}" propertyisenumerable=3D"functio= n propertyIsEnumerable() {=0A [native code]=0A}" tolocalestring=3D"fun= ction toLocaleString() {=0A [native code]=0A}" tostring=3D"function to= String() {=0A [native code]=0A}" constructor=3D"function Object() {=0A= [native code]=0A}" style=3D"padding: 0; margin: 0;" data-mce-style=3D= "padding: 0; margin: 0;">=0A </p= ><p hasownproperty=3D"function hasOwnProperty() {=0A [native code]=0A}= " valueof=3D"function valueOf() {=0A [native code]=0A}" isprototypeof=3D= "function isPrototypeOf() {=0A [native code]=0A}" propertyisenumerable= =3D"function propertyIsEnumerable() {=0A [native code]=0A}" tolocalest= ring=3D"function toLocaleString() {=0A [native code]=0A}" tostring=3D"= function toString() {=0A [native code]=0A}" constructor=3D"function Ob= ject() {=0A [native code]=0A}" style=3D"padding: 0; margin: 0;" data-m= ce-style=3D"padding: 0; margin: 0;">=0AThanks <p hasownproperty=3D"function hasOwnProperty() {=0A = [native code]=0A}" valueof=3D"function valueOf() {=0A [native code]=0A= }" isprototypeof=3D"function isPrototypeOf() {=0A [native code]=0A}" p= ropertyisenumerable=3D"function propertyIsEnumerable() {=0A [native co= de]=0A}" tolocalestring=3D"function toLocaleString() {=0A [native code= ]=0A}" tostring=3D"function toString() {=0A [native code]=0A}" constru= ctor=3D"function Object() {=0A [native code]=0A}" style=3D"padding: 0;= margin: 0;" data-mce-style=3D"padding: 0; margin: 0;">=0AWolfgang Bucher<p hasownproperty=3D"func= tion hasOwnProperty() {=0A [native code]=0A}" valueof=3D"function valu= eOf() {=0A [native code]=0A}" isprototypeof=3D"function isPrototypeOf(= ) {=0A [native code]=0A}" propertyisenumerable=3D"function propertyIsE= numerable() {=0A [native code]=0A}" tolocalestring=3D"function toLocal= eString() {=0A [native code]=0A}" tostring=3D"function toString() {=0A= [native code]=0A}" constructor=3D"function Object() {=0A [native c= ode]=0A}" style=3D"padding: 0; margin: 0;" data-mce-style=3D"padding: 0; = margin: 0;">=EF=BB=BF =EF=BB=BF =EF=BB=BF </s= pan> =0A</body>=0A</html> --=_pig3fzdG9Uvcv3g7W139nCFW2yo2eXgUypLAKLpr2p26esXt--

3 2

LDAP
by Fernando Fuentes 07 Oct '15

07 Oct '15

I migrated from 3.4 to 3.5 and I see that my kerberos/ldap is no longer working and looking further now I see that 3.5 uses AAA. Is there a migration process to move my kerberos/ldap to AAA or a guide to this? TIA!

2 2

'Enable Gluster Service' and 'Enable Virt Service' missing from New Cluster dialog in 3.6 rc
by Liam Curtis 07 Oct '15

07 Oct '15

Hello all, In oVirt Engine Version: 3.5.4.2-1.el7.centos, I have above two options when creating a new cluster. In oVirt Engine Version: 3.6.0-0.0.master.20150909083746.gitbcc44ff.el7.centos, I no longer have those options. I only have: Enable to set VM maintenance reason Enable to set Host maintenance reason Has this been removed or am I missing something? Do I need to enable gluster support somewhere in UI? Thanks in advance.

2 1