- Users - oVirt List Archives

Extension aaa: No search for principal
by Daniel Helgenberger 16 Sep '15

16 Sep '15

Hello, I am stuck in configuring ovirt-engine-extension-aaa-ldap with AD for ovirt 3.5.4. I am following the [readme.md] and so far it was quite strait forward: > include = <ad.properties> > > # > # Active directory domain name. > # > vars.domain = int.corp.de > > # > # Search user and its password. > # > vars.user = bind@${global:vars.domain} > vars.password = [redacted] > > # > # Optional DNS servers, if enterprise > # DNS server cannot resolve the domain srvrecord. > # > #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain} > > pool.default.serverset.type = srvrecord > pool.default.serverset.srvrecord.domain = ${global:vars.domain} > pool.default.auth.simple.bindDN = ${global:vars.user} > pool.default.auth.simple.password = ${global:vars.password} > > # Uncomment if using custom DNS > #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url = ${global:vars.dns} > #pool.default.socketfactory.resolver.uRL = ${global:vars.dns} > > # Create keystore, import certificate chain and uncomment > # if using ssl/tls. > #pool.default.ssl.startTLS = true > #pool.default.ssl.truststore.file = ${local:_basedir}/${global:vars.domain}.jks > #pool.default.ssl.truststore.password = changeit The config seems to work; at least the domain and binddn part. I can browse and add users to ovirt as suggested in step (3). All quotes are from engine.log: > 2015-09-11 11:54:50,261 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (org.ovirt.thread.pool-8-thread-24) [73bff0e9] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group MANIPULATE_PERMISSIONS with role type USER, ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group ADD_USERS_AND_GROUPS_FROM_DIRECTORY with role type USER > 2015-09-11 11:54:50,268 INFO [org.ovirt.engine.core.bll.aaa.AddUserCommand] (org.ovirt.thread.pool-8-thread-24) [21867e72] Running command: AddUserCommand internal: true. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group MANIPULATE_USERS with role type ADMIN > 2015-09-11 11:54:50,301 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 21867e72, Call Stack: null, Custom Event ID: -1, Message: User 'Administrator' was added successfully to the system. > 2015-09-11 11:54:50,379 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-8-thread-24) [21867e72] Correlation ID: 73bff0e9, Call Stack: null, Custom Event ID: -1, Message: User/Group Administrator was granted permission for Role SuperUser on System by admin@internal. Yet, when loging in as a user administrator I get: > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2, Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=No search for principal 'administrator(a)int.corp.com'} Followed by a java stack trace. I did not find any configurable search path. The config seems to load: > 2015-09-11 12:01:34,897 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Loading extension 'builtin-authn-internal' > 2015-09-11 12:01:34,903 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'builtin-authn-internal' loaded > 2015-09-11 12:01:34,905 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Loading extension 'internal' > 2015-09-11 12:01:34,907 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'internal' loaded > 2015-09-11 12:01:34,919 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Loading extension 'corp-authn' > 2015-09-11 12:01:34,967 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'corp-authn' loaded > 2015-09-11 12:01:34,971 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Loading extension 'corp-authz' > 2015-09-11 12:01:34,981 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'corp-authz' loaded > 2015-09-11 12:01:34,982 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Initializing extension 'corp-authn' > 2015-09-11 12:01:34,983 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] Creating LDAP pool 'authz' > 2015-09-11 12:01:35,120 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authn::corp-authn] Creating LDAP pool 'authn' > 2015-09-11 12:01:35,159 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'corp-authn' initialized > 2015-09-11 12:01:35,160 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Initializing extension 'builtin-authn-internal' > 2015-09-11 12:01:35,161 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'builtin-authn-internal' initialized > 2015-09-11 12:01:35,162 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Initializing extension 'corp-authz' > 2015-09-11 12:01:35,162 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] Creating LDAP pool 'authz' > 2015-09-11 12:01:35,185 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] Creating LDAP pool 'gc' > 2015-09-11 12:01:35,222 INFO [org.ovirt.engineextensions.aaa.ldap.AuthzExtension] (MSC service thread 1-2) [ovirt-engine-extension-aaa-ldap.authz::corp-authz] Available Namespaces: [DC=int,DC=corp,DC=de] > 2015-09-11 12:01:35,223 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'corp-authz' initialized > 2015-09-11 12:01:35,224 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Initializing extension 'internal' > 2015-09-11 12:01:35,224 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Extension 'internal' initialized > 2015-09-11 12:01:35,225 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Start of enabled extensions list > 2015-09-11 12:01:35,225 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Instance name: 'corp-authn', Extension name: 'ovirt-engine-extension-aaa-ldap.authn', Version: '1.0.2', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/corp-authn.properties', Initialized: 'true' > 2015-09-11 12:01:35,227 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' > 2015-09-11 12:01:35,228 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Instance name: 'corp-authz', Extension name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.0.2', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/corp-authz.properties', Initialized: 'true' > 2015-09-11 12:01:35,230 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' > 2015-09-11 12:01:35,231 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-2) End of enabled extensions list Versions: ovirt engine 3.5.4 AD: Windows Server 2012r2 Please let me know if you need further logs. Thanks, [readme.md] https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767

2 9

oVirt + gluster + selfhosted + bonding
by Joachim Tingvold 16 Sep '15

16 Sep '15

Hi, First-time user of oVirt, so bear with me. Trying to get redundant oVirt + gluster set up. Have four hosts; gluster1 (CentOS7) gluster2 (CentOS7) ovirt1 (CentOS7) ovirt2 (CentOS7) Using replica 3 volume with arbiter node (new in 3.7.0). Got that part up and running (using ovirt1 as the arbiter node), and it works fine. Initial goal (before reading up on both gluster and oVirt) was to have everything v6-only, but found out quickly enough that we had to scratch that plan for now (I see that there are some activity on both gluster and oVirt on this, which is nice). Anyways. We wanted to use the "self hosted engine gluster"-feature (which, by the looks of it, is only present in 3.6). We installed 3.6b4 (3.6.0.1-0.1.20150821.gitc8ddcd8.el7.centos). I already had the network set up (couldn't find any specifics on this in the somewhat lacking oVirt-documentation?), something along these lines; * eth0 + eth1, bonded in bond0 (LACP) * vlan110 on top of bond0: v6-only for mgmt of host * vlan111 on top of bond0: v4 for gluster + ovirt We then ran the 'hosted-engine --deploy' command, filling out the information as best as we could (some of these options seemed to lack documentation, or at least we had trouble finding it). The end-result was like this[1]. Accepting this, we suddenly found ourselves without connectivity to the host. Logged in via KVM, and this[2] was the last part of the log. All of the interfaces we had before (bond0, vlan110, vlan111) was "wiped clean" for it's configuration, and VDSM seems to have taken control on that part (however, since the script failed, we seem to have ended up in some kind of "limbo mode"). Rebooting didn't help bring things up again, and we're currently looking into manually configuring things via VDSM. Thought I'd post here meanwhile, seeing if we've missed something obvious, or if oVirt should've handled this any different? If relevant, the content of the answer-file referenced in [2] can be found here[3]. [1] <http://files.jocke.no/b/dump_2015-09-08_22.14.21.png> [2] <http://files.jocke.no/b/dump_2015-09-08_22.06.06.png> [3] <http://files.jocke.no/b/answers-20150908215613.conf> -- Joachim

2 1

Is a dedicated oVirt mgmt VLAN still needed for oVirt host nodes?
by ccox＠endlessnow.com 16 Sep '15

16 Sep '15

We have an oVirt environment that I inherited. One is running 3.4.0 and one is running 3.5.0. Seem in both cases the prior administrator stated that a dedicated VLAN was necessary for oVirt mgmt. That is, we could not run multiple tagged VLANs on a nic for a given oVirt host node. Does any of this make sense? Is this true? Is it still true for more contemporary versions of oVirt? My problem is that our nodes are blades and I only have two physical nics per blade. In our network for redundancy we need to have the two nics have the same VLANs so that things failover ok. Which means we have to share the oVirt mgmt network on the same wire. That's the ideal. Currently we have a whole nic on the blade just for oVirt management. Is this a requirement?

4 3

Upgrade problem
by Koen Vanoppen 15 Sep '15

15 Sep '15

Hi everybody, I'm trying to upgrade ovirt to the ovirt 3.5.4 from my current version 3.5.3. But when I try to run engine-setup I got this: [ INFO ] Checking for product updates... Setup has found updates for some packages, do you wish to update them now? (Yes, No) [Yes]: [ INFO ] Checking for an update for Setup... --== ALL IN ONE CONFIGURATION ==-- --== NETWORK CONFIGURATION ==-- Setup can automatically configure the firewall on this system. Note: automatic configuration of the firewall may overwrite current settings. Do you want Setup to configure the firewall? (Yes, No) [Yes]: [ INFO ] firewalld will be configured as firewall manager. --== DATABASE CONFIGURATION ==-- The detected DWH database size is 198 MB. Setup can backup the existing database. The time and space required for the database backup depend on its size. This process takes time, and in some cases (for instance, when the size is few GBs) may take several hours to complete. If you choose to not back up the database, and Setup later fails for some reason, it will not be able to restore the database and all DWH data will be lost. Would you like to backup the existing database before upgrading it? (Yes, No) [Yes]: --== OVIRT ENGINE CONFIGURATION ==-- Skipping storing options as database already prepared --== PKI CONFIGURATION ==-- [ ERROR ] Failed to execute stage 'Environment customization': Command '/bin/openssl' failed to execute [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20150911181604-1gft67.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20150911181626-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Any idea? Kind regards, Koen

3 4

Some VMs in status "not responding" in oVirt interface
by Christian Hailer 15 Sep '15

15 Sep '15

This is a multipart message in MIME format. ------=_NextPart_000_02B0_01D0E2AC.AFF9F270 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello, =20 last Wednesday I wanted to update my oVirt 3.5 hypervisor. It is a = single Centos 7 server, so I started by suspending the VMs in order to = set the oVirt engine host to maintenance mode. During the process of = suspending the VMs the server crashed, kernel panic=E2=80=A6 After restarting the server I installed the updates via yum an restarted = the server again. Afterwards, all the VMs could be started again. Some = hours later my monitoring system registered some unresponsive hosts, I = had a look in the oVirt interface, 3 of the VMs were in the state = =E2=80=9Cnot responding=E2=80=9D, marked by a question mark.=20 I tried to shut down the VMs, but oVirt wasn=E2=80=99t able to do so. I = tried to reset the status in the database with the sql statement =20 update vm_dynamic set status =3D 0 where vm_guid =3D (select vm_guid = from vm_static where vm_name =3D 'MYVMNAME'); =20 but that didn=E2=80=99t help, either. Only rebooting the whole = hypervisor helped=E2=80=A6 afterwards everything worked again. But only = for a few hours, then one of the VMs entered the =E2=80=9Cnot = responding=E2=80=9D state again=E2=80=A6 again only a reboot helped. = Yesterday it happened again: =20 2015-08-28 17:44:22,664 INFO = [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] = (DefaultQuartzScheduler_Worker-60) [4ef90b12] VM DC = 0f3d1f06-e516-48ce-aa6f-7273c33d3491 moved from Up --> NotResponding 2015-08-28 17:44:22,692 WARN = [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] = (DefaultQuartzScheduler_Worker-60) [4ef90b12] Correlation ID: null, Call = Stack: null, Custom Event ID: -1, Message: VM DC is not responding. =20 Does anybody know what I can do? Where should I have a look? Hints are = greatly appreciated! =20 Thanks, Christian ------=_NextPart_000_02B0_01D0E2AC.AFF9F270 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><meta = http-equiv=3DContent-Type content=3D"text/html; charset=3Dutf-8"><meta = name=3DGenerator content=3D"Microsoft Word 15 (filtered = medium)"><style></style></head><body lang=3DDE = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1>Hello,<o:p></o:p><o:p> </o:p>last Wednesday I wanted to update = my oVirt 3.5 hypervisor. It is a single Centos 7 server, so I started by = suspending the VMs in order to set the oVirt engine host to maintenance = mode. During the process of suspending the VMs the server crashed, = kernel panic=E2=80=A6<o:p></o:p>After restarting the server I installed the updates via yum = an restarted the server again. Afterwards, all the VMs could be started = again. Some hours later my monitoring system registered some = unresponsive hosts, I had a look in the oVirt interface, 3 of the VMs = were in the state =E2=80=9Cnot responding=E2=80=9D, marked by a question = mark. <o:p></o:p>I = tried to shut down the VMs, but oVirt wasn=E2=80=99t able to do so. I = tried to reset the status in the database with the sql = statement<o:p></o:p><o:p> </o:p>update vm_dynamic set status =3D 0 where vm_guid =3D = (select vm_guid from vm_static where vm_name =3D = 'MYVMNAME');<o:p></o:p><o:p> </o:p>but that didn=E2=80=99t help, either. Only rebooting the = whole hypervisor helped=E2=80=A6 afterwards everything worked again. But = only for a few hours, then one of the VMs entered the =E2=80=9Cnot = responding=E2=80=9D state again=E2=80=A6 again only a reboot helped. = Yesterday it happened again:<o:p></o:p><o:p> </o:p>2015-08-28 17:44:22,664 INFO  = [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] = (DefaultQuartzScheduler_Worker-60) [4ef90b12] VM DC = 0f3d1f06-e516-48ce-aa6f-7273c33d3491 moved from Up --> = NotResponding<o:p></o:p>2015-08-28 17:44:22,692 WARN  = [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] = (DefaultQuartzScheduler_Worker-60) [4ef90b12] Correlation ID: null, Call = Stack: null, Custom Event ID: -1, Message: VM DC is not = responding.<o:p></o:p><o:p> </o:p>Does anybody know what I can do? Where should I have a = look? Hints are greatly appreciated!<o:p></o:p><o:p> </o:p>Thanks,<o:p></o:p>Christian<o:p></o:p></div></body></html> ------=_NextPart_000_02B0_01D0E2AC.AFF9F270--

3 6

vdsm high mem usage
by Michael Kleinpaste 15 Sep '15

15 Sep '15

Hi everybody. So I ran into that high mem usage thing. The problem I have with patching is that this is a live system so I can't do it mid day. Can anybody tell me if it is possible to just restart the vdsm service or does the host have to be in "maintenance mode" before restarting it? It is using gluster storage, if that makes a difference as well. Thanks, -- *Michael Kleinpaste* Senior Systems Administrator SharperLending, LLC. www.SharperLending.com Michael.Kleinpaste(a)SharperLending.com (509) 324-1230 Fax: (509) 324-1234

2 2

VLAN with one NIC
by gregor 15 Sep '15

15 Sep '15

Hi, is it possible to use different VLAN with one NIC in ovirt? I can not add a logical network configured as VLAN to my ovirtmgmt interface, I get "Cannot have a non-VLAN VM network and VLAN-tagged networks on one interface." The setup for the Port is a trunk of different tagged VLAN's and the default VLAN1 is untagged. Normally this work under centos where I give the nic eth0 an IP and create a nic eth0.10 for the VLAN with ID 10 and set an IP for it. cheers gregor

3 5

Running an ovirt phyton scrit on a newly RHEL7 installed system
by Jean-Pierre Ribeauville 15 Sep '15

15 Sep '15

--_000_1051EFB4D3A1704680C38CCAAC5836D279B8E46FWPTXMAIL1ptxaxw_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, I'm trying to retrieve datacenters clusters hosts and vms by using ovirt p= ython script needing some imports : import sys from ovirtsdk.api import API from ovirtsdk.xml import params from threading import Thread import time import logging Then I got following error : =D8 python test2.py Traceback (most recent call last): File "test2.py", line 32, in <module> from ovirtsdk.api import API ImportError: No module named ovirtsdk.api As I run it on a "fresh install" rhel7 server ( python has been added), I'm= wondering what's the minimum packages list I've to install on this machine to be able to run this script ? ( I run it correctly on th= e system where the ovirt engine is installed) Thanks. Regards, J.P. Ribeauville P: +33.(0).1.47.17.27.87 Puteaux 3 Etage 5 Bureau 4 jpribeauville(a)axway.com<mailto:jpribeauville@axway.com> http://www.axway.com<http://www.axway.com/> P Pensez =E0 l'environnement avant d'imprimer. --_000_1051EFB4D3A1704680C38CCAAC5836D279B8E46FWPTXMAIL1ptxaxw_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"FR" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hi,<o:p></o:p> <o:p> </o:p> I’m trying to retrieve da= tacenters clusters hosts and vms  by using ovirt python script needing= some imports :<o:p></o:p> <o:p> </o:p> import sys<o:p></o:p>= from ovirtsdk.api import API= <o:p></o:p> from ovirtsdk.xml import par= ams<o:p></o:p> from threading import Thread= <o:p></o:p> import time<o:p></o:p></span= > import logging<o:p></o:p></s= pan> <o:p> </o:p> <o:p> </o:p> Then I  got following erro= r :<o:p></o:p> <o:p> </o:p> <![if !supportLists]>=D8  <![endif]>python test2.py<o:p></o= :p> Traceback (most recent call = last):<o:p></o:p>   File "test2.py&q= uot;, line 32, in <module><o:p></o:p>     from ovir= tsdk.api import API<o:p></o:p> ImportError: No module named= ovirtsdk.api<o:p></o:p> <o:p> </o:p> As I run it on a “fresh i= nstall” rhel7 server ( python has been added), I’m wondering wh= at’s the minimum packages list I’ve to install on this machine to be able to run this script ?  ( I run it correctly = on the system where the ovirt engine is installed)<o:p></o:p> <o:p> </o:p> Thanks.<o:p></o:p> <o:p> </o:p> Regards,<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0"> <tbody> <tr> <td valign=3D"top" style=3D"padding:0cm 4.5pt 0cm 0cm"> <o:p> </o:p> J.P. Ribeauville<o:p></o:p> <o:p> </o:p> </td> </tr> <tr> <td style=3D"padding:2.25pt 4.5pt 4.5pt 0cm"> P: +33.(0).1.47.17.= 27.87<o:p></o:p></sp= an> <o:p= > </o:p> <o:p= > </o:p> Pute= aux 3 Etage 5  Bureau 4<o:p></o:p> <o:p= > </o:p> <a href=3D"mailto:jpribeauville@axway.com">= jpribeauville(a)axway.com</a></= span> <a href=3D"http://www.axway.com/">http://www.ax= way.com</a><o:p></o:p> <o:p= > </o:p> </td> </tr> </tbody> </table> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0"> <tbody> <tr> <td style=3D"padding:4.5pt 4.5pt 4.5pt 0cm"> P Pensez =E0 l’environnement avant d’i= mprimer.<o:p></o:p><= /span> </td> </tr> </tbody> </table> <o:p> <= /o:p> <o:p> </o:p> </div> </body> </html> --_000_1051EFB4D3A1704680C38CCAAC5836D279B8E46FWPTXMAIL1ptxaxw_--

2 2

using RHEL6/7 server as host ?
by Jean-Pierre Ribeauville 15 Sep '15

15 Sep '15

--_000_1051EFB4D3A1704680C38CCAAC5836D279B8E1DCWPTXMAIL1ptxaxw_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, Ovirt quick start guide mentions this : Install Hosts After you have installed the oVirt Engine, install the hosts to run your vi= rtual machines. In oVirt, you can use either oVirt Node, Fedora or CentOS a= s hosts. Is it O.K. to use a RHEL6 or 7 server as host to run Guest VMs ? I assume that's ovirt engine is not installed on one of these hosts ( it's= better to use a dedicated machine) ? Thx J.P. Ribeauville P: +33.(0).1.47.17.27.87 Puteaux 3 Etage 5 Bureau 4 jpribeauville(a)axway.com<mailto:jpribeauville@axway.com> http://www.axway.com<http://www.axway.com/> P Pensez =E0 l'environnement avant d'imprimer. --_000_1051EFB4D3A1704680C38CCAAC5836D279B8E1DCWPTXMAIL1ptxaxw_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"FR" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hi,<o:p></o:p> <o:p> </o:p> Ovirt quick start guide mention= s this :<o:p></o:p> <o:p> </o:p> Insta= ll Hosts <o:p></o:p> After yo= u have installed the oVirt Engine, install the hosts to run your virtual machines. In oVirt, you can use either oVirt Node, Fedora or = CentOS as hosts. <o:p></o:p> <o:p> </o:p> Is it O.K. to use a RHEL6 or 7 = server as  host to run Guest VMs  ?<o:p></o:p> <o:p> </o:p> I assume that’s ovirt eng= ine is not installed on one of these hosts  ( it’s better to use= a dedicated machine) ?<o:p></o:p> <o:p> </o:p> Thx<o:p></o:p> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0"> <tbody> <tr> <td valign=3D"top" style=3D"padding:0cm 4.5pt 0cm 0cm"> <o:p> </o:p> J.P. Ribeauville<o:p></o:p> <o:p> </o:p> </td> </tr> <tr> <td style=3D"padding:2.25pt 4.5pt 4.5pt 0cm"> P: +33.(0).1.47.17.= 27.87<o:p></o:p></sp= an> <o:p= > </o:p> <o:p= > </o:p> Pute= aux 3 Etage 5  Bureau 4<o:p></o:p> <o:p= > </o:p> <a href=3D"mailto:jpribeauville@axway.com">= jpribeauville(a)axway.com</a></= span> <a href=3D"http://www.axway.com/">http://www.ax= way.com</a><o:p></o:p> <o:p= > </o:p> </td> </tr> </tbody> </table> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0"> <tbody> <tr> <td style=3D"padding:4.5pt 4.5pt 4.5pt 0cm"> P Pensez =E0 l’environnement avant d’i= mprimer.<o:p></o:p><= /span> </td> </tr> </tbody> </table> <o:p> <= /o:p> <o:p> </o:p> </div> </body> </html> --_000_1051EFB4D3A1704680C38CCAAC5836D279B8E1DCWPTXMAIL1ptxaxw_--

3 2

Strange fencing behaviour 3.5.3
by Martin Breault 15 Sep '15

15 Sep '15

Hello, I manage 2 oVirt clusters that are not associated in any way, they each have their own management engine running ovirt-engine-3.5.3.1-1. The servers are Dell 6xx series and the power-management is configured using idrac5 settings and each cluster is a pair of hypervisors. The engines are both in a datacenter that had an electrical issue, each cluster is at a different unrelated location. The problem I had was caused by a downed switch causing the individual engines to continue to function, however no longer have connectivity to their respective clusters. Once the switch was replaced (about 30 minutes of downtime) , when connectivity was resumed, both engines chose to fence one of the two "unresponsive hypervisors" by sending an iDrac command to power down. The downed hypervisor Cluster1 for some reason, 8 minutes later, got a iDrac command to power-up again. When I logged into the engine, the guests that were running on the powered-down host were in "off" state. I simply powered them back on. The downed hypervisor on Cluster2 stayed off, and was unresponsive according to the engine, however the VMs that were running on it were in an unknown state. I had to power on the host and click the "host has been rebooted" dialog for the cluster to free these guests to be booted again. My question is, is it normal for the engine to fence one or more hosts when it loses connectivity to all thehypervisors in the cluster? Is there a minimum of 3 hosts in a cluster for it to not fall into this mode? I'd like to know what I can troubleshoot or how I can avoid an issue like this should the engine be disconnected from the hypervisors temporarily and then resume connectivity only to kill the well-running guests. Thanks in advance, Marty

2 1