- Users - oVirt List Archives

Need Advice on Hosted Engine installation
by wodel youchi 17 Jun '15

17 Jun '15

Hi, We are installing a new ovirt platform for a client. this is our first deployment. we chose Hosted Engine install. here is the hardware used and the network configuration used be patient :) We have 02 hypervisors for now. each sever has 8 nic ports, we will use bonding. A NAS with nfs4 for the Engine_VM the ISO and Export domains. And iSCSI SAN for the rest of the VMs (Data domain) At first we chose as a network configuration: 10.0.0.X/16 as DMZ (ovirtmgmt will use this network) 172.16.1/24 as Storage network. we've configured our nfs to export only on this network. ----------------- We didn't configure the bonding manually at first, we thought that we could do it once the engine is up.... we couldn't :-( for ovirtmgmt, if we create the bond after the engine's installation, we could not modify the configuration, error message "network in use" for the storage network, we could't attach this logical network to the nic used for the storage, because when we do that we loose the connexion to nfs for the VM engine... so we had to export the VM engine nfs's share on DMZ and we had to configure bonding before starting the hosted engine installation. We also configured bonding on storage network, but after the engine installation, we couldn't attach this bonding to the logical network Storage, error message "you have to specify network address if static protocol is used", the IP address is specified, it's the IP address of the bonding... :-( --------------- Questions: - Do we missed anything on network configuration capabilities of ovirt? or the hosted engine is really a special case? - What is the best way to configure ovirt's Hosted Engine storage? - For the rest of the network, do we have to configure bonding and bridging from the GUI only? (not manually) thanks in advance.

3 2

Bug in hostdeploy / baseurl - RepoError: Cannot find a valid baseurl for repo: base/7/x86_64
by Daniel Helgenberger 17 Jun '15

17 Jun '15

Hello, I just went ahead and filed [BZ1232714] because with ovirt 3.5.3 host deploy seens to fail on CentOS7 if there is no baseurl setting in yum repos: RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 [BZ1232714] https://bugzilla.redhat.com/show_bug.cgi?id=1232714 -8<--------- > 2015-06-17 12:27:37 DEBUG otopi.transaction transaction._prepare:77 preparing 'Yum Transaction' > Loaded plugins: fastestmirror > 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:138 Stage internal_packages METHOD otopi.plugins.otopi.network.hostname.Plugin._internal_packages > 2015-06-17 12:27:37 DEBUG otopi.plugins.otopi.packagers.yumpackager yumpackager.verbose:88 Yum queue package iproute for install > Loading mirror speeds from cached hostfile > 2015-06-17 12:27:37 ERROR otopi.plugins.otopi.packagers.yumpackager yumpackager.error:97 Yum Cannot queue package iproute: Cannot find a valid baseurl for repo: base/7/x86_64 > 2015-06-17 12:27:37 DEBUG otopi.context context._executeMethod:152 method exception > Traceback (most recent call last): > File "/tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/context.py", line 142, in _executeMethod > method['method']() > File "/tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/network/hostname.py", line 66, in _internal_packages > self.packager.install(packages=('iproute',)) > File "/tmp/ovirt-s3ofZ9o6Pq/otopi-plugins/otopi/packagers/yumpackager.py", line 303, in install > ignoreErrors=ignoreErrors > File "/tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py", line 865, in install > **kwargs > File "/tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py", line 509, in _queue > provides = self._queryProvides(packages=(package,)) > File "/tmp/ovirt-s3ofZ9o6Pq/pythonlib/otopi/miniyum.py", line 447, in _queryProvides > for po in self._yb.searchPackageProvides(args=packages): > File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 3406, in searchPackageProvides > where = self.returnPackagesByDep(arg) > File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 4232, in returnPackagesByDep > return self.pkgSack.searchProvides(depstring) > File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 1079, in <lambda> > pkgSack = property(fget=lambda self: self._getSacks(), > File "/usr/lib/python2.7/site-packages/yum/__init__.py", line 784, in _getSacks > self.repos.populateSack(which=repos) > File "/usr/lib/python2.7/site-packages/yum/repos.py", line 344, in populateSack > self.doSetup() > File "/usr/lib/python2.7/site-packages/yum/repos.py", line 158, in doSetup > self.ayum.plugins.run('postreposetup') > File "/usr/lib/python2.7/site-packages/yum/plugins.py", line 188, in run > func(conduitcls(self, self.base, conf, **kwargs)) > File "/usr/lib/yum-plugins/fastestmirror.py", line 197, in postreposetup_hook > if downgrade_ftp and _len_non_ftp(repo.urls) == 1: > File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 871, in <lambda> > urls = property(fget=lambda self: self._geturls(), > File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 868, in _geturls > self._baseurlSetup() > File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 834, in _baseurlSetup > self.check() > File "/usr/lib/python2.7/site-packages/yum/yumRepo.py", line 554, in check > 'Cannot find a valid baseurl for repo: %s' % self.ui_id > RepoError: Cannot find a valid baseurl for repo: base/7/x86_64 > 2015-06-17 12:27:37 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Environment packages setup': Cannot find a valid baseurl for repo: base/7/x86_64 > 2015-06-17 12:27:37 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction' > 2015-06-17 12:27:37 INFO otopi.plugins.otopi.packagers.yumpackager yumpackager.info:92 Yum Performing yum transaction rollback > Could not retrieve mirrorlist http://mirrorlist.centos.org/?release=7&arch=x86_64&repo=os&infra=stock error was > 14: curl#7 - "Failed connect to mirrorlist.centos.org:80; No route to host" > Loaded plugins: fastestmirror > 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:490 ENVIRONMENT DUMP - BEGIN > 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV BASE/error=bool:'True' > 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:500 ENV BASE/exceptionInfo=list:'[(<class 'yum.Errors.RepoError'>, RepoError(), <traceback object at 0x2e26200>)]' > 2015-06-17 12:27:37 DEBUG otopi.context context.dumpEnvironment:504 ENVIRONMENT DUMP - END > 2015-06-17 12:27:37 INFO otopi.context context.runSequence:417 Stage: Pre-termination -8<----- -- Daniel Helgenberger m box bewegtbild GmbH P: +49/30/2408781-22 F: +49/30/2408781-10 ACKERSTR. 19 D-10115 BERLIN www.m-box.de www.monkeymen.tv Geschäftsführer: Martin Retschitzegger / Michaela Göllner Handeslregister: Amtsgericht Charlottenburg / HRB 112767

2 4

problems with power management using idrac7 on r620
by Jason Keltz 17 Jun '15

17 Jun '15

Hi. I've been having problem with power management using iDRAC 7 EXPRESS on a Dell R620. This uses a shared LOM as opposed to Enterprise that has a dedicated one. Every now and then, idrac simply stops responding to ping, so it can't respond to status commands from the proxy. If I send a reboot with "ipmitool mc reset cold" command, the idrac reboots and comes back, but after the problem has occurred, even after a reboot, it responds to ping, but drops 80+% of packets. The only way I can "solve" the problem is to physically restart the server. This isn't just happening on one R620 - it's happening on all of my ovirt hosts. I highly suspect it has to do with a memory leak, and being monitored by engine causes the problem. I had applied a recent firmware upgrade that was supposed to "solve" this kind of problem, but it doesn't. In other to provide Dell with more details, can someone tell me how often each host is being queried for status? I can't seem to find that info. The idrac on my file server doesn't seem to exhibit the same problem, and I suspect that is because it isn't being queried. Thanks, Jason.

4 5

windows guest tools install
by Patrick Russell 17 Jun '15

17 Jun '15

Hi all, We’ve got a large migration in progress for a windows (2k3, 2k8, and 2k12) environment from vmware to ovirt. Does anyone have any suggestions for an unattended ovirt-tools install? Our windows team has pretty much shot down installing python on their VM’s. Are there any flags we can pass to the installer to just accept the defaults? Any other suggestions? Thanks, Patrick

2 1

Postponing 3.6.0 second alpha to next week
by Sandro Bonazzola 17 Jun '15

17 Jun '15

Hi, due to instability of the current code, we need to postpone second alpha to next week. Maintainers: - please ensure that all packages you maintain builds in jenkins - please ensure that all the dependencies required by your packages are available either in ovirt repository or in an external repository included in ovirt-release repo files. - please ensure that engine is at least able to add a couple of hosts, create a vm on one host and migrate it to the other one. Infra: - please help keeping jenkins monitored and stabilizing it. Community: - please help testing nightly build while stabilizing it for the second alpha release. Thanks, -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

Just for info: ovirt-guest-agent on Debian 8 Jessie is buggy.
by Arman Khalatyan 16 Jun '15

16 Jun '15

The current debian has an bug the python script does not have exec flag so daemon shows as running but it does nothing. to fix it simply: chmod +x /usr/share/ovirt-guest-agent/ovirt-guest-agent.py systemctl restart ovirt-guest-agent *********************************************************** Dr. Arman Khalatyan eScience -SuperComputing Leibniz-Institut für Astrophysik Potsdam (AIP) An der Sternwarte 16, 14482 Potsdam, Germany ***********************************************************

2 1

Re: [ovirt-users] DWH remove
by Yedidyah Bar David 16 Jun '15

16 Jun '15

----- Original Message ----- > From: "Michael Wagenknecht" <wagenknecht(a)fuh-e.de> > To: "Yedidyah Bar David" <didi(a)redhat.com> > Sent: Tuesday, June 16, 2015 8:58:47 AM > Subject: Re: [ovirt-users] DWH remove > > Hi Didi, > thank you very much for the quick response. > A small report from my side: After doing your instructions I get some > error messages from engine-backup. > I have to remove the folders /var/lib/ovirt-engine-reports, > /var/lib/ovirt-engine-dwh, /etc/ovirt-engine-reports and > /etc/ovirt-engine-dwh manually. Then engine-backup works again. > Otherwise nothing has struck me. Thanks for the report! I'll update the wiki page about migration. Best, > > Best Regards, > Michael > > > Am 14.06.2015 um 07:40 schrieb Yedidyah Bar David: > > ----- Original Message ----- > >> From: "Michael Wagenknecht" <wagenknecht(a)fuh-e.de> > >> To: "Users" <users(a)ovirt.org> > >> Sent: Friday, June 12, 2015 2:15:23 PM > >> Subject: [ovirt-users] DWH remove > >> > >> Hi all, > >> how can I safely remove the DWH extension in ovirt 3.5.1? > > > > This depends on how "safely" you want this... > > > > Just stopping the services and removing the packages should be enough. > > > > I didn't verify what happens if you e.g. later try to run 'engine-cleanup' > > (How will it react when trying to remove them?) or re-install (will they > > behave as if already setup?) etc. > > > > You can/might then also remove the databases from postgres, e.g. > > > > # su - postgres > > psql > > drop database ovirt_engine_history; > > drop database ovirt_engine_reports; > > > >> Is there a howto? > > > > Not for this per-se, but [1] shows how to migrate them to another machine. > > > > We also have open bugs [2][3] to do this more cleanly, but they'll require > > some more work, and it currently does not seem they'll make it to 3.6. > > > > [1] http://www.ovirt.org/Features/Migration_of_local_DWH_Reports_to_remote > > [2] https://bugzilla.redhat.com/show_bug.cgi?id=1060529 > > [3] https://bugzilla.redhat.com/show_bug.cgi?id=1169695 > > > > Best, > > > -- Didi

1 0

Import Storage Domain 3.5 Error
by Tang Jackson 16 Jun '15

16 Jun '15

--_000_HK2PR03MB08200834250ECB842629B7DC9CBD0HK2PR03MB0820apcp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I have a SAN appliance with a large amount of data including VMs/Templates/= Disks mounted via NFS. When I tried to attach the storage domain to a fres= h ovirt cluster the following occurs 2015-06-10 18:35:58,739 INFO [org.ovirt.engine.core.bll.ImportVmFromConfig= urationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] Lock Acquired to object = EngineLock [exclusiveLocks=3D key: AI_Database value: VM_NAME , sharedLocks=3D key: 765ab10e-2283-465a-919a-fce70d877220 value: REMOTE_VM ] 2015-06-10 18:35:58,741 WARN [org.ovirt.engine.core.bll.ImportVmFromConfig= urationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] CanDoAction of action Im= portVmFromConfiguration failed for user admin@internal. Reasons: VAR__ACTIO= N__IMPORT,VAR__TYPE__VM,ACTION_TYPE_FAILED_STORAGE_DOMAIN_NOT_EXIST 2015-06-10 18:35:58,743 INFO [org.ovirt.engine.core.bll.ImportVmFromConfig= urationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] Lock freed to object Eng= ineLock [exclusiveLocks=3D key: AI_Database value: VM_NAME , sharedLocks=3D key: 765ab10e-2283-465a-919a-fce70d877220 value: REMOTE_VM ] The error appears on the GUI as Storage Domain does not exist. All templates are OK. Some VMs could be imported but most of them produce the error message above= . The procedure followed was http://www.ovirt.org/Features/ImportStorageDomai= n. --_000_HK2PR03MB08200834250ECB842629B7DC9CBD0HK2PR03MB0820apcp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"JA" link=3D"blue" vlink=3D"purple" style=3D"text-justify-trim= :punctuation"> <div class=3D"WordSection1"> Hell= o,<o:p></o:p> <o:p= > </o:p> I ha= ve a SAN appliance with a large amount of data including VMs/Templates/Disk= s mounted via NFS.  When I tried to attach the storage domain to a fre= sh ovirt cluster the following occurs<o:p></o:p> <o:p= > </o:p> 2015= -06-10 18:35:58,739 INFO  [org.ovirt.engine.core.bll.ImportVmFromConfi= gurationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] Lock Acquired to object= EngineLock [exclusiveLocks=3D key: AI_Database value: VM_NAME<o:p></o:p> , sh= aredLocks=3D key: 765ab10e-2283-465a-919a-fce70d877220 value: REMOTE_VM<o:p= ></o:p> ]<o:= p></o:p> 2015= -06-10 18:35:58,741 WARN  [org.ovirt.engine.core.bll.ImportVmFromConfi= gurationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] CanDoAction of action I= mportVmFromConfiguration failed for user admin@internal. Reasons: VAR__ACTION__IMPORT,VAR__TYPE__VM,ACTION_TYPE_FAILED_STORAGE_DOMA= IN_NOT_EXIST<o:p></o:p> 2015= -06-10 18:35:58,743 INFO  [org.ovirt.engine.core.bll.ImportVmFromConfi= gurationCommand] (ajp--127.0.0.1-8702-4) [1d68187c] Lock freed to object En= gineLock [exclusiveLocks=3D key: AI_Database value: VM_NAME<o:p></o:p> , sh= aredLocks=3D key: 765ab10e-2283-465a-919a-fce70d877220 value: REMOTE_VM<o:p= ></o:p> ]<o:= p></o:p> <o:p= > </o:p> The = error appears on the GUI as Storage Domain does not exist.<o:p></o:p></span= > <o:p= > </o:p> All = templates are OK.<o:p></o:p> <o:p= > </o:p> Some= VMs could be imported but most of them produce the error message above.<o:= p></o:p> <o:p= > </o:p> The = procedure followed was <a href=3D"http://www.ovirt.org/Features/ImportStorageDomain">http://www.ov= irt.org/Features/ImportStorageDomain</a>.<o:p></o:p> <o:p= > </o:p> <o:p= > </o:p> </div> </body> </html> --_000_HK2PR03MB08200834250ECB842629B7DC9CBD0HK2PR03MB0820apcp_--

2 2

[ANN] oVirt 3.5.3 Second Release Candidate is now available for testing
by Sandro Bonazzola 15 Jun '15

15 Jun '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 The oVirt team is pleased to announce that the 3.5.3 Second Release Candidate is now available for testing as of May 28th 2015. The release candidate is available now for Fedora 20, Red Hat Enterprise Linux 6.6, CentOS 6.6 (or similar) and Red Hat Enterprise Linux 7.1, CentOS 7.1 (or similar). This release of oVirt includes numerous bug fixes and one CVE fix for the VENOM Vulnerability. See the release notes [1] for a list of the new features and bugs fixed. Please refer to release notes [1] for Installation / Upgrade instructions. A new oVirt Live ISO is already available as well[2]. Please note that mirrors[3] may need usually one day before being synchronized. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.5.3_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ [3] http://www.ovirt.org/Repository_mirrors#Current_mirrors - -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJVZrrzAAoJEHw3u57E4QAOnX4QAMFi+d4Vq5jnZ0e+LaD1vB9R GmT+k21q6vybjIvovPh7q6StCtPS0sg15BoH5JTmTfl5IWL01qMsFvw/G32PIjZI u3mm2Z3evbxPg9qsqJPyJm/jAlRHv/L6ntLJaJBDPDSO6Y0iqiHTVUQG16easW3L ZnUC2IM5TpHuU3PcgVp8zY9gqFqQWnnsA8deJXBvif9J8RdSf7DnkFha9/Ei3v0E 1btkzt0XVS3Cate8pEaTT8zSoE/tOBBS/D65HsnnZdD13RAxYkolzuPvT+7BlmUO QMhyIE7msWex048HrcDVTEDLrkYF2SpAmYix3sA2O9+AIujenpICHJ8JyxAc+BmJ scsvv99iDLU3wkpMwKiIABj7nE8gIiUbyZBNaxsxQJ0jurLZGHGIhQGLAJ2q/rd7 MTkcDXOBOZHEadqs87mSEzHt1pQCmZ40KSJCvyWbqa7vFv6kyOgOs3PldoizsOyV Z1DlDmfMM8hs/6LOP/Mr/4p/l3JgS3gbOy34L2q9J/B+BX/XU7H2bOk6GTEMVPOn av7m2kDs8DlQJzSqZAURZNt6XTnGGw05THOBWD8NmHuvlVZsSF1mxKb0BC+LpRcs QmLGAtT12Y2Wnq1xwzcRav9+wiIeEYTVJCbyohMLyqTHqPgRstpeF3JulpqILo5I rHhGapreYDlzy06Ki7X7 =pUqF -----END PGP SIGNATURE-----

2 1

Re: [ovirt-users] Adding users through LDAP fails on "external_id"
by Zach La Celle 15 Jun '15

15 Jun '15

I have tried the following combinations of certificates added to the keystore: * PositiveSSL CA bundle (SHA-1 and SHA256) -- This is the source of our SSL certificates * All CA certificates from the LDAP machine * All CA certificates from the LDAP machine plus the machine's own certificate * The machine's own certificate only None fix the issue. As I understand it, adding just the CA bundle from PositiveSSL should work. Or, adding the CA bundles offered by Ubuntu should also work. Previously (when using port 636 and TLS/SSL), to fix SSLPeerUnverifiedException, I added all of the CA certificates from the LDAP machine, plus its own certificate (this last part fixed it). In the mean time, to try and fix the original issue of "external_id", is there any way to disable certificate verification for STARTTLS? On 06/15/2015 03:57 PM, Alon Bar-Lev wrote: > You should add *ONLY* the ca certificate top level to the keystore. > > ----- Original Message ----- >> From: "Zach La Celle" <lacelle(a)roboticresearch.com> >> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >> Sent: Monday, June 15, 2015 10:54:02 PM >> Subject: Re: [ovirt-users] Adding users through LDAP fails on "external_id" >> >> OK, started using the STARTTLS protocol. Tested working using >> ldapsearch, but now ovirt-engine's engine.log complains: >> >> java.io.IOException: Unable to verify an attempt to to establish a >> secure connection to 'directory.roboticresearch.com:389' becau\ >> se an unexpected error was encountered during validation processing: >> javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated >> >> Not sure what is wrong. We fixed this before by adding the >> ca-certificates from the LDAP server as well as the LDAP server >> certificate into the .jks keystore. >> >> On 06/15/2015 03:21 PM, Alon Bar-Lev wrote: >>> ----- Original Message ----- >>>> From: "Zach La Celle" <lacelle(a)roboticresearch.com> >>>> To: "Alon Bar-Lev" <alonbl(a)redhat.com> >>>> Sent: Monday, June 15, 2015 10:14:34 PM >>>> Subject: Re: [ovirt-users] Adding users through LDAP fails on >>>> "external_id" >>>> >>>> My mistake. We're using OpenLDAP 2.4.28-1.1ubuntu4.4 on Ubuntu 12.04. >>>> >>>> The full configuration files are as follows (I removed commented-out >>>> lines for brevity). Communications with the LDAP server seem to work >>>> correctly now. >>>> >>>> __profile1.properties__ >>>> >>>> # >>>> >>>> # Select >>>> one >>>> >>>> # >>>> >>>> include = <openldap.properties> >>> reading bellow, you may want to try rfc2307-openldap as your schema seems >>> to be rfc2307 compatible. >>> >>> <snip> >>> >>>> pool.default.serverset.type = single >>>> pool.default.serverset.single.server = ${global:vars.server} >>>> pool.default.serverset.single.port = 636 >>> why do you modify port? please use startTLS on default port. >>> >>>> #pool.default.auth.simple.bindDN = ${global:vars.user} >>>> #pool.default.auth.simple.password = ${global:vars.password} >>> why did you comment this, do you allow anonymous access? >>> >>>> # Create keystore, import certificate chain and uncomment >>>> # if using ssl/tls. >>>> #pool.default.ssl.startTLS = true >>> please uncomment this^ >>> >>>> pool.default.ssl.truststore.file = >>>> ${local:_basedir}/${global:vars.server}.jks >>>> pool.default.ssl.truststore.password = sdfnliwneponalsdinosaivnewal >>>> >>>> # TLS settings and authentication >>>> pool.default.ssl.enable = true >>> please do not use ssl unless startTLS is not supported, and it is in >>> openldap. >>> >>>> pool.default.ssl.startTLS = false >>> please set this to true. >>> >>>> pool.default.ssl.host-name-verify.enable = true >>>> pool.default.ssl.host-name-verify.wildcards = false >>>> pool.default.ssl.insecure = false >>>> pool.default.ssl.protocol = TLSv1 >>>> #pool.default.ssl.startTLSProtocol = TLSv1 >>> these are the default, you do not need to add these. >>> >>>> pool.default.auth.type = none >>> why have you set this explicitly? >>> >>>> # Mapping >>>> attrmap.map-principal-record.attr.PrincipalRecord_DISPLAY_NAME.map = cn >>>> attrmap.map-principal-record.attr.PrincipalRecord_EMAIL.map = Email >>>> attrmap.map-group-record.attr.GroupRecord_DISPLAY_NAME.map = cn >>> please remove mapping, it should work without. >>> >>>> # Variables >>>> sequence.openldap-init-vars.030.var-set.value = entryUUID, uid, cn, >>>> givenName, sn, Email >>>> sequence.openldap-init-vars.040.var-set.value = >>>> (objectClass=posixAccount)(uid=*) >>>> sequence.openldap-init-vars.050.var-set.value = entryUUID, cn >>>> sequence.openldap-init-vars.060.var-set.value = (objectClass=posixGroup) >>>> sequence.openldap-init-vars.070.var-set.value = memberUid >>> why have you added these? maybe you have rfc2307 compatible schema? >>> >>>> On 06/15/2015 03:07 PM, Alon Bar-Lev wrote: >>>>> This probably state that you do not use the correct driver. >>>>> >>>>> You did not mention what LDAP server do you use, and you pasted only >>>>> partial profile. >>>>> >>>>> ----- Original Message ----- >>>>>> From: "Zach La Celle" <lacelle(a)roboticresearch.com> >>>>>> To: users(a)ovirt.org >>>>>> Sent: Monday, June 15, 2015 10:04:47 PM >>>>>> Subject: [ovirt-users] Adding users through LDAP fails on "external_id" >>>>>> >>>>>> Hello, >>>>>> >>>>>> We have a small oVirt cluster set up, and are trying to get it >>>>>> integrated with our LDAP server. >>>>>> >>>>>> I've changed some configuration values in order to try and make it >>>>>> function, and it seems to communicate correctly with the LDAP server. >>>>>> However, when trying to add the user, I get the following error upon SQL >>>>>> entry add: >>>>>> >>>>>> 2015-06-15 14:44:49,439 ERROR >>>>>> [org.ovirt.engine.core.bll.aaa.AddUserCommand] (ajp--127.0.0.1-8702-6) >>>>>> [3b15cbfe] Command org.ovirt.engine.core.bll.aaa.AddUserCommand throw >>>>>> exception: org.springframework.da\ >>>>>> o.DataIntegrityViolationException: CallableStatementCallback; SQL [{call >>>>>> insertuser(?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)}]; ERROR: null >>>>>> value in column "external_id" violates not-null constraint >>>>>> Where: SQL statement "INSERT INTO users(department, domain, email, >>>>>> groups, name, note, role, active, surname, user_id, username, group_ids, >>>>>> external_id,namespace) VALUES( $1 , $2 , $3 , $4 , $5 , $\ >>>>>> 6 , $7 , $8 , $9 , $10 , $11 , $12 , $13 , $14 )" >>>>>> PL/pgSQL function "insertuser" line 2 at SQL statement; nested exception >>>>>> is org.postgresql.util.PSQLException: ERROR: null value in column >>>>>> "external_id" violates not-null constraint >>>>>> Where: SQL statement "INSERT INTO users(department, domain, email, >>>>>> groups, name, note, role, active, surname, user_id, username, group_ids, >>>>>> external_id,namespace) VALUES( $1 , $2 , $3 , $4 , $5 , $\ >>>>>> 6 , $7 , $8 , $9 , $10 , $11 , $12 , $13 , $14 )" >>>>>> >>>>>> I can't figure out what maps from the LDAP user to "external_id" for the >>>>>> SQL table entry. >>>>>> >>>>>> Here are the changes I made to profile1.properties: >>>>>> >>>>>> #Mapping changes >>>>>> attrmap.map-principal-record.attr.PrincipalRecord_DISPLAY_NAME.map = cn >>>>>> attrmap.map-principal-record.attr.PrincipalRecord_EMAIL.map = Email >>>>>> attrmap.map-group-record.attr.GroupRecord_DISPLAY_NAME.map = cn >>>>>> >>>>>> #LDAP value changes >>>>>> sequence.openldap-init-vars.030.var-set.value = entryUUID, uid, cn, >>>>>> givenName, sn, Email >>>>>> sequence.openldap-init-vars.040.var-set.value = >>>>>> (objectClass=posixAccount)(uid=*) >>>>>> sequence.openldap-init-vars.050.var-set.value = entryUUID, cn >>>>>> sequence.openldap-init-vars.060.var-set.value = (objectClass=posixGroup) >>>>>> sequence.openldap-init-vars.070.var-set.value = memberUid >>>>>> >>>>>> Any help is appreciated! >>>>>> _______________________________________________ >>>>>> Users mailing list >>>>>> Users(a)ovirt.org >>>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>>> >>

2 3