- Users - oVirt List Archives

the better way to update vdsm
by Nathanaël Blanchet 24 Sep '14

24 Sep '14

This is a multi-part message in MIME format. --------------020207020907080505090303 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hi all, I'm about to update to 3.4.4 with the associated vdsm. Updating vdsm with yum is trivial, but it usually breaks running vms on the host. So these are the steps I follow each time: * live migrating runnings vms to a another host in the cluster * putting the host in maintenance * updating vdsm * activating the host * getting back the vms * and so on with the other hosts... But sometimes it is not enough, I need to reinstall the host so as to the host be able to successfully activate. When getting back the vms on the initial host, I must do it manually to load balance vms between the hosts and this is not very convinient. So my question is : do I update in the right way, or is there any recommendations that I didn't find anyway? Thanks. --------------020207020907080505090303 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi all, I'm about to update to 3.4.4 with the associated vdsm. Updating vdsm with yum is trivial, but it usually breaks running vms on the host. So these are the steps I follow each time: <ul> <li>live migrating runnings vms to a another host in the cluster</li> <li>putting the host in maintenance</li> <li>updating vdsm</li> <li>activating the host</li> <li>getting back the vms</li> <li>and so on with the other hosts... </li> </ul> But sometimes it is not enough, I need to reinstall the host so as to the host be able to successfully activate. When getting back the vms on the initial host, I must do it manually to load balance vms between the hosts and this is not very convinient. So my question is : do I update in the right way, or is there any recommendations that I didn't find anyway? Thanks. </body> </html> --------------020207020907080505090303--

3 3

OVIRT-3.5-TEST-DAY-3: Network Custom Properties
by Ido Barkan 24 Sep '14

24 Sep '14

------=_Part_35279276_1362727715.1411380773026 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Hi, Following is a summery of testing the Network custom properties feature as detailed the link at the bottom. setUp: ====== engine: F19 Hosts: F20 (virtual) REHL 6.5 (physical) - in separate clusters Network custom properties: ========================== 1. I have defined a custom property entry via 'engine-config' cli and verified it consisted. * The property was defined with a validation regular expression * note that this requires an engine restart. 2. Added a new network to the DC and set the new property with the new drop-down value of 'custom properties'. - verified that violating the regular expression validation fails the network set up (client side validation). - verified that a legal value is passed to the server using a custom hook at before_network_setup stage. [hook code attached] 3. removed the value from the DB -- verified it is no longer available in the set up networks custom properties drop down. bridge options: =============== 1. changed the bridge options at the OS level (via editing /sys/class/net/<bridge>/bridge/<options>) 2. defined overrides in the logical level using the bridge_opts drop down value (key=value comma separated list) --verified that the values are changed after setting up network 3. removed the logical level settings -- verified that the values are set back to the original ones ethtool options: ================ * note- testing this on a virtual host, or on a virtual NIC on a physical host is pretty useless. For the NIC driver to be capable of actually allowing NIC changes you need a bare metal NIC. 1. installed the vdsm-hook-ethtool-options hook on a physical host 2. set up network with the following ethtool command line arguments added: "-s eth1 speed 100 autoneg off" -- verified using ethtool that changes took place 3. set up network with the following ethtool command line arguments added: "-s eth1 autoneg on" -- verified using ethtool that changes took place feature page: http://www.ovirt.org/Features/Network_Custom_Properties Thanks, Ido ------=_Part_35279276_1362727715.1411380773026 Content-Type: text/x-python; name=print_hostonly.py Content-Disposition: attachment; filename=print_hostonly.py Content-Transfer-Encoding: base64 IyEvdXNyL2Jpbi9weXRob24KaW1wb3J0IG9zCmltcG9ydCBob29raW5nCgoKZGVmIG1haW4oKToK ICAgIHNldHVwX25ldHNfY29uZmlnID0gaG9va2luZy5yZWFkX2pzb24oKQogICAgaG9va2luZy5s b2coJ2tleXM6Jysgc3RyKHNldHVwX25ldHNfY29uZmlnLmtleXMoKSkpCiAgICBmb3IgbmV0d29y aywgYXR0cnMgaW4gc2V0dXBfbmV0c19jb25maWdbJ3JlcXVlc3QnXVsnbmV0d29ya3MnXS5pdGVt cygpOgogICAgICAgIGlmICdjdXN0b20nIGluIGF0dHJzIGFuZCAnaG9zdG9ubHknIGluIGF0dHJz WydjdXN0b20nXToKICAgICAgICAgICAgdmFsdWUgPSBhdHRyc1snY3VzdG9tJ11bJ2hvc3Rvbmx5 J10KICAgICAgICBlbHNlOgogICAgICAgICAgICB2YWx1ZSA9ICdub3QgZm91bmQnCiAgICAgICAg aG9va2luZy5sb2coJ1RFU1RJTkc6IHswfScuZm9ybWF0KHZhbHVlKSkKCmlmIF9fbmFtZV9fID09 ICdfX21haW5fXyc6CiAgICBtYWluKCk= ------=_Part_35279276_1362727715.1411380773026--

2 1

oVirt mirror health report
by Jiri Belka 24 Sep '14

24 Sep '14

Hi, oVirt mirrors are not really great, could you consider to make a health status reporting - out of sync, broken,...? This way you could remove bogus mirrors which would just make people upset. Inspiration: http://spacehopper.org/mirmon/ j.

2 2

Can not configure with simple LDAP.
by Fumihide Tani 24 Sep '14

24 Sep '14

Hello, I'm running oVirt Engine, OpenLDAP and BIND on same machine. and running oVirt host (hypervisor) on another machine. I tried to configure OpenLDAP using ovirt-engine-extension-aaa-ldap, but No LDAP users can search and add from Web Admin Portal. CentOS release 6.5 (Final) ovirt-engine.noarch 3.5.0-0.0.master.20140821064931.gitb794d66.el6 ovirt-engine-extension-aaa-ldap.noarch 0.0.0-0.0.master.20140904095149.gitc7bd415.el6 openldap-clients.x86_64 2.4.23-34.el6_5.1 openldap-servers.x86_64 2.4.23-34.el6_5.1 cyrus-sasl-gssapi.x86_64 2.1.23-13.el6_3.1 bind.x86_64 32:9.8.2-0.23.rc1.el6_5.1 My setup procedures: ------------------------------------------------------------------------------- # yum -y install openldap-servers openldap-clients # yum -y install cyrus-sasl-gssapi ------------------------------------------------------------------------------- # rm -rf /etc/openldap/slapd.d # rm -rf /var/lib/ldap/* ------------------------------------------------------------------------------- (Copy slapd.conf template) # cp /usr/share/openldap-servers/slapd.conf.obsolete /etc/openldap/slapd.conf ------------------------------------------------------------------------------- # vi /etc/openldap/slapd.conf ....(snip).... # remove comment out moduleload memberof.la ....(snip).... # modify value by dn.exact="cn=Manager,dc=rxc05271,dc=com" read ....(snip).... # add next two lines right under "database definitions" authz-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth" "cn=Manager,dc=rxc05271,dc=com" ....(snip).... # modify value suffix "dc=rxc05271,dc=com" ....(snip).... # modify value rootdn "cn=Manager,dc=rxc05271,dc=com" ....(snip).... # remove comment out rootpw secret ....(snip).... # add next line to end of the file overlay memberof loglevel 4 ------------------------------------------------------------------------------- (Enabling SSL/TLS) # vi /etc/sysconfig/ldap SLAPD_LDAPS=yes ------------------------------------------------------------------------------- (Enabling OpenLDAP log output) # echo "local4.* /var/log/ldap.log" > /etc/rsyslog.d/ldaplog.conf # service rsyslog restart ------------------------------------------------------------------------------- # service slapd start # chkconfig slapd on ------------------------------------------------------------------------------- # vi ldapconfig.ldif dn: dc=rxc05271,dc=com objectClass: dcObject objectClass: organization dc: rxc05271 o: RXC05271 dn: ou=Groups,dc=rxc05271,dc=com objectclass: organizationalUnit ou: Groups dn: ou=Users,dc=rxc05271,dc=com objectclass: organizationalUnit ou: Users dn: uid=tani,ou=Users,dc=rxc05271,dc=com objectclass: inetOrgPerson objectclass: uidObject uid: tani cn: Tani givenName: Fumihide mail: tani(a)rxc05271.com sn: 0 dn: cn=Power-Users,ou=Groups,dc=rxc05271,dc=com objectclass: groupOfNames cn: Power-Users member: uid=tani,ou=Users,dc=rxc05271,dc=com ------------------------------------------------------------------------------- # ldapadd -x -D "cn=Manager,dc=rxc05271,dc=com" -w secret -f ldapconfig.ldif ------------------------------------------------------------------------------- # vi setsasl.ldif replace: olcSaslSecProps olcSaslSecProps: noanonymous,noplain,minssf=1 - ------------------------------------------------------------------------------- # ldapmodify -x -D "cn=Manager,dc=rxc05271,dc=com" -w secret -f setsasl.ldif ------------------------------------------------------------------------------- # ldapsearch -LL -Y EXTERNAL -H ldapi:/// "(uid=tani)" -b dc=rxc05271,dc=com memberOf SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 version: 1 dn: uid=tani,ou=Users,dc=rxc05271,dc=com memberOf: cn=Power-Users,ou=Groups,dc=rxc05271,dc=com ------------------------------------------------------------------------------- # yum install ovirt-engine-extension-aaa-ldap ------------------------------------------------------------------------------- # vi /etc/ovirt-engine/extensions.d/authn-company.properties ovirt.engine.extension.name = authn-company ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = rxc05271.com ovirt.engine.aaa.authn.authz.plugin = authz-company config.profile.file.1 = /etc/ovirt-engine/aaa/rxc05271.properties ------------------------------------------------------------------------------- # vi /etc/ovirt-engine/aaa/rxc05271.properties include = <openldap.properties> vars.user = cn=Manager,dc=rxc05271,dc=com vars.password = 12345678 vars.server = ldap.rxc05271.com pool.default.ssl.startTLS = true pool.default.ssl.truststore.file = /etc/openldap/certs/ldap.jks pool.default.ssl.truststore.password = 12345678 pool.default.serverset.single.server = ${global:vars.server} pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} ------------------------------------------------------------------------------- (Add DNS records) # vi /var/named/rxc05271.com.db (snip) ldap IN A 192.168.0.5 _ldap._tcp.rxc05271.com. IN SRV 10 0 389 ovirt.rxc05271.com. # vi /var/named/0.168.192.in-addr.arpa.db (snip) 5 IN PTR ldap.rxc05271.com. # service named restart ------------------------------------------------------------------------------- # service ovirt-engine restart ------------------------------------------------------------------------------- (ldap.log outputs after ovirt-engine restart) [root@ovirt ~]# cat /var/log/ldap.log Sep 21 14:33:20 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:20 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(18) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(19) Sep 21 14:33:25 ovirt slapd[19276]: ==> bdb_bind: dn: cn=Manager,dc=rxc05271,dc=com Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: connection_get(15) Sep 21 14:33:25 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:25 ovirt slapd[19276]: 1 0 0 Sep 21 14:33:25 ovirt slapd[19276]: filter: (objectClass=*) Sep 21 14:33:25 ovirt slapd[19276]: attrs: Sep 21 14:33:25 ovirt slapd[19276]: * Sep 21 14:33:25 ovirt slapd[19276]: + Sep 21 14:33:25 ovirt slapd[19276]: altServer Sep 21 14:33:25 ovirt slapd[19276]: changelog Sep 21 14:33:25 ovirt slapd[19276]: firstChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: lastChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: lastPurgedChangeNumber Sep 21 14:33:25 ovirt slapd[19276]: namingContexts Sep 21 14:33:25 ovirt slapd[19276]: subschemaSubentry Sep 21 14:33:25 ovirt slapd[19276]: supportedAuthPasswordSchemes Sep 21 14:33:25 ovirt slapd[19276]: supportedControl Sep 21 14:33:25 ovirt slapd[19276]: supportedExtension Sep 21 14:33:25 ovirt slapd[19276]: supportedFeatures Sep 21 14:33:25 ovirt slapd[19276]: supportedLDAPVersion Sep 21 14:33:25 ovirt slapd[19276]: supportedSASLMechanisms Sep 21 14:33:25 ovirt slapd[19276]: vendorName Sep 21 14:33:25 ovirt slapd[19276]: vendorVersion Sep 21 14:33:25 ovirt slapd[19276]: Sep 21 14:33:25 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:25 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:25 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(21) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(22) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: do_extended: oid=1.3.6.1.4.1.1466.20037 Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(23) Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(20) Sep 21 14:33:26 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:26 ovirt slapd[19276]: 1 0 0 Sep 21 14:33:26 ovirt slapd[19276]: filter: (objectClass=*) Sep 21 14:33:26 ovirt slapd[19276]: attrs: Sep 21 14:33:26 ovirt slapd[19276]: * Sep 21 14:33:26 ovirt slapd[19276]: + Sep 21 14:33:26 ovirt slapd[19276]: altServer Sep 21 14:33:26 ovirt slapd[19276]: changelog Sep 21 14:33:26 ovirt slapd[19276]: firstChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: lastChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: lastPurgedChangeNumber Sep 21 14:33:26 ovirt slapd[19276]: namingContexts Sep 21 14:33:26 ovirt slapd[19276]: subschemaSubentry Sep 21 14:33:26 ovirt slapd[19276]: supportedAuthPasswordSchemes Sep 21 14:33:26 ovirt slapd[19276]: supportedControl Sep 21 14:33:26 ovirt slapd[19276]: supportedExtension Sep 21 14:33:26 ovirt slapd[19276]: supportedFeatures Sep 21 14:33:26 ovirt slapd[19276]: supportedLDAPVersion Sep 21 14:33:26 ovirt slapd[19276]: supportedSASLMechanisms Sep 21 14:33:26 ovirt slapd[19276]: vendorName Sep 21 14:33:26 ovirt slapd[19276]: vendorVersion Sep 21 14:33:26 ovirt slapd[19276]: Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" Sep 21 14:33:26 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:26 ovirt slapd[19276]: connection_get(17) Sep 21 14:33:26 ovirt slapd[19276]: SRCH "" 0 0 Sep 21 14:33:26 ovirt slapd[19276]: 0 0 0 Sep 21 14:33:26 ovirt slapd[19276]: filter: (&(objectClass=*)) Sep 21 14:33:26 ovirt slapd[19276]: attrs: Sep 21 14:33:26 ovirt slapd[19276]: namingContexts Sep 21 14:33:26 ovirt slapd[19276]: Sep 21 14:33:26 ovirt slapd[19276]: send_ldap_result: err=0 matched="" text="" ------------------------------------------------------------------------------- (engine.log outputs after ovirt-engine restart) # cat /var/log/ovirt-engine/engine.log | grep extensions 2014-09-21 14:33:25,591 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-15) Creating LDAP pool 'authz' for 'authn-company' 2014-09-21 14:33:25,962 INFO [org.ovirt.engineextensions.aaa.ldap.Framework] (MSC service thread 1-15) Creating LDAP pool 'authn' for 'authn-company' 2014-09-21 14:33:26,195 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Start of enabled extensions list 2014-09-21 14:33:26,196 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'builtin-authn-internal', Extension name: 'Internal Authn (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-09-21 14:33:26,196 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'authn-company', Extension name: 'aaa.ldap.authn', Version: '0.0.0_master', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-0.0.0-0.0.master.20140904095149.gitc7bd415.el6', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/ovirt-engine/extensions.d/authn-company.properties', Initialized: 'true' 2014-09-21 14:33:26,197 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) Instance name: 'internal', Extension name: 'Internal Authz (Built-in)', Version: 'N/A', Notes: '', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: 'N/A', Initialized: 'true' 2014-09-21 14:33:26,197 INFO [org.ovirt.engine.core.extensions.mgr.ExtensionsManager] (MSC service thread 1-15) End of enabled extensions list ------------------------------------------------------------------------------- I could not find out any erros in engine.log as well as ldap.log. And I can not search add ldap users from Web Admin Portal. Click "Users" tab, then click "Add". I can select "internal (internal)" only on [Add Users and Groups] in "Search" field. I do not know where the cause is. I'm missing another settings required? Thanks, Fumihide Tani

2 19

Problem Refreshing/Using ovirt-image-repository / 3.5 RC2
by InterNetX - Juergen Gotteswinter 24 Sep '14

24 Sep '14

Hi, when trying to refresh the ovirt glance repository i get a 500 Error Message Operation Canceled Error while executing action: A Request to the Server failed with the following Status Code: 500 engine.log says: 2014-09-23 09:23:08,960 INFO [org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand] (ajp--127.0.0.1-8702-10) [7fffb4bd] Running command: TestProviderConnectivityCommand internal: false. Entities affected : ID: aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_STORAGE_POOL with role type ADMIN 2014-09-23 09:23:08,975 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-10) [7fffb4bd] Correlation ID: 7fffb4bd, Call Stack: null, Custom Event ID: -1, Message: Unrecognized audit log type has been used. 2014-09-23 09:23:20,173 INFO [org.ovirt.engine.core.bll.aaa.LogoutUserCommand] (ajp--127.0.0.1-8702-11) [712895c3] Running command: LogoutUserCommand internal: false. 2014-09-23 09:23:20,184 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-11) [712895c3] Correlation ID: 712895c3, Call Stack: null, Custom Event ID: -1, Message: User admin logged out. 2014-09-23 09:23:20,262 INFO [org.ovirt.engine.core.bll.aaa.LoginAdminUserCommand] (ajp--127.0.0.1-8702-6) Running command: LoginAdminUserCommand internal: false. anyone got an idea what is causing this? Same Network Location, Ovirt 3.4, the Repository works like expected. We also tried to start from scratch, after a engine-cleanup the error still occours. Cheers, Juergen

3 5

Re: [ovirt-users] overt viewer on mac osx
by Karli Sjöberg 24 Sep '14

24 Sep '14

Bill, remember to keep users list when replying. On Wed, 2014-09-24 at 10:16 +0000, Bill Dossett wrote: > ahhh… thanks! 2 minutes was the problem… I tried associating .vv > files with the RemoteView application, but that doesn’t work, just > brings up the remote viewer app as though it hadn’t been given a > console.vv file to configure it… any other way of doing this other > than going to a terminal and starting it? Right, it´s been explained to me in the past: http://lists.ovirt.org/pipermail/users/2014-January/019963.html @Christophe Has there been any updates to this? A newer version perhaps? /K > > > Thanks again! > > Bill Dossett > Virtualisation Architect > Pitney Bowes – Tech Central > 6 Hercules Way, 600 Leavesden Park > Watford, WD25 7GS > Phone (+44) (0)1923 279353 | VOIP: 54739353 > Mobile (+44) (0)7775 908612 > bill.dossett(a)pb.com > www.pb.com > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] takes less > than a minute > > ManageIQ User Guide available [HERE] > > Check out the ManageIQ Blog for recent enhancements and > information [HERE] > > On Sep 24, 2014, at 10:58 AM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> > wrote: > > > On Wed, 2014-09-24 at 09:28 +0000, Bill Dossett wrote: > > > Hi Karli, > > > > > > > > > I am on oVirt Engine Version 3.4.3-1.el6 is that what you mean? > > > > Yepp, that´s what I meant. Well, it´s working for us, though we´re > > still > > running 3.4.1 so that may have changed in later releases? > > > > FYI, the "authentication" that remote-viewer is referring to is the > > "ticket" (random gibberish - not the "engine" password) that > > ovirt-engine generates every time you press for console. That ticket > > has > > a 2 min timeout, so if you download a console.vv and wait more than > > that, the ticket will experired, and you´d have to download a new > > file > > for the authentication to work. Makes sense? > > > > /K > > > > > > > > > > > thanks > > > > > > Bill Dossett > > > Virtualisation Architect > > > Pitney Bowes – Tech Central > > > 6 Hercules Way, 600 Leavesden Park > > > Watford, WD25 7GS > > > Phone (+44) (0)1923 279353 | VOIP: 54739353 > > > Mobile (+44) (0)7775 908612 > > > bill.dossett(a)pb.com > > > www.pb.com > > > > > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] takes > > > less > > > than a minute > > > > > > ManageIQ User Guide available [HERE] > > > > > > Check out the ManageIQ Blog for recent enhancements and > > > information [HERE] > > > > > > On Sep 24, 2014, at 10:11 AM, Karli Sjöberg <Karli.Sjoberg(a)slu.se> > > > wrote: > > > > > > > On Wed, 2014-09-24 at 09:07 +0000, Bill Dossett wrote: > > > > > Hi, > > > > > > > > > > > > > > > I got pretty excited when I found out there was a girt-viewer > > > > > for > > > > > mac… if this would work, it means I could manange my ovirt > > > > > stack > > > > > from > > > > > my mac without having to login to my windows VDI. > > > > > > > > > > > > > > > I have downloaded and installed per the instructions - and > > > > > then > > > > > downloaded the console.vv file and run the command line to > > > > > start > > > > > the > > > > > viewer with the console.vv - the first time it popped up and > > > > > then > > > > > said > > > > > that spice needed authentication… tried my virt-engine > > > > > password > > > > > that > > > > > didn’t work, hit cancel and it shut down. Tried it again and > > > > > now > > > > > it > > > > > just says it can’t determine the connection type from uri and > > > > > I > > > > > have > > > > > to quit. > > > > > > > > > > > > > > > I am running OSX 10.9.4 and apparently this has only been > > > > > tested > > > > > on > > > > > 10.9.1… hoping there is a fix to make this work, or am I doing > > > > > something wrong? The command I am using is > > > > > > > > > > > > > > > /Applications/RemoteViewer.app/Contents/MacOS/RemoteViewer > > > > > Downloads/console.vv > > > > > > > > > > and the console.vv is indeed in the Downloads dir off my home > > > > > dir. > > > > > > > > > > > > > > > Thanks > > > > > > > > > > > > > > > > > > > > Bill Dossett > > > > > Virtualisation Architect > > > > > Pitney Bowes – Tech Central > > > > > 6 Hercules Way, 600 Leavesden Park > > > > > Watford, WD25 7GS > > > > > Phone (+44) (0)1923 279353 | VOIP: 54739353 > > > > > Mobile (+44) (0)7775 908612 > > > > > bill.dossett(a)pb.com > > > > > www.pb.com > > > > > > > > > > In Engineering? Raise a ticket via Remedy Anywhere [HERE] > > > > > takes > > > > > less > > > > > than a minute > > > > > > > > > > ManageIQ User Guide available [HERE] > > > > > > > > > > Check out the ManageIQ Blog for recent enhancements and > > > > > information [HERE] > > > > > > > > > > > > > > > > > > > > > > > Hey Bill! > > > > > > > > What oVirt version are you on? > > > > > > > > > > > > > > > > -- > > > > > > > > Med Vänliga Hälsningar > > > > > > > > ------------------------------------------------------------------------------- > > > > Karli Sjöberg > > > > Swedish University of Agricultural Sciences Box 7079 (Visiting > > > > Address > > > > Kronåsvägen 8) > > > > S-750 07 Uppsala, Sweden > > > > Phone: +46-(0)18-67 15 66 > > > > karli.sjoberg(a)slu.se > > > > > > > > > > > > > > > ______________________________________________________________________ > > > > > > > > > > > -- > > > > Med Vänliga Hälsningar > > > > ------------------------------------------------------------------------------- > > Karli Sjöberg > > Swedish University of Agricultural Sciences Box 7079 (Visiting > > Address > > Kronåsvägen 8) > > S-750 07 Uppsala, Sweden > > Phone: +46-(0)18-67 15 66 > > karli.sjoberg(a)slu.se > > > > > ______________________________________________________________________ > -- Med Vänliga Hälsningar ------------------------------------------------------------------------------- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjoberg(a)slu.se

2 1

Re: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO
by Grzegorz Szypa 24 Sep '14

24 Sep '14

Hi. I resolved problem with connection to ovirt via Microsoft AD users, but it's stiil a problem with sign " /" before username. I attach file console.rdp generated for ovirt: and screen from logging in via native rdp first screen after running console.rdp: [image: Obraz w treści 1] and second screen after clicking "Inny użytkownik": [image: Obraz w treści 2] Have you any idea how to fix it 2014-09-24 10:19 GMT+02:00 Frantisek Kobzik <fkobzik(a)redhat.com>: > Hello, > > I don't know windows so much, but according to this [1], you can use both > formats of username. Could you try logging on manually with both formats? > > Cheers! > F. > > [1]: > http://msdn.microsoft.com/en-us/library/windows/desktop/aa380525(v=vs.85).a… > > > ----- Original Message ----- > From: "Grzegorz Szypa" <grzegorz.szypa(a)gmail.com> > To: "Frantisek Kobzik" <fkobzik(a)redhat.com> > Sent: Tuesday, September 23, 2014 3:48:34 PM > Subject: Re: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO > > Hi. > > In native rdp is still same. But I think it happens because, like this: > > user@domine, example admin@internal user is treated as a user, so if I was > logged in as a user ovirt(a)szypa.net example, where the domain is szypa.net > it probably should log in as szypa.net/ovirt me, but I'm not sure. > > But not proof, it now because I have the problem described in this thread: > [ovirt 3.4.3] No KDC can be obtained for domain... after using engine-man > age-domains edit > > > 2014-09-23 12:45 GMT+02:00 Frantisek Kobzik <fkobzik(a)redhat.com>: > > > Hi, > > > > Could you please switch to 'Native' invocation in 'Console options' and > > inspect generated .rdp file? Focus on a line that starts with > > "username:s:". What value does it contain? > > > > Also, make sure you don't reload the webpage (e.g. F5) prior to > connecting > > to the machine - SSO wouldn't work in this case. > > > > Cheers! > > F. > > > > > > ----- Original Message ----- > > From: "Grzegorz Szypa" <grzegorz.szypa(a)gmail.com> > > To: users(a)ovirt.org > > Sent: Sunday, September 21, 2014 10:08:09 PM > > Subject: [ovirt-users] [oVirt 3.4.3] RDP Browser plug-in - SSO > > > > Hi. > > > > I have a little problem with log-in to Windows VMs via SSO. When connect > > to VM in username filed i get a example text "/user@domain" What going > on > > wit this sign " / " > > > > -- > > G.Sz. > > > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > > > > > -- > G.Sz. > -- G.Sz.

1 0

[ovirt 3.4.3] No KDC can be obtained for domain... after using engine-manage-domains edit
by Grzegorz Szypa 24 Sep '14

24 Sep '14

Hi. I have a problem with losting connetction to Windows Active Directory. Normaly I connect ovirt with AD like this: "engine-manage-domains add --domain=szypa.net --provider=ad --user=ovirt --add-permissions" After period time, example when i restart ovirt, connection is lost becouse i cannot add new user created in AD, so i thinking that i refresh conf. connection to ad: "engine-manage-domains edit --domain=szypa.net --provider=ad --user=ovirt --add-permissions" and i get this error: No KDC can be obtained for domain szypa.net have any idea? I read that this problem is resolved in previous ovirt version -- G.Sz.

2 6

[ANN] oVirt 3.5.0 Third Release Candidate is now available for testing
by Sandro Bonazzola 24 Sep '14

24 Sep '14

The oVirt team is pleased to announce that the 3.5.0 Third Release Candidate is now available for testing as of Sep 24th 2014. The release candidate is available now for Fedora 19, Fedora 20 and Red Hat Enterprise Linux 6.5 (or similar) and allow you to use Red Hat Enterprise Linux 7 as node and run Hosted Engine. This release of oVirt includes numerous bug fixes. See the release notes [1] for a list of the new features and bugs fixed. The existing repository ovirt-3.5-pre has been updated for delivering this release without the need of enabling any other repository. If you're already using oVirt 3.5 repository, please update ovirt-release35 rpm. Please refer to release notes [1] for Installation / Upgrade instructions. New oVirt Live, oVirt Guest Tools and oVirt Node ISO will be available soon as well[2]. Please note that mirrors may need usually one day before being synchronized. If you want to be sure to use latest rpms and don't want to wait for the mirrors, you can edit /etc/yum.repos.d/ovirt-3.5.repo commenting the mirror line and removing the comment on baseurl line. Please refer to the release notes for known issues in this release. [1] http://www.ovirt.org/OVirt_3.5_Release_Notes [2] http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

sysprep answers
by Bill Dossett 24 Sep '14

24 Sep '14

--_000_B47F00825D68444ABC0373307827536037164F60013BR1MPN1012MG_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, I've managed to get my first templates ready to go.... But I am lacking a d= ocument that explains how I can add the VMs to my domain. I have sealed th= e template but the ovirt docs seem to stop there and the redhat ones talk a= bout using rhevm-config commands. I have found the place to set time zone and enter a domain if I edit the te= mplate, however to add a computer to our domain we need to use a special ac= count and I don't see any way of specifying this. Any help or further reading would be appreciated Thanks Bill Dossett Virtualisation Architect Pitney Bowes - Tech Central 6 Hercules Way, 600 Leavesden Park Watford, WD25 7GS Phone (+44) (0)1923 279353 | VOIP: 54739353 Mobile (+44) (0)7775 908612 bill.dossett(a)pb.com<mailto:bill.dossett@pb.com> www.pb.com<http://www.pb.com/> In Engineering? Raise a ticket via Remedy Anywhere [HERE<http://teamsite.in= side.pb.com/sites/TCPPM/GES/Lists/Create%20Incident/newIncident.aspx>] take= s less than a minute ManageIQ User Guide available [HERE<https://dl.dropbox.com/u/6219441/Manage= IQ%20-%20User%20Manual%20PB%20v4.pdf>] Check out the ManageIQ Blog for recent enhancements and information [HERE]<= http://teamsite.inside.pb.com/sites/TCPPM/GES/manageiq/default.aspx> ________________________________ --_000_B47F00825D68444ABC0373307827536037164F60013BR1MPN1012MG_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"EN-GB" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hi,<o:p></o:p> <o:p> </o:p> I’ve managed to get my first templates ready t= o go…. But I am lacking a document that explains how I can add the VM= s to my domain.  I have sealed the template but the ovirt docs seem to= stop there and the redhat ones talk about using rhevm-config commands.<o:p></o:p> <o:p> </o:p> I have found the place to set time zone and enter a = domain if I edit the template, however to add a computer to our domain we n= eed to use a special account and I don’t see any way of specifying th= is.<o:p></o:p> <o:p> </o:p> Any help or further reading would be appreciated<o:p= ></o:p> <o:p> </o:p> Thanks<o:p></o:p> <o:p> </o:p> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0" style=3D"border-collapse:collapse"> <tbody> <tr> <td width=3D"596" style=3D"width:447.0pt;padding:0cm 0cm 0cm 0cm"> Bill Dossett<o:p></o= :p> Virtualisation Archi= tect<o:p><= /o:p> </td> </tr> <tr> <td width=3D"596" style=3D"width:447.0pt;padding:0cm 0cm 0cm 0cm"> Pitney Bowes –= Tech Central<o:p></o:p> 6 Hercules Way, 600 Lea= vesden Park<o:p></o:p> Watford, WD25 7GS</span= ><o:p></o:p> </td> </tr> <tr> <td width=3D"596" style=3D"width:447.0pt;padding:0cm 0cm 0cm 0cm"> Phone (+44) (0)1923= 279353 | VOIP: 54739353<o:p></o:p> Mobile (+44) (0)7775= 908612<o:p></o:p= > </td> </tr> <tr> <td width=3D"596" style=3D"width:447.0pt;padding:0cm 0cm 0cm 0cm"> <a href=3D"mailto:bill.= dossett(a)pb.com">bill.dossett(a)pb.com</a></= span><o:p></o:p><= /p> <a href=3D"http://www.p= b.com/">www.pb.com</a> <o:p></o:p> <o:p> </o:p></span= > In Engineering?<span= style=3D"font-size:10.0pt;font-family:"Verdana","sans-serif= ";mso-fareast-language:EN-GB"> Raise a ticket via Remedy Anywhere [<a href=3D"http://teamsite.inside.pb= .com/sites/TCPPM/GES/Lists/Create%20Incident/newIncident.aspx">HERE</a>] takes less than a minute</spa= n><o:p></o:p></p= > </td> </tr> </tbody> </table> <o:p> </o:p> ManageIQ = User Guide available [<b= ><a href=3D"https://dl.dropbox.com/u/6219441/ManageIQ%20-%20User%20Manual%2= 0PB%20v4.pdf">HERE</a>]<o:p></o:p></s= pan> <o:p>&nbs= p;</o:p> Check out= the ManageIQ Blog for recent enhancements and information <a href=3D"http://teamsite.inside.pb.com/sites/TCPPM/GES/manageiq/default.a= spx">[HERE]</a><o:p></o:p> <o:p> </o:p> <o:p> </o:p> </div> <hr> </body> </html> --_000_B47F00825D68444ABC0373307827536037164F60013BR1MPN1012MG_--

2 2