- Users - oVirt List Archives

[Users] Cloud-init for Windows
by Tejesh M 08 Apr '14

08 Apr '14

Hi All, I was doing google to see if i can set Hostname,Password & IP details for Windows server from RHEV-M. I got to know that we can create VM Payload & send that to Windows VM (installed with Cloud-init) Refer this link http://www.cloudbase.it/cloud-init-for-windows-instances/#comment-9411 Cloud-init expects Meta-data & User-Data file to be sent either via Config Drive or via HTTP. I'm trying to achive this via ConfigDrive (created using VM Payload). But i'm wondering what should be the format of this two files (Meta-data & User-data). Have any1 tried this? If yes, would request to share sample for both the files with setting Hostname, Password & IP details. Java code: org.ovirt.engine.sdk.decorators.VM vm1 = api.getVMs().get(vmName); Payloads payloads = new Payloads(); Payload payload = new Payload(); payload.setType("cdrom"); Files payloadFiles = new Files(); File payloadFile = new File(); payloadFile.setName("meta-data.txt"); payloadFile.setContent("hostname:"+vmName); payloadFiles.getFiles().add(payloadFile); payload.setFiles(payloadFiles); vm1.setPayloads(payloads); Action action = new Action(); vm1.start(action); -- Thanks & Regards Tejesh

3 8

[Users] Invitation
by Koen Vanoppen 08 Apr '14

08 Apr '14

Dear All, I invite everybody to add test cases to the following page: http://www.ovirt.org/Testing-acceptance Test cases are used to test the stability of ovirt in a production environment. Kind regards, Koen

2 1

[Users] Get involved in oVirt integration! April edition
by Sandro Bonazzola 08 Apr '14

08 Apr '14

Hi, have you got some free time and do you want to get involved in oVirt integration? After the success of first edition we're now proposing this again. Here are a couple of bugs you can hopefully fix in less that one day or you can just try to reproduce providing info: Bug 1080823 - [RFE] make override of iptables configurable when using hosted-engine Bug 1073965 - iptables rules are not applied at the end of all-in-one installation Bug 1065350 - hosted-engine should prompt a question at the user when the host was already a host in the engine Is this the first time you try to contribute to oVirt project? You can start from here [1][2]! [1] http://www.ovirt.org/Develop [2] http://www.ovirt.org/Working_with_oVirt_Gerrit -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

Re: [Users] Single Sign On in guest Windows 7 and XP
by Vinzenz Feenstra 08 Apr '14

08 Apr '14

On 04/03/2014 01:38 PM, lof yer wrote: > Here's mine. > > Thanks. > > > 2014-04-03 18:54 GMT+08:00 Vinzenz Feenstra <vfeenstr(a)redhat.com > <mailto:vfeenstr@redhat.com>>: > > On 04/03/2014 12:33 PM, lof yer wrote: >> It seems not work for me... > Seems like that you found a bug. I will investigate. Just for > correlation, could you please send me your vdsm.log from the > hypervisor and the engine.log and server.log from the engine host? > OK I think I know what's the problem. In the application list must be the application name and version of the guest agent, and I think that's not reported. I have to figure out how to solve this properly. There's a work around though. At least for now please import the attached reg file, that should give you at least for now a working SSO. > > Thanks > >> >> >> 2014-04-03 18:10 GMT+08:00 lof yer <lofyer(a)gmail.com >> <mailto:lofyer@gmail.com>>: >> >> I will re-compile the ovirtguestagent and tell you the result. >> >> >> 2014-04-03 18:03 GMT+08:00 lof yer <lofyer(a)gmail.com >> <mailto:lofyer@gmail.com>>: >> >> Yes, I make it run after I manually "net start >> ovirtguestservice" and loggout, relogin from the user >> portal. >> >> I am using ovirt-3.4.0-1. >> >> >> 2014-04-03 18:01 GMT+08:00 Vinzenz Feenstra >> <vfeenstr(a)redhat.com <mailto:vfeenstr@redhat.com>>: >> >> On 04/03/2014 11:45 AM, lof yer wrote: >>> Yes, I did use user portal with autologin box >>> cheked. And it didn't work. >> And the guest agent service is running on the guest os? >> >>> >>> By the way, how to use ovirtcredprov.dll in Windows >>> 7 to make it autologin? >> edit the windows-credprov/Register.reg to change the >> name from 'RHEVCredProv.dll" to 'OvirtCredProv.dll' >> Then copy the ovirtcredprov.dll into the >> C:\Windows\system32 folder >> >> And execute the Register.reg as admin so it inserts >> the entries into the registry >> >> After the next reboot you should be able to use the >> autologin. >> >> What version of oVirt are you using? >> >>> >>> >>> 2014-04-03 17:39 GMT+08:00 Vinzenz Feenstra >>> <vfeenstr(a)redhat.com <mailto:vfeenstr@redhat.com>>: >>> >>> On 04/03/2014 10:14 AM, lof yer wrote: >>>> Hi, >>>> I was trying to add GINASSO in XP with >>>> ovirtguestservice started. >>> First of all, please note that with the 8th of >>> April Windows XP is no longer supported by >>> Microsoft. This also means that we won't support >>> Windows XP any longer. >>> http://windows.microsoft.com/en-US/windows/end-support-help >>> >>> >>>> >>>> I did that as GinaSSO/Reame.txt said. >>>> >>>> But I failed to autologin as a domain user. I'd >>>> already add ovirt and guest XP to the >>>> ActiveDirectory. >>>> >>>> What should I do then to make it right? >>> >>> - Did you install also install and start the >>> guest agent service? >>> This is a very basic requirement. From the admin >>> portal you can see that the agent is running >>> when it is reporting the IP of the guest os, and >>> the application list is not empty. >>> >>> - Did you use the user portal for the autologin? >>> The autologin only works via the user portal. >>>> >>>> >>>> _______________________________________________ >>>> Users mailing list >>>> Users(a)ovirt.org <mailto:Users@ovirt.org> >>>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >>> -- >>> Regards, >>> >>> Vinzenz Feenstra | Senior Software Engineer >>> RedHat Engineering Virtualization R & D >>> Phone:+420 532 294 625 <tel:%2B420%20532%20294%20625> >>> IRC: vfeenstr or evilissimo >>> >>> Better technology. Faster innovation. Powered by community collaboration. >>> See how it works atredhat.com <http://redhat.com> >>> >>> >> >> >> -- >> Regards, >> >> Vinzenz Feenstra | Senior Software Engineer >> RedHat Engineering Virtualization R & D >> Phone:+420 532 294 625 <tel:%2B420%20532%20294%20625> >> IRC: vfeenstr or evilissimo >> >> Better technology. Faster innovation. Powered by community collaboration. >> See how it works atredhat.com <http://redhat.com> >> >> >> >> > > > -- > Regards, > > Vinzenz Feenstra | Senior Software Engineer > RedHat Engineering Virtualization R & D > Phone: +420 532 294 625 > IRC: vfeenstr or evilissimo > > Better technology. Faster innovation. Powered by community collaboration. > See how it works atredhat.com <http://redhat.com> > > -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R & D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 1

[Users] Fwd: Upgrading dwh and reports from 3.3.4 to 3.4.0?
by Gianluca Cecchi 08 Apr '14

08 Apr '14

Previously I replied only to Yaniv.... see my progress below ---------- Forwarded message ---------- From: Gianluca Cecchi <gianluca.cecchi(a)gmail.com> Date: Mon, Apr 7, 2014 at 10:14 PM Subject: Re: [Users] Upgrading dwh and reports from 3.3.4 to 3.4.0? To: Yaniv Dary <ydary(a)redhat.com> On Mon, Apr 7, 2014 at 8:26 AM, Yaniv Dary <ydary(a)redhat.com> wrote: > try to add: > # ./js-export.sh --users --output-dir -DmasterPropsSource=/var/lib/ovirt-engine-reports/build-conf > > > Yaniv It didn't work with the same error as before... Searching through as for some reason it wasn't able to find jdbc.properties, I put myself into the directory containing it. So that what it worked was this workflow: [g.cecchi@tekkaman incoming]$ sudo su - [root@tekkaman ~]# mkdir /tmp/js_export/ [root@tekkaman ~]# export masterPropsSource=/var/lib/ovirt-engine-reports/build-conf [root@tekkaman ~]# cd /var/lib/ovirt-engine-reports/build-conf [root@tekkaman build-conf]# /usr/share/jasperreports-server/buildomatic/js-export.sh --users --output-dir /tmp/js_export Using CE setup First resource path:/usr/share/jasperreports-server/buildomatic/conf_source/ieCe/applicationContext-cascade.xml Started to load resources Resource name: applicationContext.xml Resource name: applicationContext-cascade.xml Resource name: applicationContext-data-snapshots.xml Resource name: applicationContext-events-logging.xml Resource name: applicationContext-export-config.xml Resource name: applicationContext-export-import.xml Resource name: applicationContext-logging.xml Resource name: applicationContext-olap-connection.xml Resource name: applicationContext-report-scheduling.xml Resource name: applicationContext-search.xml Resource name: applicationContext-security.xml Resource name: applicationContext-themes.xml Resource name: applicationContext-virtual-data-source.xml Creating ActionModelService object. Creating action model infrastructure. Exporting user jasperadmin Exporting user anonymousUser Exporting user ovirt-admin Exporting user admin The problems is that I got the export done, but I now have the file /tmp/js_export/users/ovirt-002dadmin.xml and it seems to have the password in encrypted form too... <?xml version="1.0" encoding="UTF-8"?> <user> <username>ovirt-admin</username> <fullName>ovirt-admin</fullName> <password>ENC<3DD74ECD56672B06967EBFC4E74A4394></password> <email></email> <externallyDefined>false</externallyDefined> <enabled>true</enabled> <role>ROLE_USER</role> <role>ROLE_ADMINISTRATOR</role> </user> So the question is how do I edit it or probably simply how to encrypt the password.... Knowing how to encrypt, I probably could only generate the new encrypted value and simply update the filed inside the jiuser table (if it is the only table involved...) But then I tried to modify the string <password>ENC<3DD74ECD56672B06967EBFC4E74A4394></password> into <password>mypassword</password> and run the import 1) the command as suggested refused to update already existing users [root@tekkaman build-conf]# /usr/share/jasperreports-server/buildomatic/js-import.sh --input-dir /tmp/js_export Using CE setup First resource path:/usr/share/jasperreports-server/buildomatic/conf_source/ieCe/applicationContext-cascade.xml Started to load resources Resource name: applicationContext.xml Resource name: applicationContext-cascade.xml Resource name: applicationContext-data-snapshots.xml Resource name: applicationContext-events-logging.xml Resource name: applicationContext-export-config.xml Resource name: applicationContext-export-import.xml Resource name: applicationContext-logging.xml Resource name: applicationContext-olap-connection.xml Resource name: applicationContext-report-scheduling.xml Resource name: applicationContext-search.xml Resource name: applicationContext-security.xml Resource name: applicationContext-themes.xml Resource name: applicationContext-virtual-data-source.xml Creating ActionModelService object. Creating action model infrastructure. User jasperadmin already exists, skipping. User anonymousUser already exists, skipping. User ovirt-admin already exists, skipping. User admin already exists, skipping. 2) So I ran this way with "--update" option: [root@tekkaman build-conf]# /usr/share/jasperreports-server/buildomatic/js-import.sh --update --input-dir /tmp/js_export Using CE setup First resource path:/usr/share/jasperreports-server/buildomatic/conf_source/ieCe/applicationContext-cascade.xml Started to load resources Resource name: applicationContext.xml Resource name: applicationContext-cascade.xml Resource name: applicationContext-data-snapshots.xml Resource name: applicationContext-events-logging.xml Resource name: applicationContext-export-config.xml Resource name: applicationContext-export-import.xml Resource name: applicationContext-logging.xml Resource name: applicationContext-olap-connection.xml Resource name: applicationContext-report-scheduling.xml Resource name: applicationContext-search.xml Resource name: applicationContext-security.xml Resource name: applicationContext-themes.xml Resource name: applicationContext-virtual-data-source.xml Creating ActionModelService object. Creating action model infrastructure. Updated user jasperadmin Updated user anonymousUser Updated user ovirt-admin Updated user admin And I see that in jiuser table actually it is automatically put the encrypted value In fact I'm able to access my Reports Portal with ovirt-admin user again. Though I wasn't able to create a report that in some way could demonstrate that previous data was retained after update from 3.3 to 3.4 Anyway I'm able to experiment again, even if this feature is all but ready for production in my opinion Gianluca

1 0

[Users] Login Error using AD domain
by Jeff Clay 08 Apr '14

08 Apr '14

This was working fine, now I get the error below in engine.log when I try to log in. The clock times are the same. I even changed the time service on the domain controller to use the same NTP source as the engine server. I have rebooted the domain controller to make sure that all settings were applied, but I still get this error. I can log into our other AD domain without issue, the problem is just with this particular domain. 2014-04-07 16:05:07,453 ERROR [org.ovirt.engine.core.bll.adbroker.GSSAPIDirContextAuthenticationStrategy] (ajp--127.0.0.1-8702-7) Kerberos error: Clock skew too great (37) 2014-04-07 16:05:07,454 ERROR [org.ovirt.engine.core.bll.adbroker.GSSAPIDirContextAuthenticationStrategy] (ajp--127.0.0.1-8702-7) Authentication Failed. The Engine clock is not synchronized with directory services (must be within 5 minutes difference). Please verify the clocks are synchronized 2014-04-07 16:05:07,456 ERROR [org.ovirt.engine.core.bll.adbroker.DirectorySearcher] (ajp--127.0.0.1-8702-7) Failed ldap search server ldap://par-dc1:389 using user jclay(a)CORPORATE.WELLSCO.NET due to Authentication Failed. The Engine clock is not synchronized with directory services (must be within 5 minutes difference). Please verify the clocks are synchronized. We should try the next server

2 1

[Users] set domain credentials to be used during sysprep joining an AD domain.
by Jeff Clay 07 Apr '14

07 Apr '14

i'm having trouble finding how set the domain user credentials used when joing a computer to an AD domain using sysprep. i've found where ovirt stores the windows product keys, and the settings in engine-config, but i don't see anything about the domain user credentials. Do I need to replace the domain user variables in sysprep.w7 and statically set them to what I need?

5 8

[Users] CLI Command
by Maurice James 07 Apr '14

07 Apr '14

--_1804bc67-624d-45fa-9403-8da506e03c29_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable what is the command to change the console protocol from vnc to spice via th= e shell? = --_1804bc67-624d-45fa-9403-8da506e03c29_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <style></style></head> <body class=3D'hmmessage'><div dir=3D'ltr'>what is the command to change th= e console protocol from vnc to spice via the shell? </div></body= > </html>= --_1804bc67-624d-45fa-9403-8da506e03c29_--

3 2

[Users] Call for Papers Deadline in One Week: USENIX LISA
by Brian Proffitt 07 Apr '14

07 Apr '14

Conference: USENIX LISA Information: USENIX’s Large Installation System Administration (LISA) conference—now in its 28th year—is the premier meeting place for professionals who make computing work across a variety of industries. If you’re an IT operations professional, site-reliability engineer, system administrator, architect, software engineer, researcher, or otherwise involved in ensuring that IT services are effectively delivered to others Date: November 9-14, 2014 Location: Seattle, Washington Website: https://www.usenix.org/conference/lisa14 Call for Papers Deadline: April 14, 2014 Call for Papers URL: https://www.usenix.org/conference/lisa14/call-for-participation -- Brian Proffitt - oVirt Community Manager Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC

1 0

Re: [Users] Unable to log into user portal with user account
by Jeff Clay 07 Apr '14

07 Apr '14

I added the domain using engine-manage-domains and then I went into the engine admin portal and added the groups I mentioned and assigned those groups to the UserRole for ovirt. I'm not familiar with psql at all, every iteration of running the queries you requested has failed. On Sun, Apr 6, 2014 at 7:27 PM, Yair Zaslavsky <yzaslavs(a)redhat.com> wrote: > Hi, > 1. When you log in to to the admin portal, and check the permissions the > user have, does it have the UserRole? > 2. Can you please provide us the following SQL queries (using psql) > > select user_name, groupIds from users; > > select id,name from ad_groups; > > > 3. In addition - have you manually added your user to oVirt before the > login attempt, or did you just add the mentioned group + gave it > permissions? > > Thanks, > Yair > > > > ----- Original Message ----- > > From: "Jeff Clay" <jeffclay(a)gmail.com> > > To: users(a)ovirt.org > > Sent: Monday, April 7, 2014 3:01:55 AM > > Subject: [Users] Unable to log into user portal with user account > > > > I have attached an AD domain. I can log in to the admin and user portals > > with the credentials used to add the domain. I made a new user on the AD > > for testing. I have added BuiltIn\Users and Domain\Users to the UserRole > in > > Ovirt. When I try to log in to the UserPortal with a regular user > account I > > get the error that the user isn't authorized to perform the action. > > > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/users > > >

3 3