- Users - oVirt List Archives

[Users] External authentication
by Maurice James 06 Dec '13

06 Dec '13

------=_NextPart_000_0003_01CEF1F6.79F018B0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Does anyone know how to get external authentication to 389-ds "without" Kerberos support. I am quite happy with LDAPS and would prefer not to introduce more complexity. Thanks ------=_NextPart_000_0003_01CEF1F6.79F018B0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" = xmlns=3D"http://www.w3.org/TR/REC-html40"><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 15 = (filtered medium)"><style></style></head><body lang=3DEN-US = link=3D"#0563C1" vlink=3D"#954F72"><div class=3DWordSection1>Does anyone know how to get external authentication to = 389-ds “without” Kerberos support. I am quite happy with = LDAPS and would prefer not to introduce more = complexity.<o:p></o:p><o:p> </o:p><o:p> </o:p><o:p> </o:p>Thanks<o:p></o:p></div></body></html> ------=_NextPart_000_0003_01CEF1F6.79F018B0--

3 2

Re: [Users] VM with stateless snapshot won't start
by Martijn Grendelman 05 Dec '13

05 Dec '13

Hello Dafna, > If a failure happened and the stateless vm has shut down without delete > of the snapshot, the next time you will try to run it we will try to > delete the snapshot. > from the engine log, it seems that there is a problem deleting the > snapshot because of quota. > can you please try to disable the quota and try to run the vm again? Quota were not enabled on this Data Center, I have never done anything with quota on oVirt. The 'quota' table was empty, and the 'quota_id' field on all VMs in the 'vm_static' table was NULL. Since it was seemingly trying to set the quota_id for this particular VM to '00000000-0000-0000-0000-000000000000', I manually inserted a record into the quota table using this ID. After that, I was able to start te VM. The quota_id field for the VM now contains a reference to this fake id. > Please note that the first time you will run it after disabling the > quota, the snapshot should be deleted but the vm will still not start. > only after the snapshot is deleted you will be able to run the vm again. Indeed, it took two attempts to start the VM. Question: is it harmful to leave the fake quota record with id '00000000-0000-0000-0000-000000000000' and the reference to it in the vm_static table in place? Cheers, Martijn. > > > On 12/05/2013 11:23 AM, Martijn Grendelman wrote: >> Hi, >> >>> After maintenance on a host, I am trying to start a VM that has been >>> running statelessly for a while. It refuses to start and Engine logs the >>> following: >>> >>> 2013-12-05 11:59:18,125 INFO >>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >>> (pool-6-thread-48) Correlation ID: 43d49965, Job ID: >>> 0d943a6d-9d65-4ac1-89b7-139d30b4813c, Call Stack: null, Custom Event ID: >>> -1, Message: Failed to start VM WinXP, because exist snapshot for >>> stateless state. Snapshot will be deleted. >>> >>> Should I submit a bug report for the poor English in this log line? ;-) >>> >>> The 'Snapshots' tab for the VM doesn't show anything, but repeated >>> attempts to start the VM just show the same message in the log. >>> >>> What can I do to start this VM? >> It seems I missed some info in the log that may well indicate the root >> cause of this issue. Please see attached log excerpt. A database query >> is failing due to a foreign key constraint violation. >> >> Please advise how to fix the database inconsistency. >> >> Regards, >> Martijn. >> >> >> >> >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > >

3 3

Re: [Users] VM with stateless snapshot won't start
by Martijn Grendelman 05 Dec '13

05 Dec '13

Gilad Chaplik schreef op 5-12-2013 13:48: > hi Martijn, > > Indeed we have a bug there, and we've already solved it [1]. > As long as you're not using quota, your workaround is great. > If you'll decide to use quota you can contact me and we will see how to proceed. Ok, thanks! I have no plans for using quota ATM. Cheers, Martijn. > [1] http://gerrit.ovirt.org/#/c/21332/ > > ----- Original Message ----- >> From: "Martijn Grendelman" <martijn.grendelman(a)isaac.nl> >> To: dron(a)redhat.com, "Doron Fediuck" <dfediuck(a)redhat.com> >> Cc: users(a)ovirt.org >> Sent: Thursday, December 5, 2013 2:01:44 PM >> Subject: Re: [Users] VM with stateless snapshot won't start >> >> Hello Dafna, >> >>> If a failure happened and the stateless vm has shut down without delete >>> of the snapshot, the next time you will try to run it we will try to >>> delete the snapshot. >>> from the engine log, it seems that there is a problem deleting the >>> snapshot because of quota. >>> can you please try to disable the quota and try to run the vm again? >> >> Quota were not enabled on this Data Center, I have never done anything >> with quota on oVirt. The 'quota' table was empty, and the 'quota_id' >> field on all VMs in the 'vm_static' table was NULL. >> >> Since it was seemingly trying to set the quota_id for this particular VM >> to '00000000-0000-0000-0000-000000000000', I manually inserted a record >> into the quota table using this ID. After that, I was able to start te >> VM. The quota_id field for the VM now contains a reference to this fake id. >> >>> Please note that the first time you will run it after disabling the >>> quota, the snapshot should be deleted but the vm will still not start. >>> only after the snapshot is deleted you will be able to run the vm again. >> >> Indeed, it took two attempts to start the VM. >> >> Question: is it harmful to leave the fake quota record with id >> '00000000-0000-0000-0000-000000000000' and the reference to it in the >> vm_static table in place? >> >> Cheers, >> Martijn. >> >> >> >> >>> >>> >>> On 12/05/2013 11:23 AM, Martijn Grendelman wrote: >>>> Hi, >>>> >>>>> After maintenance on a host, I am trying to start a VM that has been >>>>> running statelessly for a while. It refuses to start and Engine logs the >>>>> following: >>>>> >>>>> 2013-12-05 11:59:18,125 INFO >>>>> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] >>>>> (pool-6-thread-48) Correlation ID: 43d49965, Job ID: >>>>> 0d943a6d-9d65-4ac1-89b7-139d30b4813c, Call Stack: null, Custom Event ID: >>>>> -1, Message: Failed to start VM WinXP, because exist snapshot for >>>>> stateless state. Snapshot will be deleted. >>>>> >>>>> Should I submit a bug report for the poor English in this log line? ;-) >>>>> >>>>> The 'Snapshots' tab for the VM doesn't show anything, but repeated >>>>> attempts to start the VM just show the same message in the log. >>>>> >>>>> What can I do to start this VM? >>>> It seems I missed some info in the log that may well indicate the root >>>> cause of this issue. Please see attached log excerpt. A database query >>>> is failing due to a foreign key constraint violation. >>>> >>>> Please advise how to fix the database inconsistency. >>>> >>>> Regards, >>>> Martijn. >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Users mailing list >>>> Users(a)ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> _______________________________________________ >> Users mailing list >> Users(a)ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >>

1 0

Re: [Users] VM with stateless snapshot won't start
by Martijn Grendelman 05 Dec '13

05 Dec '13

Hi, > After maintenance on a host, I am trying to start a VM that has been > running statelessly for a while. It refuses to start and Engine logs the > following: > > 2013-12-05 11:59:18,125 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (pool-6-thread-48) Correlation ID: 43d49965, Job ID: > 0d943a6d-9d65-4ac1-89b7-139d30b4813c, Call Stack: null, Custom Event ID: > -1, Message: Failed to start VM WinXP, because exist snapshot for > stateless state. Snapshot will be deleted. > > Should I submit a bug report for the poor English in this log line? ;-) > > The 'Snapshots' tab for the VM doesn't show anything, but repeated > attempts to start the VM just show the same message in the log. > > What can I do to start this VM? It seems I missed some info in the log that may well indicate the root cause of this issue. Please see attached log excerpt. A database query is failing due to a foreign key constraint violation. Please advise how to fix the database inconsistency. Regards, Martijn.

2 1

Re: [Users] Failing migration, inconsistent state
by Martijn Grendelman 05 Dec '13

05 Dec '13

Martijn Grendelman schreef op 5-12-2013 11:18: > Martijn Grendelman schreef op 5-12-2013 11:00: >> Hi, >> >> I tried to migrate several VMs from one host to another. Two VMs >> migrated without issues, but for one VM, the migration didn't happen. It >> seems to be hanging, but the UI is now in an inconsistent state: >> >> - The 'Tasks' tab reports 0 active tasks, but the last task (the >> migration in question) is still reported as 'Executing'. >> - The VM status is 'Up' (not migrating) >> - 'Migrate' action is choosable from menu, while 'Cancel Migration' is >> greyed out, but when I choose 'Migrate' and pick a host, I am told >> 'Cannot migrate VM. VM <name> is being migrated.'. >> >> What is the best way to fix this? After a restart of Engine, the message that I got was different, something about no host being available with enough memory (which was correct). So I guess an Engine restart fixed it, even though the initial migration task still shows as unfinished in the Tasks panel. Cheers, Martijn.

1 0

[Users] Failing migration, inconsistent state
by Martijn Grendelman 05 Dec '13

05 Dec '13

Hi, I tried to migrate several VMs from one host to another. Two VMs migrated without issues, but for one VM, the migration didn't happen. It seems to be hanging, but the UI is now in an inconsistent state: - The 'Tasks' tab reports 0 active tasks, but the last task (the migration in question) is still reported as 'Executing'. - The VM status is 'Up' (not migrating) - 'Migrate' action is choosable from menu, while 'Cancel Migration' is greyed out, but when I choose 'Migrate' and pick a host, I am told 'Cannot migrate VM. VM <name> is being migrated.'. What is the best way to fix this? Met vriendelijke groet, Martijn Grendelman

1 0

[Users] Problem with python-cpopen dependency on f19 AIO stable
by Gianluca Cecchi 05 Dec '13

05 Dec '13

Hello, since yesterday evening I have this sort of dependency problem with updates yum update say Resolving Dependencies --> Running transaction check ---> Package python-cpopen.x86_64 0:1.2.3-4.fc19 will be obsoleting ---> Package vdsm-python-cpopen.x86_64 0:4.13.0-11.fc19 will be obsoleted --> Finished Dependency Resolution Dependencies Resolved ============================================================================================================================= Package Arch Version Repository Size ============================================================================================================================= Installing: python-cpopen x86_64 1.2.3-4.fc19 updates 19 k replacing vdsm-python-cpopen.x86_64 4.13.0-11.fc19 Transaction Summary ============================================================================================================================= Install 1 Package If I go ahead and run yum update again I have: Dependencies Resolved ============================================================================================================================= Package Arch Version Repository Size ============================================================================================================================= Installing: vdsm-python-cpopen x86_64 4.13.0-11.fc19 ovirt-stable 20 k replacing python-cpopen.x86_64 1.2.3-4.fc19 Transaction Summary ============================================================================================================================= Install 1 Package and so again in a loop.... Gianluca

2 1

[Users] Host activation removing iscsi sessions
by Juan Pablo Lorier 04 Dec '13

04 Dec '13

This is a multi-part message in MIME format. --------------060401020402070903050401 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Hi, I'm adding two twin nodes to a cluster and I was able to add the first while the second fails as it removes the iscsi sessions and don't bring them back and thus fails with the message : Host Dell4 cannot access one of the Storage Domains attached to the Data Center Default. Setting Host state to Non-Operational. Here is the vdsm.log entries for one activationintent: Thread-20::DEBUG::2013-12-04 09:02:41,760::task::579::TaskManager.Task::(_updateState) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::moving from state init -> state preparing Thread-20::INFO::2013-12-04 09:02:41,760::logUtils::44::dispatcher::(wrapper) Run and protect: repoStats(options=None) Thread-20::INFO::2013-12-04 09:02:41,760::logUtils::47::dispatcher::(wrapper) Run and protect: repoStats, Return response: {} Thread-20::DEBUG::2013-12-04 09:02:41,760::task::1168::TaskManager.Task::(prepare) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::finished: {} Thread-20::DEBUG::2013-12-04 09:02:41,761::task::579::TaskManager.Task::(_updateState) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::moving from state preparing -> state finish ed Thread-20::DEBUG::2013-12-04 09:02:41,761::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-20::DEBUG::2013-12-04 09:02:41,761::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-20::DEBUG::2013-12-04 09:02:41,761::task::974::TaskManager.Task::(_decref) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::ref 0 aborting False Thread-22::DEBUG::2013-12-04 09:02:41,814::BindingXMLRPC::177::vds::(wrapper) client [192.168.128.79] Thread-22::DEBUG::2013-12-04 09:02:41,815::task::579::TaskManager.Task::(_updateState) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::moving from state init -> state preparing Thread-22::INFO::2013-12-04 09:02:41,815::logUtils::44::dispatcher::(wrapper) Run and protect: disconnectStoragePool(spUUID='5849b030-626e-47cb-ad90-3ce782d831b3', hostID=5, s csiKey='5849b030-626e-47cb-ad90-3ce782d831b3', remove=False, options=None) Thread-22::WARNING::2013-12-04 09:02:41,815::hsm::1094::Storage.HSM::(disconnectStoragePool) disconnect sp: 5849b030-626e-47cb-ad90-3ce782d831b3 failed. Known pools {} Thread-22::INFO::2013-12-04 09:02:41,815::logUtils::47::dispatcher::(wrapper) Run and protect: disconnectStoragePool, Return response: None Thread-22::DEBUG::2013-12-04 09:02:41,815::task::1168::TaskManager.Task::(prepare) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::finished: None Thread-22::DEBUG::2013-12-04 09:02:41,816::task::579::TaskManager.Task::(_updateState) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::moving from state preparing -> state finish ed Thread-22::DEBUG::2013-12-04 09:02:41,816::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-22::DEBUG::2013-12-04 09:02:41,816::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-22::DEBUG::2013-12-04 09:02:41,816::task::974::TaskManager.Task::(_decref) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::ref 0 aborting False Thread-23::DEBUG::2013-12-04 09:02:41,872::BindingXMLRPC::177::vds::(wrapper) client [192.168.128.79] Thread-23::DEBUG::2013-12-04 09:02:41,872::task::579::TaskManager.Task::(_updateState) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::moving from state init -> state preparing Thread-23::INFO::2013-12-04 09:02:41,873::logUtils::44::dispatcher::(wrapper) Run and protect: disconnectStorageServer(domType=3, spUUID='5849b030-626e-47cb-ad90-3ce782d831b3', conList=[{'connection': '192.168.130.10', 'iqn': 'iqn.1992-08.com.netapp:sn.135056614', 'portal': '1000', 'user': '', 'password': '******', 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7', 'port': '3260'}, {'connection': '192.168.131.10', 'iqn': 'iqn.1992-08.com.netapp:sn.135056614', 'portal': '1001', 'user': '', 'password': '******', 'id': '717e3505-3290-421b-bb00-25e046f63362', 'port': '3260'}], options=None) Thread-23::DEBUG::2013-12-04 09:02:41,876::misc::809::SamplingMethod::(__call__) Trying to enter sampling method (storage.sdc.refreshStorage) Thread-23::DEBUG::2013-12-04 09:02:41,876::misc::811::SamplingMethod::(__call__) Got in to sampling method Thread-23::DEBUG::2013-12-04 09:02:41,877::misc::809::SamplingMethod::(__call__) Trying to enter sampling method (storage.iscsi.rescan) Thread-23::DEBUG::2013-12-04 09:02:41,877::misc::811::SamplingMethod::(__call__) Got in to sampling method Thread-23::DEBUG::2013-12-04 09:02:41,877::iscsiadm::91::Storage.Misc.excCmd::(_runCmd) '/usr/bin/sudo -n /sbin/iscsiadm -m session -R' (cwd None) Thread-23::DEBUG::2013-12-04 09:02:41,896::iscsiadm::91::Storage.Misc.excCmd::(_runCmd) FAILED: <err> = 'iscsiadm: No session found.\n'; <rc> = 21 Thread-23::DEBUG::2013-12-04 09:02:41,896::misc::819::SamplingMethod::(__call__) Returning last result Thread-23::DEBUG::2013-12-04 09:02:44,915::multipath::112::Storage.Misc.excCmd::(rescan) '/usr/bin/sudo -n /sbin/multipath -r' (cwd None) Thread-23::DEBUG::2013-12-04 09:02:44,966::multipath::112::Storage.Misc.excCmd::(rescan) SUCCESS: <err> = ''; <rc> = 0 Thread-23::DEBUG::2013-12-04 09:02:44,967::lvm::510::OperationMutex::(_invalidateAllPvs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,967::lvm::512::OperationMutex::(_invalidateAllPvs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::521::OperationMutex::(_invalidateAllVgs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::523::OperationMutex::(_invalidateAllVgs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::541::OperationMutex::(_invalidateAllLvs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::543::OperationMutex::(_invalidateAllLvs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::misc::819::SamplingMethod::(__call__) Returning last result Thread-23::INFO::2013-12-04 09:02:44,969::logUtils::47::dispatcher::(wrapper) Run and protect: disconnectStorageServer, Return response: {'statuslist': [{'status': 0, 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7'}, {'status': 0, 'id': '717e3505-3290-421b-bb00-25e046f63362'}]} Thread-23::DEBUG::2013-12-04 09:02:44,969::task::1168::TaskManager.Task::(prepare) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::finished: {'statuslist': [{'status': 0, 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7'}, {'status': 0, 'id': '717e3505-3290-421b-bb00-25e046f63362'}]} Thread-23::DEBUG::2013-12-04 09:02:44,969::task::579::TaskManager.Task::(_updateState) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::moving from state preparing -> state finished Thread-23::DEBUG::2013-12-04 09:02:44,969::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-23::DEBUG::2013-12-04 09:02:44,969::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-23::DEBUG::2013-12-04 09:02:44,970::task::974::TaskManager.Task::(_decref) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::ref 0 aborting False Regards, --------------060401020402070903050401 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> Hi, I'm adding two twin nodes to a cluster and I was able to add the first while the second fails as it removes the iscsi sessions and don't bring them back and thus fails with the message : <div title="" tabindex="0" style="outline-style: none;" __gwt_cell="cell-gwt-uid-303550"> <div id="gwt-uid-3368_col2_row2">Host Dell4 cannot access one of the Storage Domains attached to the Data Center Default. Setting Host state to Non-Operational. <big>Here is the vdsm.log entries for one activation<big> </big></big>intent:</div> </div> Thread-20::DEBUG::2013-12-04 09:02:41,760::task::579::TaskManager.Task::(_updateState) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::moving from state init -> state preparing Thread-20::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:41,760::logUtils::44::dispatcher::(wrapper) Run and protect: repoStats(options=None) Thread-20::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:41,760::logUtils::47::dispatcher::(wrapper) Run and protect: repoStats, Return response: {} Thread-20::DEBUG::2013-12-04 09:02:41,760::task::1168::TaskManager.Task::(prepare) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::finished: {} Thread-20::DEBUG::2013-12-04 09:02:41,761::task::579::TaskManager.Task::(_updateState) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::moving from state preparing -> state finish ed Thread-20::DEBUG::2013-12-04 09:02:41,761::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-20::DEBUG::2013-12-04 09:02:41,761::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-20::DEBUG::2013-12-04 09:02:41,761::task::974::TaskManager.Task::(_decref) Task=`e3529e49-3083-422e-b2e6-c7d8c47b886a`::ref 0 aborting False Thread-22::DEBUG::2013-12-04 09:02:41,814::BindingXMLRPC::177::vds::(wrapper) client [192.168.128.79] Thread-22::DEBUG::2013-12-04 09:02:41,815::task::579::TaskManager.Task::(_updateState) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::moving from state init -> state preparing Thread-22::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:41,815::logUtils::44::dispatcher::(wrapper) Run and protect: disconnectStoragePool(spUUID='5849b030-626e-47cb-ad90-3ce782d831b3', hostID=5, s csiKey='5849b030-626e-47cb-ad90-3ce782d831b3', remove=False, options=None) Thread-22::WARNING::2013-12-04 09:02:41,815::hsm::1094::Storage.HSM::(disconnectStoragePool) disconnect sp: 5849b030-626e-47cb-ad90-3ce782d831b3 failed. Known pools {} Thread-22::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:41,815::logUtils::47::dispatcher::(wrapper) Run and protect: disconnectStoragePool, Return response: None Thread-22::DEBUG::2013-12-04 09:02:41,815::task::1168::TaskManager.Task::(prepare) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::finished: None Thread-22::DEBUG::2013-12-04 09:02:41,816::task::579::TaskManager.Task::(_updateState) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::moving from state preparing -> state finish ed Thread-22::DEBUG::2013-12-04 09:02:41,816::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-22::DEBUG::2013-12-04 09:02:41,816::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-22::DEBUG::2013-12-04 09:02:41,816::task::974::TaskManager.Task::(_decref) Task=`337b1ad3-2559-450c-9133-4fb733e6b5da`::ref 0 aborting False Thread-23::DEBUG::2013-12-04 09:02:41,872::BindingXMLRPC::177::vds::(wrapper) client [192.168.128.79] Thread-23::DEBUG::2013-12-04 09:02:41,872::task::579::TaskManager.Task::(_updateState) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::moving from state init -> state preparing Thread-23::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:41,873::logUtils::44::dispatcher::(wrapper) Run and protect: disconnectStorageServer(domType=3, spUUID='5849b030-626e-47cb-ad90-3ce782d831b3', conList=[{'connection': '192.168.130.10', 'iqn': 'iqn.1992-08.com.netapp:sn.135056614', 'portal': '1000', 'user': '', 'password': '******', 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7', 'port': '3260'}, {'connection': '192.168.131.10', 'iqn': 'iqn.1992-08.com.netapp:sn.135056614', 'portal': '1001', 'user': '', 'password': '******', 'id': '717e3505-3290-421b-bb00-25e046f63362', 'port': '3260'}], options=None) Thread-23::DEBUG::2013-12-04 09:02:41,876::misc::809::SamplingMethod::(__call__) Trying to enter sampling method (storage.sdc.refreshStorage) Thread-23::DEBUG::2013-12-04 09:02:41,876::misc::811::SamplingMethod::(__call__) Got in to sampling method Thread-23::DEBUG::2013-12-04 09:02:41,877::misc::809::SamplingMethod::(__call__) Trying to enter sampling method (storage.iscsi.rescan) Thread-23::DEBUG::2013-12-04 09:02:41,877::misc::811::SamplingMethod::(__call__) Got in to sampling method Thread-23::DEBUG::2013-12-04 09:02:41,877::iscsiadm::91::Storage.Misc.excCmd::(_runCmd) '/usr/bin/sudo -n /sbin/iscsiadm -m session -R' (cwd None) Thread-23::DEBUG::2013-12-04 09:02:41,896::iscsiadm::91::Storage.Misc.excCmd::(_runCmd) FAILED: <err> = 'iscsiadm: No session found.\n'; <rc> = 21 Thread-23::DEBUG::2013-12-04 09:02:41,896::misc::819::SamplingMethod::(__call__) Returning last result Thread-23::DEBUG::2013-12-04 09:02:44,915::multipath::112::Storage.Misc.excCmd::(rescan) '/usr/bin/sudo -n /sbin/multipath -r' (cwd None) Thread-23::DEBUG::2013-12-04 09:02:44,966::multipath::112::Storage.Misc.excCmd::(rescan) SUCCESS: <err> = ''; <rc> = 0 Thread-23::DEBUG::2013-12-04 09:02:44,967::lvm::510::OperationMutex::(_invalidateAllPvs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,967::lvm::512::OperationMutex::(_invalidateAllPvs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::521::OperationMutex::(_invalidateAllVgs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::523::OperationMutex::(_invalidateAllVgs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::541::OperationMutex::(_invalidateAllLvs) Operation 'lvm invalidate operation' got the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::lvm::543::OperationMutex::(_invalidateAllLvs) Operation 'lvm invalidate operation' released the operation mutex Thread-23::DEBUG::2013-12-04 09:02:44,968::misc::819::SamplingMethod::(__call__) Returning last result Thread-23::<a class="moz-txt-link-freetext" href="INFO::2013-12-04">INFO::2013-12-04</a> 09:02:44,969::logUtils::47::dispatcher::(wrapper) Run and protect: disconnectStorageServer, Return response: {'statuslist': [{'status': 0, 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7'}, {'status': 0, 'id': '717e3505-3290-421b-bb00-25e046f63362'}]} Thread-23::DEBUG::2013-12-04 09:02:44,969::task::1168::TaskManager.Task::(prepare) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::finished: {'statuslist': [{'status': 0, 'id': '478b35df-da9a-4cb0-847f-2f61f17a02f7'}, {'status': 0, 'id': '717e3505-3290-421b-bb00-25e046f63362'}]} Thread-23::DEBUG::2013-12-04 09:02:44,969::task::579::TaskManager.Task::(_updateState) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::moving from state preparing -> state finished Thread-23::DEBUG::2013-12-04 09:02:44,969::resourceManager::939::ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-23::DEBUG::2013-12-04 09:02:44,969::resourceManager::976::ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-23::DEBUG::2013-12-04 09:02:44,970::task::974::TaskManager.Task::(_decref) Task=`155824b5-48c3-4eb2-90fb-d90e84f2900f`::ref 0 aborting False Regards, </body> </html> --------------060401020402070903050401--

2 3

[Users] crafting a POST request to the oVirt API manually
by i iordanov 04 Dec '13

04 Dec '13

Hello, Can somebody give me some pointers on how to craft POST requests to the API "by hand" with (for example) a Firefox plugin like Poster: https://addons.mozilla.org/en-US/firefox/addon/poster/ It would be very helpful for libgovirt development. Thanks! iordan -- The conscious mind has only one thread of execution.

3 3

[Users] Fwd: [Engine-devel] Adding users and assigning roles in Ovirt
by Einav Cohen 04 Dec '13

04 Dec '13

[moving discussion to the users mailing list] while it seems that we all agree that adding some sort of a wizard that will allow easy permission assignment to newly-added users, it doesn't seem like something that can be accomplished soon (e.g. for ovirt 3.4). maybe we can utilize Ramesh's initial suggestion [1] for the short term - allow assignment of *System* permissions in the context of the 'Add User(s)' dialog [with an explicit clarification within the dialog that we are talking about *System* permissions, so that the admin will be aware that the privileges that he can assign in this context would be very permissive] any thoughts? how extensively are system permissions used in oVirt in general? [if adding a system permission is not a common/popular action, there is no reason to expose it in the 'Add User(s)' dialog, since it will probably be hardly used anyway] maybe different ideas for short-term solutions? ---- Thanks, Einav [1] http://lists.ovirt.org/pipermail/engine-devel/2013-December/006059.html ----- Forwarded Message ----- From: "Yair Zaslavsky" <yzaslavs(a)redhat.com> To: "Einav Cohen" <ecohen(a)redhat.com> Cc: "Oved Ourfalli" <ovedo(a)redhat.com>, engine-devel(a)ovirt.org Sent: Monday, December 2, 2013 4:09:10 PM Subject: Re: [Engine-devel] Adding users and assigning roles in Ovirt ----- Original Message ----- > From: "Einav Cohen" <ecohen(a)redhat.com> > To: "Malini Rao" <mrao(a)redhat.com> > Cc: "Oved Ourfalli" <ovedo(a)redhat.com>, engine-devel(a)ovirt.org > Sent: Monday, December 2, 2013 9:55:45 PM > Subject: Re: [Engine-devel] Adding users and assigning roles in Ovirt > > > ----- Original Message ----- > > From: "Malini Rao" <mrao(a)redhat.com> > > Sent: Monday, December 2, 2013 2:20:06 PM > > > > Joining in the thread a bit green but wouldn't it be ok to add the new user > > with the most basic permissions by default ( may be just read only > > permissions)until the admin goes and deliberately tweaks permissions or > > assigns a role? > > this is similar to what Oved has suggested, but I think that it won't really > make any difference, since there is very little chance, in my view, that > these > permissions would be sufficient for anything - the admin would need to assign > additional/different permissions at some point anyway, so not much point in > allowing that default minimal assignment in the first place - we might as > well > keep the 'Add User(s)' dialog as is. > > > > > Also, if we add that roles drop down as Einav mentioned, isn't there a way > > to > > only show that drop down if the logged in user is an admin role? > > the logged in user must be an admin, as the 'Add User(s)' dialog (which is > available from the Users main tab) exists only in the web-admin, which is > accessible only to admins by definition. > > > > > +1 on the user adding wizard. I think in general connecting related task > > flows together will improve the overall UX too. +1 here > > agreed. > > > > > Thanks > > Malini > > > > ----- Original Message ----- > > From: "Einav Cohen" <ecohen(a)redhat.com> > > To: "Gilad Chaplik" <gchaplik(a)redhat.com>, "Ramesh" <rnachimu(a)redhat.com>, > > "Oved Ourfalli" <ovedo(a)redhat.com> > > Cc: engine-devel(a)ovirt.org > > Sent: Monday, December 2, 2013 1:37:57 PM > > Subject: Re: [Engine-devel] Adding users and assigning roles in Ovirt > > > > we should definitely not completely remove the possibility to add > > permission-less users to the system, > > due to possible use-cases as Gilad mentioned and/or simply to allow the > > flexibility of adding the user > > first, and only then adding the relevant (business entity and) permissions, > > should the admin choose to > > do so. > > > > the more correct location to add system permissions to a user would > > probably > > be a 'Add System Permission' > > dialog that will be available from the Permissions sub-tab of the Users > > main > > tab, however it won't allow > > to assign system permissions to several users at once, so I understand the > > need for this ability within > > the 'Add User(s)' dialog. > > > > I think that adding an "allow user to login" check-box would not be good > > enough, since once a user > > would be able to login, he won't be able to do (or even see) anything > > (well, > > other than the 'Blank' > > Template, maybe), so the admin would need to assign additional permissions > > to > > this user anyway. > > The minimal solution in my view is to add a "assign these users the > > following > > system permissions" > > check-box, with a Roles drop down; as Gilad mentioned - need to be very > > careful with that, as > > system-wide permissions are powerful. > > A more comprehensive solution (more complex for implementation) would > > probably be, as Oved mentioned, > > some sort of a user-adding-wizard, that will allow easy > > permissions-assignment (maybe even not only > > system-wide permissions) to the newly-added users. > > > > ---- > > Thanks, > > Einav > > > > ----- Original Message ----- > > > From: "Gilad Chaplik" <gchaplik(a)redhat.com> > > > To: "Oved Ourfalli" <ovedo(a)redhat.com> > > > Cc: engine-devel(a)ovirt.org > > > Sent: Monday, December 2, 2013 3:47:56 AM > > > Subject: Re: [Engine-devel] Adding users and assigning roles in Ovirt > > > > > > Hi Ramesh, > > > > > > You're right, I also think that the 'add users' is a bit pointless, but > > > adding a system permission in that dialog can be dangerous (if admin > > > doesn't > > > fully understand what he's doing, and MLA is complicated enough ;-) ). > > > > > > Currently when adding a permission we can specify a AD-user (regardless > > > to > > > the fact he's added or not), So eventually power users can add users to > > > the > > > system. > > > I can think of a case, that admins will want to manage the users by > > > themselves, i.e- power users can add permissions for the added users > > > only. > > > this way this dialog can be useful. > > > > > > Thanks, > > > Gilad. > > > > > > ----- Original Message ----- > > > > From: "Oved Ourfalli" <ovedo(a)redhat.com> > > > > To: "Ramesh" <rnachimu(a)redhat.com> > > > > Cc: engine-devel(a)ovirt.org > > > > Sent: Monday, December 2, 2013 9:01:52 AM > > > > Subject: Re: [Engine-devel] Adding users and assigning roles in Ovirt > > > > > > > > Your E-mail made me look a bit and check the different flows. > > > > > > > > I think the only use-case for adding users without giving any > > > > permissions > > > > is > > > > when you add a user for notification reasons. > > > > You can add a user, and then in the Event Notifier sub-tab define what > > > > events > > > > he will get via E-mail. > > > > afaik (and I'm not an event notifier expert), this user doesn't have to > > > > be > > > > able to login, or to have permissions of any kind. He just gets events. +1 - this is due to the fact a user has an email account - no need to login to ovirt-engine in order to read your emails :) > > > > > > > > Other than that you're right. A user which is added to the system can't > > > > do > > > > much without assigning him roles. > > > > I think adding roles assignment to this dialog may be a bit cumbersome. > > > > Perhaps some wizard is required in that case. Or at least some checkbox > > > > saying "allow user to login". That way the new user will be able to > > > > login, > > > > and he will have some default permissions as well (permissions granted > > > > to > > > > Everyone). > > > > > > > > Let's see what others think. > > > > > > > > Regards, > > > > Oved > > > > > > > > > > > > ----- Original Message ----- > > > > > From: "Ramesh" <rnachimu(a)redhat.com> > > > > > To: engine-devel(a)ovirt.org > > > > > Sent: Monday, December 2, 2013 7:22:53 AM > > > > > Subject: [Engine-devel] Adding users and assigning roles in Ovirt > > > > > > > > > > Hi All, > > > > > > > > > > We have 'Add' action under 'Users' main tab to add users in Ovirt > > > > > . > > > > > It looks slightly different from the "Add user" option of the > > > > > Configure > > > > > option. Actually, this one is missing the "Role to Assign" option. I > > > > > think without assigning any role, adding a user is not meaningful and > > > > > it > > > > > didn't complete the flow. > > > > > > > > > > Currently to assign any role to the user, either we have to use > > > > > 'Configure' option ( to add system permission) or we have to go to > > > > > the > > > > > specific entity and add permission for that entity. It will be nice > > > > > if > > > > > we can assign roles( system level permissions) while adding users in > > > > > 'Users' tab itself. It will be a clear user flow where one can add > > > > > user > > > > > and assign role in the same place. > > > > > > > > > > I have attached both the screen shots. > > > > > > > > > > please share your thoughts. > > > > > > > > > > Regards, > > > > > Ramesh > > > > > > > > > > > > > > > _______________________________________________ > > > > > Engine-devel mailing list > > > > > Engine-devel(a)ovirt.org > > > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > > > _______________________________________________ > > > > Engine-devel mailing list > > > > Engine-devel(a)ovirt.org > > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > _______________________________________________ > > > Engine-devel mailing list > > > Engine-devel(a)ovirt.org > > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > _______________________________________________ > > Engine-devel mailing list > > Engine-devel(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > _______________________________________________ > > Engine-devel mailing list > > Engine-devel(a)ovirt.org > > http://lists.ovirt.org/mailman/listinfo/engine-devel > > > > > > > _______________________________________________ > Engine-devel mailing list > Engine-devel(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/engine-devel > _______________________________________________ Engine-devel mailing list Engine-devel(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel

2 2