- Users - oVirt List Archives

[Users] Remove "running" Vm's from host
by Matt . 19 Aug '13

19 Aug '13

Hi All, Something I have seen before and I'm testing now is that you can have that a host had VM's running when it fails or whatever. The engine thinks and shows that these VM's are still running. When this host is also the SPM, you can have issues that you cannot activate storage and so on. What would be a known and decent way to have your SPM not running VM's, is itpossible to "remove" them from the engine @ Host ? They are actually not running... Thanks! Cheers, Matt

2 5

[Users] Please test check_rhev3 1.3 alpha
by René Koch (ovido) 19 Aug '13

19 Aug '13

Hi, As discussed in previous thread I improved the authentication of my Nagios plugin to use auth cookies per default and fall back to username and password authentication on failure. Here's a documentation how authentication is handled now: https://github.com/ovido/check_rhev3/issues/1 You can download the alpha version from: https://github.com/ovido/check_rhev3/blob/master/plugin-dir/check_rhev3.pl Please note that this is an early development version not intended to use in production setups yet (requires some testing). If you test it, please give me some feedback if the authentication is working as expected. This means, that no "user@domain logged in" messages appear in oVirt engine (if using oVirt >= 3.1) when Nagios is checking oVirt environment. Thanks a lot for testing and your feedback! There's one known issue - if REST-API returns an error the plugin also falls back to username and password. This happens e.g. when querying interface statistics for vlan tagged interfaces on RHEV 3.2, which returns "Operation Failed" (see https://bugzilla.redhat.com/show_bug.cgi?id=993123) Don't have a solution for this right now... Regards, René

1 0

[Users] oVirt-3.2 users creating snapshots fail
by Karli Sjöberg 19 Aug '13

19 Aug '13

--_000_5F9E965F5A80BC468BE5F40576769F092E705045exchange21_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkhDQoNCkFmdGVyIHVwZ3JhZGluZyBmcm9tIG9WaXJ0LTMuMSB0byBvVmlydC0zLjIsIHVzZXJz wrRzIGFiaWxpdHkgdG8gY3JlYXRlIHNuYXBzaG90cyBoYXMgZGlzYXBwZWFyZWQuIFRoZSBvbmx5 IHdheSB0byBnaXZlIHVzZXJzIHBlcm1pc3Npb24gdG8gdGFrZSBzbmFwc2hvdHMgdGhhdCBJwrR2 ZSBmb3VuZCBzbyBmYXIgaXMgdG8gZ2l2ZSB0aGVtICJEYXRhQ2VudGVyQWRtaW4iIG9yICJTdXBl ciBVc2VyIiBpbiBlaXRoZXIgU3lzdGVtIG9yIERhdGFDZW50ZXIsIGFuZCBhbnkgb3RoZXIgZ2l2 ZW4gUm9sZSBpcyBtZXQgYnkgdGhpcyBsb25lbHkgbGluZSBpbiBlbmdpbmUubG9nOg0KMjAxMy0w OC0xNCAxNDoyNzowMSwxMDYgV0FSTiAgW29yZy5vdmlydC5lbmdpbmUuY29yZS5ibGwuQ3JlYXRl QWxsU25hcHNob3RzRnJvbVZtQ29tbWFuZF0gKGFqcC0tMTI3LjAuMC4xLTg3MDItMTkpIENhbkRv QWN0aW9uIG9mIGFjdGlvbiBDcmVhdGVBbGxTbmFwc2hvdHNGcm9tVm0gZmFpbGVkLiBSZWFzb25z OlZBUl9fQUNUSU9OX19DUkVBVEUsVkFSX19UWVBFX19TTkFQU0hPVCxVU0VSX05PVF9BVVRIT1JJ WkVEX1RPX1BFUkZPUk1fQUNUSU9ODQoNCkkgZXZlbiB0cmllZCB0byBjcmVhdGUgYW4gYWRtaW4g Um9sZSB3aXRoIGV2ZXJ5dGhpbmcgY2hlY2tlZCwgYWxsIHBlcm1pc3Npb25zIGdyYW50ZWQsIGJ1 dCBhIHVzZXIgb3IgZ3JvdXAgYXNzb2NpYXRlZCB3aXRoIHRoYXQgUm9sZSBzdGlsbCBjb3VsZG7C tHQgdGFrZSBzbmFwc2hvdHMuIE9ubHkgdGhlIGJ1aWx0LWluIEFkbWluIHJvbGVzIHNlZW1zIHRv IGZ1bmN0aW9uIGNvcnJlY3RseS4gSG93IGNhbiBJIHN0YXJ0IHRvIHRyb3VibGVzaG9vdCB0aGlz IGlzc3VlPw0KDQotLQ0KDQpNZWQgVsOkbmxpZ2EgSMOkbHNuaW5nYXINCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCkthcmxpIFNqw7ZiZXJnDQpTd2VkaXNoIFVuaXZlcnNpdHkgb2YgQWdyaWN1bHR1 cmFsIFNjaWVuY2VzDQpCb3ggNzA3OSAoVmlzaXRpbmcgQWRkcmVzcyBLcm9uw6VzdsOkZ2VuIDgp DQpTLTc1MCAwNyBVcHBzYWxhLCBTd2VkZW4NClBob25lOiAgKzQ2LSgwKTE4LTY3IDE1IDY2DQpr YXJsaS5zam9iZXJnQHNsdS5zZTxtYWlsdG86a2FybGkuc2pvYmVyZ0BhZG0uc2x1LnNlPg0K --_000_5F9E965F5A80BC468BE5F40576769F092E705045exchange21_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUUkFOU0lUSU9OQUwv L0VOIj4NCjxodG1sPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNv bnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHRU5FUkFUT1Ii IGNvbnRlbnQ9Ikd0a0hUTUwvNC42LjQiPg0KPC9oZWFkPg0KPGJvZHk+DQpIaSE8YnI+DQo8YnI+ DQpBZnRlciB1cGdyYWRpbmcgZnJvbSBvVmlydC0zLjEgdG8gb1ZpcnQtMy4yLCB1c2Vyc8K0cyBh YmlsaXR5IHRvIGNyZWF0ZSBzbmFwc2hvdHMgaGFzIGRpc2FwcGVhcmVkLiBUaGUgb25seSB3YXkg dG8gZ2l2ZSB1c2VycyBwZXJtaXNzaW9uIHRvIHRha2Ugc25hcHNob3RzIHRoYXQgScK0dmUgZm91 bmQgc28gZmFyIGlzIHRvIGdpdmUgdGhlbSAmcXVvdDtEYXRhQ2VudGVyQWRtaW4mcXVvdDsgb3Ig JnF1b3Q7U3VwZXIgVXNlciZxdW90OyBpbiBlaXRoZXIgU3lzdGVtIG9yIERhdGFDZW50ZXIsDQog YW5kIGFueSBvdGhlciBnaXZlbiBSb2xlIGlzIG1ldCBieSB0aGlzIGxvbmVseSBsaW5lIGluIGVu Z2luZS5sb2c6PGJyPg0KMjAxMy0wOC0xNCAxNDoyNzowMSwxMDYgV0FSTiZuYnNwOyBbb3JnLm92 aXJ0LmVuZ2luZS5jb3JlLmJsbC5DcmVhdGVBbGxTbmFwc2hvdHNGcm9tVm1Db21tYW5kXSAoYWpw LS0xMjcuMC4wLjEtODcwMi0xOSkgQ2FuRG9BY3Rpb24gb2YgYWN0aW9uIENyZWF0ZUFsbFNuYXBz aG90c0Zyb21WbSBmYWlsZWQuIFJlYXNvbnM6VkFSX19BQ1RJT05fX0NSRUFURSxWQVJfX1RZUEVf X1NOQVBTSE9ULFVTRVJfTk9UX0FVVEhPUklaRURfVE9fUEVSRk9STV9BQ1RJT048YnI+DQo8YnI+ DQpJIGV2ZW4gdHJpZWQgdG8gY3JlYXRlIGFuIGFkbWluIFJvbGUgd2l0aCBldmVyeXRoaW5nIGNo ZWNrZWQsIGFsbCBwZXJtaXNzaW9ucyBncmFudGVkLCBidXQgYSB1c2VyIG9yIGdyb3VwIGFzc29j aWF0ZWQgd2l0aCB0aGF0IFJvbGUgc3RpbGwgY291bGRuwrR0IHRha2Ugc25hcHNob3RzLiBPbmx5 IHRoZSBidWlsdC1pbiBBZG1pbiByb2xlcyBzZWVtcyB0byBmdW5jdGlvbiBjb3JyZWN0bHkuIEhv dyBjYW4gSSBzdGFydCB0byB0cm91Ymxlc2hvb3QgdGhpcw0KIGlzc3VlPzxicj4NCjxicj4NCjx0 YWJsZSBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiIHdpZHRoPSIxMDAlIj4NCjx0Ym9k eT4NCjx0cj4NCjx0ZD4tLSA8YnI+DQo8YnI+DQpNZWQgVsOkbmxpZ2EgSMOkbHNuaW5nYXI8YnI+ DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPGJyPg0KS2FybGkgU2rDtmJlcmc8YnI+DQpTd2VkaXNo IFVuaXZlcnNpdHkgb2YgQWdyaWN1bHR1cmFsIFNjaWVuY2VzPGJyPg0KQm94IDcwNzkgKFZpc2l0 aW5nIEFkZHJlc3MgS3JvbsOlc3bDpGdlbiA4KTxicj4NClMtNzUwIDA3IFVwcHNhbGEsIFN3ZWRl bjxicj4NClBob25lOiAmbmJzcDsmIzQzOzQ2LSgwKTE4LTY3IDE1IDY2PGJyPg0KPGEgaHJlZj0i bWFpbHRvOmthcmxpLnNqb2JlcmdAYWRtLnNsdS5zZSI+a2FybGkuc2pvYmVyZ0BzbHUuc2U8L2E+ IDwvdGQ+DQo8L3RyPg0KPC90Ym9keT4NCjwvdGFibGU+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_5F9E965F5A80BC468BE5F40576769F092E705045exchange21_--

2 6

[Users] oVirt 3.3: VM statistics don't update anymore
by Hans-Joachim Hetscher 19 Aug '13

19 Aug '13

--========GMXBoundary308181376897892654584 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Hello, my VM statistics aren't updated anymore. The VMs are running for 3 days now, but the Engine Web tells me about 2 hours. The engine.log started with 2013-08-16 16:41:50,857 WARN [org.ovirt.engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-88) Failed to refresh VDS , vds = 8256f899-fd7a-411b-8f72-6d06ddb7eb0b : SERVER1, error = java.lang.NullPointerException, continuing.: java.lang.NullPointerException at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo.proceedBalloonCheck(VdsUpdateRunTimeInfo.java:1362) [vdsbroker.jar:] at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo.refreshVmStats(VdsUpdateRunTimeInfo.java:976) [vdsbroker.jar:] at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo.refreshVdsRunTimeInfo(VdsUpdateRunTimeInfo.java:552) [vdsbroker.jar:] at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo.Refresh(VdsUpdateRunTimeInfo.java:393) [vdsbroker.jar:] at org.ovirt.engine.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:237) [vdsbroker.jar:] at sun.reflect.GeneratedMethodAccessor47.invoke(Unknown Source) [:1.7.0_25] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_25] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_25] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] and now has tons of 2013-08-19 08:53:01,386 WARN [org.ovirt.engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-98) Failed to refresh VDS , vds = 8256f899-fd7a-411b-8f72-6d06ddb7eb0b : SERVER1, error = java.lang.NullPointerException, continuing.: java.lang.NullPointerException Restarting on ovirt-engine didn't solved the problem so far. Thank you for your help Hans-Joachim --========GMXBoundary308181376897892654584 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello,<b= r /> my VM statistics aren't updated anymore. The VMs are running for = 3 days now, but the Engine Web tells me about 2 hours. The engin= e.log started with 2013-08-16 16:41:50,857 WARN  [org.ovirt= .engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-88) Faile= d to refresh VDS , vds =3D 8256f899-fd7a-411b-8f72-6d06ddb7eb0b : SERVER1, = error =3D java.lang.NullPointerException, continuing.: java.lang.NullPointe= rException         at org.ovirt.eng= ine.core.vdsbroker.VdsUpdateRunTimeInfo.proceedBalloonCheck(VdsUpdateRunTim= eInfo.java:1362) [vdsbroker.jar:]       =   at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo.refreshVmSta= ts(VdsUpdateRunTimeInfo.java:976) [vdsbroker.jar:]    &= nbsp;    at org.ovirt.engine.core.vdsbroker.VdsUpdateRunTime= Info.refreshVdsRunTimeInfo(VdsUpdateRunTimeInfo.java:552) [vdsbroker.jar:]<= br />        at org.ovirt.engine.core.vd= sbroker.VdsUpdateRunTimeInfo.Refresh(VdsUpdateRunTimeInfo.java:393) [vdsbro= ker.jar:]         at org.ovirt.engi= ne.core.vdsbroker.VdsManager.OnTimer(VdsManager.java:237) [vdsbroker.jar:]<= br />        at sun.reflect.GeneratedMet= hodAccessor47.invoke(Unknown Source) [:1.7.0_25]    &nb= sp;    at sun.reflect.DelegatingMethodAccessorImpl.invoke(De= legatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_25]   &nbs= p;     at java.lang.reflect.Method.invoke(Method.java:6= 06) [rt.jar:1.7.0_25]         at or= g.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [sch= eduler.jar:]         at org.quartz.= core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:]   &= nbsp;     at org.quartz.simpl.SimpleThreadPool$WorkerTh= read.run(SimpleThreadPool.java:557) [quartz.jar:] and now has to= ns of 2013-08-19 08:53:01,386 WARN  [org.ovirt.engine.core.= vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-98) Failed to refresh = VDS , vds =3D 8256f899-fd7a-411b-8f72-6d06ddb7eb0b : SERVER1, error =3D jav= a.lang.NullPointerException, continuing.: java.lang.NullPointerException<br= /> Restarting on ovirt-engine didn't solved the problem so far. = Thank you for your help Hans-Joachim --========GMXBoundary308181376897892654584--

1 0

[Users] automatic redirect to home page on 404
by Alexander Wels 18 Aug '13

18 Aug '13

Hi, I have noticed that whenever you try to navigate to a URL that doesn't exist, the 404 message that is displayed automatically redirects you to the welcome page. I find this behavior annoying and it makes it harder to figure out what you have done wrong. I am about to create a patch that fixes a bunch of issues with the 404 page and I would like to remove the automatic redirect as part of that patch. Does anyone object to me doing this? Thanks, Alexander

2 1

[Users] 503 error on Engine Login
by Matt . 18 Aug '13

18 Aug '13

Hi guys, On a test machine that got a scheduled poweroutage I get a 503 error when I login. I thought about routing because there are two network interfaces but this is not the problem because it even happens when I set one nic to down. The logfiles don't give me information about this error, anyone an idea ? Never seen it. Cheers, Matt

2 3

[Users] engine-setup's forcing update
by lof yer 18 Aug '13

18 Aug '13

If it detected some updates online, it will force me to choose 'Yes'. If I choose 'No', I'll be 'quitted' Must I update?

4 5

[Users] FW: Host Agent-35 moved to Non-Operational state as host does not meet the cluster's minimum CPU level. Missing CPU features : model_Penryn
by René Koch 17 Aug '13

17 Aug '13

(Didn't reply to list...) Yes, change your cluster to Intel Conroe Family. For a cluster you always have to choose the processor family for the lowest cpu in the cluster. But this also means, that some features aren't available with old cpu families. Depending on your setup you maybe can use multiple clusters with different cpu families... Regards, René > > -----Original message----- > From: higkoohk<higkoohk(a)gmail.com> > Sent: Friday 16th August 2013 22:35 > To: René Koch <r.koch(a)ovido.at> > Cc: users(a)ovirt.org > Subject: RE: [Users] Host Agent-35 moved to Non-Operational state as host does not meet the cluster's minimum CPU level. Missing CPU features : model_Penryn > > yes,I had choose Intel Penryn cpu type. > > so,can i choose another one to use these old cpus ? > > thanks > > 在 2013-8-16 下午9:33，"René Koch" <r.koch(a)ovido.at <mailto:r.koch@ovido.at>>写道： > Hi, > > Is it working when you set CPU name of your cluster to "Intel Conroe Family"? > > Your CPU (the 5110) is quite old (older then Intel Penryn series)... > > Regards, > > René > > -----Original message----- > > From: higkoohk<higkoohk(a)gmail.com <mailto:higkoohk@gmail.com>> > > Sent: Friday 16th August 2013 14:32 > > To: users(a)ovirt.org <mailto:users@ovirt.org> > > Subject: [Users] Host Agent-35 moved to Non-Operational state as host does not meet the clusters minimum CPU level. Missing CPU features : model_Penryn > > Hello, > > Im using oVirt 3.3 beta for gluster, but when I add host into cluster. > > Many machine change into non-operational . > > Error tips:Host Agent-35 moved to Non-Operational state as host does not meet the clusters minimum CPU level. Missing CPU features : model_Penryn. > > This one is OK: > > Intel(R) Xeon(R) CPU E5410 @ 2.33GHz > > fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca sse4_1 lahf_lm dts tpr_shadow vnmi flexpriority > > This one is FAIL: > > Intel(R) Xeon(R) CPU 5110 @ 1.60GHz > > fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor ds_cpl vmx tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow > > Is this mean that failed machine couldnt make vm? > > _______________________________________________ > > Users mailing list > > Users(a)ovirt.org <mailto:Users@ovirt.org> > > http://lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/listinfo/users> > >

1 0

[Users] Host Agent-35 moved to Non-Operational state as host does not meet the cluster's minimum CPU level. Missing CPU features : model_Penryn
by higkoohk 16 Aug '13

16 Aug '13

Hello, I'm using oVirt 3.3 beta for gluster, but when I add host into cluster. Many machine change into non-operational . Error tips:'Host Agent-35 moved to Non-Operational state as host does not meet the cluster's minimum CPU level. Missing CPU features : model_Penryn'. This one is OK: Intel(R) Xeon(R) CPU E5410 @ 2.33GHz fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca sse4_1 lahf_lm dts tpr_shadow vnmi flexpriority This one is FAIL: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor ds_cpl vmx tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow Is this mean that failed machine couldn't make vm?

3 4

[Users] Questions on ovirt 3.3 browser based spice/novnc working
by Dead Horse 16 Aug '13

16 Aug '13

After Referencing: http://www.ovirt.org/Features/noVNC_console http://www.ovirt.org/Features/SpiceHTML5 and looking at some of the related engine code. I am still attempting to get the spice/novnc browser based consoles to work. I am working from a build from master yesterday I used to upgrade over a previous 3.3 master build from about a month back. VDSM version on host is 4.12.0 built minutes ago. I have installed and configured the websocket proxy like so: Set WebSocketProxy to engine ENGINEIP port 6100 engine-config -s WebSocketProxy=ENGINEIP:6100 /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name=websocket-proxy --password=install --subject="/C=US/O=DHC/CN=ENGINEFQDN" This generates: /etc/pki/ovirt-engine/keys/websocket-proxy.p12 /etc/pki/ovirt-engine/certs/websocket-proxy.cer /etc/pki/ovirt-engine/requests/websocket-proxy.req However it does not generate the key that websockify wants so we do: openssl pkcs12 -in websocket-proxy.p12 -nocerts -nodes -out /etc/pki/ovirt-engine/keys/websocket-proxy.key The configuration of ovirt-websocket-proxy: PROXY_HOST=* PROXY_PORT=6100 SOURCE_IS_IPV6=False SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key FORCE_DATA_VERIFICATION=False CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer SSL_ONLY=True TRACE_ENABLE=False TRACE_FILE= ENGINE_USR="/usr/share/ovirt-engine" Install spice-html5 git clone http://anongit.freedesktop.org/git/spice/spice-html5.git mv spice-html5 /usr/share Test spice: In Webadmin UI we set create a VM, set display as spice, start it and set it's console to spice-html5. Result spice-html client opens in a new tab but does not connect. >From engine.log: 2013-08-01 12:49:52,352 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-9) Running command: SetVmTicketCommand internal: false. Entities affected : ID: fec3260c-871a-4fbe-a006-9eee4fbfbbcc Type: VM 2013-08-01 12:49:52,371 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-9) START, SetVmTicketVDSCommand(HostName = ovirtnodefoo, HostId = 5713e5c8-6252-4bce-a3f6-bbd8e1e6eb57, vmId=fec3260c-871a-4fbe-a006-9eee4fbfbbcc, ticket=TKfzUQJLLrUI, validTime=120,m userName=admin@internal, userId=fdfc627c-d875-11e0-90f0-83df133b58cc), log id: 5d258049 2013-08-01 12:49:52,445 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-9) FINISH, SetVmTicketVDSCommand, log id: 5d258049 Test novnc: In Webadmin UI we set create a VM, set display as VNC, start it and set it's console to novnc. Result novnc client opens in a new tab but does not connect, but does display error: "Server disconnected (code: 1006) >From engine.log: 2013-08-01 12:50:44,800 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-9) Running command: SetVmTicketCommand internal: false. Entities affected : ID: fec3260c-871a-4fbe-a006-9eee4fbfbbcc Type: VM 2013-08-01 12:50:44,833 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-9) START, SetVmTicketVDSCommand(HostName = ovirtnodefoo, HostId = 5713e5c8-6252-4bce-a3f6-bbd8e1e6eb57, vmId=fec3260c-871a-4fbe-a006-9eee4fbfbbcc, ticket=IPWOWh6U9erd, validTime=120,m userName=admin@internal, userId=fdfc627c-d875-11e0-90f0-83df133b58cc), log id: bff6161 2013-08-01 12:50:44,917 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-9) FINISH, SetVmTicketVDSCommand, log id: bff6161 I verified connection of both the spice/vnc console directly at the host level with a quick connect via virt-viewer. A quick scan with nmap of engine and host to verify sockets are open: Nmap scan report for engine Host is up (0.0042s latency). Not shown: 995 closed ports PORT STATE SERVICE 22/tcp open ssh 80/tcp open http 111/tcp open rpcbind 443/tcp open https 6100/tcp open synchronet-db Nmap scan report for host Host is up (0.0045s latency). Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 111/tcp open rpcbind 5900/tcp open vnc For grins I stopped the websocket proxy and manually started a websockify like so: websockify 3.57.111.11:6100 3.57.111.12:5900--cert=/etc/pki/ovirt-engine/certs/websocket-proxy.cer --key=/etc/pki/ovirt-engine/keys/websocket-proxy.key WARNING: no 'numpy' module, HyBi protocol is slower or disabled WebSocket server settings: - Listen on ENGINEIP:6100 - Flash security policy server - SSL/TLS support - proxying from ENGINEIP:6100 to HOSTIP:5900 Attempting another connection via https://ENGINEFQDN//ovirt-engine-novnc-main.html?host=ENGINEIP&port=6100res… in: 1: handler exception: [Errno 1] _ssl.c:1359: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca I should also note in case it matters that the SSLEnabled=false, and EnableSpiceRootCertificateValidation are both set as false are set in my engine options. Am I doing something wrong here, I don't see any reason this should not work? - DHC

3 15