- Users - oVirt List Archives

SSO problem for Window 7 VM (64)
by Harry Conings 04 Jun '19

04 Jun '19

Hi i am new to oVirt so i think i am missing something. I my case ovirt-engine-extension-aaa-ldap-setup did not work and i am not a domain administrator so i had to set it up by hand I can login with my AD user into the VM portal but SSO to a windows 7 machine does not happen Thks for your help rgds Harry my files: in /etc/ovirt-engine/aaa/zkf200mut.prd.properties vars.user = CN=HARRY (Adm),OU=Administrative Accounts,OU=Operations,OU=203,DC=zkf200mut,DC=prd vars.password = password pool.default.auth.simple.bindDN = ${global:vars.user} pool.default.auth.simple.password = ${global:vars.password} pool.default.serverset.type = single pool.default.serverset.single.server = 10.63.123.22 pool.default.dc-resolve.default.serverset.type = single pool.default.dc-resolve.serverset.single.server = 10.63.123.22 pool.default.socketfactory.type = java /etc/ovirt-engine/extensions.d/zkf200mut.prd-authn.properties ovirt.engine.extension.name = zkf200mut.prd-authn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = zkf200mut.prd ovirt.engine.aaa.authn.authz.plugin = zkf200mut.prd config.profile.file.1 = ../aaa/zkf200mut.prd.properties /etc/ovirt-engine/extensions.d/zkf200mut.prd.properties ovirt.engine.extension.name = zkf200mut.prd ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = ../aaa/zkf200mut.prd.properties engine.log -> when i login and click on the console of the VM 2019-06-04 12:24:30,442+02 INFO [org.ovirt.engine.core.bll.aaa.TerminateSessionsForTokenCommand] (default task-8) [354a4756] Running command: TerminateSessionsForTokenCommand internal: true. 2019-06-04 12:24:46,247+02 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-7) [] User m203hcon(a)zkf200mut.prd successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2019-06-04 12:24:46,316+02 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-7) [d7805c4] Running command: CreateUserSessionCommand internal: false. 2019-06-04 12:24:46,331+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-7) [d7805c4] EVENT_ID: USER_VDC_LOGIN(30), User m203hcon@zkf200mut.prd@zkf200mut.prd connecting from '10.63.120.199' using session 'CGIKs/CP4HQdLoUhWAzsq996BKkMcKDrqdfHT1x/kIBzixxbNl/hle8BZCZmS2L/ehVZdoStH2JByXragQxeqw==' logged in. 2019-06-04 12:24:47,015+02 ERROR [org.ovirt.engine.core.bll.GetPermissionsForObjectQuery] (default task-3) [1e271632-b9f4-4bcc-8205-ccd8ff1421f6] Query execution failed due to insufficient permissions. 2019-06-04 12:24:47,017+02 ERROR [org.ovirt.engine.api.restapi.resource.AbstractBackendResource] (default task-3) [] Operation Failed: query execution failed due to insufficient permissions. 2019-06-04 12:24:50,106+02 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (default task-8) [6f85887f] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 3985528e-5bd3-4d87-b766-361c7985788f Type: VMAction group CONNECT_TO_VM with role type USER 2019-06-04 12:24:50,118+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (default task-8) [6f85887f] START, SetVmTicketVDSCommand(HostName = ovirtServer1.zkf200mut.prd, SetVmTicketVDSCommandParameters:{hostId='d28491ac-2c3b-4462-b24b-1c673155c644', vmId='3985528e-5bd3-4d87-b766-361c7985788f', protocol='SPICE', ticket='PzMAJhjN75ij', validTime='120', userName='m203hcon(a)zkf200mut.prd', userId='12f092ed-db4c-4ed0-b4bb-f3051c4fc677', disconnectAction='LOCK_SCREEN'}), log id: 103ea2 2019-06-04 12:24:50,150+02 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (default task-8) [6f85887f] FINISH, SetVmTicketVDSCommand, return: , log id: 103ea2 2019-06-04 12:24:50,168+02 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-8) [6f85887f] EVENT_ID: VM_SET_TICKET(164), User m203hcon@zkf200mut.prd@zkf200mut.prd initiated console session for VM W203YZ001V

1 0

Re: [External] Re: ovirt metrics - vm dashboard not working
by Jayme 04 Jun '19

04 Jun '19

I just get a blank output from that command. I'm running oVirt Node NG 4.3.3.1 hosts On Mon, Jun 3, 2019 at 3:48 PM Morris, Roy <roy.morris(a)ventura.org> wrote: > Jayme, > > > > Can you run the following command and report back with the results? > > > > #systemctl status selinux* -l > > > > Best regards, > > Roy Morris > > GSA Virtualization Systems Analyst > > County of Ventura > > (805) 654-3625 > > (805) 603-9403 > > [image: cid:7c03dd9d67a9cfb78447b56087323d91a66d7c29.camel@ventura.org] > > > > *From:* Jayme <jaymef(a)gmail.com> > *Sent:* Monday, June 3, 2019 11:40 AM > *To:* users <users(a)ovirt.org> > *Subject:* [External] [ovirt-users] Re: ovirt metrics - vm dashboard not > working > > > > *CAUTION: *This email contains links. If it looks suspicious or is not > expected, DO NOT click and immediately forward to Spam.Manager(a)ventura.org > . > > > > > I'm seeing this in the journal for collectd on all of my hosts: > > > > collectd[18380]: write_syslog plugin: error with wr_send_message > collectd[18380]: write_syslog plugin: Connecting to localhost:44514 > failed. The last error was: Connection refused > collectd[18380]: write_syslog plugin: wr_callback_init failed. > collectd[18380]: write_syslog plugin: error with wr_send_message > collectd[18380]: write_syslog plugin: send failed with status -1 > (Connection reset by peer) > collectd[18380]: write_syslog plugin: error with wr_send_message > collectd[18380]: write_syslog plugin: send failed with status -1 > (Connection reset by peer) > > > > collectd and rsyslog are running, I tried restarting both. I can also > telnet to port 44514 on localhost and it's responding. > > > > > > On Mon, Jun 3, 2019 at 3:12 PM Jayme <jaymef(a)gmail.com> wrote: > > I finally managed to get oVirt metrics store running. I loaded sample > dashboards, searches and visualizations in to Kibana from > /etc/ovirt-engine-metrics/dashboards-examples. When importing searches and > visualizations there are warnings about missing index patterns. > > > > It appears that the "VM" dashboard is completely broken, no stats are > showing on it at all including simple stats such as running VM count. > > > > The other two dashboards Hosts and System are working and showing all > stats (sans VM count on the host dashboard). > > > > I believe I have a cash here of either missing indexes or potentially an > issue with the example dashboards? I can see that collectd is running on > all hosts and has the virt plugin loaded. > > > > What part of the config is responsible for suppling the VM > information/indexes? > >

2 2

Uploading disk images (oVirt 4.3.3.1)
by adrianquintero＠gmail.com 03 Jun '19

03 Jun '19

Hi, I have an issue while trying to upload disk images thru the Web UI. "Connection to ovirt-imageio-proxy service has failed. Make sure the service is installed, configured, and ovirt-engine certificate is registered as a valid CA in the browser." My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to network restrictions I had to set rules in order to reach our ovirt-engine ovirt-engine.mydomain.com = 192.168.0.45 For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80 So as you can see I need to hit the ovirt-engine using ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the 11-setup-sso.conf file and adding "SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/" I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able to http://ovirt-engine.mydomain.otherstuff.com I know it might be related to the certificates but I need to be able to upload disk images using both URLs. any ideas?

3 6

ovirt metrics - vm dashboard not working
by Jayme 03 Jun '19

03 Jun '19

I finally managed to get oVirt metrics store running. I loaded sample dashboards, searches and visualizations in to Kibana from /etc/ovirt-engine-metrics/dashboards-examples. When importing searches and visualizations there are warnings about missing index patterns. It appears that the "VM" dashboard is completely broken, no stats are showing on it at all including simple stats such as running VM count. The other two dashboards Hosts and System are working and showing all stats (sans VM count on the host dashboard). I believe I have a cash here of either missing indexes or potentially an issue with the example dashboards? I can see that collectd is running on all hosts and has the virt plugin loaded. What part of the config is responsible for suppling the VM information/indexes?

2 2

Re: option to remove a specific VM greyed out
by Strahil 03 Jun '19

03 Jun '19

Maybe, there is a deletion protection? Just go to edit and uncheck it. Best Regards, Strahil NikolovOn Jun 3, 2019 17:46, Jayme <jaymef(a)gmail.com> wrote: > > Running latest stable 4.3. I have one particular VM that is shutdown but options for removal are greyed out in the admin gui. I tried starting it and shutting it down again but still the options are not-selectable. However, they are for other VMs. > > Any idea what is different about this VM that is preventing removal from the GUI? > >

1 0

option to remove a specific VM greyed out
by Jayme 03 Jun '19

03 Jun '19

Running latest stable 4.3. I have one particular VM that is shutdown but options for removal are greyed out in the admin gui. I tried starting it and shutting it down again but still the options are not-selectable. However, they are for other VMs. Any idea what is different about this VM that is preventing removal from the GUI?

2 2

Re: Gluster Deployment Failed - No Medium Found
by Strahil 03 Jun '19

03 Jun '19

Aanother option - you do not have blacklist section in multipath (requires rebuild of initramfs + reboot). Best Regards, Strahil NikolovOn Jun 3, 2019 14:49, Sachidananda URS <surs(a)redhat.com> wrote: > > Hi Stephen, > > > On Mon, Jun 3, 2019 at 3:57 PM <smcintosh(a)tradeprint.co.uk> wrote: >> >> Good Morning, >> >> I'm completely new to this and I'm testing setting up a Gluster environment with Ovirt. However, my deployment keeps fails and I don't understand what it means. Any assistance would be much appreciated. Please see error below... >> >> Error Message >> >> TASK [gluster.infra/roles/backend_setup : Create volume groups] **************** >> failed: [ov1.test1.lan] (item={u'vgname': u'gluster_vg_sdb', u'pvname': u'/dev/sdb'}) => {"changed": false, "err": " /dev/sdb: open failed: No medium found\n Device /dev/sdb excluded by a filter.\n", "item": {"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}, "msg": "Creating physical volume '/dev/sdb' failed", "rc": 5} > > > One of the reasons for this is, the device could be having an existing partition table information. > > Can you please run the command: > > wipefs -a /dev/sdb > > On all the nodes and try again? > > -sachi >

1 0

Westmere CPU Family
by Vrgotic, Marko 03 Jun '19

03 Jun '19

Dear oVirt, For a strange reason I am convinced I have read somewhere that with 4.3 oVirt, the CPU family Westmere will not be supported any longer. Still, I see it in dropdown list after upgradingfrom 4.2 to 4.3, also after installing fresh 4.3. I also see it in oVirt documentation. Can someone tell me if its actually supported and if its going to be “discontinued” in 4.4 maybe? Thank you. Marko Vrgotic ActiveVideo

2 1

Gluster Deployment Failed - No Medium Found
by smcintosh＠tradeprint.co.uk 03 Jun '19

03 Jun '19

Good Morning, I'm completely new to this and I'm testing setting up a Gluster environment with Ovirt. However, my deployment keeps fails and I don't understand what it means. Any assistance would be much appreciated. Please see error below... Error Message TASK [gluster.infra/roles/backend_setup : Create volume groups] **************** failed: [ov1.test1.lan] (item={u'vgname': u'gluster_vg_sdb', u'pvname': u'/dev/sdb'}) => {"changed": false, "err": " /dev/sdb: open failed: No medium found\n Device /dev/sdb excluded by a filter.\n", "item": {"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}, "msg": "Creating physical volume '/dev/sdb' failed", "rc": 5} failed: [ov3.test1.lan] (item={u'vgname': u'gluster_vg_sdb', u'pvname': u'/dev/sdb'}) => {"changed": false, "err": " /dev/sdb: open failed: No medium found\n Device /dev/sdb excluded by a filter.\n", "item": {"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}, "msg": "Creating physical volume '/dev/sdb' failed", "rc": 5} failed: [ov2.test1.lan] (item={u'vgname': u'gluster_vg_sdb', u'pvname': u'/dev/sdb'}) => {"changed": false, "err": " /dev/sdb: open failed: No medium found\n Device /dev/sdb excluded by a filter.\n", "item": {"pvname": "/dev/sdb", "vgname": "gluster_vg_sdb"}, "msg": "Creating physical volume '/dev/sdb' failed", "rc": 5} NO MORE HOSTS LEFT ************************************************************* NO MORE HOSTS LEFT ************************************************************* to retry, use: --limit @/usr/share/cockpit/ovirt-dashboard/ansible/hc_wizard.retry PLAY RECAP ********************************************************************* ov1.test1.lan : ok=10 changed=0 unreachable=0 failed=1 ov2.test1.lan : ok=10 changed=0 unreachable=0 failed=1 ov3.test1.lan : ok=10 changed=0 unreachable=0 failed=1 Any assistance would be much appreciated. Regards Stephen

2 1

Nvme over fabric array support through OVirt MANAGED_BLOCK_STORAGE Domain
by amit1.kumar＠intel.com 03 Jun '19

03 Jun '19

for an NVMe over fabric storage array that supports Cinder backend plugin, is it possible to use MANAGED_BLOCK_STORAGE domain to configure Virtual disk? in this case, is it required to have a single Virtual disk accessible from all the VDSM hosts (within the cluster) to support VM migration? Thanks, Amit

3 4