Re: [ovirt-users] Ovirt 4.0 and EL 7.4

10 Oct 2017


      This is a multi-part message in MIME format.
--------------ED270F24CD897F828881C4C8
Content-Type: text/plain;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hi=2C

I=27ve redeployed a node with 7=2E3 to fix this issue but got the same=20=

errors with ovirt 4=2E0=2E

    MainThread=3A=3ADEBUG=3A=3A2017-10-10
    18=3A30=3A30=2C945=3A=3Aupgrade=3A=3A90=3A=3Aupgrade=3A=3A=28apply=5Fup=
grade=29 Running upgrade
    upgrade-unified-persistence
    MainThread=3A=3ADEBUG=3A=3A2017-10-10
    18=3A30=3A30=2C951=3A=3Alibvirtconnection=3A=3A160=3A=3Aroot=3A=3A=28ge=
t=29 trying to connect
    libvirt
    MainThread=3A=3AERROR=3A=3A2017-10-10
    18=3A30=3A41=2C125=3A=3Aupgrade=3A=3A94=3A=3Aupgrade=3A=3A=28apply=5Fup=
grade=29 Failed to run
    upgrade-unified-persistence
    Traceback =28most recent call last=29=3A
       File =22/usr/lib/python2=2E7/site-packages/vdsm/tool/upgrade=2Epy=22=
=2C
    line 92=2C in apply=5Fupgrade
         upgrade=2Erun=28ns=2C args=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersistence=
=2Epy=22=2C
    line 195=2C in run
         run=28=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersistence=
=2Epy=22=2C
    line 46=2C in run
         networks=2C bondings =3D =5FgetNetInfo=28=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersistence=
=2Epy=22=2C
    line 132=2C in =5FgetNetInfo
         netinfo =3D NetInfo=28netswitch=2Enetinfo=28=29=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/network/netswitch=2Epy=22=2C=
 line
    298=2C in netinfo
         =5Fnetinfo =3D netinfo=5Fget=28compatibility=3Dcompatibility=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/network/netinfo/cache=2Epy=
=22=2C
    line 109=2C in get
         return =5Fget=28vdsmnets=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/network/netinfo/cache=2Epy=
=22=2C
    line 70=2C in =5Fget
         libvirt=5Fnets =3D libvirt=2Enetworks=28=29
       File =22/usr/lib/python2=2E7/site-packages/vdsm/network/libvirt=2Epy=
=22=2C
    line 113=2C in networks
         conn =3D libvirtconnection=2Eget=28=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/libvirtconnection=2Epy=22=2C=
 line
    163=2C in get
         password=29
       File
    =22/usr/lib/python2=2E7/site-packages/vdsm/libvirtconnection=2Epy=22=2C=
 line
    99=2C in open=5Fconnection
         return utils=2Eretry=28libvirtOpen=2C timeout=3D10=2C sleep=3D0=2E=
2=29
       File =22/usr/lib/python2=2E7/site-packages/vdsm/utils=2Epy=22=2C lin=
e 547=2C
    in retry
         return func=28=29
       File =22/usr/lib64/python2=2E7/site-packages/libvirt=2Epy=22=2C line=
 105=2C
    in openAuth
         if ret is None=3Araise libvirtError=28=27virConnectOpenAuth=28=29=
 failed=27=29
    libvirtError=3A authentication failed=3A authentication failed


    Oct 10 19=3A35=3A55 host1 sasldblistusers2=3A =5Fsasldb=5Fgetkeyhandle=
 has failed

    Oct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=2E002+000=
0=3A 13660=3A
    error =3A virNetSASLSessionListMechanisms=3A390 =3A internal error=3A c=
annot
    list SASL mechanisms -4 =28SASL=28-4=29=3A no mechanism available=3A In=
ternal
    Error -4 in server=2Ec near line 1757=29
    Oct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=2E002+000=
0=3A 13660=3A
    error =3A remoteDispatchAuthSaslInit=3A3411 =3A authentication failed=
=3A
    authentication failed
    Oct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=2E002+000=
0=3A 13650=3A
    error =3A virNetSocketReadWire=3A1808 =3A End of file while reading dat=
a=3A
    Input/output error
    Oct 10 19=3A36=3A20 host1 vdsm-tool=3A libvirt=3A XML-RPC error =3A
    authentication failed=3A authentication failed
    Oct 10 19=3A36=3A20 host1 systemd=3A vdsm-network=2Eservice=3A control=
 process
    exited=2C code=3Dexited status=3D1
    Oct 10 19=3A36=3A20 host1 systemd=3A Failed to start Virtual Desktop
    Server Manager network restoration=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A Dependency failed for Virtual Desk=
top
    Server Manager=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A Dependency failed for MOM instance=

    configured for VDSM purposes=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A Job mom-vdsm=2Eservice/start faile=
d
    with result =27dependency=27=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A Job vdsmd=2Eservice/start failed w=
ith
    result =27dependency=27=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A Unit vdsm-network=2Eservice entere=
d
    failed state=2E
    Oct 10 19=3A36=3A20 host1 systemd=3A vdsm-network=2Eservice failed=2E=


cat /etc/redhat-release
CentOS Linux release 7=2E3=2E1611 =28Core=29

cat /etc/libvirt/passwd=2Edb
cat=3A /etc/libvirt/passwd=2Edb=3A No such file or directory

    vdsm-4=2E18=2E21-1=2Eel7=2Ecentos=2Ex86=5F64
    vdsm-api-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-xmlrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-hook-vmfex-dev-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-cli-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-python-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-yajsonrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-infra-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch
    vdsm-jsonrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch

    libvirt-daemon-driver-storage-scsi-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-rbd-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-nodedev-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-client-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-python-2=2E0=2E0-2=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-network-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-mpath-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-iscsi-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-logical-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-secret-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-interface-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-kvm-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-libs-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-core-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-qemu-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-config-nwfilter-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-disk-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-storage-gluster-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-lock-sanlock-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-3=2E2=2E0-1=2Eel7=2Ex86=5F64
    libvirt-daemon-driver-nwfilter-3=2E2=2E0-1=2Eel7=2Ex86=5F64

    ovirt-imageio-common-0=2E4=2E0-1=2Eel7=2Enoarch
    ovirt-release40-4=2E0=2E6-2=2Eel7=2Ecentos=2Enoarch
    ovirt-vmconsole-1=2E0=2E4-1=2Eel7=2Ecentos=2Enoarch
    ovirt-imageio-daemon-0=2E4=2E0-1=2Eel7=2Enoarch
    ovirt-vmconsole-host-1=2E0=2E4-1=2Eel7=2Ecentos=2Enoarch

Also tried with =22mech=5Flist=3A digest-md5=22

    cat /etc/sasl2/libvirt=2Econf =7Cgrep mech=5Flist
    =23mech=5Flist=3A gssapi
    mech=5Flist=3A digest-md5
    =23mech=5Flist=3A scram-sha-1
    =23mech=5Flist=3A scram-sha-1 gssapi


On 10/05/2017 01=3A26 PM=2C Pavel Gashev wrote=3A
=3E Full /etc/sasl2/libvirt=2Econf=3A
=3E mech=5Flist=3A digest-md5
=3E sasldb=5Fpath=3A /etc/libvirt/passwd=2Edb
=3E
=3E Also note that VDSM has to be patched to work on 7=2E4 with no issues=
=2E oVirt 3=2E6 and 4=2E1 have required fixes=2C but oVirt 4=2E0 doesn=
=E2=80=99t=2E
=3E
=3E On 04/10/2017=2C 18=3A44=2C =22users-bounces=40ovirt=2Eorg on behalf of=
 Alan Griffiths=22 =3Cusers-bounces=40ovirt=2Eorg on behalf of apgriffiths7=
9=40gmail=2Ecom=3E wrote=3A
=3E
=3E      That didn=27t seem to make any difference=2E
=3E     =20
=3E      I can make it work by disabling authentication
=3E     =20
=3E      auth=5Funix=5Frw=3D=22none=22  in /etc/libvirt/libvirtd=2Econf
=3E     =20
=3E      On 4 October 2017 at 15=3A05=2C VONDRA Alain =3CAVONDRA=40unicef=
=2Efr=3E wrote=3A
=3E      =3E Hi=2C
=3E      =3E Did you modify your /etc/sasl2/libvirt=2Econf=2C because the u=
pdate has modify the way to authenticate from md5 to gssapi=2E
=3E      =3E
=3E      =3E If not just change this line =3A
=3E      =3E mech=5Flist=3A gssapi
=3E      =3E to
=3E      =3E mech=5Flist=3A digest-md5
=3E      =3E
=3E      =3E And restart services
=3E      =3E
=3E      =3E As mentioned in the libvirt=2Econf file =3A
=3E      =3E
=3E      =3E =23 NB=2C previously DIGEST-MD5 was set as the default mechani=
sm for
=3E      =3E =23 libvirt=2E Per RFC 6331 this is vulnerable to many serious=
 security
=3E      =3E =23 flaws and should no longer be used=2E Thus GSSAPI is now t=
he default=2E
=3E      =3E =23
=3E      =3E =23 To use GSSAPI requires that a libvirtd service principal i=
s
=3E      =3E =23 added to the Kerberos server for each host running libvirt=
d=2E
=3E      =3E =23 This principal needs to be exported to the keytab file lis=
ted below
=3E      =3E
=3E      =3E Alain
=3E      =3E
=3E      =3E
=3E      =3E
=3E      =3E Alain VONDRA
=3E      =3E
=3E      =3E Charg=C3=A9 d=27Exploitation et de S=C3=A9curit=C3=A9 des Syst=
=C3=A8mes d=27Information
=3E      =3E Direction Administrative et Financi=C3=A8re
=3E      =3E +33 1 44 39 77 76
=3E      =3E
=3E      =3E UNICEF France
=3E      =3E 3 rue Duguay Trouin  75006
=3E      =3E PARIS
=3E      =3E www=2Eunicef=2Efr
=3E      =3E -----Message d=27origine-----
=3E      =3E De =3A users-bounces=40ovirt=2Eorg =5Bmailto=3Ausers-bounces=
=40ovirt=2Eorg=5D De la part de Alan Griffiths
=3E      =3E Envoy=C3=A9 =3A mercredi 4 octobre 2017 15=3A50
=3E      =3E =C3=80 =3A Ovirt Users =3Cusers=40ovirt=2Eorg=3E
=3E      =3E Objet =3A =5Bovirt-users=5D Ovirt 4=2E0 and EL 7=2E4
=3E      =3E
=3E      =3E Hi=2C
=3E      =3E
=3E      =3E Is 4=2E0 supported/known to work on CentOS 7=2E4=3F
=3E      =3E
=3E      =3E I=27ve just tried to upgrade one of the hosts in my lab from 7=
=2E3 to 7=2E4 and now vdsm-network fails to start with
=3E      =3E
=3E      =3E vdsm-tool=3A libvirt=3A XML-RPC error =3A authentication faile=
d=3A authentication failed
=3E      =3E
=3E      =3E To even get this far I had to exclude gluster packages as 7=2E=
4 introduces 3=2E8 but ovirt 4=2E0 repo is still on 3=2E7=2E
=3E      =3E
=3E      =3E So=2C more generally=2E If I=27m on ovirt 4=2E0=2C gluster 3=
=2E7 and EL 7=2E3=2E What is the best ordering for getting to ovirt 4=2E1 a=
nd EL 7=2E4=3F
=3E      =3E
=3E      =3E Thanks=2C
=3E      =3E
=3E      =3E Alan
=3E      =3E =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F
=3E      =3E Users mailing list
=3E      =3E Users=40ovirt=2Eorg
=3E      =3E http=3A//lists=2Eovirt=2Eorg/mailman/listinfo/users
=3E      =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=

=3E      Users mailing list
=3E      Users=40ovirt=2Eorg
=3E      http=3A//lists=2Eovirt=2Eorg/mailman/listinfo/users
=3E     =20
=3E
=3E =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
=3E Users mailing list
=3E Users=40ovirt=2Eorg
=3E http=3A//lists=2Eovirt=2Eorg/mailman/listinfo/users


Met vriendelijke groet=2C With kind regards=2C

Jorick Astrego

Netbulae Virtualization Experts=20

----------------

=09Tel=3A 053 20 30 270 =09info=40netbulae=2Eeu =09Staalsteden 4-3A =09KvK=
 08198180
 =09Fax=3A 053 20 30 271 =09www=2Enetbulae=2Eeu =097547 TA Enschede =09BTW=
 NL821234584B01

----------------


--------------ED270F24CD897F828881C4C8
Content-Type: text/html;
	charset="utf-8"
Content-Transfer-Encoding: quoted-printable

=3Chtml=3E
  =3Chead=3E
    =3Cmeta content=3D=22text/html=3B charset=3Dutf-8=22 http-equiv=3D=22Co=
ntent-Type=22=3E
  =3C/head=3E
  =3Cbody text=3D=22=23000000=22 bgcolor=3D=22=23FFFFFF=22=3E
    =3Cp=3EHi=2C=3C/p=3E
    =3Cp=3EI=27ve redeployed a node with 7=2E3 to fix this issue but got th=
e
      same errors with ovirt 4=2E0=2E =3Cbr=3E
    =3C/p=3E
    =3Cblockquote=3E
      =3Cp=3EMainThread=3A=3ADEBUG=3A=3A2017-10-10
        18=3A30=3A30=2C945=3A=3Aupgrade=3A=3A90=3A=3Aupgrade=3A=3A=28apply=
=5Fupgrade=29 Running
        upgrade upgrade-unified-persistence=3Cbr=3E
        MainThread=3A=3ADEBUG=3A=3A2017-10-10
        18=3A30=3A30=2C951=3A=3Alibvirtconnection=3A=3A160=3A=3Aroot=3A=3A=
=28get=29 trying to
        connect libvirt=3Cbr=3E
        MainThread=3A=3AERROR=3A=3A2017-10-10
        18=3A30=3A41=2C125=3A=3Aupgrade=3A=3A94=3A=3Aupgrade=3A=3A=28apply=
=5Fupgrade=29 Failed to
        run upgrade-unified-persistence=3Cbr=3E
        Traceback =28most recent call last=29=3A=3Cbr=3E
        =C2=A0 File =22/usr/lib/python2=2E7/site-packages/vdsm/tool/upgrade=
=2Epy=22=2C
        line 92=2C in apply=5Fupgrade=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 upgrade=2Erun=28ns=2C args=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersisten=
ce=2Epy=22=2C
        line 195=2C in run=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 run=28=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersisten=
ce=2Epy=22=2C
        line 46=2C in run=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 networks=2C bondings =3D =5FgetNetInfo=28=29=3Cb=
r=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/tool/unified=5Fpersisten=
ce=2Epy=22=2C
        line 132=2C in =5FgetNetInfo=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 netinfo =3D NetInfo=28netswitch=2Enetinfo=28=29=
=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/network/netswitch=2Epy=
=22=2C
        line 298=2C in netinfo=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 =5Fnetinfo =3D netinfo=5Fget=28compatibility=3Dc=
ompatibility=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/network/netinfo/cache=2E=
py=22=2C
        line 109=2C in get=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 return =5Fget=28vdsmnets=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/network/netinfo/cache=2E=
py=22=2C
        line 70=2C in =5Fget=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 libvirt=5Fnets =3D libvirt=2Enetworks=28=29=3Cbr=
=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/network/libvirt=2Epy=22=
=2C line
        113=2C in networks=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 conn =3D libvirtconnection=2Eget=28=29=3Cbr=3E=

        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/libvirtconnection=2Epy=
=22=2C
        line 163=2C in get=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 password=29=3Cbr=3E
        =C2=A0 File
        =22/usr/lib/python2=2E7/site-packages/vdsm/libvirtconnection=2Epy=
=22=2C
        line 99=2C in open=5Fconnection=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 return utils=2Eretry=28libvirtOpen=2C timeout=3D=
10=2C sleep=3D0=2E2=29=3Cbr=3E
        =C2=A0 File =22/usr/lib/python2=2E7/site-packages/vdsm/utils=2Epy=
=22=2C line
        547=2C in retry=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 return func=28=29=3Cbr=3E
        =C2=A0 File =22/usr/lib64/python2=2E7/site-packages/libvirt=2Epy=22=
=2C line
        105=2C in openAuth=3Cbr=3E
        =C2=A0=C2=A0=C2=A0 if ret is None=3Araise libvirtError=28=27virConn=
ectOpenAuth=28=29
        failed=27=29=3Cbr=3E
        libvirtError=3A authentication failed=3A authentication failed=3Cbr=
=3E
      =3C/p=3E
      =3Cp=3E=3Cbr=3E
      =3C/p=3E
      =3Cp=3EOct 10 19=3A35=3A55 host1 sasldblistusers2=3A =5Fsasldb=5Fgetk=
eyhandle
        has failed=3Cbr=3E
      =3C/p=3E
      =3Cp=3EOct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=
=2E002+0000=3A
        13660=3A error =3A virNetSASLSessionListMechanisms=3A390 =3A intern=
al
        error=3A cannot list SASL mechanisms -4 =28SASL=28-4=29=3A no mecha=
nism
        available=3A Internal Error -4 in server=2Ec near line 1757=29=3Cbr=
=3E
        Oct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=2E002=
+0000=3A
        13660=3A error =3A remoteDispatchAuthSaslInit=3A3411 =3A authentica=
tion
        failed=3A authentication failed=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 libvirtd=3A 2017-10-10 17=3A36=3A20=2E002=
+0000=3A
        13650=3A error =3A virNetSocketReadWire=3A1808 =3A End of file whil=
e
        reading data=3A Input/output error=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 vdsm-tool=3A libvirt=3A XML-RPC error=20=
=3A
        authentication failed=3A authentication failed=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A vdsm-network=2Eservice=3A cont=
rol
        process exited=2C code=3Dexited status=3D1=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Failed to start Virtual Deskto=
p
        Server Manager network restoration=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Dependency failed for Virtual=

        Desktop Server Manager=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Dependency failed for MOM
        instance configured for VDSM purposes=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Job mom-vdsm=2Eservice/start f=
ailed
        with result =27dependency=27=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Job vdsmd=2Eservice/start fail=
ed
        with result =27dependency=27=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A Unit vdsm-network=2Eservice en=
tered
        failed state=2E=3Cbr=3E
        Oct 10 19=3A36=3A20 host1 systemd=3A vdsm-network=2Eservice failed=
=2E=3Cbr=3E
      =3C/p=3E
    =3C/blockquote=3E
    =3Cp=3E=3Cbr=3E
    =3C/p=3E
    =3Cp=3Ecat /etc/redhat-release =3Cbr=3E
      CentOS Linux release 7=2E3=2E1611 =28Core=29 =3Cbr=3E
    =3C/p=3E
    =3Cp=3Ecat /etc/libvirt/passwd=2Edb=3Cbr=3E
      cat=3A /etc/libvirt/passwd=2Edb=3A No such file or directory=3Cbr=3E=

    =3C/p=3E
    =3Cblockquote=3E
      =3Cp=3Evdsm-4=2E18=2E21-1=2Eel7=2Ecentos=2Ex86=5F64=3Cbr=3E
        vdsm-api-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-xmlrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-hook-vmfex-dev-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E=

        vdsm-cli-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-python-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-yajsonrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-infra-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        vdsm-jsonrpc-4=2E18=2E21-1=2Eel7=2Ecentos=2Enoarch=3C/p=3E
      =3Cp=3Elibvirt-daemon-driver-storage-scsi-3=2E2=2E0-1=2Eel7=2Ex86=5F6=
4=3Cbr=3E
        libvirt-daemon-driver-storage-rbd-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=
=3E
        libvirt-daemon-driver-nodedev-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

        libvirt-client-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-python-2=2E0=2E0-2=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-daemon-driver-network-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

        libvirt-daemon-driver-storage-mpath-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3C=
br=3E
        libvirt-daemon-driver-storage-iscsi-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3C=
br=3E
        libvirt-daemon-driver-storage-logical-3=2E2=2E0-1=2Eel7=2Ex86=5F64=
=3Cbr=3E
        libvirt-daemon-driver-storage-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

        libvirt-daemon-driver-secret-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

        libvirt-daemon-driver-interface-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=
=3E
        libvirt-daemon-kvm-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-libs-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-daemon-driver-storage-core-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cb=
r=3E
        libvirt-daemon-driver-qemu-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-daemon-config-nwfilter-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

        libvirt-daemon-driver-storage-disk-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cb=
r=3E
        libvirt-daemon-driver-storage-gluster-3=2E2=2E0-1=2Eel7=2Ex86=5F64=
=3Cbr=3E
        libvirt-lock-sanlock-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-daemon-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E
        libvirt-daemon-driver-nwfilter-3=2E2=2E0-1=2Eel7=2Ex86=5F64=3Cbr=3E=

      =3C/p=3E
      =3Cp=3Eovirt-imageio-common-0=2E4=2E0-1=2Eel7=2Enoarch=3Cbr=3E
        ovirt-release40-4=2E0=2E6-2=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        ovirt-vmconsole-1=2E0=2E4-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        ovirt-imageio-daemon-0=2E4=2E0-1=2Eel7=2Enoarch=3Cbr=3E
        ovirt-vmconsole-host-1=2E0=2E4-1=2Eel7=2Ecentos=2Enoarch=3Cbr=3E
        =3Cbr=3E
      =3C/p=3E
    =3C/blockquote=3E
    =3Cp=3EAlso tried with =22mech=5Flist=3A digest-md5=22=3Cbr=3E
    =3C/p=3E
    =3Cblockquote=3E
      =3Cp=3Ecat /etc/sasl2/libvirt=2Econf =7Cgrep mech=5Flist=3Cbr=3E
        =23mech=5Flist=3A gssapi=3Cbr=3E
        mech=5Flist=3A digest-md5=3Cbr=3E
        =23mech=5Flist=3A scram-sha-1=3Cbr=3E
        =23mech=5Flist=3A scram-sha-1 gssapi=3Cbr=3E
        =3Cbr=3E
      =3C/p=3E
    =3C/blockquote=3E
    =3Cp=3E=3Cbr=3E
    =3C/p=3E
    =3Cblockquote=3E
    =3C/blockquote=3E
    =3Cdiv class=3D=22moz-cite-prefix=22=3EOn 10/05/2017 01=3A26 PM=2C Pave=
l Gashev
      wrote=3A=3Cbr=3E
    =3C/div=3E
    =3Cblockquote
      cite=3D=22mid=3A762B546B-3999-4786-893A-B57F3CE8A312=40acronis=2Ecom=
=22
      type=3D=22cite=22=3E
      =3Cpre wrap=3D=22=22=3EFull /etc/sasl2/libvirt=2Econf=3A
mech=5Flist=3A digest-md5
sasldb=5Fpath=3A /etc/libvirt/passwd=2Edb

Also note that VDSM has to be patched to work on 7=2E4 with no issues=2E oV=
irt 3=2E6 and 4=2E1 have required fixes=2C but oVirt 4=2E0 doesn=E2=80=99t=
=2E=20

On 04/10/2017=2C 18=3A44=2C =3Ca class=3D=22moz-txt-link-rfc2396E=22 href=
=3D=22mailto=3Ausers-bounces=40ovirt=2EorgonbehalfofAlanGriffiths=22=3E=22u=
sers-bounces=40ovirt=2Eorg on behalf of Alan Griffiths=22=3C/a=3E =3Ca clas=
s=3D=22moz-txt-link-rfc2396E=22 href=3D=22mailto=3Ausers-bounces=40ovirt=2E=
orgonbehalfofapgriffiths79=40gmail=2Ecom=22=3E=26lt=3Busers-bounces=40ovirt=
=2Eorg on behalf of apgriffiths79=40gmail=2Ecom=26gt=3B=3C/a=3E wrote=3A

    That didn=27t seem to make any difference=2E
   =20
    I can make it work by disabling authentication
   =20
    auth=5Funix=5Frw=3D=22none=22  in /etc/libvirt/libvirtd=2Econf
   =20
    On 4 October 2017 at 15=3A05=2C VONDRA Alain =3Ca class=3D=22moz-txt-li=
nk-rfc2396E=22 href=3D=22mailto=3AAVONDRA=40unicef=2Efr=22=3E=26lt=3BAVONDR=
A=40unicef=2Efr=26gt=3B=3C/a=3E wrote=3A
    =26gt=3B Hi=2C
    =26gt=3B Did you modify your /etc/sasl2/libvirt=2Econf=2C because the u=
pdate has modify the way to authenticate from md5 to gssapi=2E
    =26gt=3B
    =26gt=3B If not just change this line =3A
    =26gt=3B mech=5Flist=3A gssapi
    =26gt=3B to
    =26gt=3B mech=5Flist=3A digest-md5
    =26gt=3B
    =26gt=3B And restart services
    =26gt=3B
    =26gt=3B As mentioned in the libvirt=2Econf file =3A
    =26gt=3B
    =26gt=3B =23 NB=2C previously DIGEST-MD5 was set as the default mechani=
sm for
    =26gt=3B =23 libvirt=2E Per RFC 6331 this is vulnerable to many serious=
 security
    =26gt=3B =23 flaws and should no longer be used=2E Thus GSSAPI is now t=
he default=2E
    =26gt=3B =23
    =26gt=3B =23 To use GSSAPI requires that a libvirtd service principal i=
s
    =26gt=3B =23 added to the Kerberos server for each host running libvirt=
d=2E
    =26gt=3B =23 This principal needs to be exported to the keytab file lis=
ted below
    =26gt=3B
    =26gt=3B Alain
    =26gt=3B
    =26gt=3B
    =26gt=3B
    =26gt=3B Alain VONDRA
    =26gt=3B
    =26gt=3B Charg=C3=A9 d=27Exploitation et de S=C3=A9curit=C3=A9 des Syst=
=C3=A8mes d=27Information
    =26gt=3B Direction Administrative et Financi=C3=A8re
    =26gt=3B +33 1 44 39 77 76
    =26gt=3B
    =26gt=3B UNICEF France
    =26gt=3B 3 rue Duguay Trouin  75006
    =26gt=3B PARIS
    =26gt=3B =3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22http=3A/=
/www=2Eunicef=2Efr=22=3Ewww=2Eunicef=2Efr=3C/a=3E
    =26gt=3B -----Message d=27origine-----
    =26gt=3B De =3A =3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22m=
ailto=3Ausers-bounces=40ovirt=2Eorg=22=3Eusers-bounces=40ovirt=2Eorg=3C/a=
=3E =5B=3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22mailto=3Ausers-bo=
unces=40ovirt=2Eorg=22=3Emailto=3Ausers-bounces=40ovirt=2Eorg=3C/a=3E=5D De=
 la part de Alan Griffiths
    =26gt=3B Envoy=C3=A9 =3A mercredi 4 octobre 2017 15=3A50
    =26gt=3B =C3=80 =3A Ovirt Users =3Ca class=3D=22moz-txt-link-rfc2396E=
=22 href=3D=22mailto=3Ausers=40ovirt=2Eorg=22=3E=26lt=3Busers=40ovirt=2Eorg=
=26gt=3B=3C/a=3E
    =26gt=3B Objet =3A =5Bovirt-users=5D Ovirt 4=2E0 and EL 7=2E4
    =26gt=3B
    =26gt=3B Hi=2C
    =26gt=3B
    =26gt=3B Is 4=2E0 supported/known to work on CentOS 7=2E4=3F
    =26gt=3B
    =26gt=3B I=27ve just tried to upgrade one of the hosts in my lab from 7=
=2E3 to 7=2E4 and now vdsm-network fails to start with
    =26gt=3B
    =26gt=3B vdsm-tool=3A libvirt=3A XML-RPC error =3A authentication faile=
d=3A authentication failed
    =26gt=3B
    =26gt=3B To even get this far I had to exclude gluster packages as 7=2E=
4 introduces 3=2E8 but ovirt 4=2E0 repo is still on 3=2E7=2E
    =26gt=3B
    =26gt=3B So=2C more generally=2E If I=27m on ovirt 4=2E0=2C gluster 3=
=2E7 and EL 7=2E3=2E What is the best ordering for getting to ovirt 4=2E1 a=
nd EL 7=2E4=3F
    =26gt=3B
    =26gt=3B Thanks=2C
    =26gt=3B
    =26gt=3B Alan
    =26gt=3B =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F
    =26gt=3B Users mailing list
    =26gt=3B =3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22mailto=
=3AUsers=40ovirt=2Eorg=22=3EUsers=40ovirt=2Eorg=3C/a=3E
    =26gt=3B =3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22http=3A//li=
sts=2Eovirt=2Eorg/mailman/listinfo/users=22=3Ehttp=3A//lists=2Eovirt=2Eorg/=
mailman/listinfo/users=3C/a=3E
    =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
    Users mailing list
    =3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22mailto=3AUsers=40=
ovirt=2Eorg=22=3EUsers=40ovirt=2Eorg=3C/a=3E
    =3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22http=3A//lists=2Eovi=
rt=2Eorg/mailman/listinfo/users=22=3Ehttp=3A//lists=2Eovirt=2Eorg/mailman/l=
istinfo/users=3C/a=3E
   =20

=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
Users mailing list
=3Ca class=3D=22moz-txt-link-abbreviated=22 href=3D=22mailto=3AUsers=40ovir=
t=2Eorg=22=3EUsers=40ovirt=2Eorg=3C/a=3E
=3Ca class=3D=22moz-txt-link-freetext=22 href=3D=22http=3A//lists=2Eovirt=
=2Eorg/mailman/listinfo/users=22=3Ehttp=3A//lists=2Eovirt=2Eorg/mailman/lis=
tinfo/users=3C/a=3E
=3C/pre=3E
    =3C/blockquote=3E
    =3Cbr=3E
 =20=
=3CBR /=3E
=3CBR /=3E
=3Cb style=3D=22color=3A=23604c78=22=3E=3C/b=3E=3Cbr=3E=3Cbr=3E=3Cspan styl=
e=3D=22color=3A=23604c78=3B=22=3E=3Cfont color=3D=22000000=22=3E=3Cspan sty=
le=3D=22mso-fareast-language=3Aen-gb=3B=22 lang=3D=22NL=22=3EMet vriendelij=
ke groet=2C With kind regards=2C=3Cbr=3E=3Cbr=3EJorick Astrego=3Cbr=3E=3C/s=
pan=3E=3C/font=3E=3C/span=3E=3Cb style=3D=22color=3A=23604c78=22=3E=3Cbr=3E=
Netbulae Virtualization Experts =3C/b=3E=3Cbr=3E=3Chr style=3D=22border=3An=
one=3Bborder-top=3A1px solid =23ccc=3B=22=3E=3Ctable style=3D=22width=3A 52=
2px=22=3E=3Ctbody=3E=3Ctr=3E=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A=
 10px=22=3ETel=3A  053 20 30 270=3C/td=3E    =3Ctd style=3D=22width=3A 130p=
x=3Bfont-size=3A 10px=22=3Einfo=40netbulae=2Eeu=3C/td=3E    =3Ctd style=3D=
=22width=3A 130px=3Bfont-size=3A 10px=22=3EStaalsteden 4-3A=3C/td=3E   =20=
=3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EKvK 08198180=3C/td=
=3E=3C/tr=3E=3Ctr=3E    =3Ctd style=3D=22width=3A 130px=3Bfont-size=3A 10px=
=22=3EFax=3A 053 20 30 271=3C/td=3E    =3Ctd style=3D=22width=3A 130px=3Bfo=
nt-size=3A 10px=22=3Ewww=2Enetbulae=2Eeu=3C/td=3E    =3Ctd style=3D=22width=
=3A 130px=3Bfont-size=3A 10px=22=3E7547 TA Enschede=3C/td=3E    =3Ctd style=
=3D=22width=3A 130px=3Bfont-size=3A 10px=22=3EBTW NL821234584B01=3C/td=3E=
=3C/tr=3E=3C/tbody=3E=3C/table=3E=3Cbr=3E=3Chr style=3D=22border=3Anone=3Bb=
order-top=3A1px solid =23ccc=3B=22=3E=3CBR /=3E
=3C/body=3E
=3C/html=3E


--------------ED270F24CD897F828881C4C8--