6:18 p.m.
------=_Part_8758566_407473350.1418224697280
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Answering to message 2 (bond mode 4):
* Mode 4 (802.3ad) This mode is known as Dynamic Link Aggregation mode. It creates
aggregation groups that share the same speed and duplex settings. This mode requires a
switch that supports IEEE 802.3ad Dynamic link.
Please try configuring your 4 Cisco ports as port-channel/channel-group in active with
LACP enabled capability on its ports.
Thanks in advance.
Best regards,
Nikolai
____________________
Nikolai Sednev
Senior Quality Engineer at Compute team
Red Hat Israel
34 Jerusalem Road,
Ra'anana, Israel 43501
Tel: +972 9 7692043
Mobile: +972 52 7342734
Email: nsednev(a)redhat.com
IRC: nsednev
----- Original Message -----
From: users-request(a)ovirt.org
To: users(a)ovirt.org
Sent: Wednesday, December 10, 2014 12:57:20 PM
Subject: Users Digest, Vol 39, Issue 50
Send Users mailing list submissions to
users(a)ovirt.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.ovirt.org/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request(a)ovirt.org
You can reach the person managing the list at
users-owner(a)ovirt.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Users digest..."
Today's Topics:
1. Fwd: Fwd: run ovirt-shell script like background job -
problem (Grzegorz Szypa)
2. oVirt bonding mode4 + cisco 2960 XR (??????? ????????)
3. Re: ??: 3.5 hosted engine: 2nd host Cannot acquire bridge
address (Sandro Bonazzola)
4. [QE][ACTION REQUIRED] oVirt 3.6.0 status (Sandro Bonazzola)
5. [QE][ACTION REQUIRED] oVirt 3.5.1 RC status (Sandro Bonazzola)
6. Re: [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
(Francesco Romani)
7. Re: Adding domain to oVirt to 3.5 issue (Alon Bar-Lev)
----------------------------------------------------------------------
Message: 1
Date: Wed, 10 Dec 2014 07:33:32 +0100
From: Grzegorz Szypa <grzegorz.szypa(a)gmail.com>
To: users(a)ovirt.org
Subject: [ovirt-users] Fwd: Fwd: run ovirt-shell script like
background job - problem
Message-ID:
<CACL97+jXMDgCqCyWB79E=MaMwEn1Xx3ew4BiRTHYtfbphy=veg(a)mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Problem is solved.
It must be install this:
yum update packages
not like this
rpm -i *.rpm
---------- Forwarded message ----------
From: Grzegorz Szypa <grzegorz.szypa(a)gmail.com>
Date: 2014-12-09 20:42 GMT+01:00
Subject: Re: [ovirt-users] Fwd: run ovirt-shell script like background job
- problem
To: Juan Hern?ndez <jhernand(a)redhat.com>
So i have a question:
When i install:
rpm -i ovirt-engine-sdk-python-3.5.0.7-1.el6.noarch.rpm
ovirt-engine-cli-3.5.0.5-1.el6.noarch.rpm
i got error conflict with current package ovirt-engine-3.4.x
It was all-in-one instalation in one server.
2014-12-09 10:32 GMT+01:00 Juan Hern?ndez <jhernand(a)redhat.com>:
On 12/08/2014 08:05 PM, Grzegorz Szypa wrote:
> So, i have a question.
>
> Is ovirt-engine-cli-3.5.0.2-1.el6.noarch compatible in ovirt-engine-3.4?
>
> Can install ovirt-engine-cli-3.5 on ovirt-engine-cli-3.4 and using him
> with landscape based on ovirt 3.4 ??
>
Yes, versions 3.5.x of ovirt-engine-cli and ovirt-engine-sdk-python (you
will need both) are compatible with version 3.4 of the engine.
> 2014-12-07 17:33 GMT+01:00 Juan Hern?ndez <jhernand(a)redhat.com
> <mailto:jhernand@redhat.com>>:
>
> On 12/07/2014 05:05 PM, Grzegorz Szypa wrote:
> > Hi,
> >
> > I have a problem with running ovirt-shell script, that it starting
> VMs.
> > In dialog mode it's fine, but in background no :(
> >
> > Example script:
> > ovirt-shell -E 'action vm WinSrv2012r2 start'
> >
> > I start this job in cron as root.
> >
> >
> > Have somebody idea??
> >
> > --
> > G.Sz.
> >
>
> We used to have bug that made ovirt-shell fail when there wasn't a
tty
> available (like when running from cron):
>
> ovirt-shell cannot run in cron (/dev/tty missing)
> https://bugzilla.redhat.com/1119412
>
> That was fixed in version 3.5.0.2, so make sure that you have at
least
> that version.
>
> If you still have problems please share the output of the ovirt-shell
> command.
>
> --
> Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
> 3?D, 28016 Madrid, Spain
> Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat
> S.L.
>
>
>
>
> --
> G.Sz.
>
>
>
> --
> G.Sz.
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
--
Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3?D, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat S.L.
--
G.Sz.
--
G.Sz.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.ovirt.org/pipermail/users/attachments/20141210/76801a84/atta...
------------------------------
Message: 2
Date: Wed, 10 Dec 2014 10:20:01 +0300
From: ??????? ???????? <mail.griffon(a)gmail.com>
To: "users(a)ovirt.org" <users(a)ovirt.org>
Subject: [ovirt-users] oVirt bonding mode4 + cisco 2960 XR
Message-ID:
<CAE85BH-VkK0PsdS=WQzmP61nYX2B-cE09tOEK8NpcuqYbANtCA(a)mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Hi, community!
I have made bond0 mode4 (eth0+eth1+eth2+eth3) by oVirt portal. It's work
well on CentOS 7 node.
How I can setup my cisco 2960 XR switch for work with this bond0 for
loadbalancing + aggregation (802.3ad)?
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.ovirt.org/pipermail/users/attachments/20141210/9fcded22/atta...
------------------------------
Message: 3
Date: Wed, 10 Dec 2014 08:37:32 +0100
From: Sandro Bonazzola <sbonazzo(a)redhat.com>
To: Robert Story <rstory(a)tislabs.com>
Cc: "users(a)ovirt.org" <users(a)ovirt.org>
Subject: Re: [ovirt-users] ??: 3.5 hosted engine: 2nd host Cannot
acquire bridge address
Message-ID: <5487F83C.2020704(a)redhat.com>
Content-Type: text/plain; charset=UTF-8
Il 09/12/2014 20:16, Robert Story ha scritto:
On Tue, 09 Dec 2014 10:33:51 +0100 Sandro wrote:
SB> > Looking at setup logs, you have:
SB> > OVEHOSTED_NETWORK/bridgeIf=str:'eth1.79'
SB> > [...]
SB> > which seems to fail matching REGEXP:
SB> >
SB> > _ADDRESS_RE = re.compile(
SB> > flags=re.VERBOSE,
SB> > pattern=r"""
SB> > \s+
SB> > inet
SB> > \s
SB> > (?P<address>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
SB> > .+
SB> > \s+
SB> > (?P<interface>\w+)
SB> > $
SB> > """
SB> > )
SB> >
SB> > I guess the match is failing due to the '.' in 'eth1.79'
SB>
SB> If you haven't already opened a BZ about it, please open one, thanks
https://bugzilla.redhat.com/show_bug.cgi?id=1172287
Thanks
Robert
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 4
Date: Wed, 10 Dec 2014 09:02:13 +0100
From: Sandro Bonazzola <sbonazzo(a)redhat.com>
To: "Users(a)ovirt.org" <Users(a)ovirt.org>, "devel(a)ovirt.org"
<devel(a)ovirt.org>
Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.6.0 status
Message-ID: <5487FE05.3010703(a)redhat.com>
Content-Type: text/plain; charset=iso-8859-15
Hi,
Release criteria discussion has been closed and wiki has been updated accordingly by Brian
[1][2].
Release management for 3.6.0 [3] has been updated with the accepted changes in release
criteria.
ACTION: Feature proposed for 3.6.0 must now be collected in the 3.6 Google doc [4] and
reviewed by maintainers.
Finished the review process, the remaining key milestones for this release will be
scheduled.
For reference, external project schedules we're tracking are:
Fedora 21: 2014-12-09 (RELEASED)
Fedora 22: no earlier than 2015-05-19
Foreman 1.8.0: 2015-03-01
GlusterFS 3.7: 2015-04-29
OpenStack Kilo: 2015-04-30
Two different proposals have been made about above scheduling [5]:
1) extend the cycle to 10 months for allowing to include a large feature set
2) reduce the cycle to less than 6 months and split features over 3.6 and 3.7
and we can also add
3) keep current 6 months cycle
The tracker bug for 3.6.0 [6] currently shows no blockers.
There are 460 bugs [7] targeted to 3.6.0.
Excluding node and documentation bugs we have 436 bugs [8] targeted to 3.6.0.
[1] http://www.ovirt.org/Release_Criteria_Template
[2] http://www.ovirt.org/Release_process
[3] http://www.ovirt.org/OVirt_3.6_Release_Management
[4] http://goo.gl/9X3G49
[5] http://lists.ovirt.org/pipermail/users/2014-November/028875.html
[6] https://bugzilla.redhat.com/show_bug.cgi?id=1155425
[7] http://goo.gl/zwkF3r
[8] http://goo.gl/ZbUiMc
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 5
Date: Wed, 10 Dec 2014 09:07:54 +0100
From: Sandro Bonazzola <sbonazzo(a)redhat.com>
To: "Users(a)ovirt.org" <Users(a)ovirt.org>, "devel(a)ovirt.org"
<devel(a)ovirt.org>
Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
Message-ID: <5487FF5A.6050809(a)redhat.com>
Content-Type: text/plain; charset=iso-8859-15
Hi,
We have still blockers for oVirt 3.5.1 RC release so we need to postpone it until
they'll be fixed.
ACTION: Being so near to winter's holidays we need to discuss the new tentative date
for RC in today sync meeting.
The bug tracker [1] shows 2 open blocker:
Bug ID Whiteboard Status Summary
1160846 sla NEW Can't add disk to VM without specifying disk profile when the storage
domain has more than one disk profile
1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from 3.4.4 to 3.5.1
snapshot
In order to stabilize the release a new branch ovirt-engine-3.5.1 will be created from the
same git hash used for composing the RC.
- ACTION: assignee please provide ETA on above blockers
Maintainers:
- Please be sure that 3.5 snapshot allow to create VMs
- Please be sure that no pending patches are going to block the release
- If any patch must block the RC release please raise the issue as soon as possible.
There are still 63 bugs [2] targeted to 3.5.1.
Excluding node and documentation bugs we still have 42 bugs [3] targeted to 3.5.1.
Maintainers / Assignee:
- Please add the bugs to the tracker if you think that 3.5.1 should not be released
without them fixed.
- ACTION: Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1:
it will ease gathering the blocking bugs for next releases.
- ACTION: Please fill release notes, the page has been created here [4]
Community:
- If you're testing oVirt 3.5 nightly snapshot, please add yourself to the test page
[5]
[1] http://bugzilla.redhat.com/1155170
[2] http://goo.gl/7G0PDV
[3] http://goo.gl/6gUbVr
[4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes
[5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 6
Date: Wed, 10 Dec 2014 03:12:20 -0500 (EST)
From: Francesco Romani <fromani(a)redhat.com>
To: Sandro Bonazzola <sbonazzo(a)redhat.com>
Cc: Users(a)ovirt.org, devel(a)ovirt.org
Subject: Re: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
Message-ID:
<805014182.8558086.1418199140322.JavaMail.zimbra(a)redhat.com>
Content-Type: text/plain; charset=utf-8
----- Original Message -----
From: "Sandro Bonazzola" <sbonazzo(a)redhat.com>
To: Users(a)ovirt.org, devel(a)ovirt.org
Sent: Wednesday, December 10, 2014 9:07:54 AM
Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
Hi,
We have still blockers for oVirt 3.5.1 RC release so we need to postpone it
until they'll be fixed.
ACTION: Being so near to winter's holidays we need to discuss the new
tentative date for RC in today sync meeting.
The bug tracker [1] shows 2 open blocker:
Bug ID Whiteboard Status Summary
1160846 sla NEW Can't add disk to VM without specifying disk profile when
the storage domain has more than one disk profile
1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from
3.4.4 to 3.5.1 snapshot
In order to stabilize the release a new branch ovirt-engine-3.5.1 will be
created from the same git hash used for composing the RC.
- ACTION: assignee please provide ETA on above blockers
1168709 - patch seems simple, posted and verified (BZ entry just updated to POST).
needs review. ETA for merge: definitely within the week, worst case.
Bests,
--
Francesco Romani
RedHat Engineering Virtualization R & D
Phone: 8261328
IRC: fromani
------------------------------
Message: 7
Date: Wed, 10 Dec 2014 05:57:14 -0500 (EST)
From: Alon Bar-Lev <alonbl(a)redhat.com>
To: Juan Jose <jj197005(a)gmail.com>
Cc: users <users(a)ovirt.org>
Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
Message-ID:
<1512532550.7193502.1418209034660.JavaMail.zimbra(a)redhat.com>
Content-Type: text/plain; charset=utf-8
----- Original Message -----
From: "Juan Jose" <jj197005(a)gmail.com>
To: "Alon Bar-Lev" <alonbl(a)redhat.com>, "Yair Zaslavsky"
<yzaslavs(a)redhat.com>
Sent: Wednesday, December 10, 2014 12:30:34 PM
Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
Hello Alon and Yair,
Many thanks for your help, finally It works properly. My problem, after
last Alon indications was that my user "Juanjo" was defined with SuperUser
role in the previous domain configuration. I have loggen in with admin user
from internal and I have removed old configuration and I have configured my
user "Juanjo" with all administrators roles in folder "Permission"
and I
can log in in administration portal without problems and it works properly.
My final configuration I have is an emulated *AD based on Samba 4* and the
final configuration files are:
Good!
So samba is not emulating active directory entirely :)
But good to know it is working.
Please also checkout group membership.
ovirt-engine-extension-aaa-ldap.noarch
1.0.1-0.0.master.20141209141731.git0437701.el6
this fix for samba ad will be released in 1.0.1.
*/etc/ovirt-engine/extensions.d/siee-local-authn.properties*:
ovirt.engine.extension.name = siee-local-authn
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module =
org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class =
org.ovirt.engineextensions.aaa.ldap.AuthnExtension
ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
ovirt.engine.aaa.authn.profile.name = siee
ovirt.engine.aaa.authn.authz.plugin = siee-local-authz
config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties
*/etc/ovirt-engine/extensions.d/siee-local-authz.properties*:
ovirt.engine.extension.name = siee-local-authz
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module =
org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class =
org.ovirt.engineextensions.aaa.ldap.AuthzExtension
ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties
*/etc/ovirt-engine/aaa/siee.properties*:
include = <ad.properties>
#
# Active directory domain name.
#
vars.domain = siee.local
#
# Search user and its password.
#
vars.user = searcher@${global:vars.domain}
vars.password = xxxx
#
# Optional DNS servers, if enterprise
# DNS server cannot resolve the domain srvrecord.
#
#vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}
pool.default.serverset.type = srvrecord
pool.default.serverset.srvrecord.domain = ${global:vars.domain}
pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
# Uncomment if using custom DNS
#pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url
= ${global:vars.dns}
#pool.default.socketfactory.resolver.uRL = ${global:vars.dns}
# Create keystore, import certificate chain and uncomment
# if using ssl/tls.
#pool.default.ssl.startTLS = true
#pool.default.ssl.truststore.file =
${local:_basedir}/${global:vars.domain}.jks
#pool.default.ssl.truststore.password = changeit
You should enable SSL for production use... as you do not want passwords to be transmitted
in clear.
Not sure how you install ssl on the samba ldap... but once you do, follow the README
instructions[1]
[1]
http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=bl...
*/etc/krb5.conf*:
You are not using kerberos, so there is no reason to configure it for setup to work.
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = SIEE.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = no
default_tkt_enctypes = arcfour-hmac-md5
udp_preference_limit = 1
#[realms]
#[domain_realm]
# .siee.local = SIEE.LOCAL
# siee.local = SIEE.LOCAL
Many thanks again to everybody,
Juanjo.
On Tue, Dec 9, 2014 at 5:31 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
>
>
> ----- Original Message -----
> > From: "Juan Jose" <jj197005(a)gmail.com>
> > To: "Alon Bar-Lev" <alonbl(a)redhat.com>, "Yair
Zaslavsky" <
> yzaslavs(a)redhat.com>
> > Sent: Tuesday, December 9, 2014 5:42:56 PM
> > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> >
> > Hello Alon,
> >
> > In my firsts e-mails I had already said that I have an emulation of AD
> > based on Samba 4. I have tested the last version ov
> > ovirt-engine-extension-aaa-ldap package and I think the problem is the
> same
> > although the error is "User is not authorized to perform this
action".
> >
> > I attach the enginle.log.
>
> USER_NOT_AUTHORIZED_TO_PERFORM_ACTION means user is not superuser or can
> manage objects as far as I know.
>
> I see siee0(a)siee.local is trying to login which is CN=siee0
> siee0,CN=Users,DC=siee,DC=local
>
> Login succeeds.
>
> I do not see any groups it belongs to.
>
> Are you sure you added this user role within the webadmin or that user
> belongs to groups that were added to engine with such roles?
>
> >
> > In case that the new oVirt version 3.5 doesn't work with an AD emulation
> > based on Samba 4, is it possible to do user authentication with an
> OpenLDAP
> > directly with this 3.5 version?, if it is so, could you give me the link
> to
> > the documentation to configure OpenLDAP authentication?
>
> Sure, just use the
> /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple copy recursive
> into /etc/ovirt-engine, then modify /etc/ovirt-engine/aaa/ldap1.properties
> set vars.server, vars.user, vars.password.
>
> Until 3.5.1 you should also
> /etc/ovirt-engine/extensions.d/domain1*.properties and replace ../aaa to
> /etc/ovirt-engine/aaa
>
>
> > Many thanks in advanced,
> >
> > Juanjo.
> >
> > On Tue, Dec 9, 2014 at 3:16 PM, Alon Bar-Lev <alonbl(a)redhat.com> wrote:
> >
> > >
> > >
> > > ----- Original Message -----
> > > > From: "Alon Bar-Lev" <alonbl(a)redhat.com>
> > > > To: "Juan Jose" <jj197005(a)gmail.com>
> > > > Cc: "users" <users(a)ovirt.org>
> > > > Sent: Tuesday, December 9, 2014 3:59:33 PM
> > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > > >
> > > > We start over...
> > > >
> > > > This is not active directory... it is samba.
> > > >
> > > > Attribute(name=vendorName, values={'Samba Team
(http://samba.org)'})
> > > >
> > > > Only now I realized this, maybe you mentioned it earlier not sure.
> > > >
> > > > Of course this was never tested, so probably not working.
> > > >
> > > > I see that samba does not return a list of extended operations, I
> will
> > > > workaround this and we can see what's else differ from active
> directory.
> > >
> > > Can you please checkout the following rpm[1]?
> > >
> > > [1]
> > >
>
http://jenkins.ovirt.org/job/ovirt-engine-extension-aaa-ldap_master_creat...
> > >
> >
>
------------------------------
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
End of Users Digest, Vol 39, Issue 50
*************************************
------=_Part_8758566_407473350.1418224697280
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><body><div style=3D"font-family: georgia,serif; font-size: 12pt;
colo=
r: #000000"><div>Answering to message 2 (bond mode
4):</div><div><ul style=
=3D"box-sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; lin=
e-height: 28px; list-style-position: outside; font-family: 'Open Sans', san=
s-serif; color: #4c4c4c; background-color: #ffffff;" data-mce-style=3D"box-=
sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; line-height=
: 28px; list-style-position: outside; font-family: 'Open Sans', sans-serif;=
color: #4c4c4c; background-color: #ffffff;"><li style=3D"box-sizing:
borde=
r-box; margin: 0px; padding: 0px;" data-mce-style=3D"box-sizing: border-box=
; margin: 0px; padding: 0px;">Mode 4 (802.3ad)<br style=3D"box-sizing:
bord=
er-box;" data-mce-style=3D"box-sizing: border-box;">This mode is known
as D=
ynamic Link Aggregation mode. It creates aggregation groups that share the =
same speed and duplex settings. This mode requires a switch that supports I=
EEE 802.3ad Dynamic link.</li></ul></div><div>Please try
configuring your 4=
Cisco ports as port-channel/channel-group in active with LACP enabled capa=
bility on its ports.</div><div><br></div><div><span
name=3D"x"></span><br>T=
hanks in advance.<br><div><br></div>Best
regards,<br>Nikolai<br>___________=
_________<br>Nikolai Sednev<br>Senior Quality Engineer at Compute
team<br>R=
ed Hat Israel<br>34 Jerusalem Road,<br>Ra'anana, Israel
43501<br><div><br><=
/div>Tel: +972 9 7692043<br>Mobile:
+972 52 734=
2734<br>Email: nsednev(a)redhat.com<br>IRC: nsednev<span
name=3D"x"></span><b=
r></div><div><br></div><hr id=3D"zwchr"><div
style=3D"color:#000;font-weigh=
t:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial=
,sans-serif;font-size:12pt;"><b>From:
</b>users-request@ovirt.org<br><b>To:=
</b>users(a)ovirt.org<br><b>Sent: </b>Wednesday, December 10, 2014
12:57:20 =
PM<br><b>Subject: </b>Users Digest, Vol 39, Issue
50<br><div><br></div>Send=
Users mailing list submissions
to<br> &=
nbsp;&nbsp;users(a)ovirt.org<br><div><br></div>To subscribe or
unsubscribe vi=
a the World Wide Web,
visit<br> &n=
bsp;http://lists.ovirt.org/mailman/listinfo/users<br>or, via email, send a =
message with subject or body 'help'
to<br> &nb=
sp;&nbsp;&nbsp;users-request(a)ovirt.org<br><div><br></div>You
can reach the =
person managing the list
at<br> &n=
bsp;users-owner(a)ovirt.org<br><div><br></div>When replying, please
edit your=
Subject line so it is more specific<br>than "Re: Contents of Users digest.=
.."<br><div><br></div><br>Today's
Topics:<br><div><br></div> 1.=
Fwd: Fwd: run ovirt-shell script like background
job &nbs=
p; -<br>
problem (Grz=
egorz Szypa)<br> 2. oVirt bonding mode4 + cisco 2960
XR (=
??????? ????????)<br> 3. Re: ??: 3.5 hosted
engine:=
2nd host Cannot acquire bridge<br> address
(Sandr=
o Bonazzola)<br> 4. [QE][ACTION REQUIRED] oVirt 3.6.0
sta=
tus (Sandro Bonazzola)<br> 5. [QE][ACTION REQUIRED]
oVirt=
3.5.1 RC status (Sandro Bonazzola)<br> 6. Re:
[QE][ACTIO=
N REQUIRED] oVirt 3.5.1 RC status<br>
(Francesco R=
omani)<br> 7. Re: Adding domain to oVirt to 3.5 issue
(Al=
on
Bar-Lev)<br><div><br></div><br>-----------------------------------------=
-----------------------------<br><div><br></div>Message:
1<br>Date: Wed, 10=
Dec 2014 07:33:32 +0100<br>From: Grzegorz Szypa &lt;grzegorz.szypa(a)gmail.c=
om><br>To: users(a)ovirt.org<br>Subject: [ovirt-users] Fwd: Fwd: run
ovirt=
-shell script
like<br> backg=
round job -
problem<br>Messa=
ge-ID:<br> <CACL97+jXMDgC=
qCyWB79E=3DMaMwEn1Xx3ew4BiRTHYtfbphy=3Dveg(a)mail.gmail.com&gt;<br>Content-Ty=
pe: text/plain;
charset=3D"utf-8"<br><div><br></div>Problem is
solved.<br><=
div><br></div>It must be install
this:<br><div><br></div>yum update package=
s<br><div><br></div>not like this<br>rpm -i
*.rpm<br><div><br></div><br>---=
------- Forwarded message ----------<br>From: Grzegorz Szypa <grzegorz.s=
zypa(a)gmail.com&gt;<br>Date: 2014-12-09 20:42 GMT+01:00<br>Subject: Re:
[ovi=
rt-users] Fwd: run ovirt-shell script like background job<br>- problem<br>T=
o: Juan Hern?ndez
<jhernand@redhat.com><br><div><br></div><br>So
i ha=
ve a question:<br><div><br></div>When i
install:<br><div><br></div>rpm -i o=
virt-engine-sdk-python-3.5.0.7-1.el6.noarch.rpm<br>ovirt-engine-cli-3.5.0.5=
-1.el6.noarch.rpm<br><div><br></div>i got error conflict with
current packa=
ge ovirt-engine-3.4.x<br><div><br></div>It was all-in-one
instalation in on=
e
server.<br><div><br></div><br><div><br></div>2014-12-09
10:32 GMT+01:00 J=
uan Hern?ndez
<jhernand@redhat.com>:<br><div><br></div>> On
12/08/=
2014 08:05 PM, Grzegorz Szypa wrote:<br>> > So, i have a
question.<br=
> ><br>> > Is
ovirt-engine-cli-3.5.0.2-1.el6.noarch compatible=
in
ovirt-engine-3.4?<br>> ><br>> > Can install
ovirt-engine-cl=
i-3.5 on ovirt-engine-cli-3.4 and using him<br>> > with landscape
bas=
ed on ovirt 3.4 ??<br>> ><br>><br>> Yes,
versions 3.5.x of ovir=
t-engine-cli and ovirt-engine-sdk-python (you<br>> will need both) are c=
ompatible with version 3.4 of the engine.<br>><br>> >
2014-12-07 1=
7:33 GMT+01:00 Juan Hern?ndez &lt;jhernand(a)redhat.com<br>&gt; >
<mail=
to:jhernand@redhat.com>>:<br>> ><br>>
> On =
12/07/2014 05:05 PM, Grzegorz Szypa wrote:<br>> >
> =
Hi,<br>> > ><br>> >
> I have =
a problem with running ovirt-shell script, that it starting<br>> >
&n=
bsp; VMs.<br>> > > In dialog
mode it's fine, =
but in background no :(<br>> >
><br>> > =
> Example script:<br>> >
> ovirt-shell -E=
'action vm WinSrv2012r2 start'<br>> >
><br>> >=
; > I start this job in cron as root.<br>>
> =
><br>> >
><br>> > >=
Have somebody idea??<br>> >
><br>> > &=
nbsp; > --<br>> > >
G.Sz.<br>> > &nb=
sp; ><br>> ><br>> >
We used to have bug that m=
ade ovirt-shell fail when there wasn't a<br>> tty<br>>
> &n=
bsp; available (like when running from cron):<br>> ><br>>
> &nb=
sp; ovirt-shell cannot run in cron (/dev/tty
missing)<br>>=
>
https://bugzilla.redhat.com/1119412<br>> >=
<br>> > That was fixed in version 3.5.0.2, so
make sure=
that you have at<br>> least<br>> >
that version.<br=
> ><br>> > If
you still have problems please sha=
re the output of the
ovirt-shell<br>> > command.<br>>=
; ><br>> > --<br>> >
Direcci?n C=
omercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> >
&nb=
sp; 3?D, 28016 Madrid, Spain<br>> >
Inscrita en =
el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat<br>> >
 =
; S.L.<br>> ><br>> ><br>>
><br>> ><br>> &=
gt; --<br>> > G.Sz.<br>> ><br>>
><br>> ><br>> &g=
t; --<br>> > G.Sz.<br>> ><br>>
><br>> > ___________=
____________________________________<br>> > Users mailing
list<br>>=
; > Users(a)ovirt.org<br>&gt; >
http://lists.ovirt.org/mailman/listinfo=
/users<br>> ><br>><br>><br>>
--<br>> Direcci?n Comercial:=
C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> 3?D, 28016 Madrid=
, Spain<br>> Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 =
- Red Hat
S.L.<br>><br><div><br></div><br><div><br></div>--
<br>G.Sz.<br=
<div><br></div><br><div><br></div>--
<br>G.Sz.<br>-------------- next part=
--------------<br>An HTML
attachment was scrubbed...<br>URL: <http://li=
sts.ovirt.org/pipermail/users/attachments/20141210/76801a84/attachment-0001=
.html><br><div><br></div>------------------------------<br><div><br></di=
v>Message: 2<br>Date: Wed, 10 Dec 2014 10:20:01 +0300<br>From: ???????
????=
????
<mail.griffon@gmail=
.com><br>To: "users(a)ovirt.org"
&lt;users(a)ovirt.org&gt;<br>Subject: [ovir=
t-users] oVirt bonding mode4 + cisco 2960
XR<br>Message-ID:<br> =
<CAE85BH-VkK0PsdS=3DWQzmP61nYX2B-cE0=
9tOEK8NpcuqYbANtCA(a)mail.gmail.com&gt;<br>Content-Type: text/plain; charset=
=3D"utf-8"<br><div><br></div>Hi,
community!<br><div><br></div>I have made b=
ond0 mode4 (eth0+eth1+eth2+eth3) by oVirt portal. It's work<br>well on Cent=
OS 7 node.<br><div><br></div>How I can setup my cisco 2960 XR
switch for wo=
rk with this bond0 for<br>loadbalancing + aggregation (802.3ad)?<br>-------=
------- next part --------------<br>An HTML attachment was scrubbed...<br>U=
RL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/9fcded2=
2/attachment-0001.html><br><div><br></div>------------------------------=
<br><div><br></div>Message: 3<br>Date: Wed, 10 Dec 2014
08:37:32 +0100<br>F=
rom: Sandro Bonazzola &lt;sbonazzo(a)redhat.com&gt;<br>To: Robert Story
<r=
story(a)tislabs.com&gt;<br>Cc: "users(a)ovirt.org"
&lt;users(a)ovirt.org&gt;<br>S=
ubject: Re: [ovirt-users] ??: 3.5 hosted engine: 2nd host
Cannot<br>&=
nbsp; acquire bridge
address<br>Me=
ssage-ID: &lt;5487F83C.2020704(a)redhat.com&gt;<br>Content-Type: text/plain;
=
charset=3DUTF-8<br><div><br></div>Il 09/12/2014 20:16, Robert
Story ha scri=
tto:<br>> On Tue, 09 Dec 2014 10:33:51 +0100 Sandro wrote:<br>>
SB>=
; > Looking at setup logs, you have:<br>> SB> >
OVEHOSTED_NETWO=
RK/bridgeIf=3Dstr:'eth1.79'<br>> SB> >
[...]<br>> SB> > w=
hich seems to fail matching REGEXP:<br>> SB> >
<br>> SB> >=
; _ADDRESS_RE =3D re.compile(<br>> SB> >
&nbs=
p; flags=3Dre.VERBOSE,<br>> SB> >
&nbs=
p; pattern=3Dr"""<br>> SB> >
&n=
bsp; \s+<br>> SB> >
&nbs=
p; inet<br>> SB> >
\s<br=
> SB> >
(?P<address&=
gt;\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})<br>> SB> >
&n=
bsp; .+<br>> SB> >
 =
; \s+<br>> SB> >
=
(?P<interface>\w+)<br>> SB> >
&n=
bsp; $<br>> SB> >
"""<br>> SB> &=
gt; )<br>> SB> > <br>>
SB> > I guess the ma=
tch is failing due to the '.' in 'eth1.79'<br>> SB>
<br>> SB> I=
f you haven't already opened a BZ about it, please open one,
thanks<br>>=
<br>>
https://bugzilla.redhat.com/show_bug.cgi?id=3D1172287<br>&=
gt;
<br><div><br></div>Thanks<br><div><br></div>>
<br>> Robert<br>>=
; <br><div><br></div><br>-- <br>Sandro
Bonazzola<br>Better technology. Fast=
er innovation. Powered by community collaboration.<br>See how it works at r=
edhat.com<br><div><br></div><br>------------------------------<br><div><br>=
</div>Message: 4<br>Date: Wed, 10 Dec 2014 09:02:13 +0100<br>From:
Sandro B=
onazzola &lt;sbonazzo(a)redhat.com&gt;<br>To: "Users(a)ovirt.org"
<Users@ovi=
rt.org>,
"devel@ovirt.org"<br> =
&nbsp;&lt;devel(a)ovirt.org&gt;<br>Subject: [ovirt-users] [QE][ACTION
REQUIRE=
D] oVirt 3.6.0 status<br>Message-ID:
&lt;5487FE05.3010703(a)redhat.com&gt;<br=
Content-Type: text/plain;
charset=3Diso-8859-15<br><div><br></div>Hi,<br><=
div><br></div>Release criteria discussion has been closed and wiki
has been=
updated accordingly by Brian [1][2].<br><div><br></div>Release
management =
for 3.6.0 [3] has been updated with the accepted changes in release criteri=
a.<br><div><br></div>ACTION: Feature proposed for 3.6.0 must now
be collect=
ed in the 3.6 Google doc [4] and reviewed by maintainers.<br>Finished the r=
eview process, the remaining key milestones for this release will be schedu=
led.<br><div><br></div>For reference, external project schedules
we're trac=
king are:<br> Fedora 21: 2014-12-09
(RELEASED)<br> &=
nbsp; Fedora 22: no earlier than 2015-05-19<br>
For=
eman 1.8.0: 2015-03-01<br> GlusterFS 3.7:
2015-04-29<br>&=
nbsp; OpenStack Kilo:
2015-04-30<br><div><br></div><br>Two diff=
erent proposals have been made about above scheduling [5]:<br>1) extend the=
cycle to 10 months for allowing to include a large feature set<br>2) reduc=
e the cycle to less than 6 months and split features over 3.6 and 3.7<br><d=
iv><br></div>and we can also
add<br><div><br></div>3) keep current 6 months=
cycle<br><div><br></div>The tracker bug for 3.6.0 [6] currently
shows no b=
lockers.<br><div><br></div>There are 460 bugs [7] targeted to
3.6.0.<br>Exc=
luding node and documentation bugs we have 436 bugs [8] targeted to 3.6.0.<=
br><div><br></div><br>[1]
http://www.ovirt.org/Release_Criteria_Template<br=
_3.6_Release_Management<br>[4]
http://goo.gl/9X3G49<br>[5] http://lists.ovi=
rt.org/pipermail/users/2014-November/028875.html<br>[6] https://bugzilla.re=
dhat.com/show_bug.cgi?id=3D1155425<br>[7] http://goo.gl/zwkF3r<br>[8] http:=
//goo.gl/ZbUiMc<br><div><br></div><br>-- <br>Sandro
Bonazzola<br>Better tec=
hnology. Faster innovation. Powered by community collaboration.<br>See how =
it works at
redhat.com<br><div><br></div><br>------------------------------=
<br><div><br></div>Message: 5<br>Date: Wed, 10 Dec 2014
09:07:54 +0100<br>F=
rom: Sandro Bonazzola &lt;sbonazzo(a)redhat.com&gt;<br>To:
"Users(a)ovirt.org" =
&lt;Users(a)ovirt.org&gt;,
"devel@ovirt.org"<br>  =
;&nbsp;&nbsp;&nbsp;&lt;devel(a)ovirt.org&gt;<br>Subject:
[ovirt-users] [QE][A=
CTION REQUIRED] oVirt 3.5.1 RC status<br>Message-ID: <5487FF5A.6050809@r=
edhat.com><br>Content-Type: text/plain;
charset=3Diso-8859-15<br><div><b=
r></div>Hi,<br>We have still blockers for oVirt 3.5.1 RC release so we
need=
to postpone it until they'll be fixed.<br>ACTION: Being so near to
winter'=
s holidays we need to discuss the new tentative date for RC in today sync m=
eeting.<br><div><br></div>The bug tracker [1] shows 2 open
blocker:<br>Bug =
ID Whiteboard &nb=
sp; Status =
Summary<br>1160=
846 sla &nb=
sp; =
NEW =
Can't add disk to VM without specifying disk
profil=
e when the storage domain has more than one disk
profile<br>1168709 &n=
bsp; virt &=
nbsp; NEW &=
nbsp; &nbs=
p; Hosted Engine VM is listed as paused after upgrading from 3.4=
.4 to 3.5.1 snapshot<br><div><br></div>In order to stabilize the
release a =
new branch ovirt-engine-3.5.1 will be created from the same git hash used f=
or composing the RC.<br><div><br></div>- ACTION: assignee please
provide ET=
A on above blockers<br><div><br></div>Maintainers:<br>-
Please be sure that=
3.5 snapshot allow to create VMs<br>- Please be sure that no pending patch=
es are going to block the release<br>- If any patch must block the RC relea=
se please raise the issue as soon as
possible.<br><div><br></div>There are =
still 63 bugs [2] targeted to 3.5.1.<br>Excluding node and documentation bu=
gs we still have 42 bugs [3] targeted to
3.5.1.<br><div><br></div>Maintaine=
rs / Assignee:<br>- Please add the bugs to the tracker if you think that 3.=
5.1 should not be released without them fixed.<br>- ACTION: Please update t=
he target to 3.5.2 or later for bugs that won't be in
3.5.1:<br>  =
;it will ease gathering the blocking bugs for next releases.<br>- ACTION: P=
lease fill release notes, the page has been created here
[4]<br><div><br></=
div>Community:<br>- If you're testing oVirt 3.5 nightly snapshot, please ad=
d yourself to the test page [5]<br><div><br></div><br>[1]
http://bugzilla.r=
edhat.com/1155170<br>[2] http://goo.gl/7G0PDV<br>[3]
http://goo.gl/6gUbVr<b=
r>[4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes<br>[5] http://www.ovir=
t.org/Testing/oVirt_3.5.1_Testing<br><div><br></div>--
<br>Sandro Bonazzola=
<br>Better technology. Faster innovation. Powered by community collaboratio=
n.<br>See how it works at
redhat.com<br><div><br></div><br>----------------=
--------------<br><div><br></div>Message: 6<br>Date: Wed, 10
Dec 2014 03:12=
:20 -0500 (EST)<br>From: Francesco Romani
<fromani@redhat.com><br>To:=
Sandro Bonazzola &lt;sbonazzo(a)redhat.com&gt;<br>Cc: Users(a)ovirt.org,
devel=
@ovirt.org<br>Subject: Re: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 =
RC
status<br>Message-ID:<br>  =
;&lt;805014182.8558086.1418199140322.JavaMail.zimbra(a)redhat.com&gt;<br>Cont=
ent-Type: text/plain; charset=3Dutf-8<br><div><br></div>-----
Original Mess=
age -----<br>> From: "Sandro Bonazzola"
&lt;sbonazzo(a)redhat.com&gt;<br>&=
gt; To: Users(a)ovirt.org, devel(a)ovirt.org<br>&gt; Sent: Wednesday, December =
10, 2014 9:07:54 AM<br>> Subject: [ovirt-users] [QE][ACTION REQUIRED] oV=
irt 3.5.1 RC status<br>> <br>> Hi,<br>> We have
still blockers for=
oVirt 3.5.1 RC release so we need to postpone it<br>> until they'll be
=
fixed.<br>> ACTION: Being so near to winter's holidays we need to
discus=
s the new<br>> tentative date for RC in today sync meeting.<br>>
<br>=
> The bug tracker [1] shows 2 open blocker:<br>> Bug
ID &n=
bsp; Whiteboard &=
nbsp; Status &nbs=
p; Summary<br>>
1160846 &n=
bsp; sla &n=
bsp; NEW &n=
bsp;  =
; Can't add disk to VM without specifying disk profile
when<br>&=
gt; the storage domain has more than one disk profile<br>>
1168709 =
virt  =
; NEW =
; &n=
bsp; Hosted Engine VM is listed as paused after upgrading from<b=
r>> 3.4.4 to 3.5.1 snapshot<br>> <br>> In order to
stabilize the r=
elease a new branch ovirt-engine-3.5.1 will be<br>> created from the sam=
e git hash used for composing the RC.<br>> <br>> - ACTION:
assignee p=
lease provide ETA on above blockers<br><div><br></div>1168709 -
patch seems=
simple, posted and verified (BZ entry just updated to POST).<br>needs revi=
ew. ETA for merge: definitely within the week, worst
case.<br><div><br></di=
v>Bests,<br><div><br></div>-- <br>Francesco
Romani<br>RedHat Engineering Vi=
rtualization R & D<br>Phone: 8261328<br>IRC:
fromani<br><div><br></div>=
<br>------------------------------<br><div><br></div>Message:
7<br>Date: We=
d, 10 Dec 2014 05:57:14 -0500 (EST)<br>From: Alon Bar-Lev <alonbl@redhat=
.com><br>To: Juan Jose &lt;jj197005(a)gmail.com&gt;<br>Cc: users
<users=
@ovirt.org><br>Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 =
issue<br>Message-ID:<br> <=
;1512532550.7193502.1418209034660.JavaMail.zimbra(a)redhat.com&gt;<br>Content=
-Type: text/plain;
charset=3Dutf-8<br><div><br></div><br><div><br></div>---=
-- Original Message -----<br>> From: "Juan Jose"
&lt;jj197005(a)gmail.com&=
gt;<br>> To: "Alon Bar-Lev" &lt;alonbl(a)redhat.com&gt;,
"Yair Zaslavsky" =
&lt;yzaslavs(a)redhat.com&gt;<br>&gt; Sent: Wednesday, December 10, 2014
12:3=
0:34 PM<br>> Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 is=
sue<br>> <br>> Hello Alon and Yair,<br>>
<br>> Many thanks for =
your help, finally It works properly. My problem, after<br>> last Alon i=
ndications was that my user "Juanjo" was defined with
SuperUser<br>> rol=
e in the previous domain configuration. I have loggen in with admin user<br=
> from internal and I have removed old configuration and I have
configu=
red my<br>> user "Juanjo" with all administrators
roles in folder "Permi=
ssion" and I<br>> can log in in administration portal without problems
a=
nd it works properly.<br>> <br>> My final configuration I have
is an =
emulated *AD based on Samba 4* and the<br>> final configuration files ar=
e:<br><div><br></div>Good!<br>So samba is not emulating
active directory en=
tirely :)<br>But good to know it is working.<br>Please also checkout group =
membership.<br><div><br></div>>
ovirt-engine-extension-aaa-ldap.noarch<b=
r>>
1.0.1-0.0.master.20141209141731.git0437701.el6<br><div><br></div>thi=
s fix for samba ad will be released in
1.0.1.<br><div><br></div>> <br>&g=
t; */etc/ovirt-engine/extensions.d/siee-local-authn.properties*:<br>> <b=
r>> ovirt.engine.extension.name =3D siee-local-authn<br>>
ovirt.engin=
e.extension.bindings.method =3D jbossmodule<br>> ovirt.engine.extension.=
binding.jbossmodule.module =3D<br>> org.ovirt.engine-extensions.aaa.ldap=
<br>> ovirt.engine.extension.binding.jbossmodule.class =3D<br>>
org.o=
virt.engineextensions.aaa.ldap.AuthnExtension<br>> ovirt.engine.extensio=
n.provides =3D org.ovirt.engine.api.extensions.aaa.Authn<br>> ovirt.engi=
ne.aaa.authn.profile.name =3D siee<br>> ovirt.engine.aaa.authn.authz.plu=
gin =3D siee-local-authz<br>> config.profile.file.1 =3D /etc/ovirt-engin=
e/aaa/siee.properties<br>> <br>>
*/etc/ovirt-engine/extensions.d/siee=
-local-authz.properties*:<br>> <br>> ovirt.engine.extension.name
=3D =
siee-local-authz<br>> ovirt.engine.extension.bindings.method =3D jbossmo=
dule<br>> ovirt.engine.extension.binding.jbossmodule.module
=3D<br>> =
org.ovirt.engine-extensions.aaa.ldap<br>> ovirt.engine.extension.binding=
.jbossmodule.class =3D<br>> org.ovirt.engineextensions.aaa.ldap.AuthzExt=
ension<br>> ovirt.engine.extension.provides =3D org.ovirt.engine.api.ext=
ensions.aaa.Authz<br>> config.profile.file.1 =3D /etc/ovirt-engine/aaa/s=
iee.properties<br>> <br>>
*/etc/ovirt-engine/aaa/siee.properties*:<br=
> <br>> include =3D
<ad.properties><br>> <br>> #<br>>=
# Active directory domain name.<br>> #<br>> vars.domain
=3D siee.loc=
al<br>> <br>> #<br>> # Search user and its
password.<br>> #<br>=
> vars.user =3D searcher@${global:vars.domain}<br>> vars.password
=3D=
xxxx<br>> <br>> #<br>> # Optional DNS servers, if
enterprise<br>&=
gt; # DNS server cannot resolve the domain srvrecord.<br>>
#<br>> #va=
rs.dns =3D dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}<=
br>> <br>> pool.default.serverset.type =3D
srvrecord<br>> pool.def=
ault.serverset.srvrecord.domain =3D ${global:vars.domain}<br>> pool.defa=
ult.auth.simple.bindDN =3D ${global:vars.user}<br>> pool.default.auth.si=
mple.password =3D ${global:vars.password}<br>> <br>> # Uncomment
if u=
sing custom DNS<br>> #pool.default.serverset.srvrecord.jndi-properties.j=
ava.naming.provider.url<br>> =3D ${global:vars.dns}<br>>
#pool.defaul=
t.socketfactory.resolver.uRL =3D ${global:vars.dns}<br>> <br>> #
Crea=
te keystore, import certificate chain and uncomment<br>> # if using ssl/=
tls.<br>> #pool.default.ssl.startTLS =3D true<br>>
#pool.default.ssl.=
truststore.file =3D<br>>
${local:_basedir}/${global:vars.domain}.jks<br>=
> #pool.default.ssl.truststore.password =3D
changeit<br><div><br></div>Y=
ou should enable SSL for production use... as you do not want passwords to =
be transmitted in clear.<br>Not sure how you install ssl on the samba ldap.=
.. but once you do, follow the README
instructions[1]<br><div><br></div>[1]=
http://gerrit.ovirt.org/gitweb?p=3Dovirt-engine-extension-aaa-ldap.git;a=
=3Dblob;f=3DREADME;hb=3DHEAD#l141<br><div><br></div>>
<br>> */etc/krb=
5.conf*:<br><div><br></div>You are not using kerberos, so there is
no reaso=
n to configure it for setup to work.<br><div><br></div>>
<br>> [loggi=
ng]<br>> default =3D FILE:/var/log/krb5libs.log<br>>
kdc =
=3D FILE:/var/log/krb5kdc.log<br>> admin_server =3D
FILE:/var/log/=
kadmind.log<br>> <br>> [libdefaults]<br>>
default_realm =3D =
SIEE.LOCAL<br>> dns_lookup_realm =3D true<br>>
dns_lookup=
_kdc =3D true<br>> ticket_lifetime =3D 24h<br>>
renew_lif=
etime =3D 7d<br>> forwardable =3D no<br>>
default_tkt_enc=
types =3D arcfour-hmac-md5<br>> udp_preference_limit =3D
1<br>>=
<br>> #[realms]<br>> <br>>
#[domain_realm]<br>> # .siee.local =
=3D SIEE.LOCAL<br>> # siee.local =3D SIEE.LOCAL<br>>
<br>> <br>>=
; Many thanks again to everybody,<br>> <br>>
Juanjo.<br>> <br>>=
On Tue, Dec 9, 2014 at 5:31 PM, Alon Bar-Lev &lt;alonbl(a)redhat.com&gt; wro=
te:<br>> <br>> ><br>>
><br>> > ----- Original Message =
-----<br>> > > From: "Juan Jose"
&lt;jj197005(a)gmail.com&gt;<br>&gt=
; > > To: "Alon Bar-Lev" &lt;alonbl(a)redhat.com&gt;,
"Yair Zaslavsky" =
<<br>> > yzaslavs(a)redhat.com&gt;<br>&gt; >
> Sent: Tuesday, =
December 9, 2014 5:42:56 PM<br>> > > Subject: Re: [ovirt-users]
Ad=
ding domain to oVirt to 3.5 issue<br>> > ><br>>
> > Hello=
Alon,<br>> > ><br>> > > In my
firsts e-mails I had alrea=
dy said that I have an emulation of AD<br>> > > based on Samba
4. =
I have tested the last version ov<br>> > >
ovirt-engine-extension-=
aaa-ldap package and I think the problem is the<br>> >
same<br>> &=
gt; > although the error is "User is not authorized to perform this acti=
on".<br>> > ><br>> > > I attach
the enginle.log.<br>> =
><br>> > USER_NOT_AUTHORIZED_TO_PERFORM_ACTION means user is
not s=
uperuser or can<br>> > manage objects as far as I
know.<br>> ><=
br>> > I see siee0(a)siee.local is trying to login which is
CN=3Dsiee0<=
br>> > siee0,CN=3DUsers,DC=3Dsiee,DC=3Dlocal<br>>
><br>> >=
; Login succeeds.<br>> ><br>> > I do not see any
groups it belo=
ngs to.<br>> ><br>> > Are you sure you added this
user role wit=
hin the webadmin or that user<br>> > belongs to groups that were
adde=
d to engine with such roles?<br>> ><br>> >
><br>> > &g=
t; In case that the new oVirt version 3.5 doesn't work with an AD emulation=
<br>> > > based on Samba 4, is it possible to do user
authenticati=
on with an<br>> > OpenLDAP<br>> > >
directly with this 3.5 v=
ersion?, if it is so, could you give me the link<br>> >
to<br>> &g=
t; > the documentation to configure OpenLDAP authentication?<br>>
>=
;<br>> > Sure, just use the<br>> >
/usr/share/ovirt-engine-exte=
nsion-aaa-ldap/examples/simple copy recursive<br>> > into
/etc/ovirt-=
engine, then modify /etc/ovirt-engine/aaa/ldap1.properties<br>> >
set=
vars.server, vars.user, vars.password.<br>> ><br>>
> Until 3.5=
.1 you should also<br>> >
/etc/ovirt-engine/extensions.d/domain1*.pro=
perties and replace ../aaa to<br>> >
/etc/ovirt-engine/aaa<br>> &g=
t;<br>> ><br>> > > Many thanks in
advanced,<br>> > >=
;<br>> > > Juanjo.<br>> >
><br>> > > On Tue, Dec=
9, 2014 at 3:16 PM, Alon Bar-Lev &lt;alonbl(a)redhat.com&gt;
wrote:<br>> =
> ><br>> > > ><br>> >
> ><br>> > > &=
gt; ----- Original Message -----<br>> > > > >
From: "Alon Ba=
r-Lev" &lt;alonbl(a)redhat.com&gt;<br>&gt; > > >
> To: "Juan Jose=
" &lt;jj197005(a)gmail.com&gt;<br>&gt; > > >
> Cc: "users" <us=
ers(a)ovirt.org&gt;<br>&gt; > > > > Sent: Tuesday,
December 9, 20=
14 3:59:33 PM<br>> > > > > Subject: Re:
[ovirt-users] Adding=
domain to oVirt to 3.5 issue<br>> > > >
><br>> > >=
> > We start over...<br>> > > >
><br>> > > &=
gt; > This is not active directory... it is samba.<br>> >
> >=
; ><br>> > > > >
Attribute(name=3DvendorName, values=3D{'=
Samba Team (http://samba.org)'})<br>> > > >
><br>> > &=
gt; > > Only now I realized this, maybe you mentioned it earlier not =
sure.<br>> > > > ><br>> >
> > > Of course thi=
s was never tested, so probably not working.<br>> > > >
><br=
> > > > > I see that samba does not
return a list of extend=
ed operations, I<br>> >
will<br>> > > > > workaround t=
his and we can see what's else differ from active<br>> >
directory.<b=
r>> > > ><br>> > > > Can
you please checkout the fo=
llowing rpm[1]?<br>> > > ><br>> >
> > [1]<br>> &=
gt; > ><br>> >
http://jenkins.ovirt.org/job/ovirt-engine-extens=
ion-aaa-ldap_master_create-rpms-el6-x86_64_merged/<br>> > >
><b=
r>> > ><br>> ><br>>
<br><div><br></div><br>--------------=
----------------<br><div><br></div>________________________________________=
_______<br>Users mailing
list<br>Users@ovirt.org<br>http://lists.ovirt.org/=
mailman/listinfo/users<br><div><br></div><br>End of Users
Digest, Vol 39, I=
ssue
50<br>*************************************<br></div><div><br></div></=
div></body></html>
------=_Part_8758566_407473350.1418224697280--