On Thu, Nov 22, 2012 at 10:25 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:


----- Original Message -----
> From: "Cristian Falcas" <cristi.falcas@gmail.com>
> To: "Alon Bar-Lev" <alonbl@redhat.com>
> Cc: users@ovirt.org, "Juan Hernandez" <jhernand@redhat.com>
> Sent: Thursday, November 22, 2012 10:23:32 PM
> Subject: Re: [Users] missing dirs, other problems with latest nightly
>
>
>
>
>
>
> On Thu, Nov 22, 2012 at 2:03 AM, Cristian Falcas <
> cristi.falcas@gmail.com > wrote:
>
>
>
>
>
>
>
>
>
> On Thu, Nov 22, 2012 at 2:01 AM, Cristian Falcas <
> cristi.falcas@gmail.com > wrote:
>
>
>
>
>
>
>
>
>
> On Thu, Nov 22, 2012 at 1:56 AM, Cristian Falcas <
> cristi.falcas@gmail.com > wrote:
>
>
>
>
>
>
>
>
>
> On Thu, Nov 22, 2012 at 1:24 AM, Alon Bar-Lev < alonbl@redhat.com >
> wrote:
>
>
>
>
>
> ----- Original Message -----
> > From: "Cristian Falcas" < cristi.falcas@gmail.com >
> > To: "Alon Bar-Lev" < alonbl@redhat.com >
> > Cc: users@ovirt.org , "Juan Hernandez" < jhernand@redhat.com >
>
> > Sent: Thursday, November 22, 2012 1:22:26 AM
> > Subject: Re: [Users] missing dirs, other problems with latest
> > nightly
> >
> >
> >
> >
> >
> >
>
> > On Thu, Nov 22, 2012 at 1:11 AM, Alon Bar-Lev < alonbl@redhat.com >
> > wrote:
> >
> >
> >
> >
> >
> > ----- Original Message -----
> > > From: "Cristian Falcas" < cristi.falcas@gmail.com >
> > > To: "Alon Bar-Lev" < alonbl@redhat.com >
>
>
> > > Cc: users@ovirt.org , "Juan Hernandez" < jhernand@redhat.com >
> >
> > > Sent: Thursday, November 22, 2012 1:01:41 AM
> > > Subject: Re: [Users] missing dirs, other problems with latest
> > > nightly
> > >
> > >
> > >
> > >
> > >
> > >
> >
> > > On Thu, Nov 22, 2012 at 12:56 AM, Alon Bar-Lev <
> > > alonbl@redhat.com
> > > >
> > > wrote:
> > >
> > >
> > >
> > >
> > >
> > > ----- Original Message -----
> > > > From: "Cristian Falcas" < cristi.falcas@gmail.com >
> > > > To: "Alon Bar-Lev" < alonbl@redhat.com >
> >
> >
> > > > Cc: users@ovirt.org , "Juan Hernandez" < jhernand@redhat.com >
> > >
> > > > Sent: Thursday, November 22, 2012 12:52:19 AM
> > > > Subject: Re: [Users] missing dirs, other problems with latest
> > > > nightly
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > >
> > > > On Thu, Nov 22, 2012 at 12:49 AM, Alon Bar-Lev <
> > > > alonbl@redhat.com
> > > > >
> > > > wrote:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > ----- Original Message -----
> > > > > From: "Cristian Falcas" < cristi.falcas@gmail.com >
> > > >
> > > >
> > > > > To: "Alon Bar-Lev" < alonbl@redhat.com >
> > > > > Cc: users@ovirt.org , "Juan Hernandez" < jhernand@redhat.com
> > > > > >
> > >
> > >
> > > > > Sent: Thursday, November 22, 2012 12:45:32 AM
> > > > > Subject: Re: [Users] missing dirs, other problems with latest
> > > > > nightly
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > On Thu, Nov 22, 2012 at 12:20 AM, Alon Bar-Lev <
> > > > > alonbl@redhat.com
> > > > > >
> > > > > wrote:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > ----- Original Message -----
> > > > > > From: "Cristian Falcas" < cristi.falcas@gmail.com >
> > > > > > To: "Juan Hernandez" < jhernand@redhat.com >
> > > > > > Cc: users@ovirt.org
> > > > > > Sent: Thursday, November 22, 2012 12:17:31 AM
> > > > > > Subject: Re: [Users] missing dirs, other problems with
> > > > > > latest
> > > > > > nightly
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > >
> > > > > > On Wed, Nov 21, 2012 at 11:53 PM, Juan Hernandez <
> > > > > > jhernand@redhat.com > wrote:
> > > > > >
> > > > > >
> > > > > >
> > > > > > On 11/21/2012 10:50 PM, Cristian Falcas wrote:
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > On Wed, Nov 21, 2012 at 11:26 PM, Juan Hernandez <
> > > > > > > jhernand@redhat.com
> > > > > >
> > > > > >
> > > > > > > <mailto: jhernand@redhat.com >> wrote:
> > > > > > >
> > > > > > > On 11/21/2012 09:37 PM, Cristian Falcas wrote:
> > > > > > > > Hi,
> > > > > > > >
> > > > > > > > After a fresh install, those folders are missing:
> > > > > > > >
> > > > > > > > /var/lib/ovirt-engine/content
> > > > > > > > /var/lib/ovirt-engine/deployments
> > > > > > >
> > > > > > > Yes Cristian, that is a problem we are aware of. We
> > > > > > > introduced
> > > > > > > that
> > > > > > > error in a attempt to fix bug 876164. The fix will be
> > > > > > > merged
> > > > > > > soon:
> > > > > > >
> > > > > > > http://gerrit.ovirt.org/9369
> > > > > > >
> > > > > > > Meanwhile the workaround is to manually create those
> > > > > > > directories
> > > > > > > and
> > > > > > > make sure they are owned by the ovirt user and the ovirt
> > > > > > > group:
> > > > > > >
> > > > > > > mkdir -p /var/lib/ovirt-engine/content
> > > > > > > chown ovirt:ovirt /var/lib/ovirt-engine/content
> > > > > > > mkdir -p /var/lib/ovirt-engine/deployments
> > > > > > > chown ovirt:ovirt /var/lib/ovirt-engine/deployments
> > > > > > >
> > > > > > > The other error messages that you see are not relevant, I
> > > > > > > think
> > > > > > > you
> > > > > > > can
> > > > > > > ignore them.
> > > > > > >
> > > > > > > >
> > > > > > > > After that the engine starts, but can't go to the https
> > > > > > > > page
> > > > > > > > of
> > > > > > > > administrator or user portal. Relevant errors in log:
> > > > > > > >
> > > > > > > > 2012-11-21 22:29:52,448 ERROR
> > > > > > > > [org.ovirt.engine.core.engineencryptutils.EncryptionUtils]
> > > > > > > > (MSC
> > > > > > > service
> > > > > > > > thread 1-3) Failed to decrypt Data must start with zero
> > > > > > > > 2012-11-21 22:29:52,576 ERROR
> > > > > > > > [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils]
> > > > > > > > (MSC
> > > > > > > service
> > > > > > > > thread 1-3) Failed to decrypt value for property
> > > > > > > > TruststorePass
> > > > > > > will be
> > > > > > > > used encrypted value
> > > > > > > > 2012-11-21 22:29:52,640 ERROR
> > > > > > > > [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils]
> > > > > > > > (MSC
> > > > > > > service
> > > > > > > > thread 1-3) Could not parse option
> > > > > > > > AutoRecoveryAllowedTypes
> > > > > > > > value.
> > > > > > > >
> > > > > > > > Can someone help me with those errors? I tried using
> > > > > > > > the
> > > > > > > > ovirt-engine-setup from the last 3 days, but the result
> > > > > > > > is
> > > > > > > > the
> > > > > > > same each
> > > > > > > > time.
> > > > > > > >
> > > > > > > > Other warnings:
> > > > > > > >
> > > > > > > > 2012-11-21 22:29:46,375 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option:
> > > > > > > > CbcCheckOnVdsChange
> > > > > > > > 2012-11-21 22:29:46,411 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option: CAEngineKey
> > > > > > > > 2012-11-21 22:29:46,444 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option: MinimalETLVersion
> > > > > > > > 2012-11-21 22:29:49,287 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option: ScriptsPath
> > > > > > > > 2012-11-21 22:29:49,292 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option:
> > > > > > > > SQLServerI18NPrefix
> > > > > > > > 2012-11-21 22:29:52,650 WARN
> > > > > > > > [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC
> > > > > > > > service
> > > > > > > > thread
> > > > > > > > 1-3)
> > > > > > > > Could not find enum value for option: ENGINEEARLib
> > > > > > > >
> > > > > > > > Attached the engine-setup.log
> > > > > > > >
> > > > > > > > Best regards,
> > > > > > > > Cristian falcas
> > > > > > >
> > > > > >
> > > > > > > Unfortunately, the all https pages are not responding and
> > > > > > > I
> > > > > > > thought
> > > > > > > that
> > > > > > > the cause is from the ERRORs from the logs.
> > > > > > >
> > > > > > > Doing a netstat only shows the http port (8700) being
> > > > > > > opened.
> > > > > > >
> > > > > >
> > > > > > Is that after the workaround that I suggested and
> > > > > > restarting
> > > > > > the
> > > > > > engine?
> > > > > > Remember to create both directories and change the
> > > > > > ownership
> > > > > > to
> > > > > > ovirt:ovirt.
> > > > > >
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea
> > > > > > 3,
> > > > > > planta
> > > > > > 3ºD, 28016 Madrid, Spain
> > > > > > Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941
> > > > > > -
> > > > > > Red
> > > > > > Hat
> > > > > > S.L.
> > > > > >
> > > > > >
> > > > > > I created the directories and did a
> > > > > > engine-cleanup/engine-setup.
> > > > > >
> > > > > > engine-setup finished successfully, but there is still
> > > > > > nobody
> > > > > > listening on the hrttps port
> > > > >
> > > > > Please check out if there is a java process, if there is kill
> > > > > it.
> > > > > Then remove /var/run/ovirt-engine.pid if exists.
> > > > > Then try service ovirt-engine start.
> > > > >
> > > > >
> > > > > same
> > > > >
> > > > > Error from browsers:
> > > > > Firefox:
> > > > > The connection was reset
> > > > > The connection to the server was reset while the page was
> > > > > loading.
> > > > >
> > > > > Chrome:
> > > > > SSL connection error
> > > > >
> > > > > Unable to make a secure connection to the server. This may be
> > > > > a
> > > > > problem with the server, or it may be requiring a client
> > > > > authentication certificate that you don't have.
> > > > > Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error.
> > > > >
> > > > > I tried to make the certificates using localhost.localdomain
> > > > > and
> > > > > also
> > > > > the fqdn of the machine.
> > > > >
> > > > >
> > > >
> > > > What do you get when you try to access using HTTP not HTTPS to:
> > > >
> > > > http://host/ca.crt
> > > >
> > > > Alon
> > > >
> > > > I got the certificate and firefox asked me to import it. I did,
> > > > but
> > > > it's the same thing.
> > > >
> > >
> > > OK... so http is ok, application is working, problem with ssl.
> > > are you sure you marked the certificate as trusted for web server
> > > identify?
> > > Maybe delete all certificates that of the same name already
> > > trusted?
> > >
> > >
> > > already did.
> > >
> > > The CN I see is CA-site.company.com.85892
> > >
> > > Is this correct? I thought that t6he CN should be the site name?
> > >
> > >
> >
> > This what firefox is showing... it adds the number.
> > You can check details by:
> >
> > # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -text
> >
> > You can also try using curl or wget and see what error you get,
> > maybe
> > we understand better what happening.
> >
> > Alon
> >
> >
> > root@wikitiki ~]# wget https://site.company.com:8443/UserPortal/
> > --2012-11-22 01:20:17-- https://site.company.com:8443/UserPortal/
> > Resolving site.company.com ( site.company.com )... 10.0.0.xx
> > Connecting to site.company.com ( site.company.com
> > )|10.0.0.xx|:8443... failed: Connection refused.
> >
> >
> >
> > root@wikitiki ~]# curl https://site.company.com:8443/UserPortal/ -v
> > * About to connect() to site.company.com port 8443 (#0)
> > * Trying 10.0.0.xx...
> > * Connection refused
> > * couldn't connect to host
> > * Closing connection #0
> > curl: (7) couldn't connect to host
> >
> >
> >
>
> Maybe I missed the beginning of this thread, but what version of
> ovirt-engine do you use? Why don't you use port 443? Why don't you
> have apache at front end?
>
> Alon
>
>
> looks like if I let it overwrite the httpd, it works. I could only
> test it with lynx.
>
> Unfortunately this test rendered my other sites offline. How can I
> revert back, so http takes the sites from /var/www/html?
>
>
> I missed the ovirt-engine.conf file. Please ignore my latest
> question.
>
>
> I will check this tomorrow and let you know the results
>
> Thank you for all your help
>
>
> Hi,
>
>
> It's working if I let it "overwrite" the http config. But until
> recently it was working also without any modifications on apache.

Using the apache as front-end is the recommended configuration. Next version it will be the only supported configuration as far as I know.

Alon


In this case, I think that the "overwrite http" should not be asked during engine-setup, maybe just inform the user about the changes that will be done. i mean that it should write the configuration without user approval.