[Users] Host installation failed ovirt 3.2

Hi, Today I got the following error, adding a CentOS 6.4 minimal to an Gluster based Datacenter: Everything is ok and installed fine, until I get this error in the "events" from webadmin: "Failed to install Host server4. Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute." "Host server4 installation failed. Command returned failure code 1 during SSH session 'root@vroot4.vrootdev'." Here is an excerpt from the corresponding host-deploy log it seems to be iptables related? Any Hints? 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel rhel.state:169 starting service iptables 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:347 execute: ('/sbin/initctl', 'status', 'iptables'), executable='None', cwd='None', env=None 2013-10-17 15:11:03 DEBUG otopi.vplugins.otopi.services.rhel plugin.executeRaw:364 execute-result: ('/sbin/initctl', 'status', 'iptables'), rc=1 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412 execute-output: ('/sbin/initctl', 'status', 'iptables') stdout: 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417 execute-output: ('/sbin/initctl', 'status', 'iptables') stderr: initctl: Unknown job: iptables 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:347 execute: ('/sbin/service', 'iptables', 'stop'), executable='None', cwd='None', env=None 2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:364 execute-result: ('/sbin/service', 'iptables', 'stop'), rc=1 2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412 execute-output: ('/sbin/service', 'iptables', 'stop') stdout: iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: nat mangle filter [ OK ] iptables: Unloading modules: ip_tables[FAILED] 2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417 execute-output: ('/sbin/service', 'iptables', 'stop') stderr: 2013-10-17 15:11:04 DEBUG otopi.context context._executeMethod:130 method exception Traceback (most recent call last): File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/context.py", line 120, in _executeMethod method['method']() File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/network/iptables.py", line 111, in _closeup self.services.state('iptables', False) File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py", line 184, in state 'start' if state else 'stop' File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py", line 96, in _executeServiceCommand raiseOnError=raiseOnError File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/plugin.py", line 422, in execute command=args[0], RuntimeError: Command '/sbin/service' failed to execute 2013-10-17 15:11:04 ERROR otopi.context context._executeMethod:139 Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute

Please send the entire host-deploy log so I can see what iptables rules are there. ----- Original Message -----
From: "Sven Kieske" <S.Kieske@mittwald.de> To: users@ovirt.org Sent: Thursday, October 17, 2013 4:19:46 PM Subject: [Users] Host installation failed ovirt 3.2
Hi,
Today I got the following error, adding a CentOS 6.4 minimal to an Gluster based Datacenter:
Everything is ok and installed fine, until I get this error in the "events" from webadmin:
"Failed to install Host server4. Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute."
"Host server4 installation failed. Command returned failure code 1 during SSH session 'root@vroot4.vrootdev'."
Here is an excerpt from the corresponding host-deploy log it seems to be iptables related?
Any Hints?
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel rhel.state:169 starting service iptables 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:347 execute: ('/sbin/initctl', 'status', 'iptables'), executable='None', cwd='None', env=None 2013-10-17 15:11:03 DEBUG otopi.vplugins.otopi.services.rhel plugin.executeRaw:364 execute-result: ('/sbin/initctl', 'status', 'iptables'), rc=1 2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412 execute-output: ('/sbin/initctl', 'status', 'iptables') stdout:
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417 execute-output: ('/sbin/initctl', 'status', 'iptables') stderr: initctl: Unknown job: iptables
2013-10-17 15:11:03 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:347 execute: ('/sbin/service', 'iptables', 'stop'), executable='None', cwd='None', env=None 2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.executeRaw:364 execute-result: ('/sbin/service', 'iptables', 'stop'), rc=1 2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412 execute-output: ('/sbin/service', 'iptables', 'stop') stdout: iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: nat mangle filter [ OK ] iptables: Unloading modules: ip_tables[FAILED]
2013-10-17 15:11:04 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417 execute-output: ('/sbin/service', 'iptables', 'stop') stderr:
2013-10-17 15:11:04 DEBUG otopi.context context._executeMethod:130 method exception Traceback (most recent call last): File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/context.py", line 120, in _executeMethod method['method']() File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/network/iptables.py", line 111, in _closeup self.services.state('iptables', False) File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py", line 184, in state 'start' if state else 'stop' File "/tmp/ovirt-C88JvFdKfe/otopi-plugins/otopi/services/rhel.py", line 96, in _executeServiceCommand raiseOnError=raiseOnError File "/tmp/ovirt-C88JvFdKfe/pythonlib/otopi/plugin.py", line 422, in execute command=args[0], RuntimeError: Command '/sbin/service' failed to execute 2013-10-17 15:11:04 ERROR otopi.context context._executeMethod:139 Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Hi, here it is. atm, I try to reproduce this bug on a different hardware, it may be related to a "yum update" before installing vdsm, this is the only difference to our working machines. Thanks! PS: You can also catch me on IRC On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables rules are there.

------=_Part_5683343_1121954314.1382025161743 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit ----- Original Message -----
From: "Sven Kieske" <S.Kieske@mittwald.de> To: "Alon Bar-Lev" <alonbl@redhat.com>, users@ovirt.org Sent: Thursday, October 17, 2013 6:21:11 PM Subject: Re: [Users] Host installation failed ovirt 3.2
Hi,
here it is.
atm, I try to reproduce this bug on a different hardware, it may be related to a "yum update" before installing vdsm, this is the only difference to our working machines.
Can you please try to manual put the attached in /etc/sysconfig/iptables? This is what host-deploy try to apply. Then stop and start iptables service, this should fail as well but allow us to find the issue. Thanks, Alon
Thanks!
PS: You can also catch me on IRC
On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables rules are there.
------=_Part_5683343_1121954314.1382025161743 Content-Type: text/x-iptables; name=iptables Content-Disposition: attachment; filename=iptables Content-Transfer-Encoding: base64 IyBvVmlydCBkZWZhdWx0IGZpcmV3YWxsIGNvbmZpZ3VyYXRpb24uIEF1dG9tYXRpY2FsbHkgZ2Vu ZXJhdGVkIGJ5IHZkc20gYm9vdHN0cmFwIHNjcmlwdC4KKmZpbHRlcgo6SU5QVVQgQUNDRVBUIFsw OjBdCjpGT1JXQVJEIEFDQ0VQVCBbMDowXQo6T1VUUFVUIEFDQ0VQVCBbMDowXQotQSBJTlBVVCAt bSBzdGF0ZSAtLXN0YXRlIEVTVEFCTElTSEVELFJFTEFURUQgLWogQUNDRVBUCi1BIElOUFVUIC1p IGxvIC1qIEFDQ0VQVAojIHZkc20KLUEgSU5QVVQgLXAgdGNwIC0tZHBvcnQgNTQzMjEgLWogQUND RVBUCiMgU1NICi1BIElOUFVUIC1wIHRjcCAtLWRwb3J0IDIyIC1qIEFDQ0VQVAojIHNubXAKLUEg SU5QVVQgLXAgdWRwIC0tZHBvcnQgMTYxIC1qIEFDQ0VQVAojIGxpYnZpcnQgdGxzCi1BIElOUFVU IC1wIHRjcCAtLWRwb3J0IDE2NTE0IC1qIEFDQ0VQVAojIGd1ZXN0IGNvbnNvbGVzCi1BIElOUFVU IC1wIHRjcCAtbSBtdWx0aXBvcnQgLS1kcG9ydHMgNTYzNDo2MTY2IC1qIEFDQ0VQVAojIG1pZ3Jh dGlvbgotQSBJTlBVVCAtcCB0Y3AgLW0gbXVsdGlwb3J0IC0tZHBvcnRzIDQ5MTUyOjQ5MjE2IC1q IEFDQ0VQVAojIGdsdXN0ZXJkCi1BIElOUFVUIC1wIHRjcCAtbSB0Y3AgLS1kcG9ydCAyNDAwNyAt aiBBQ0NFUFQKIyBwb3J0bWFwcGVyCi1BIElOUFVUIC1wIHVkcCAtbSB1ZHAgLS1kcG9ydCAxMTEg ICAtaiBBQ0NFUFQKLUEgSU5QVVQgLXAgdGNwIC1tIHRjcCAtLWRwb3J0IDM4NDY1IC1qIEFDQ0VQ VAotQSBJTlBVVCAtcCB0Y3AgLW0gdGNwIC0tZHBvcnQgMzg0NjYgLWogQUNDRVBUCiMgbmZzCi1B IElOUFVUIC1wIHRjcCAtbSB0Y3AgLS1kcG9ydCAzODQ2NyAtaiBBQ0NFUFQKIyBzdGF0dXMKLUEg SU5QVVQgLXAgdGNwIC1tIHRjcCAtLWRwb3J0IDM5NTQzIC1qIEFDQ0VQVAotQSBJTlBVVCAtcCB0 Y3AgLW0gdGNwIC0tZHBvcnQgNTU4NjMgLWogQUNDRVBUCiMgbmxvY2ttZ3IKLUEgSU5QVVQgLXAg dGNwIC1tIHRjcCAtLWRwb3J0IDM4NDY4IC1qIEFDQ0VQVAotQSBJTlBVVCAtcCB1ZHAgLW0gdWRw IC0tZHBvcnQgOTYzICAgLWogQUNDRVBUCi1BIElOUFVUIC1wIHRjcCAtbSB0Y3AgLS1kcG9ydCA5 NjUgICAtaiBBQ0NFUFQKIyBjdGRiZAotQSBJTlBVVCAtcCB0Y3AgLW0gdGNwIC0tZHBvcnQgNDM3 OSAgLWogQUNDRVBUCiMgc21iZAotQSBJTlBVVCAtcCB0Y3AgLW0gdGNwIC0tZHBvcnQgMTM5ICAg LWogQUNDRVBUCi1BIElOUFVUIC1wIHRjcCAtbSB0Y3AgLS1kcG9ydCA0NDUgICAtaiBBQ0NFUFQK IyBQb3J0cyBmb3IgZ2x1c3RlciB2b2x1bWUgYnJpY2tzIChkZWZhdWx0IDEwMCBwb3J0cykKLUEg SU5QVVQgLXAgdGNwIC1tIHRjcCAtLWRwb3J0IDI0MDA5OjI0MTA4IC1qIEFDQ0VQVAojIFJlamVj dCBhbnkgb3RoZXIgaW5wdXQgdHJhZmZpYwotQSBJTlBVVCAtaiBSRUpFQ1QgLS1yZWplY3Qtd2l0 aCBpY21wLWhvc3QtcHJvaGliaXRlZAotQSBGT1JXQVJEIC1tIHBoeXNkZXYgISAtLXBoeXNkZXYt aXMtYnJpZGdlZCAtaiBSRUpFQ1QgLS1yZWplY3Qtd2l0aCBpY21wLWhvc3QtcHJvaGliaXRlZApD T01NSVQK ------=_Part_5683343_1121954314.1382025161743--

Hi, this config was already in /etc/sysconfig/iptables (you forget some empty lines, but the rest is identical), here is the outcome: service iptables stop iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ] iptables: Unloading modules: [ OK ] [root@vroot4 ~]# service iptables start iptables: Applying firewall rules: [ OK ] [root@vroot4 ~]# service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:54321 4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:161 6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 5634:6166 8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 49152:49216 9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:24007 10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:111 11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38465 12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38466 13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38467 14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:39543 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:55863 16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38468 17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:963 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:965 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4379 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:24009:24108 23 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited Chain OUTPUT (policy ACCEPT) num target prot opt source destination So there is no error, reloading it by hand. I tried to then add the host again via webadmin, and it succeeds. So I really don't know what the problem was :( On 17.10.2013 17:52, Alon Bar-Lev wrote:
----- Original Message -----
On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables rules are there.

This problem occured again, this time, deploying an centOS netinstall. Steps to reproduce: 1. install CentOS 6.4. x64 netinstall, use the target "minimal installation". 2. add repos for epel and ovirt. 3. install vdsm on host through webadmin actual result: In Webadmin: "Failed to install Host server4 Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute." I attached the complete host-deploy log. it fails at reloading iptables however, the default ovirt-iptables config is present in /etc/sysconfig/iptables and is loaded (this was checked by "service iptables status" command) also manual restarting the service works fine: service iptables restart iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: mangle filter na[ OK ] iptables: Unloading modules: [ OK ] iptables: Applying firewall rules: [ OK ] next step was "reinstall" host through webadmin, which worked fine, the host rebooted. any hints? On 18.10.2013 10:44, Sven Kieske wrote:
Hi,
this config was already in /etc/sysconfig/iptables (you forget some empty lines, but the rest is identical), here is the outcome:
service iptables stop iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ] iptables: Unloading modules: [ OK ] [root@vroot4 ~]# service iptables start iptables: Applying firewall rules: [ OK ] [root@vroot4 ~]# service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:54321 4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:161 6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 5634:6166 8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 49152:49216 9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:24007 10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:111 11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38465 12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38466 13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38467 14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:39543 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:55863 16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38468 17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:963 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:965 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4379 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:24009:24108 23 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
So there is no error, reloading it by hand.
I tried to then add the host again via webadmin, and it succeeds.
So I really don't know what the problem was :(
On 17.10.2013 17:52, Alon Bar-Lev wrote:
----- Original Message -----
On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables rules are there.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

----- Original Message -----
From: "Sven Kieske" <S.Kieske@mittwald.de> To: users@ovirt.org Sent: Friday, October 18, 2013 5:43:39 PM Subject: Re: [Users] Host installation failed ovirt 3.2
This problem occured again, this time, deploying an centOS netinstall.
Steps to reproduce:
1. install CentOS 6.4. x64 netinstall, use the target "minimal installation". 2. add repos for epel and ovirt. 3. install vdsm on host through webadmin
actual result:
In Webadmin:
"Failed to install Host server4 Failed to execute stage 'Closing up': Command '/sbin/service' failed to execute."
2013-10-18 16:29:11 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:412 execute-output: ('/sbin/service', 'iptables', 'start') stdout: iptables: Applying firewall rules: [FAILED] 2013-10-18 16:29:11 DEBUG otopi.plugins.otopi.services.rhel plugin.execute:417 execute-output: ('/sbin/service', 'iptables', 'start') stderr: iptables-restore: line 61 failed
I attached the complete host-deploy log. it fails at reloading iptables however, the default ovirt-iptables config is present in /etc/sysconfig/iptables and is loaded (this was checked by "service iptables status" command) also manual restarting the service works fine:
service iptables restart iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: mangle filter na[ OK ] iptables: Unloading modules: [ OK ] iptables: Applying firewall rules: [ OK ]
next step was "reinstall" host through webadmin, which worked fine, the host rebooted.
any hints?
I have no access to centos... and unsure what is happening... need your help. It looks like there is some problem in first apply of firewall rules... Can you please checkout this sequence which is similar to what happening at host-deploy: 1. have default /etc/sysconfig/iptables (you can find it as backuped up /etc/sysconfig/iptables.*) 2. restart iptables 3. move /etc/sysconfig/iptables /etc/sysconfig/iptables.old 4. move /etc/sysconfig/<ovirt> /etc/sysconfig/iptables 5. restart iptables I hope we see same failure, so it will be easier to debug. I've never seen this issue... with same file content restart 1 does not work, restart 2 does... this is strange. Thanks, Alon
On 18.10.2013 10:44, Sven Kieske wrote:
Hi,
this config was already in /etc/sysconfig/iptables (you forget some empty lines, but the rest is identical), here is the outcome:
service iptables stop iptables: Flushing firewall rules: [ OK ] iptables: Setting chains to policy ACCEPT: nat filter mangl[ OK ] iptables: Unloading modules: [ OK ] [root@vroot4 ~]# service iptables start iptables: Applying firewall rules: [ OK ] [root@vroot4 ~]# service iptables status Table: filter Chain INPUT (policy ACCEPT) num target prot opt source destination 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 2 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 3 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:54321 4 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 5 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:161 6 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:16514 7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 5634:6166 8 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 49152:49216 9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:24007 10 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:111 11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38465 12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38466 13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38467 14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:39543 15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:55863 16 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:38468 17 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:963 18 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:965 19 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4379 20 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:139 21 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:445 22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpts:24009:24108 23 REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited
Chain FORWARD (policy ACCEPT) num target prot opt source destination 1 REJECT all -- 0.0.0.0/0 0.0.0.0/0 PHYSDEV match ! --physdev-is-bridged reject-with icmp-host-prohibited
Chain OUTPUT (policy ACCEPT) num target prot opt source destination
So there is no error, reloading it by hand.
I tried to then add the host again via webadmin, and it succeeds.
So I really don't know what the problem was :(
On 17.10.2013 17:52, Alon Bar-Lev wrote:
----- Original Message -----
On 17.10.2013 16:15, Alon Bar-Lev wrote:
Please send the entire host-deploy log so I can see what iptables rules are there.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (2)
-
Alon Bar-Lev
-
Sven Kieske