Re: [ovirt-users] Users Digest, Vol 39, Issue 50
10 Dec
2014
10 Dec
'14
4:18 p.m.
------=_Part_8758566_407473350.1418224697280
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Answering to message 2 (bond mode 4):
* Mode 4 (802.3ad) This mode is known as Dynamic Link Aggregation mode. It creates aggregation groups that share the same speed and duplex settings. This mode requires a switch that supports IEEE 802.3ad Dynamic link.
Please try configuring your 4 Cisco ports as port-channel/channel-group in active with LACP enabled capability on its ports.
Thanks in advance.
Best regards,
Nikolai
____________________
Nikolai Sednev
Senior Quality Engineer at Compute team
Red Hat Israel
34 Jerusalem Road,
Ra'anana, Israel 43501
Tel: +972 9 7692043
Mobile: +972 52 7342734
Email: nsednev@redhat.com
IRC: nsednev
----- Original Message -----
From: users-request@ovirt.org
To: users@ovirt.org
Sent: Wednesday, December 10, 2014 12:57:20 PM
Subject: Users Digest, Vol 39, Issue 50
Send Users mailing list submissions to
users@ovirt.org
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.ovirt.org/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request@ovirt.org
You can reach the person managing the list at
users-owner@ovirt.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Users digest..."
Today's Topics:
1. Fwd: Fwd: run ovirt-shell script like background job -
problem (Grzegorz Szypa)
2. oVirt bonding mode4 + cisco 2960 XR (??????? ????????)
3. Re: ??: 3.5 hosted engine: 2nd host Cannot acquire bridge
address (Sandro Bonazzola)
4. [QE][ACTION REQUIRED] oVirt 3.6.0 status (Sandro Bonazzola)
5. [QE][ACTION REQUIRED] oVirt 3.5.1 RC status (Sandro Bonazzola)
6. Re: [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
(Francesco Romani)
7. Re: Adding domain to oVirt to 3.5 issue (Alon Bar-Lev)
----------------------------------------------------------------------
Message: 1
Date: Wed, 10 Dec 2014 07:33:32 +0100
From: Grzegorz Szypa <grzegorz.szypa@gmail.com>
To: users@ovirt.org
Subject: [ovirt-users] Fwd: Fwd: run ovirt-shell script like
background job - problem
Message-ID:
<CACL97+jXMDgCqCyWB79E=MaMwEn1Xx3ew4BiRTHYtfbphy=veg@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Problem is solved.
It must be install this:
yum update packages
not like this
rpm -i *.rpm
---------- Forwarded message ----------
From: Grzegorz Szypa <grzegorz.szypa@gmail.com>
Date: 2014-12-09 20:42 GMT+01:00
Subject: Re: [ovirt-users] Fwd: run ovirt-shell script like background job
- problem
To: Juan Hern?ndez <jhernand@redhat.com>
So i have a question:
When i install:
rpm -i ovirt-engine-sdk-python-3.5.0.7-1.el6.noarch.rpm
ovirt-engine-cli-3.5.0.5-1.el6.noarch.rpm
i got error conflict with current package ovirt-engine-3.4.x
It was all-in-one instalation in one server.
2014-12-09 10:32 GMT+01:00 Juan Hern?ndez <jhernand@redhat.com>:
> On 12/08/2014 08:05 PM, Grzegorz Szypa wrote:
> > So, i have a question.
> >
> > Is ovirt-engine-cli-3.5.0.2-1.el6.noarch compatible in ovirt-engine-3.4?
> >
> > Can install ovirt-engine-cli-3.5 on ovirt-engine-cli-3.4 and using him
> > with landscape based on ovirt 3.4 ??
> >
>
> Yes, versions 3.5.x of ovirt-engine-cli and ovirt-engine-sdk-python (you
> will need both) are compatible with version 3.4 of the engine.
>
> > 2014-12-07 17:33 GMT+01:00 Juan Hern?ndez <jhernand@redhat.com
> > <mailto:jhernand@redhat.com>>:
> >
> > On 12/07/2014 05:05 PM, Grzegorz Szypa wrote:
> > > Hi,
> > >
> > > I have a problem with running ovirt-shell script, that it starting
> > VMs.
> > > In dialog mode it's fine, but in background no :(
> > >
> > > Example script:
> > > ovirt-shell -E 'action vm WinSrv2012r2 start'
> > >
> > > I start this job in cron as root.
> > >
> > >
> > > Have somebody idea??
> > >
> > > --
> > > G.Sz.
> > >
> >
> > We used to have bug that made ovirt-shell fail when there wasn't a
> tty
> > available (like when running from cron):
> >
> > ovirt-shell cannot run in cron (/dev/tty missing)
> > https://bugzilla.redhat.com/1119412
> >
> > That was fixed in version 3.5.0.2, so make sure that you have at
> least
> > that version.
> >
> > If you still have problems please share the output of the ovirt-shell
> > command.
> >
> > --
> > Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
> > 3?D, 28016 Madrid, Spain
> > Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat
> > S.L.
> >
> >
> >
> >
> > --
> > G.Sz.
> >
> >
> >
> > --
> > G.Sz.
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>
>
> --
> Direcci?n Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
> 3?D, 28016 Madrid, Spain
> Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat S.L.
>
--
G.Sz.
--
G.Sz.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/76801a84/attachment-0001.html>
------------------------------
Message: 2
Date: Wed, 10 Dec 2014 10:20:01 +0300
From: ??????? ???????? <mail.griffon@gmail.com>
To: "users@ovirt.org" <users@ovirt.org>
Subject: [ovirt-users] oVirt bonding mode4 + cisco 2960 XR
Message-ID:
<CAE85BH-VkK0PsdS=WQzmP61nYX2B-cE09tOEK8NpcuqYbANtCA@mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Hi, community!
I have made bond0 mode4 (eth0+eth1+eth2+eth3) by oVirt portal. It's work
well on CentOS 7 node.
How I can setup my cisco 2960 XR switch for work with this bond0 for
loadbalancing + aggregation (802.3ad)?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/9fcded22/attachment-0001.html>
------------------------------
Message: 3
Date: Wed, 10 Dec 2014 08:37:32 +0100
From: Sandro Bonazzola <sbonazzo@redhat.com>
To: Robert Story <rstory@tislabs.com>
Cc: "users@ovirt.org" <users@ovirt.org>
Subject: Re: [ovirt-users] ??: 3.5 hosted engine: 2nd host Cannot
acquire bridge address
Message-ID: <5487F83C.2020704@redhat.com>
Content-Type: text/plain; charset=UTF-8
Il 09/12/2014 20:16, Robert Story ha scritto:
> On Tue, 09 Dec 2014 10:33:51 +0100 Sandro wrote:
> SB> > Looking at setup logs, you have:
> SB> > OVEHOSTED_NETWORK/bridgeIf=str:'eth1.79'
> SB> > [...]
> SB> > which seems to fail matching REGEXP:
> SB> >
> SB> > _ADDRESS_RE = re.compile(
> SB> > flags=re.VERBOSE,
> SB> > pattern=r"""
> SB> > \s+
> SB> > inet
> SB> > \s
> SB> > (?P<address>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})
> SB> > .+
> SB> > \s+
> SB> > (?P<interface>\w+)
> SB> > $
> SB> > """
> SB> > )
> SB> >
> SB> > I guess the match is failing due to the '.' in 'eth1.79'
> SB>
> SB> If you haven't already opened a BZ about it, please open one, thanks
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1172287
>
Thanks
>
> Robert
>
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 4
Date: Wed, 10 Dec 2014 09:02:13 +0100
From: Sandro Bonazzola <sbonazzo@redhat.com>
To: "Users@ovirt.org" <Users@ovirt.org>, "devel@ovirt.org"
<devel@ovirt.org>
Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.6.0 status
Message-ID: <5487FE05.3010703@redhat.com>
Content-Type: text/plain; charset=iso-8859-15
Hi,
Release criteria discussion has been closed and wiki has been updated accordingly by Brian [1][2].
Release management for 3.6.0 [3] has been updated with the accepted changes in release criteria.
ACTION: Feature proposed for 3.6.0 must now be collected in the 3.6 Google doc [4] and reviewed by maintainers.
Finished the review process, the remaining key milestones for this release will be scheduled.
For reference, external project schedules we're tracking are:
Fedora 21: 2014-12-09 (RELEASED)
Fedora 22: no earlier than 2015-05-19
Foreman 1.8.0: 2015-03-01
GlusterFS 3.7: 2015-04-29
OpenStack Kilo: 2015-04-30
Two different proposals have been made about above scheduling [5]:
1) extend the cycle to 10 months for allowing to include a large feature set
2) reduce the cycle to less than 6 months and split features over 3.6 and 3.7
and we can also add
3) keep current 6 months cycle
The tracker bug for 3.6.0 [6] currently shows no blockers.
There are 460 bugs [7] targeted to 3.6.0.
Excluding node and documentation bugs we have 436 bugs [8] targeted to 3.6.0.
[1] http://www.ovirt.org/Release_Criteria_Template
[2] http://www.ovirt.org/Release_process
[3] http://www.ovirt.org/OVirt_3.6_Release_Management
[4] http://goo.gl/9X3G49
[5] http://lists.ovirt.org/pipermail/users/2014-November/028875.html
[6] https://bugzilla.redhat.com/show_bug.cgi?id=1155425
[7] http://goo.gl/zwkF3r
[8] http://goo.gl/ZbUiMc
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 5
Date: Wed, 10 Dec 2014 09:07:54 +0100
From: Sandro Bonazzola <sbonazzo@redhat.com>
To: "Users@ovirt.org" <Users@ovirt.org>, "devel@ovirt.org"
<devel@ovirt.org>
Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
Message-ID: <5487FF5A.6050809@redhat.com>
Content-Type: text/plain; charset=iso-8859-15
Hi,
We have still blockers for oVirt 3.5.1 RC release so we need to postpone it until they'll be fixed.
ACTION: Being so near to winter's holidays we need to discuss the new tentative date for RC in today sync meeting.
The bug tracker [1] shows 2 open blocker:
Bug ID Whiteboard Status Summary
1160846 sla NEW Can't add disk to VM without specifying disk profile when the storage domain has more than one disk profile
1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from 3.4.4 to 3.5.1 snapshot
In order to stabilize the release a new branch ovirt-engine-3.5.1 will be created from the same git hash used for composing the RC.
- ACTION: assignee please provide ETA on above blockers
Maintainers:
- Please be sure that 3.5 snapshot allow to create VMs
- Please be sure that no pending patches are going to block the release
- If any patch must block the RC release please raise the issue as soon as possible.
There are still 63 bugs [2] targeted to 3.5.1.
Excluding node and documentation bugs we still have 42 bugs [3] targeted to 3.5.1.
Maintainers / Assignee:
- Please add the bugs to the tracker if you think that 3.5.1 should not be released without them fixed.
- ACTION: Please update the target to 3.5.2 or later for bugs that won't be in 3.5.1:
it will ease gathering the blocking bugs for next releases.
- ACTION: Please fill release notes, the page has been created here [4]
Community:
- If you're testing oVirt 3.5 nightly snapshot, please add yourself to the test page [5]
[1] http://bugzilla.redhat.com/1155170
[2] http://goo.gl/7G0PDV
[3] http://goo.gl/6gUbVr
[4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes
[5] http://www.ovirt.org/Testing/oVirt_3.5.1_Testing
--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com
------------------------------
Message: 6
Date: Wed, 10 Dec 2014 03:12:20 -0500 (EST)
From: Francesco Romani <fromani@redhat.com>
To: Sandro Bonazzola <sbonazzo@redhat.com>
Cc: Users@ovirt.org, devel@ovirt.org
Subject: Re: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
Message-ID:
<805014182.8558086.1418199140322.JavaMail.zimbra@redhat.com>
Content-Type: text/plain; charset=utf-8
----- Original Message -----
> From: "Sandro Bonazzola" <sbonazzo@redhat.com>
> To: Users@ovirt.org, devel@ovirt.org
> Sent: Wednesday, December 10, 2014 9:07:54 AM
> Subject: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 RC status
>
> Hi,
> We have still blockers for oVirt 3.5.1 RC release so we need to postpone it
> until they'll be fixed.
> ACTION: Being so near to winter's holidays we need to discuss the new
> tentative date for RC in today sync meeting.
>
> The bug tracker [1] shows 2 open blocker:
> Bug ID Whiteboard Status Summary
> 1160846 sla NEW Can't add disk to VM without specifying disk profile when
> the storage domain has more than one disk profile
> 1168709 virt NEW Hosted Engine VM is listed as paused after upgrading from
> 3.4.4 to 3.5.1 snapshot
>
> In order to stabilize the release a new branch ovirt-engine-3.5.1 will be
> created from the same git hash used for composing the RC.
>
> - ACTION: assignee please provide ETA on above blockers
1168709 - patch seems simple, posted and verified (BZ entry just updated to POST).
needs review. ETA for merge: definitely within the week, worst case.
Bests,
--
Francesco Romani
RedHat Engineering Virtualization R & D
Phone: 8261328
IRC: fromani
------------------------------
Message: 7
Date: Wed, 10 Dec 2014 05:57:14 -0500 (EST)
From: Alon Bar-Lev <alonbl@redhat.com>
To: Juan Jose <jj197005@gmail.com>
Cc: users <users@ovirt.org>
Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
Message-ID:
<1512532550.7193502.1418209034660.JavaMail.zimbra@redhat.com>
Content-Type: text/plain; charset=utf-8
----- Original Message -----
> From: "Juan Jose" <jj197005@gmail.com>
> To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" <yzaslavs@redhat.com>
> Sent: Wednesday, December 10, 2014 12:30:34 PM
> Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
>
> Hello Alon and Yair,
>
> Many thanks for your help, finally It works properly. My problem, after
> last Alon indications was that my user "Juanjo" was defined with SuperUser
> role in the previous domain configuration. I have loggen in with admin user
> from internal and I have removed old configuration and I have configured my
> user "Juanjo" with all administrators roles in folder "Permission" and I
> can log in in administration portal without problems and it works properly.
>
> My final configuration I have is an emulated *AD based on Samba 4* and the
> final configuration files are:
Good!
So samba is not emulating active directory entirely :)
But good to know it is working.
Please also checkout group membership.
> ovirt-engine-extension-aaa-ldap.noarch
> 1.0.1-0.0.master.20141209141731.git0437701.el6
this fix for samba ad will be released in 1.0.1.
>
> */etc/ovirt-engine/extensions.d/siee-local-authn.properties*:
>
> ovirt.engine.extension.name = siee-local-authn
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module =
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class =
> org.ovirt.engineextensions.aaa.ldap.AuthnExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
> ovirt.engine.aaa.authn.profile.name = siee
> ovirt.engine.aaa.authn.authz.plugin = siee-local-authz
> config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties
>
> */etc/ovirt-engine/extensions.d/siee-local-authz.properties*:
>
> ovirt.engine.extension.name = siee-local-authz
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module =
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class =
> org.ovirt.engineextensions.aaa.ldap.AuthzExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
> config.profile.file.1 = /etc/ovirt-engine/aaa/siee.properties
>
> */etc/ovirt-engine/aaa/siee.properties*:
>
> include = <ad.properties>
>
> #
> # Active directory domain name.
> #
> vars.domain = siee.local
>
> #
> # Search user and its password.
> #
> vars.user = searcher@${global:vars.domain}
> vars.password = xxxx
>
> #
> # Optional DNS servers, if enterprise
> # DNS server cannot resolve the domain srvrecord.
> #
> #vars.dns = dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}
>
> pool.default.serverset.type = srvrecord
> pool.default.serverset.srvrecord.domain = ${global:vars.domain}
> pool.default.auth.simple.bindDN = ${global:vars.user}
> pool.default.auth.simple.password = ${global:vars.password}
>
> # Uncomment if using custom DNS
> #pool.default.serverset.srvrecord.jndi-properties.java.naming.provider.url
> = ${global:vars.dns}
> #pool.default.socketfactory.resolver.uRL = ${global:vars.dns}
>
> # Create keystore, import certificate chain and uncomment
> # if using ssl/tls.
> #pool.default.ssl.startTLS = true
> #pool.default.ssl.truststore.file =
> ${local:_basedir}/${global:vars.domain}.jks
> #pool.default.ssl.truststore.password = changeit
You should enable SSL for production use... as you do not want passwords to be transmitted in clear.
Not sure how you install ssl on the samba ldap... but once you do, follow the README instructions[1]
[1] http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l141
>
> */etc/krb5.conf*:
You are not using kerberos, so there is no reason to configure it for setup to work.
>
> [logging]
> default = FILE:/var/log/krb5libs.log
> kdc = FILE:/var/log/krb5kdc.log
> admin_server = FILE:/var/log/kadmind.log
>
> [libdefaults]
> default_realm = SIEE.LOCAL
> dns_lookup_realm = true
> dns_lookup_kdc = true
> ticket_lifetime = 24h
> renew_lifetime = 7d
> forwardable = no
> default_tkt_enctypes = arcfour-hmac-md5
> udp_preference_limit = 1
>
> #[realms]
>
> #[domain_realm]
> # .siee.local = SIEE.LOCAL
> # siee.local = SIEE.LOCAL
>
>
> Many thanks again to everybody,
>
> Juanjo.
>
> On Tue, Dec 9, 2014 at 5:31 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:
>
> >
> >
> > ----- Original Message -----
> > > From: "Juan Jose" <jj197005@gmail.com>
> > > To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" <
> > yzaslavs@redhat.com>
> > > Sent: Tuesday, December 9, 2014 5:42:56 PM
> > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > >
> > > Hello Alon,
> > >
> > > In my firsts e-mails I had already said that I have an emulation of AD
> > > based on Samba 4. I have tested the last version ov
> > > ovirt-engine-extension-aaa-ldap package and I think the problem is the
> > same
> > > although the error is "User is not authorized to perform this action".
> > >
> > > I attach the enginle.log.
> >
> > USER_NOT_AUTHORIZED_TO_PERFORM_ACTION means user is not superuser or can
> > manage objects as far as I know.
> >
> > I see siee0@siee.local is trying to login which is CN=siee0
> > siee0,CN=Users,DC=siee,DC=local
> >
> > Login succeeds.
> >
> > I do not see any groups it belongs to.
> >
> > Are you sure you added this user role within the webadmin or that user
> > belongs to groups that were added to engine with such roles?
> >
> > >
> > > In case that the new oVirt version 3.5 doesn't work with an AD emulation
> > > based on Samba 4, is it possible to do user authentication with an
> > OpenLDAP
> > > directly with this 3.5 version?, if it is so, could you give me the link
> > to
> > > the documentation to configure OpenLDAP authentication?
> >
> > Sure, just use the
> > /usr/share/ovirt-engine-extension-aaa-ldap/examples/simple copy recursive
> > into /etc/ovirt-engine, then modify /etc/ovirt-engine/aaa/ldap1.properties
> > set vars.server, vars.user, vars.password.
> >
> > Until 3.5.1 you should also
> > /etc/ovirt-engine/extensions.d/domain1*.properties and replace ../aaa to
> > /etc/ovirt-engine/aaa
> >
> >
> > > Many thanks in advanced,
> > >
> > > Juanjo.
> > >
> > > On Tue, Dec 9, 2014 at 3:16 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:
> > >
> > > >
> > > >
> > > > ----- Original Message -----
> > > > > From: "Alon Bar-Lev" <alonbl@redhat.com>
> > > > > To: "Juan Jose" <jj197005@gmail.com>
> > > > > Cc: "users" <users@ovirt.org>
> > > > > Sent: Tuesday, December 9, 2014 3:59:33 PM
> > > > > Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 issue
> > > > >
> > > > > We start over...
> > > > >
> > > > > This is not active directory... it is samba.
> > > > >
> > > > > Attribute(name=vendorName, values={'Samba Team (http://samba.org)'})
> > > > >
> > > > > Only now I realized this, maybe you mentioned it earlier not sure.
> > > > >
> > > > > Of course this was never tested, so probably not working.
> > > > >
> > > > > I see that samba does not return a list of extended operations, I
> > will
> > > > > workaround this and we can see what's else differ from active
> > directory.
> > > >
> > > > Can you please checkout the following rpm[1]?
> > > >
> > > > [1]
> > > >
> > http://jenkins.ovirt.org/job/ovirt-engine-extension-aaa-ldap_master_create-rpms-el6-x86_64_merged/
> > > >
> > >
> >
>
------------------------------
_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
End of Users Digest, Vol 39, Issue 50
*************************************
------=_Part_8758566_407473350.1418224697280
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
<html><body><div style=3D"font-family: georgia,serif; font-size: 12pt; colo=
r: #000000"><div>Answering to message 2 (bond mode 4):</div><div><ul style=
=3D"box-sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; lin=
e-height: 28px; list-style-position: outside; font-family: 'Open Sans', san=
s-serif; color: #4c4c4c; background-color: #ffffff;" data-mce-style=3D"box-=
sizing: border-box; margin: 0px 0px 1.75rem 2rem; padding: 0px; line-height=
: 28px; list-style-position: outside; font-family: 'Open Sans', sans-serif;=
color: #4c4c4c; background-color: #ffffff;"><li style=3D"box-sizing: borde=
r-box; margin: 0px; padding: 0px;" data-mce-style=3D"box-sizing: border-box=
; margin: 0px; padding: 0px;">Mode 4 (802.3ad)<br style=3D"box-sizing: bord=
er-box;" data-mce-style=3D"box-sizing: border-box;">This mode is known as D=
ynamic Link Aggregation mode. It creates aggregation groups that share the =
same speed and duplex settings. This mode requires a switch that supports I=
EEE 802.3ad Dynamic link.</li></ul></div><div>Please try configuring your 4=
Cisco ports as port-channel/channel-group in active with LACP enabled capa=
bility on its ports.</div><div><br></div><div><span name=3D"x"></span><br>T=
hanks in advance.<br><div><br></div>Best regards,<br>Nikolai<br>___________=
_________<br>Nikolai Sednev<br>Senior Quality Engineer at Compute team<br>R=
ed Hat Israel<br>34 Jerusalem Road,<br>Ra'anana, Israel 43501<br><div><br><=
/div>Tel: +972 9 7692043<br>Mobile: +972 52 734=
2734<br>Email: nsednev@redhat.com<br>IRC: nsednev<span name=3D"x"></span><b=
r></div><div><br></div><hr id=3D"zwchr"><div style=3D"color:#000;font-weigh=
t:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial=
,sans-serif;font-size:12pt;"><b>From: </b>users-request@ovirt.org<br><b>To:=
</b>users@ovirt.org<br><b>Sent: </b>Wednesday, December 10, 2014 12:57:20 =
PM<br><b>Subject: </b>Users Digest, Vol 39, Issue 50<br><div><br></div>Send=
Users mailing list submissions to<br> &=
nbsp; users@ovirt.org<br><div><br></div>To subscribe or unsubscribe vi=
a the World Wide Web, visit<br> &n=
bsp;http://lists.ovirt.org/mailman/listinfo/users<br>or, via email, send a =
message with subject or body 'help' to<br> &nb=
sp; users-request@ovirt.org<br><div><br></div>You can reach the =
person managing the list at<br> &n=
bsp;users-owner@ovirt.org<br><div><br></div>When replying, please edit your=
Subject line so it is more specific<br>than "Re: Contents of Users digest.=
.."<br><div><br></div><br>Today's Topics:<br><div><br></div> 1.=
Fwd: Fwd: run ovirt-shell script like background job &nbs=
p; -<br> problem (Grz=
egorz Szypa)<br> 2. oVirt bonding mode4 + cisco 2960 XR (=
??????? ????????)<br> 3. Re: ??: 3.5 hosted engine:=
2nd host Cannot acquire bridge<br> address (Sandr=
o Bonazzola)<br> 4. [QE][ACTION REQUIRED] oVirt 3.6.0 sta=
tus (Sandro Bonazzola)<br> 5. [QE][ACTION REQUIRED] oVirt=
3.5.1 RC status (Sandro Bonazzola)<br> 6. Re: [QE][ACTIO=
N REQUIRED] oVirt 3.5.1 RC status<br> (Francesco R=
omani)<br> 7. Re: Adding domain to oVirt to 3.5 issue (Al=
on Bar-Lev)<br><div><br></div><br>-----------------------------------------=
-----------------------------<br><div><br></div>Message: 1<br>Date: Wed, 10=
Dec 2014 07:33:32 +0100<br>From: Grzegorz Szypa <grzegorz.szypa@gmail.c=
om><br>To: users@ovirt.org<br>Subject: [ovirt-users] Fwd: Fwd: run ovirt=
-shell script like<br> backg=
round job - problem<br>Messa=
ge-ID:<br> <CACL97+jXMDgC=
qCyWB79E=3DMaMwEn1Xx3ew4BiRTHYtfbphy=3Dveg@mail.gmail.com><br>Content-Ty=
pe: text/plain; charset=3D"utf-8"<br><div><br></div>Problem is solved.<br><=
div><br></div>It must be install this:<br><div><br></div>yum update package=
s<br><div><br></div>not like this<br>rpm -i *.rpm<br><div><br></div><br>---=
------- Forwarded message ----------<br>From: Grzegorz Szypa <grzegorz.s=
zypa@gmail.com><br>Date: 2014-12-09 20:42 GMT+01:00<br>Subject: Re: [ovi=
rt-users] Fwd: run ovirt-shell script like background job<br>- problem<br>T=
o: Juan Hern?ndez <jhernand@redhat.com><br><div><br></div><br>So i ha=
ve a question:<br><div><br></div>When i install:<br><div><br></div>rpm -i o=
virt-engine-sdk-python-3.5.0.7-1.el6.noarch.rpm<br>ovirt-engine-cli-3.5.0.5=
-1.el6.noarch.rpm<br><div><br></div>i got error conflict with current packa=
ge ovirt-engine-3.4.x<br><div><br></div>It was all-in-one instalation in on=
e server.<br><div><br></div><br><div><br></div>2014-12-09 10:32 GMT+01:00 J=
uan Hern?ndez <jhernand@redhat.com>:<br><div><br></div>> On 12/08/=
2014 08:05 PM, Grzegorz Szypa wrote:<br>> > So, i have a question.<br=
>> ><br>> > Is ovirt-engine-cli-3.5.0.2-1.el6.noarch compatible=
in ovirt-engine-3.4?<br>> ><br>> > Can install ovirt-engine-cl=
i-3.5 on ovirt-engine-cli-3.4 and using him<br>> > with landscape bas=
ed on ovirt 3.4 ??<br>> ><br>><br>> Yes, versions 3.5.x of ovir=
t-engine-cli and ovirt-engine-sdk-python (you<br>> will need both) are c=
ompatible with version 3.4 of the engine.<br>><br>> > 2014-12-07 1=
7:33 GMT+01:00 Juan Hern?ndez <jhernand@redhat.com<br>> > <mail=
to:jhernand@redhat.com>>:<br>> ><br>> > On =
12/07/2014 05:05 PM, Grzegorz Szypa wrote:<br>> > > =
Hi,<br>> > ><br>> > > I have =
a problem with running ovirt-shell script, that it starting<br>> > &n=
bsp; VMs.<br>> > > In dialog mode it's fine, =
but in background no :(<br>> > ><br>> > =
> Example script:<br>> > > ovirt-shell -E=
'action vm WinSrv2012r2 start'<br>> > ><br>> >=
; > I start this job in cron as root.<br>> > =
><br>> > ><br>> > >=
Have somebody idea??<br>> > ><br>> > &=
nbsp; > --<br>> > > G.Sz.<br>> > &nb=
sp; ><br>> ><br>> > We used to have bug that m=
ade ovirt-shell fail when there wasn't a<br>> tty<br>> > &n=
bsp; available (like when running from cron):<br>> ><br>> > &nb=
sp; ovirt-shell cannot run in cron (/dev/tty missing)<br>>=
> https://bugzilla.redhat.com/1119412<br>> >=
<br>> > That was fixed in version 3.5.0.2, so make sure=
that you have at<br>> least<br>> > that version.<br=
>> ><br>> > If you still have problems please sha=
re the output of the ovirt-shell<br>> > command.<br>>=
; ><br>> > --<br>> > Direcci?n C=
omercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> > &nb=
sp; 3?D, 28016 Madrid, Spain<br>> > Inscrita en =
el Reg. Mercantil de Madrid ? C.I.F. B82657941 - Red Hat<br>> > =
; S.L.<br>> ><br>> ><br>> ><br>> ><br>> &=
gt; --<br>> > G.Sz.<br>> ><br>> ><br>> ><br>> &g=
t; --<br>> > G.Sz.<br>> ><br>> ><br>> > ___________=
____________________________________<br>> > Users mailing list<br>>=
; > Users@ovirt.org<br>> > http://lists.ovirt.org/mailman/listinfo=
/users<br>> ><br>><br>><br>> --<br>> Direcci?n Comercial:=
C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta<br>> 3?D, 28016 Madrid=
, Spain<br>> Inscrita en el Reg. Mercantil de Madrid ? C.I.F. B82657941 =
- Red Hat S.L.<br>><br><div><br></div><br><div><br></div>-- <br>G.Sz.<br=
><div><br></div><br><div><br></div>-- <br>G.Sz.<br>-------------- next part=
--------------<br>An HTML attachment was scrubbed...<br>URL: <http://li=
sts.ovirt.org/pipermail/users/attachments/20141210/76801a84/attachment-0001=
.html><br><div><br></div>------------------------------<br><div><br></di=
v>Message: 2<br>Date: Wed, 10 Dec 2014 10:20:01 +0300<br>From: ??????? ????=
???? <mail.griffon@gmail=
.com><br>To: "users@ovirt.org" <users@ovirt.org><br>Subject: [ovir=
t-users] oVirt bonding mode4 + cisco 2960 XR<br>Message-ID:<br> =
<CAE85BH-VkK0PsdS=3DWQzmP61nYX2B-cE0=
9tOEK8NpcuqYbANtCA@mail.gmail.com><br>Content-Type: text/plain; charset=
=3D"utf-8"<br><div><br></div>Hi, community!<br><div><br></div>I have made b=
ond0 mode4 (eth0+eth1+eth2+eth3) by oVirt portal. It's work<br>well on Cent=
OS 7 node.<br><div><br></div>How I can setup my cisco 2960 XR switch for wo=
rk with this bond0 for<br>loadbalancing + aggregation (802.3ad)?<br>-------=
------- next part --------------<br>An HTML attachment was scrubbed...<br>U=
RL: <http://lists.ovirt.org/pipermail/users/attachments/20141210/9fcded2=
2/attachment-0001.html><br><div><br></div>------------------------------=
<br><div><br></div>Message: 3<br>Date: Wed, 10 Dec 2014 08:37:32 +0100<br>F=
rom: Sandro Bonazzola <sbonazzo@redhat.com><br>To: Robert Story <r=
story@tislabs.com><br>Cc: "users@ovirt.org" <users@ovirt.org><br>S=
ubject: Re: [ovirt-users] ??: 3.5 hosted engine: 2nd host Cannot<br>&=
nbsp; acquire bridge address<br>Me=
ssage-ID: <5487F83C.2020704@redhat.com><br>Content-Type: text/plain; =
charset=3DUTF-8<br><div><br></div>Il 09/12/2014 20:16, Robert Story ha scri=
tto:<br>> On Tue, 09 Dec 2014 10:33:51 +0100 Sandro wrote:<br>> SB>=
; > Looking at setup logs, you have:<br>> SB> > OVEHOSTED_NETWO=
RK/bridgeIf=3Dstr:'eth1.79'<br>> SB> > [...]<br>> SB> > w=
hich seems to fail matching REGEXP:<br>> SB> > <br>> SB> >=
; _ADDRESS_RE =3D re.compile(<br>> SB> > &nbs=
p; flags=3Dre.VERBOSE,<br>> SB> > &nbs=
p; pattern=3Dr"""<br>> SB> > &n=
bsp; \s+<br>> SB> > &nbs=
p; inet<br>> SB> > \s<br=
>> SB> > (?P<address&=
gt;\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})<br>> SB> > &n=
bsp; .+<br>> SB> > =
; \s+<br>> SB> > =
(?P<interface>\w+)<br>> SB> > &n=
bsp; $<br>> SB> > """<br>> SB> &=
gt; )<br>> SB> > <br>> SB> > I guess the ma=
tch is failing due to the '.' in 'eth1.79'<br>> SB> <br>> SB> I=
f you haven't already opened a BZ about it, please open one, thanks<br>>=
<br>> https://bugzilla.redhat.com/show_bug.cgi?id=3D1172287<br>&=
gt; <br><div><br></div>Thanks<br><div><br></div>> <br>> Robert<br>>=
; <br><div><br></div><br>-- <br>Sandro Bonazzola<br>Better technology. Fast=
er innovation. Powered by community collaboration.<br>See how it works at r=
edhat.com<br><div><br></div><br>------------------------------<br><div><br>=
</div>Message: 4<br>Date: Wed, 10 Dec 2014 09:02:13 +0100<br>From: Sandro B=
onazzola <sbonazzo@redhat.com><br>To: "Users@ovirt.org" <Users@ovi=
rt.org>, "devel@ovirt.org"<br> =
<devel@ovirt.org><br>Subject: [ovirt-users] [QE][ACTION REQUIRE=
D] oVirt 3.6.0 status<br>Message-ID: <5487FE05.3010703@redhat.com><br=
>Content-Type: text/plain; charset=3Diso-8859-15<br><div><br></div>Hi,<br><=
div><br></div>Release criteria discussion has been closed and wiki has been=
updated accordingly by Brian [1][2].<br><div><br></div>Release management =
for 3.6.0 [3] has been updated with the accepted changes in release criteri=
a.<br><div><br></div>ACTION: Feature proposed for 3.6.0 must now be collect=
ed in the 3.6 Google doc [4] and reviewed by maintainers.<br>Finished the r=
eview process, the remaining key milestones for this release will be schedu=
led.<br><div><br></div>For reference, external project schedules we're trac=
king are:<br> Fedora 21: 2014-12-09 (RELEASED)<br> &=
nbsp; Fedora 22: no earlier than 2015-05-19<br> For=
eman 1.8.0: 2015-03-01<br> GlusterFS 3.7: 2015-04-29<br>&=
nbsp; OpenStack Kilo: 2015-04-30<br><div><br></div><br>Two diff=
erent proposals have been made about above scheduling [5]:<br>1) extend the=
cycle to 10 months for allowing to include a large feature set<br>2) reduc=
e the cycle to less than 6 months and split features over 3.6 and 3.7<br><d=
iv><br></div>and we can also add<br><div><br></div>3) keep current 6 months=
cycle<br><div><br></div>The tracker bug for 3.6.0 [6] currently shows no b=
lockers.<br><div><br></div>There are 460 bugs [7] targeted to 3.6.0.<br>Exc=
luding node and documentation bugs we have 436 bugs [8] targeted to 3.6.0.<=
br><div><br></div><br>[1] http://www.ovirt.org/Release_Criteria_Template<br=
>[2] http://www.ovirt.org/Release_process<br>[3] http://www.ovirt.org/OVirt=
_3.6_Release_Management<br>[4] http://goo.gl/9X3G49<br>[5] http://lists.ovi=
rt.org/pipermail/users/2014-November/028875.html<br>[6] https://bugzilla.re=
dhat.com/show_bug.cgi?id=3D1155425<br>[7] http://goo.gl/zwkF3r<br>[8] http:=
//goo.gl/ZbUiMc<br><div><br></div><br>-- <br>Sandro Bonazzola<br>Better tec=
hnology. Faster innovation. Powered by community collaboration.<br>See how =
it works at redhat.com<br><div><br></div><br>------------------------------=
<br><div><br></div>Message: 5<br>Date: Wed, 10 Dec 2014 09:07:54 +0100<br>F=
rom: Sandro Bonazzola <sbonazzo@redhat.com><br>To: "Users@ovirt.org" =
<Users@ovirt.org>, "devel@ovirt.org"<br> =
; <devel@ovirt.org><br>Subject: [ovirt-users] [QE][A=
CTION REQUIRED] oVirt 3.5.1 RC status<br>Message-ID: <5487FF5A.6050809@r=
edhat.com><br>Content-Type: text/plain; charset=3Diso-8859-15<br><div><b=
r></div>Hi,<br>We have still blockers for oVirt 3.5.1 RC release so we need=
to postpone it until they'll be fixed.<br>ACTION: Being so near to winter'=
s holidays we need to discuss the new tentative date for RC in today sync m=
eeting.<br><div><br></div>The bug tracker [1] shows 2 open blocker:<br>Bug =
ID Whiteboard &nb=
sp; Status =
Summary<br>1160=
846 sla &nb=
sp; =
NEW =
Can't add disk to VM without specifying disk profil=
e when the storage domain has more than one disk profile<br>1168709 &n=
bsp; virt &=
nbsp; NEW &=
nbsp; &nbs=
p; Hosted Engine VM is listed as paused after upgrading from 3.4=
.4 to 3.5.1 snapshot<br><div><br></div>In order to stabilize the release a =
new branch ovirt-engine-3.5.1 will be created from the same git hash used f=
or composing the RC.<br><div><br></div>- ACTION: assignee please provide ET=
A on above blockers<br><div><br></div>Maintainers:<br>- Please be sure that=
3.5 snapshot allow to create VMs<br>- Please be sure that no pending patch=
es are going to block the release<br>- If any patch must block the RC relea=
se please raise the issue as soon as possible.<br><div><br></div>There are =
still 63 bugs [2] targeted to 3.5.1.<br>Excluding node and documentation bu=
gs we still have 42 bugs [3] targeted to 3.5.1.<br><div><br></div>Maintaine=
rs / Assignee:<br>- Please add the bugs to the tracker if you think that 3.=
5.1 should not be released without them fixed.<br>- ACTION: Please update t=
he target to 3.5.2 or later for bugs that won't be in 3.5.1:<br> =
;it will ease gathering the blocking bugs for next releases.<br>- ACTION: P=
lease fill release notes, the page has been created here [4]<br><div><br></=
div>Community:<br>- If you're testing oVirt 3.5 nightly snapshot, please ad=
d yourself to the test page [5]<br><div><br></div><br>[1] http://bugzilla.r=
edhat.com/1155170<br>[2] http://goo.gl/7G0PDV<br>[3] http://goo.gl/6gUbVr<b=
r>[4] http://www.ovirt.org/OVirt_3.5.1_Release_Notes<br>[5] http://www.ovir=
t.org/Testing/oVirt_3.5.1_Testing<br><div><br></div>-- <br>Sandro Bonazzola=
<br>Better technology. Faster innovation. Powered by community collaboratio=
n.<br>See how it works at redhat.com<br><div><br></div><br>----------------=
--------------<br><div><br></div>Message: 6<br>Date: Wed, 10 Dec 2014 03:12=
:20 -0500 (EST)<br>From: Francesco Romani <fromani@redhat.com><br>To:=
Sandro Bonazzola <sbonazzo@redhat.com><br>Cc: Users@ovirt.org, devel=
@ovirt.org<br>Subject: Re: [ovirt-users] [QE][ACTION REQUIRED] oVirt 3.5.1 =
RC status<br>Message-ID:<br> =
;<805014182.8558086.1418199140322.JavaMail.zimbra@redhat.com><br>Cont=
ent-Type: text/plain; charset=3Dutf-8<br><div><br></div>----- Original Mess=
age -----<br>> From: "Sandro Bonazzola" <sbonazzo@redhat.com><br>&=
gt; To: Users@ovirt.org, devel@ovirt.org<br>> Sent: Wednesday, December =
10, 2014 9:07:54 AM<br>> Subject: [ovirt-users] [QE][ACTION REQUIRED] oV=
irt 3.5.1 RC status<br>> <br>> Hi,<br>> We have still blockers for=
oVirt 3.5.1 RC release so we need to postpone it<br>> until they'll be =
fixed.<br>> ACTION: Being so near to winter's holidays we need to discus=
s the new<br>> tentative date for RC in today sync meeting.<br>> <br>=
> The bug tracker [1] shows 2 open blocker:<br>> Bug ID &n=
bsp; Whiteboard &=
nbsp; Status &nbs=
p; Summary<br>> 1160846 &n=
bsp; sla &n=
bsp; NEW &n=
bsp; =
; Can't add disk to VM without specifying disk profile when<br>&=
gt; the storage domain has more than one disk profile<br>> 1168709 =
virt =
; NEW =
; &n=
bsp; Hosted Engine VM is listed as paused after upgrading from<b=
r>> 3.4.4 to 3.5.1 snapshot<br>> <br>> In order to stabilize the r=
elease a new branch ovirt-engine-3.5.1 will be<br>> created from the sam=
e git hash used for composing the RC.<br>> <br>> - ACTION: assignee p=
lease provide ETA on above blockers<br><div><br></div>1168709 - patch seems=
simple, posted and verified (BZ entry just updated to POST).<br>needs revi=
ew. ETA for merge: definitely within the week, worst case.<br><div><br></di=
v>Bests,<br><div><br></div>-- <br>Francesco Romani<br>RedHat Engineering Vi=
rtualization R & D<br>Phone: 8261328<br>IRC: fromani<br><div><br></div>=
<br>------------------------------<br><div><br></div>Message: 7<br>Date: We=
d, 10 Dec 2014 05:57:14 -0500 (EST)<br>From: Alon Bar-Lev <alonbl@redhat=
.com><br>To: Juan Jose <jj197005@gmail.com><br>Cc: users <users=
@ovirt.org><br>Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 =
issue<br>Message-ID:<br> <=
;1512532550.7193502.1418209034660.JavaMail.zimbra@redhat.com><br>Content=
-Type: text/plain; charset=3Dutf-8<br><div><br></div><br><div><br></div>---=
-- Original Message -----<br>> From: "Juan Jose" <jj197005@gmail.com&=
gt;<br>> To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" =
<yzaslavs@redhat.com><br>> Sent: Wednesday, December 10, 2014 12:3=
0:34 PM<br>> Subject: Re: [ovirt-users] Adding domain to oVirt to 3.5 is=
sue<br>> <br>> Hello Alon and Yair,<br>> <br>> Many thanks for =
your help, finally It works properly. My problem, after<br>> last Alon i=
ndications was that my user "Juanjo" was defined with SuperUser<br>> rol=
e in the previous domain configuration. I have loggen in with admin user<br=
>> from internal and I have removed old configuration and I have configu=
red my<br>> user "Juanjo" with all administrators roles in folder "Permi=
ssion" and I<br>> can log in in administration portal without problems a=
nd it works properly.<br>> <br>> My final configuration I have is an =
emulated *AD based on Samba 4* and the<br>> final configuration files ar=
e:<br><div><br></div>Good!<br>So samba is not emulating active directory en=
tirely :)<br>But good to know it is working.<br>Please also checkout group =
membership.<br><div><br></div>> ovirt-engine-extension-aaa-ldap.noarch<b=
r>> 1.0.1-0.0.master.20141209141731.git0437701.el6<br><div><br></div>thi=
s fix for samba ad will be released in 1.0.1.<br><div><br></div>> <br>&g=
t; */etc/ovirt-engine/extensions.d/siee-local-authn.properties*:<br>> <b=
r>> ovirt.engine.extension.name =3D siee-local-authn<br>> ovirt.engin=
e.extension.bindings.method =3D jbossmodule<br>> ovirt.engine.extension.=
binding.jbossmodule.module =3D<br>> org.ovirt.engine-extensions.aaa.ldap=
<br>> ovirt.engine.extension.binding.jbossmodule.class =3D<br>> org.o=
virt.engineextensions.aaa.ldap.AuthnExtension<br>> ovirt.engine.extensio=
n.provides =3D org.ovirt.engine.api.extensions.aaa.Authn<br>> ovirt.engi=
ne.aaa.authn.profile.name =3D siee<br>> ovirt.engine.aaa.authn.authz.plu=
gin =3D siee-local-authz<br>> config.profile.file.1 =3D /etc/ovirt-engin=
e/aaa/siee.properties<br>> <br>> */etc/ovirt-engine/extensions.d/siee=
-local-authz.properties*:<br>> <br>> ovirt.engine.extension.name =3D =
siee-local-authz<br>> ovirt.engine.extension.bindings.method =3D jbossmo=
dule<br>> ovirt.engine.extension.binding.jbossmodule.module =3D<br>> =
org.ovirt.engine-extensions.aaa.ldap<br>> ovirt.engine.extension.binding=
.jbossmodule.class =3D<br>> org.ovirt.engineextensions.aaa.ldap.AuthzExt=
ension<br>> ovirt.engine.extension.provides =3D org.ovirt.engine.api.ext=
ensions.aaa.Authz<br>> config.profile.file.1 =3D /etc/ovirt-engine/aaa/s=
iee.properties<br>> <br>> */etc/ovirt-engine/aaa/siee.properties*:<br=
>> <br>> include =3D <ad.properties><br>> <br>> #<br>>=
# Active directory domain name.<br>> #<br>> vars.domain =3D siee.loc=
al<br>> <br>> #<br>> # Search user and its password.<br>> #<br>=
> vars.user =3D searcher@${global:vars.domain}<br>> vars.password =3D=
xxxx<br>> <br>> #<br>> # Optional DNS servers, if enterprise<br>&=
gt; # DNS server cannot resolve the domain srvrecord.<br>> #<br>> #va=
rs.dns =3D dns://dc1.${global:vars.domain} dns://dc2.${global:vars.domain}<=
br>> <br>> pool.default.serverset.type =3D srvrecord<br>> pool.def=
ault.serverset.srvrecord.domain =3D ${global:vars.domain}<br>> pool.defa=
ult.auth.simple.bindDN =3D ${global:vars.user}<br>> pool.default.auth.si=
mple.password =3D ${global:vars.password}<br>> <br>> # Uncomment if u=
sing custom DNS<br>> #pool.default.serverset.srvrecord.jndi-properties.j=
ava.naming.provider.url<br>> =3D ${global:vars.dns}<br>> #pool.defaul=
t.socketfactory.resolver.uRL =3D ${global:vars.dns}<br>> <br>> # Crea=
te keystore, import certificate chain and uncomment<br>> # if using ssl/=
tls.<br>> #pool.default.ssl.startTLS =3D true<br>> #pool.default.ssl.=
truststore.file =3D<br>> ${local:_basedir}/${global:vars.domain}.jks<br>=
> #pool.default.ssl.truststore.password =3D changeit<br><div><br></div>Y=
ou should enable SSL for production use... as you do not want passwords to =
be transmitted in clear.<br>Not sure how you install ssl on the samba ldap.=
.. but once you do, follow the README instructions[1]<br><div><br></div>[1]=
http://gerrit.ovirt.org/gitweb?p=3Dovirt-engine-extension-aaa-ldap.git;a=
=3Dblob;f=3DREADME;hb=3DHEAD#l141<br><div><br></div>> <br>> */etc/krb=
5.conf*:<br><div><br></div>You are not using kerberos, so there is no reaso=
n to configure it for setup to work.<br><div><br></div>> <br>> [loggi=
ng]<br>> default =3D FILE:/var/log/krb5libs.log<br>> kdc =
=3D FILE:/var/log/krb5kdc.log<br>> admin_server =3D FILE:/var/log/=
kadmind.log<br>> <br>> [libdefaults]<br>> default_realm =3D =
SIEE.LOCAL<br>> dns_lookup_realm =3D true<br>> dns_lookup=
_kdc =3D true<br>> ticket_lifetime =3D 24h<br>> renew_lif=
etime =3D 7d<br>> forwardable =3D no<br>> default_tkt_enc=
types =3D arcfour-hmac-md5<br>> udp_preference_limit =3D 1<br>>=
<br>> #[realms]<br>> <br>> #[domain_realm]<br>> # .siee.local =
=3D SIEE.LOCAL<br>> # siee.local =3D SIEE.LOCAL<br>> <br>> <br>>=
; Many thanks again to everybody,<br>> <br>> Juanjo.<br>> <br>>=
On Tue, Dec 9, 2014 at 5:31 PM, Alon Bar-Lev <alonbl@redhat.com> wro=
te:<br>> <br>> ><br>> ><br>> > ----- Original Message =
-----<br>> > > From: "Juan Jose" <jj197005@gmail.com><br>>=
; > > To: "Alon Bar-Lev" <alonbl@redhat.com>, "Yair Zaslavsky" =
<<br>> > yzaslavs@redhat.com><br>> > > Sent: Tuesday, =
December 9, 2014 5:42:56 PM<br>> > > Subject: Re: [ovirt-users] Ad=
ding domain to oVirt to 3.5 issue<br>> > ><br>> > > Hello=
Alon,<br>> > ><br>> > > In my firsts e-mails I had alrea=
dy said that I have an emulation of AD<br>> > > based on Samba 4. =
I have tested the last version ov<br>> > > ovirt-engine-extension-=
aaa-ldap package and I think the problem is the<br>> > same<br>> &=
gt; > although the error is "User is not authorized to perform this acti=
on".<br>> > ><br>> > > I attach the enginle.log.<br>> =
><br>> > USER_NOT_AUTHORIZED_TO_PERFORM_ACTION means user is not s=
uperuser or can<br>> > manage objects as far as I know.<br>> ><=
br>> > I see siee0@siee.local is trying to login which is CN=3Dsiee0<=
br>> > siee0,CN=3DUsers,DC=3Dsiee,DC=3Dlocal<br>> ><br>> >=
; Login succeeds.<br>> ><br>> > I do not see any groups it belo=
ngs to.<br>> ><br>> > Are you sure you added this user role wit=
hin the webadmin or that user<br>> > belongs to groups that were adde=
d to engine with such roles?<br>> ><br>> > ><br>> > &g=
t; In case that the new oVirt version 3.5 doesn't work with an AD emulation=
<br>> > > based on Samba 4, is it possible to do user authenticati=
on with an<br>> > OpenLDAP<br>> > > directly with this 3.5 v=
ersion?, if it is so, could you give me the link<br>> > to<br>> &g=
t; > the documentation to configure OpenLDAP authentication?<br>> >=
;<br>> > Sure, just use the<br>> > /usr/share/ovirt-engine-exte=
nsion-aaa-ldap/examples/simple copy recursive<br>> > into /etc/ovirt-=
engine, then modify /etc/ovirt-engine/aaa/ldap1.properties<br>> > set=
vars.server, vars.user, vars.password.<br>> ><br>> > Until 3.5=
.1 you should also<br>> > /etc/ovirt-engine/extensions.d/domain1*.pro=
perties and replace ../aaa to<br>> > /etc/ovirt-engine/aaa<br>> &g=
t;<br>> ><br>> > > Many thanks in advanced,<br>> > >=
;<br>> > > Juanjo.<br>> > ><br>> > > On Tue, Dec=
9, 2014 at 3:16 PM, Alon Bar-Lev <alonbl@redhat.com> wrote:<br>> =
> ><br>> > > ><br>> > > ><br>> > > &=
gt; ----- Original Message -----<br>> > > > > From: "Alon Ba=
r-Lev" <alonbl@redhat.com><br>> > > > > To: "Juan Jose=
" <jj197005@gmail.com><br>> > > > > Cc: "users" <us=
ers@ovirt.org><br>> > > > > Sent: Tuesday, December 9, 20=
14 3:59:33 PM<br>> > > > > Subject: Re: [ovirt-users] Adding=
domain to oVirt to 3.5 issue<br>> > > > ><br>> > >=
> > We start over...<br>> > > > ><br>> > > &=
gt; > This is not active directory... it is samba.<br>> > > >=
; ><br>> > > > > Attribute(name=3DvendorName, values=3D{'=
Samba Team (http://samba.org)'})<br>> > > > ><br>> > &=
gt; > > Only now I realized this, maybe you mentioned it earlier not =
sure.<br>> > > > ><br>> > > > > Of course thi=
s was never tested, so probably not working.<br>> > > > ><br=
>> > > > > I see that samba does not return a list of extend=
ed operations, I<br>> > will<br>> > > > > workaround t=
his and we can see what's else differ from active<br>> > directory.<b=
r>> > > ><br>> > > > Can you please checkout the fo=
llowing rpm[1]?<br>> > > ><br>> > > > [1]<br>> &=
gt; > ><br>> > http://jenkins.ovirt.org/job/ovirt-engine-extens=
ion-aaa-ldap_master_create-rpms-el6-x86_64_merged/<br>> > > ><b=
r>> > ><br>> ><br>> <br><div><br></div><br>--------------=
----------------<br><div><br></div>________________________________________=
_______<br>Users mailing list<br>Users@ovirt.org<br>http://lists.ovirt.org/=
mailman/listinfo/users<br><div><br></div><br>End of Users Digest, Vol 39, I=
ssue 50<br>*************************************<br></div><div><br></div></=
div></body></html>
------=_Part_8758566_407473350.1418224697280--
3927
Age (days ago)
3927
Last active (days ago)
0 comments
1 participants
participants (1)
-
Nikolai Sednev