11:55 p.m.
Hi,
I have an issue while trying to upload disk images thru the Web UI.
"Connection to ovirt-imageio-proxy service has failed. Make sure the service is
installed, configured, and ovirt-engine certificate is registered as a valid CA in the
browser."
My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to network
restrictions I had to set rules in order to reach our ovirt-engine
ovirt-engine.mydomain.com = 192.168.0.45
For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80, 192.168.10.109:443,
192.168.0.45:80
So as you can see I need to hit the ovirt-engine using
ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the
11-setup-sso.conf file and adding
"SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/"
I am able to upload disk images when using http://ovirt-engine.mydomain.com but not able
to http://ovirt-engine.mydomain.otherstuff.com
I know it might be related to the certificates but I need to be able to upload disk images
using both URLs.
any ideas?
1 p.m.
On Fri, May 31, 2019 at 11:57 PM <adrianquintero(a)gmail.com> wrote:
Hi,
I have an issue while trying to upload disk images thru the Web UI.
"Connection to ovirt-imageio-proxy service has failed. Make sure the
service is installed, configured, and ovirt-engine certificate is
registered as a valid CA in the browser."
My ovirt engine's fqdn is ovirt-engine.mydomain.com however due to
network restrictions I had to set rules in order to reach our ovirt-engine
ovirt-engine.mydomain.com = 192.168.0.45
For example ovirt-engine.mydomain.otherstuff.com - 192.168.10.109:80,
192.168.10.109:443, 192.168.0.45:80
So as you can see I need to hit the ovirt-engine using
ovirt-engine.mydomain.otherstuff.com which I am able to by modifyting the
11-setup-sso.conf file and adding "SSO_ENGINE_URL="
https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/"
I am able to upload disk images when using
http://ovirt-engine.mydomain.com but not able to
http://ovirt-engine.mydomain.otherstuff.com
I know it might be related to the certificates but I need to be able to
upload disk images using both URLs.
any ideas?
Hi,
While it doesn't address your issue directly, you may want to use
muCommander for this - a demo is available in [1].
Note that this is not part of the oVirt project and still under development
but the upload functionality works well, without needing to mess with
credentials in the browser and it also supports uploading ISO files to data
domains (as ISO images). muCommander is not packaged yet with this plugin
for oVirt, so if you're interested in that you'll need to clone the code
from [2] and build it as shown in [1] (All you need is git and the Java
compiler installed. Note it's cross-platform).
[1] https://www.youtube.com/watch?v=pJSTjixYOnU
[2] git@github.com:mucommander/mucommander.git
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSQKTZ6YCD7...
3:57 p.m.
did you try this?
engine-config --get ImageProxyAddress
engine-config -s
ImageProxyAddress=http://ovirt-engine.mydomain.otherstuff.com:54323
systemctl restart ovirt-engine
Le 02/06/2019 à 12:00, Arik Hadas a écrit :
On Fri, May 31, 2019 at 11:57 PM <adrianquintero(a)gmail.com
<mailto:adrianquintero@gmail.com>> wrote:
Hi,
I have an issue while trying to upload disk images thru the Web UI.
"Connection to ovirt-imageio-proxy service has failed. Make sure
the service is installed, configured, and ovirt-engine certificate
is registered as a valid CA in the browser."
My ovirt engine's fqdn is ovirt-engine.mydomain.com
<http://ovirt-engine.mydomain.com> however due to network
restrictions I had to set rules in order to reach our ovirt-engine
ovirt-engine.mydomain.com <http://ovirt-engine.mydomain.com> =
192.168.0.45
For example ovirt-engine.mydomain.otherstuff.com
<http://ovirt-engine.mydomain.otherstuff.com> - 192.168.10.109:80
<http://192.168.10.109:80>;, 192.168.10.109:443
<http://192.168.10.109:443>;, 192.168.0.45:80 <http://192.168.0.45:80>
So as you can see I need to hit the ovirt-engine using
ovirt-engine.mydomain.otherstuff.com
<http://ovirt-engine.mydomain.otherstuff.com> which I am able to
by modifyting the 11-setup-sso.conf file and adding
"SSO_ENGINE_URL="https://ovirt-engine.mydomain.otherstuff.com:443/ovirt-engine/"
I am able to upload disk images when using
http://ovirt-engine.mydomain.com but not able to
http://ovirt-engine.mydomain.otherstuff.com
I know it might be related to the certificates but I need to be
able to upload disk images using both URLs.
any ideas?
Hi,
While it doesn't address your issue directly, you may want to use
muCommander for this - a demo is available in [1].
Note that this is not part of the oVirt project and still under
development but the upload functionality works well, without needing
to mess with credentials in the browser and it also supports uploading
ISO files to data domains (as ISO images). muCommander is not packaged
yet with this plugin for oVirt, so if you're interested in that you'll
need to clone the code from [2] and build it as shown in [1] (All you
need is git and the Java compiler installed. Note it's cross-platform).
[1] https://www.youtube.com/watch?v=pJSTjixYOnU
[2] git@github.com:mucommander/mucommander.git
_______________________________________________
Users mailing list -- users(a)ovirt.org <mailto:users@ovirt.org>
To unsubscribe send an email to users-leave(a)ovirt.org
<mailto:users-leave@ovirt.org>
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSQKTZ6YCD7...
_______________________________________________
Users mailing list -- users(a)ovirt.org
To unsubscribe send an email to users-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ELH2AOFGZMU...
--
Nathanaël Blanchet
Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5
Tél. 33 (0)4 67 54 84 55
Fax 33 (0)4 67 54 84 14
blanchet(a)abes.fr
5:32 p.m.
I tried it, now my engine wont work using https://ovirt-engine.mydomain.com over the
browsers just hangs in "loading"
It does load from https://ovirt-engine.mydomain.com, but still I get "Connection to
ovirt-imageio-proxy service has failed. Make sure the service is installed, configured,
and ovirt-engine certificate is registered as a valid CA in the browser." and the
cert is valid but points to ovirt-engine.mydomain.com.
I did the following:
engine-config --get ImageProxyAddress
ImageProxyAddress: ovirt-engine.mydomain.com:54323 version: general
engine-config -s ImageProxyAddress=ovirt-engine.mydomain.otherstuff.com:54323
systemctl restart ovirt-engine
engine-config --get ImageProxyAddress
ImageProxyAddress: ovirt-engine.mydomain.otherstuff.com:54323 version: general
that did not seem to help so I put it back as it was.
engine-config -s ImageProxyAddress=ovirt-engine.mydomain.com:54323
systemctl restart ovirt-engine
engine-config --get ImageProxyAddress
ImageProxyAddress: ovirt-engine.mydomain.com:54323 version: general
5:49 p.m.
please disregard the part that says it "hangs in loading" , that part works , it
was an issue on my browser.
however as mentioned still changing the ImageProxyAddress did not work.
thanks,
11:10 p.m.
I get the following from the console in developer tools in chrome/firefox:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource
at https://ovirt-engine.mydomain.com:54323/info/. (Reason: CORS request did not succeed).
note that I am behind a f5, so one domain is used from outside the f5 and another from
within the f5.
4:19 p.m.
Thanks Arik, however I would like to understand how it really works.
As mentioned the only thing I did was to add a vps in order to hit the server
Real fqdn: ovirt-engine.mydomain.com(192.168.0.45)
Using fqdn: ovirt-engine.mydomain.otherstuff.com (192.168.10.109)
Mapping: 192.168.10.109:80, 192.168.10.109:443, 192.168.0.45:80
The cert is already in my browser: This certificate is already installed as a certificate
authority.
engine.log:
2019-06-03 09:08:21,240-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
Renewing transfer ticket for Upload disk
'ovirt-node-ng-installer-4.3.0-2019020409.el7.iso' (disk id:
'48312455-9003-44ee-a4bc-1e6533cc5408', image id:
'ab86967a-1516-45e2-bffd-fb7973a7efd5')
2019-06-03 09:08:21,241-04 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.ExtendImageTicketVDSCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
START, ExtendImageTicketVDSCommand(HostName = host1.mydomain.com,
ExtendImageTicketVDSCommandParameters:{hostId='20ac91be-dec8-4083-b09a-381e0185ddbe',
ticketId='b6232936-cd9d-42dd-b794-a16ef6eaed44', timeout='300'}), log id:
77da6b6e
2019-06-03 09:08:21,247-04 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.ExtendImageTicketVDSCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
FINISH, ExtendImageTicketVDSCommand, return: StatusOnlyReturn [status=Status [code=0,
message=Done]], log id: 77da6b6e
2019-06-03 09:08:21,247-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
Transfer session with ticket id b6232936-cd9d-42dd-b794-a16ef6eaed44 extended, timeout 300
seconds
2019-06-03 09:08:21,253-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater]
(EE-ManagedThreadFactory-engineScheduled-Thread-37) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
Updating image transfer 9cbe652c-1249-4eb1-8fe2-3a8387bd324a (image
48312455-9003-44ee-a4bc-1e6533cc5408) phase to Transferring (message: 'Pausing due to
client error')
2019-06-03 09:08:21,729-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default
task-1357) [c46ac95d-a684-4860-b49b-6ed720a2df6e] Running command:
TransferImageStatusCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type
USER
2019-06-03 09:08:25,730-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default
task-1357) [2660ddba-f9b7-4843-b356-fb6e10485dfb] Running command:
TransferImageStatusCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type
USER
2019-06-03 09:08:29,735-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default
task-1357) [a644727a-0b56-4164-8ff2-2697e5de3132] Running command:
TransferImageStatusCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type
USER
2019-06-03 09:08:30,889-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default
task-1357) [5bb6e263-c6e8-4e2e-9923-420c20117c83] Running command:
TransferImageStatusCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type
USER
2019-06-03 09:08:30,890-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.ImageTransferUpdater] (default task-1357)
[5bb6e263-c6e8-4e2e-9923-420c20117c83] Updating image transfer
9cbe652c-1249-4eb1-8fe2-3a8387bd324a (image 48312455-9003-44ee-a4bc-1e6533cc5408) phase to
Paused by System (message: 'Sent 0MB')
2019-06-03 09:08:30,904-04 ERROR
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-1357)
[5bb6e263-c6e8-4e2e-9923-420c20117c83] EVENT_ID: UPLOAD_IMAGE_NETWORK_ERROR(1,062), Unable
to upload image to disk 48312455-9003-44ee-a4bc-1e6533cc5408 due to a network error.
Ensure that ovirt-imageio-proxy service is installed and configured and that
ovirt-engine's CA certificate is registered as a trusted CA in the browser. The
certificate can be fetched from
https://ovirt-engine.mydomain.otherstuff.com/ovirt-engine/services/pki-re...
2019-06-03 09:08:31,290-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferDiskImageCommand]
(EE-ManagedThreadFactory-engineScheduled-Thread-47) [6586fac6-acfe-4f72-872d-9cc2b7b9f2d6]
Transfer was paused by system. Upload disk
'ovirt-node-ng-installer-4.3.0-2019020409.el7.iso' (disk id:
'48312455-9003-44ee-a4bc-1e6533cc5408', image id:
'ab86967a-1516-45e2-bffd-fb7973a7efd5')
2019-06-03 09:08:33,736-04 INFO
[org.ovirt.engine.core.bll.storage.disk.image.TransferImageStatusCommand] (default
task-1357) [2d427408-e140-4e46-b467-bfa13890e05b] Running command:
TransferImageStatusCommand internal: false. Entities affected : ID:
aaa00000-0000-0000-0000-123456789aaa Type: SystemAction group CREATE_DISK with role type
USER
2000
days inactive
2003
days old
6 comments
3 participants
participants (3)
-
adrianquintero＠gmail.com -
Arik Hadas -
Nathanaël Blanchet