December 2012 - Users - oVirt List Archives

[Users] Problems when trying to delete a snapshot
by Ricky Schneberger 20 Dec '12

20 Dec '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I was trying to delete a snapshot from one of my VM and everything started fine. The disk image is a thin provisioned 100GB disk with 8GB data. I just hade one snapshot and it was that one I started to delete. After more than two hours I look in the folder with that VMs disk images and found out that there was i new created file with a size of around 650GB and it was still growing. - -rw-rw----. 1 vdsm kvm 8789950464 14 dec 12.23 8ede8e53-1323-442b-84f2-3c94114c64cf - -rw-r--r--. 1 vdsm kvm 681499951104 14 dec 14.10 8ede8e53-1323-442b-84f2-3c94114c64cf_MERGE - -rw-r--r--. 1 vdsm kvm 272 14 dec 12.24 8ede8e53-1323-442b-84f2-3c94114c64cf.meta - -rw-rw----. 1 vdsm kvm 107382439936 6 jun 2012 b4a43421-728b-4204-a389-607221d945b7 - -rw-r--r--. 1 vdsm kvm 282 14 dec 12.24 b4a43421-728b-4204-a389-607221d945b7.meta Any idea what is happening? Regards - -- Ricky -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlDLJsoACgkQOap81biMC2Nu+ACfTnCbl9BqIvQmp0zO4pYxlNDv qw4AoIZAR2Zg2RQNKOYf4YEVOSqVQZIV =MUYs -----END PGP SIGNATURE-----

2 2

[Users] Adding iscsi/fcp storage with rest api
by Mohua Li 20 Dec '12

20 Dec '12

--9jxsPFA5p3P2qPhR Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, I'm trying to add fcp/iscsi storage with rest api like below,=20 #iscsi(iscsi hba card) 743 # type_: storage type 744 storage_params =3D param.Storage(address=3D"10.66.90.= 100",=B7 745 port=3D"3260",=B7 id=3D"36090a038d0f731= 6a6807a568b2491f1d", target=3D"iqn.2001-05= =2Ecom.equallogic:0-8a0906-6a31f7d03-1d1f49b268a50768" 746 type_=3D"iscsi") 747 # type_: storagedomain type 748 storagedomain_params =3D param.StorageDomain(name=3D"= iscsidomain", 749 data_cente= r=3Ddc, host=3Dhost, 750 type_=3D"d= ata", storage_format=3D"v3", 751 storage=3D= storage_params) 752 try: 753 logging.info("Creating iscsi data storage %s" % na= me) 754 storagedomain =3D self.api.storagedomains.add(stor= agedomain_params) storage params for fcp storage: 744 storage_params =3D param.Storage(id=3D"3600a0b80005ad= b0b00004d834f0b7954", 746 type_=3D"fcp") my question are: * if this is enough to connect iscsi/fcp(lun id, target) storage? * did wrong type the logical_unit element,=20 thanks for your help again. Regards, --9jxsPFA5p3P2qPhR Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEcBAEBAgAGBQJQ0r+oAAoJEKa5n96c5rR6YYwH/2m+Ub+3AOvvIFl3HvE9F5uE u3uay1cFHHI5NxYjiA6RZ0+UqmvQnqXNRP5ILoau5670PLOI63rJiInBseR1pZTN VlM3gy2zy0yFa8EkSQIoCtoAuQJqO3Oa5wcqOsl6q92o23OgooScDQ9vaCCv6o1p ZLJl3YQ0eBc/yJJ0Sim+qz2adFwnutW+6DhuOBkZ+FWLlle5kIwvNltWbL3cNCOa II261zTEh5sXSjbLEO+9r6lZbZxN0CVTd63c38rC4nwC5242hn2QkFCzJdRR0zd/ l976DfK445SgcJ4lmE8WQaiI3VjeqbO+X0NlxV5kyAAu5om4XVO3GTh+0E/u36o= =LVDZ -----END PGP SIGNATURE----- --9jxsPFA5p3P2qPhR--

2 2

[Users] Adding Nodes after ovirt-engine re-install
by Alex Leonhardt 20 Dec '12

20 Dec '12

Hi, I was wondering if it's possible to add existing ovirt nodes (HVs) to a new installed ovirt-engine ? E.g. the old engine died and there was no backup of it - how would you add the existing HVs without destroying what's already running ? If the above is not possible, is there a "backup guide" you can refer me to ? Ideally though, it should really be possible to "import" existing HVs into a newly setup ovirt-engine. Alex

2 1

[Users] Package from CentOs 6.3
by Marcelo Barbosa 20 Dec '12

20 Dec '12

Hi guys, I woud like to know where can I download nome-pacote rpm for Centos. Does anybody can help me? Thanks Marcelo Barbosa +55 51 8414 6309 *mr.marcelo.barbosa(a)gmail.com*

1 1

[Users] v2v vmware conversion
by Alex Leonhardt 20 Dec '12

20 Dec '12

Hi, I've seen several posts out there on how to convirt hosts from VMware -> Ovirt/KVM - Am I right to assume that just like the command for RHEV, the equivalent for Ovirt would be : virt-v2v -ic esx://$IP$/?no_verify=1 -o rhev -osd $HV$:/vol/exportdomain --network ovirtmgmt $VMNAME$ Also, I read a post that refers to a ovirt profile for v2v - I've never had to convert any VMs from VMWare so was wondering if that is just a custom config or whether there is a general v2v profile that can be used to convert to ovirt ? Alex

2 1

[Users] Report size of thin provisioned disk
by Jeff Bailey 20 Dec '12

20 Dec '12

With 3.2 alpha, on the disks subtab of the virtual machines tab I'm seeing the correct "virtual size" for the disk but the "actual size" remains 1GB even though the drive has grown to 11GB (according to lvs output). It doesn't seem to be causing any problems. The auto-growth (from my perspective) is working much smoother than it did a release ago :) I just wondered if anyone else had noticed this. Thanks, Jeff

2 1

[Users] AIO f18 nightly local storage active only in permissive mode
by Gianluca Cecchi 20 Dec '12

20 Dec '12

Hello, Fedora 18 with all-in-one config and nightly build repo at this level: ovirt-engine-3.2.0-1.20121217.git1e01c00.fc18.noarch When I try to activate local domain I view it remains in "contending" and then fails. I try 2-3 times. [g.cecchi@f18aio ~]$ getenforce Enforcing As soon as I set setenforce 0 [g.cecchi@f18aio ~]$ getenforce Permissive And I try to activate again, it works and my local_host results correctly up. Is this something already fixed in next nightly or should I send my logs? Is it supposed to be a supported config with SELinux in Enforcing or not (I'm referring to the problem of tuned too..)? Thanks Gianluca

1 0

Re: [Users] rhevm-cli - add nfs data storage
by Michael Pasternak 20 Dec '12

20 Dec '12

Hi Meni, When you pass --datacenter-identifier, you attaching existent SD to the data-center, note, you can see what parameters use for any command/action just running 'help' command: [oVirt shell (connected)]# help add storagedomain USAGE add <type> [base identifiers] [attribute options] DESCRIPTION Creates a new object or adds existent with type storagedomain. See 'help add' for generic help on creating objects. ATTRIBUTE OPTIONS The following options are available for objects with type storagedomain: Overload 1: * --host-id|name: string * --type: string * --storage-type: string * --format: boolean * --storage-address: string * --storage-logical_unit: collection { logical_unit.address: string logical_unit.port: int logical_unit.target: string logical_unit.username: string logical_unit.password: string logical_unit.serial: string logical_unit.vendor_id: string logical_unit.product_id: string logical_unit.lun_mapping: int logical_unit.portal: string logical_unit.paths: int logical_unit.id: string } * [--name: string] * [--storage-override_luns: boolean] Overload 2: * --host-id|name: string * --type: string * --storage-type: string * --format: boolean * --storage-address: string * --storage-path: string * [--name: string] Overload 3: * --host-id|name: string * --type: string * --storage-type: string * --format: boolean * --storage-path: string * [--name: string] Overload 4: * --host-id|name: string * --type: string * --storage-type: string * --format: boolean * --storage-path: string * --storage-vfs_type: string * [--name: string] * [--storage-address: string] * [--storage-mount_options: string] * [--expect: 201-created] * [--correlation_id: anystring] .... On 12/19/2012 11:56 AM, Meni Yakove wrote: > Hi, > > I'm trying to add new NFS data storage to my setup using CLI and it fail: > > [RHEVM shell (connected)]# add storagedomain --name CLI_DataStorage --host-name orchid-vds1 --type data --storage-type nfs --format v3 --storage-address > orion.qa.lab.tlv.redhat.com --storage-path /export/meni/dc31-cli --datacenter-identifier DC31-CLI > > error: > status: 400 > reason: Bad Request > detail: Entity not found: Storage: name=CLI_DataStorage > > On the user guide: > > *Create NFS data storage* > > An NFS data storage domain is an exported NFS share attached to a data center. It provides storage for virtual machines. Add the NFS share as a data storage domain with > the |add storagedomain| command. > > [RHEVM shell (connected)]# add storagedomain --name DataStorage --host-name MyHost --type data --storage-type nfs --format v1 --storage-address! > 192.168.0 > .10 --storage-path /exports/data --datacenter-indentifier Default > > > And: > > > Example 5.13. Creating a new storage domain > > [RHEVM shell (connected)]# add storagedomain --name DataStorage --datacenter-name Default -type data > > > I have tried both but still the same error. what I'm doing wrong? > > Thanks > Meni > -- Michael Pasternak RedHat, ENG-Virtualization R&D

1 0

[Users] ovirt 3.1 vnc passwordless setup
by Alexandru Vladulescu 20 Dec '12

20 Dec '12

Hi guys, I am running Ovirt 3.1 (fresh install -- no upgrade) on some Centos 6.3 servers; and I did a small setup regarding 2 hypervisors, 1 node controller and 1 NAS server providing NFS export, storage & ISO domains for the appliances. All this solution has one server more that's acting as a firewall and traffic policy shaping in front of the network setup. The problem that I am facing right now, is that I am trying to setup Ovirt on VNC remote connection in the manner that does not require password login with 120 seconds expiration timeout. Somehow I would like to map VNC ports on the 2 hypervisor nodes to bond with a vnc reflector installed on the node controller, which also acts as a VPN server on the setup for out-band connections. Therefore, users connecting over VPN could get access to the VNC of the VMs without entering the web portal and requiring an active VNC password with 120 seconds expiration time. I tried digging through the libvirtd.conf and qemu.conf configuration files, found some VNC parameters but none seemed to do the job for my purpose. I must mention that I have been looking for a similar setup on the Ovirt documentation page as well as googlin' it. You help will be much appreciated. My regards, Alex Vladulescu

2 1

[Users] Maintenance outage :: lists.ovirt.org :: 2012-12-20 01:00 UTC
by Karsten 'quaid' Wade 20 Dec '12

20 Dec '12

This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig499090C9A4399B31F318A0E8 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable There is an outage of lists.ovirt.org for ten minutes to increase disk space on the host. The outage will occur at 2012-12-20 01:00 UTC. To view in your local time= : date -d '2012-12-20 01:00 UTC' =3D=3D Details =3D=3D We are constantly nearly out of disk space on linode01.ovirt.org, which hosts the Mailman and yum/download repositories. As a stop-gap help, I've got 5 GB more of space I can put in to the host = VM. We plan to migrate this host to one of the Alter Way instances, probably a VM running on one of the two physical machines. If possible, we'll make this move soonest for both the Mailman and download repositories. =3D=3D Affected services =3D=3D * lists.ovirt.org * resources.ovirt.org * httpd redirects of old URLs * IRC bot =3D=3D=3D Not-affected services =3D=3D * www.ovirt.org * jenkins.ovirt.org * gerrit.ovirt.org * git.ovirt.org =3D=3D Future plans =3D=3D Move services to a host with more space and capability, as part of the Infra team general hosting plan. --=20 Karsten 'quaid' Wade, Sr. Analyst - Community Growth http://TheOpenSourceWay.org .^\ http://community.redhat.com @quaid (identi.ca/twitter/IRC) \v' gpg: AD0E0C41 --------------enig499090C9A4399B31F318A0E8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iD8DBQFQ0kjP2ZIOBq0ODEERAkcqAKDNPGtRQMuvXdFTAg2onhI0t/uY1ACgtyB9 vUGV+2yJZuWyiK1ppiRusB8= =jSAP -----END PGP SIGNATURE----- --------------enig499090C9A4399B31F318A0E8--

1 0

[Users] ovirt-shell as ForceCommand for ssh logins
by Jiri Belka 19 Dec '12

19 Dec '12

Hi, ForceCommand for ssh session can force command for logging user. Problem is ovirt-shell enables shell commands, that's not nice if we would just want to give sysadmins some "restricted" cli for managing oVirt environment. 1. Could be implemented an option to disable these shell "escapes"? Like '-S', so it would be 'comment="/usr/bin/ovirt-shell -S"' in user's authorized_keys. 2. Could be implemented an ovirt-shell command like 'set' to set configuration from ovirt-shell and save it(yes, user in ovirt-shell should not touch filesystem directly)? Example: > set username = "foo@domain" > save -a # save all runtime settings 3. Aliases like in lftp client? > alias lsvmmyvm list vms --query "name=myvm*" > save alias lsvmmyvm jbelka

2 3

[Users] ovirt 3.2 Alpha - invalid packages
by Winfried de Heiden 19 Dec '12

19 Dec '12

5 6

[Users] attempted live snapshot, machine paused, wouldn't restart
by Erik Jacobs 19 Dec '12

19 Dec '12

I attempted to take a snapshot of a machine while it was running. I noticed that the machine was paused, and then I attempted to resume it. The machine looked like it was going to launch, but the events tab simply indicated that execution of launching the vm failed. Here's the engine.log at the time: 2012-12-18 22:53:55,838 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IsValidVDSCommand] (ajp--0.0.0.0-8009-5) START, IsValidVDSCommand(storagePoolId = 2ccd03b1-fd0e-4578-88ce-e5065a9742d7, ignoreFailoverLimit = false, compatabilityVersion = null), log id: 19399f32 2012-12-18 22:53:55,848 INFO [org.ovirt.engine.core.vdsbroker.irsbroker.IsValidVDSCommand] (ajp--0.0.0.0-8009-5) FINISH, IsValidVDSCommand, return: true, log id: 19399f32 2012-12-18 22:53:55,894 INFO [org.ovirt.engine.core.vdsbroker.IsVmDuringInitiatingVDSCommand] (ajp--0.0.0.0-8009-5) START, IsVmDuringInitiatingVDSCommand(vmId = 35d58779-ee24-4926-8612-e053ff48881b), log id: 76d4a2b2 2012-12-18 22:53:55,895 INFO [org.ovirt.engine.core.vdsbroker.IsVmDuringInitiatingVDSCommand] (ajp--0.0.0.0-8009-5) FINISH, IsVmDuringInitiatingVDSCommand, return: false, log id: 76d4a2b2 2012-12-18 22:53:55,935 INFO [org.ovirt.engine.core.bll.RunVmCommand] (pool-3-thread-49) [17252a1c] Lock Acquired to object EngineLock [exclusiveLocks= key: 35d58779-ee24-4926-8612-e053ff48881b value: VM , sharedLocks= ] 2012-12-18 22:53:55,952 INFO [org.ovirt.engine.core.bll.RunVmCommand] (pool-3-thread-49) [17252a1c] Running command: RunVmCommand internal: false. Entities affected : ID: 35d58779-ee24-4926-8612-e053ff48881b Type: VM 2012-12-18 22:53:55,966 INFO [org.ovirt.engine.core.vdsbroker.ResumeVDSCommand] (pool-3-thread-49) [17252a1c] START, ResumeVDSCommand(vdsId = 0a7046ea-216d-11e2-8fe8-001372eb596b, vmId=35d58779-ee24-4926-8612-e053ff48881b), log id: 607d6dc2 2012-12-18 22:53:55,976 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ResumeBrokerVDSCommand] (pool-3-thread-49) [17252a1c] START, ResumeBrokerVDSCommand(vdsId = 0a7046ea-216d-11e2-8fe8-001372eb596b, vmId=35d58779-ee24-4926-8612-e053ff48881b), log id: 66b1872c 2012-12-18 22:53:56,292 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.ResumeBrokerVDSCommand] (pool-3-thread-49) [17252a1c] FINISH, ResumeBrokerVDSCommand, log id: 66b1872c 2012-12-18 22:53:56,298 INFO [org.ovirt.engine.core.vdsbroker.ResumeVDSCommand] (pool-3-thread-49) [17252a1c] FINISH, ResumeVDSCommand, return: PoweringUp, log id: 607d6dc2 2012-12-18 22:53:56,302 INFO [org.ovirt.engine.core.bll.RunVmCommand] (pool-3-thread-49) [17252a1c] Lock freed to object EngineLock [exclusiveLocks= key: 35d58779-ee24-4926-8612-e053ff48881b value: VM , sharedLocks= ] I'm not sure if I was missing something, or if I needed to wait for something to complete, or what. I ended up just stopping the machine and then starting it from cold. Any thoughts here? I'm happy to attempt this again and to see if it breaks the same way and to capture more data. Cheers, -- Erik Jacobs ATLElite / www.atlelite.com DGTrials / www.DGTrials.com FestiveGarage / www.FestiveGarage.com Riding Resource / www.RidingResource.com www.erikjacobs.com (C) 646-284-3482 (F) 404-585-4409

3 3

[Users] Network firewall doubts on allinone setup
by Adrian Gibanel 19 Dec '12

19 Dec '12

First I describe my firewall setup: Default firewall content ( /etc/sysconfig/iptables ) ---------------------------------- # Generated by ovirt-engine installer #filtering rules *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [52:9697] :RH-Firewall-1-INPUT - [0:0] -A INPUT -j RH-Firewall-1-INPUT -A FORWARD -j RH-Firewall-1-INPUT -A RH-Firewall-1-INPUT -i lo -j ACCEPT -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT -A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5900 -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 5901 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 81 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 444 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p udp --dport 111 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 111 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p udp --dport 892 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 892 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p udp --dport 875 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 875 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p udp --dport 662 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 662 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 2049 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 32803 -j ACCEPT -A RH-Firewall-1-INPUT -m state --state NEW -p udp --dport 32769 -j ACCEPT #drop all rule -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited COMMIT /etc/libvirt/qemu/networks/honly0200.xml -------------------------------------------------------  <network> <name>honly0200</name> <uuid>09697e5f-e834-8f26-c55e-5866cb1abafc</uuid> <forward mode='nat'/> <bridge name='honly0200' stp='on' delay='0' /> <mac address='52:54:00:41:16:38'/> <ip address='192.168.2.1' netmask='255.255.255.248'> </ip> </network> ----------------------------------------------- So if I run: service iptables restart then: iptables -L -v --line-numbers Chain INPUT (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 504 153K RH-Firewall-1-INPUT all -- any any anywhere anywhere Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 0 0 RH-Firewall-1-INPUT all -- any any anywhere anywhere Chain OUTPUT (policy ACCEPT 478 packets, 159K bytes) num pkts bytes target prot opt in out source destination Chain RH-Firewall-1-INPUT (2 references) num pkts bytes target prot opt in out source destination 1 374 132K ACCEPT all -- lo any anywhere anywhere 2 0 0 ACCEPT icmp -- any any anywhere anywhere icmp any 3 120 19824 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 4 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh 5 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:rfb 6 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5901 7 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:81 8 8 480 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:snpp 9 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:sunrpc 10 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:sunrpc 11 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:892 12 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:892 13 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:rquotad 14 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:rquotad 15 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:pftp 16 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:pftp 17 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:nfs 18 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:32803 19 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:filenet-rpc 20 2 80 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited And I also get: iptables -L -v --line-numbers -t nat Chain PREROUTING (policy ACCEPT 3021 packets, 300K bytes) num pkts bytes target prot opt in out source destination 1 0 0 DNAT tcp -- eth0 any anywhere anywhere tcp dpt:50202 to:192.168.2.2:22 2 0 0 DNAT udp -- eth0 any anywhere anywhere udp dpt:50202 to:192.168.2.2:22 Chain INPUT (policy ACCEPT 1296 packets, 78884 bytes) num pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 2833 packets, 442K bytes) num pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 2833 packets, 442K bytes) num pkts bytes target prot opt in out source destination 1 0 0 MASQUERADE tcp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 2 0 0 MASQUERADE udp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 3 0 0 MASQUERADE all -- any any 192.168.2.0/29 !192.168.2.0/29 So... as I want that honly0200 to have access to the Internet via NAT I restart libvirtd service as it's suggested here: http://wiki.libvirt.org/page/Guest_can_reach_host,_but_can%27t_reach_outsid…. service libvirtd restart So if I run: service iptables restart after libvirtd restarted then: iptables -L -v --line-numbers Chain INPUT (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 0 0 ACCEPT udp -- honly0200 any anywhere anywhere udp dpt:domain 2 0 0 ACCEPT tcp -- honly0200 any anywhere anywhere tcp dpt:domain 3 0 0 ACCEPT udp -- honly0200 any anywhere anywhere udp dpt:bootps 4 0 0 ACCEPT tcp -- honly0200 any anywhere anywhere tcp dpt:bootps 5 29974 10M RH-Firewall-1-INPUT all -- any any anywhere anywhere Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 0 0 ACCEPT all -- any honly0200 anywhere 192.168.2.0/29 state RELATED,ESTABLISHED 2 0 0 ACCEPT all -- honly0200 any 192.168.2.0/29 anywhere 3 0 0 ACCEPT all -- honly0200 honly0200 anywhere anywhere 4 0 0 REJECT all -- any honly0200 anywhere anywhere reject-with icmp-port-unreachable 5 0 0 REJECT all -- honly0200 any anywhere anywhere reject-with icmp-port-unreachable 6 0 0 RH-Firewall-1-INPUT all -- any any anywhere anywhere Chain OUTPUT (policy ACCEPT 22701 packets, 7628K bytes) num pkts bytes target prot opt in out source destination Chain RH-Firewall-1-INPUT (2 references) num pkts bytes target prot opt in out source destination 1 25844 9124K ACCEPT all -- lo any anywhere anywhere 2 0 0 ACCEPT icmp -- any any anywhere anywhere icmp any 3 3364 921K ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED 4 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:ssh 5 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:rfb 6 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:5901 7 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:81 8 458 27480 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:snpp 9 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:sunrpc 10 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:sunrpc 11 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:892 12 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:892 13 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:rquotad 14 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:rquotad 15 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:pftp 16 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:pftp 17 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:nfs 18 0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:32803 19 0 0 ACCEPT udp -- any any anywhere anywhere state NEW udp dpt:filenet-rpc 20 308 14264 REJECT all -- any any anywhere anywhere reject-with icmp-host-prohibited And I also get: iptables -L -v --line-numbers -t nat Chain PREROUTING (policy ACCEPT 1116 packets, 118K bytes) num pkts bytes target prot opt in out source destination 1 0 0 DNAT tcp -- eth0 any anywhere anywhere tcp dpt:50202 to:192.168.2.2:22 2 0 0 DNAT udp -- eth0 any anywhere anywhere udp dpt:50202 to:192.168.2.2:22 Chain INPUT (policy ACCEPT 399 packets, 23940 bytes) num pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 637 packets, 56768 bytes) num pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 637 packets, 56768 bytes) num pkts bytes target prot opt in out source destination 1 0 0 MASQUERADE tcp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 2 0 0 MASQUERADE udp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 3 0 0 MASQUERADE all -- any any 192.168.2.0/29 !192.168.2.0/29 So... That's it. The last setup is the one I want it to persist. Well, actually, I also need that an script called from: /etc/rc.d/rc.local later modifies firewall rules too. But let's focus on restarting iptables and libvirtd services. Now I'm going to reboot and you're going to see that its firewall rules are not the expected ones: iptables -L -v --line-numbers Chain INPUT (policy ACCEPT 192K packets, 62M bytes) num pkts bytes target prot opt in out source destination 1 0 0 ACCEPT udp -- honly0200 any anywhere anywhere udp dpt:domain 2 0 0 ACCEPT tcp -- honly0200 any anywhere anywhere tcp dpt:domain 3 0 0 ACCEPT udp -- honly0200 any anywhere anywhere udp dpt:bootps 4 0 0 ACCEPT tcp -- honly0200 any anywhere anywhere tcp dpt:bootps Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) num pkts bytes target prot opt in out source destination 1 0 0 ACCEPT all -- any honly0200 anywhere 192.168.2.0/29 state RELATED,ESTABLISHED 2 0 0 ACCEPT all -- honly0200 any 192.168.2.0/29 anywhere 3 0 0 ACCEPT all -- honly0200 honly0200 anywhere anywhere 4 0 0 REJECT all -- any honly0200 anywhere anywhere reject-with icmp-port-unreachable 5 0 0 REJECT all -- honly0200 any anywhere anywhere reject-with icmp-port-unreachable 6 0 0 ACCEPT tcp -- eth0 any anywhere 192.168.2.2 tcp dpt:ssh 7 0 0 ACCEPT udp -- eth0 any anywhere 192.168.2.2 udp dpt:ssh Chain OUTPUT (policy ACCEPT 191K packets, 61M bytes) num pkts bytes target prot opt in out source destinatio and also: iptables -L -v --line-numbers -t nat Chain PREROUTING (policy ACCEPT 8683 packets, 933K bytes) num pkts bytes target prot opt in out source destination 1 0 0 DNAT tcp -- eth0 any anywhere anywhere tcp dpt:50202 to:192.168.2.2:22 2 0 0 DNAT udp -- eth0 any anywhere anywhere udp dpt:50202 to:192.168.2.2:22 Chain INPUT (policy ACCEPT 2687 packets, 165K bytes) num pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 7602 packets, 936K bytes) num pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 7602 packets, 936K bytes) num pkts bytes target prot opt in out source destination 1 0 0 MASQUERADE tcp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 2 0 0 MASQUERADE udp -- any any 192.168.2.0/29 !192.168.2.0/29 masq ports: 1024-65535 3 0 0 MASQUERADE all -- any any 192.168.2.0/29 !192.168.2.0/29 I suppose I will fix this issue by running iptables and libvirtd service restarts at rc.d/rc.local but... I would like to understand a little bit better what's going under the hood so that I don't have to implement workarounds. So... any other service that might modify iptables rules? Maybe anyone oVirt specific? Thank you. -- -- Adrián Gibanel I.T. Manager +34 675 683 301 www.btactic.com Ens podeu seguir a/Nos podeis seguir en: i Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es cosa de todos. AVIS: El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem que ho feu saber immediatament al remitent i que procediu a destruir el missatge . AVISO: El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si han recibido este mensaje por error, les agradeceríamos que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje .

1 0

[Users] Migration failing
by Neil 19 Dec '12

19 Dec '12

Hi guys, I've just migrated all(3) my VM's from one host to another for planned maintenance, and now when trying to migrate the VM's back to the original host, I'm receiving a "Fatal error" and can't migrate a single machine back to node02. Attached is my engine.log I'm running Centos 6.3 with the following oVirt package versions from dreyou. ovirt-engine-setup-3.1.0-3.19.el6.noarch ovirt-engine-3.1.0-3.19.el6.noarch ovirt-engine-sdk-3.1.0.5-1.el6.noarch ovirt-engine-jbossas711-1-0.x86_64 ovirt-engine-config-3.1.0-3.19.el6.noarch ovirt-image-uploader-3.1.0-16.el6.noarch ovirt-engine-webadmin-portal-3.1.0-3.19.el6.noarch ovirt-engine-notification-service-3.1.0-3.19.el6.noarch ovirt-log-collector-3.1.0-16.el6.noarch ovirt-engine-genericapi-3.1.0-3.19.el6.noarch ovirt-engine-userportal-3.1.0-3.19.el6.noarch ovirt-engine-tools-common-3.1.0-3.19.el6.noarch ovirt-engine-backend-3.1.0-3.19.el6.noarch ovirt-iso-uploader-3.1.0-16.el6.noarch ovirt-engine-cli-3.1.0.7-1.el6.noarch ovirt-engine-restapi-3.1.0-3.19.el6.noarch ovirt-engine-dbscripts-3.1.0-3.19.el6.noarch Any ideas? I need to shut down both hosts tomorrow for RAM upgrades, but my plan was to avoid downtime by migrating all the VM's to one machine and then the other. Any assistance is greatly appreciated. This system was upgraded from oVirt 3.0 to 3.1 and the engine was moved to another physical machine and the hostname was changed as well. Thanks. Regards, Neil Wilson.

3 8

[Users] Host Install Failing
by Neil 19 Dec '12

19 Dec '12

Hi guys, I'm re-visiting an older issue that I was trying to resolve a while ago. I have an oVirt 3.1 system that was upgraded from 3.0, during the same upgrade the hostname of the engine was changed, and the keys etc were all regenerated. I'm trying to add a new host to the cluster but my install is failing with the following error in my "vds_installer.262945.log" ... Tue, 18 Dec 2012 11:22:26 DEBUG **** Start VDS Installation **** Tue, 18 Dec 2012 11:22:26 DEBUG get_id_line: read line CentOS release 6.3 (Final). Tue, 18 Dec 2012 11:22:26 DEBUG lsb_release: input line CentOS release 6.3 (Final). Tue, 18 Dec 2012 11:22:26 DEBUG lsb_release: return: CentOS. Tue, 18 Dec 2012 11:22:26 DEBUG <BSTRAP component='INSTALLER' status='OK' message='Test platform succeeded'/> Tue, 18 Dec 2012 11:22:26 DEBUG trying to fetch deployUtil.py script cmd = '/usr/bin/curl -s -k -w %{http_code} -o /tmp/deployUtil.py http://backup.blabl.com/deployUtil.py' Tue, 18 Dec 2012 11:22:26 DEBUG <BSTRAP component='INSTALLER LIB' status='FAIL' message='deployUtil.py download failed. Pathname could not be resolved (verify computer/domain name).'/> where backup.blabla.com is my oVirt engine. The host resolves correctly and if I browse to the hostname I receive the ovirt front end, however if I try and browse to deployUtil.py I get a 404 error. Seems like the file either isn't in the correct location on my engine or the permissions are wrong, below is the file with permissions from my engine.... -rw-r--r--. 1 root root 46943 Aug 27 16:29 /usr/share/vdsm-bootstrap/deployUtil.py These are my versions.. ovirt-engine-setup-3.1.0-3.19.el6.noarch ovirt-engine-3.1.0-3.19.el6.noarch ovirt-engine-sdk-3.1.0.5-1.el6.noarch ovirt-engine-jbossas711-1-0.x86_64 ovirt-engine-config-3.1.0-3.19.el6.noarch ovirt-image-uploader-3.1.0-16.el6.noarch ovirt-engine-webadmin-portal-3.1.0-3.19.el6.noarch ovirt-engine-notification-service-3.1.0-3.19.el6.noarch ovirt-log-collector-3.1.0-16.el6.noarch ovirt-engine-genericapi-3.1.0-3.19.el6.noarch ovirt-engine-userportal-3.1.0-3.19.el6.noarch ovirt-engine-tools-common-3.1.0-3.19.el6.noarch ovirt-engine-backend-3.1.0-3.19.el6.noarch ovirt-iso-uploader-3.1.0-16.el6.noarch ovirt-engine-cli-3.1.0.7-1.el6.noarch ovirt-engine-restapi-3.1.0-3.19.el6.noarch ovirt-engine-dbscripts-3.1.0-3.19.el6.noarch using Centos 6.3 on all hosts and engine In my engine.log I saw the following in the logs... <BSTRAP component='INSTALLER LIB' status='OK' message='Install library already exists'/> <BSTRAP component='INSTALLER' status='FAIL' message='vds_bootstrap.py download failed. Pathname could not be resolved (verify computer/domain name).'/> . FYI. (Stage: Running first installation script on Host) 2012-12-18 12:18:09,360 INFO [org.ovirt.engine.core.utils.hostinstall.MinaInstallWrapper] (pool-3-thread-47) RunSSHCommand returns true 2012-12-18 12:18:09,360 INFO [org.ovirt.engine.core.bll.VdsInstaller] (pool-3-thread-47) [63c27417] RunScript ended:true 2012-12-18 12:18:09,361 ERROR [org.ovirt.engine.core.bll.VdsInstaller] (pool-3-thread-47) [63c27417] Installation of 10.0.2.23. No meaningful response received from Host. (Stage: Running first installation script on Host) I have thoroughly checked hosts, dns and firewalls. Please shout if any further info is required Thank you. Regards. Neil Wilson.

3 4

[Users] Testing ovirt all in one on F18 gives error on DB creation
by Gianluca Cecchi 18 Dec '12

18 Dec '12

Hello, testing oVirt for with all in one config in f18 beta. engine-setup fails in Database creation and in db log file: saying to check log file /var/log/ovirt-engine/engine-setup_2012_12_01_15_35_22.log I can see 2012-12-01 15:36:32::DEBUG::setup_sequences::59::root:: running _createDB 2012-12-01 15:36:32::DEBUG::engine-setup::937::root:: installing postgres db 2012-12-01 15:36:32::DEBUG::engine-setup::940::root:: engine db creation is logged at /var/log/ovirt-engine//engine-db-install-2012_12_01_15_36_32.log 2012-12-01 15:36:32::DEBUG::common_utils::309::root:: Executing command --> '/usr/share/ovirt-engine/dbscripts/engine-db-install.sh -l engine-db-install-2012_12_01_15_36_32.log -w ******** -u postgres -s localhost -p 5432 -r local' 2012-12-01 15:36:40::DEBUG::common_utils::335::root:: output = Running local installation adding uuid-ossp.sql from contrib... error, failed creating enginedb How can I workaround this? Do I have to rollback what already done by engine-setup or can I only resolve the db part? Version I find is ovirt-engine-setup-3.1.0-1.fc18.noarch Thanks Gianluca

8 36

Re: [Users] tool engine-manage-domains
by victor nunes 18 Dec '12

18 Dec '12

2012/11/29 Yair Zaslavsky <yzaslavs(a)redhat.com> > Hi, > Can you redirect your question to users(a)ovirt.org? > I think others will help you to forward your question to relevant people > here (not sure I can provide a good answer). > > > > On 11/29/2012 03:26 AM, victor nunes wrote: > >> So I'm trying to install FreeIPA on the same machine that oVirt-manage, >> but at the time of installation, the following error occurs: >> >> FreeIPA-server conflicts with 1: mod_ssl-2.2.22-4.fc17.x86_64 >> >> >> Looking for a solution to the problem, I discovered that this is a bug >> reported by others. >> >> Follow the link to the bug reported: >> https://bugzilla.redhat.com/**show_bug.cgi?id=840098<https://bugzilla.redhat.com/show_bug.cgi?id=840098> >> >> Then, using oo FreeIPA not be possible, which otherwise I have to add >> new domains and users? >> >> Em 8 de novembro de 2012 02:41, Yair Zaslavsky <yzaslavs(a)redhat.com >> <mailto:yzaslavs@redhat.com>> escreveu: >> >> >> Hi, >> You cannot create new users for the internal domain. >> The internal domain was developed for quick POC, just to allow login >> to the system without the need for ldap provider. >> I recommend you install some ldap server (i.e - free IPA) and try to >> work with it. >> >> >> >> On 11/08/2012 01:08 AM, victor nunes wrote: >> >> Sorry. >> >> Att, >> >> 2012/11/7 victor nunes <victor.rebli(a)gmail.com >> <mailto:victor.rebli@gmail.com**> >> <mailto:victor.rebli@gmail.com <mailto:victor.rebli@gmail.com** >> >__>> >> >> >> >> Thanks for the reply. >> >> As the command "engine-manage-domains" works with ldap, how >> can I >> create another user in the field "internal", and user >> "admin" that >> is created when you installed the engine-setup? >> >> 2012/11/4 Yair Zaslavsky <yzaslavs(a)redhat.com >> <mailto:yzaslavs@redhat.com> >> <mailto:yzaslavs@redhat.com <mailto:yzaslavs@redhat.com>>> >> >> >> >> Hi, >> The specified tool handle only ldap domains, and not the >> internal domain. >> What would you like to change at the internal domain? >> I suggest you try to use engine-config for this. >> >> >> >> ------------------------------**__----------------------------** >> --__------------ >> >> >> *From: *"victor nunes" <victor.rebli(a)gmail.com >> <mailto:victor.rebli@gmail.com**> >> <mailto:victor.rebli@gmail.com >> <mailto:victor.rebli@gmail.com**>__>> >> *To: *users(a)ovirt.org <mailto:users@ovirt.org> >> <mailto:users@ovirt.org <mailto:users@ovirt.org>> >> >> *Sent: *Sunday, November 4, 2012 12:18:55 AM >> *Subject: *[Users] tool engine-manage-domains >> >> >> >> I'm trying to change the default domain, the >> "internal" with >> the following command: >> >> engine-manage-domains -action=edit -domain=internal >> >> However, i am getting the following message: >> >> "Domain internal doesn't exist int the configuration" >> >> This is my domain admin user that is configured in >> the >> installation ovirt-setup. >> >> So, how can i fix it to include a user in this >> domain? >> >> >> Att, >> >> >> >> >> -- >> “Encarada do ponto de vista da juventude, a vida >> parece um >> futuro >> indefinidamente longo, ao passo que, na velhice, >> ela parece >> um passado >> deveras curto. Assim, a vida no seu início se >> apresenta do >> mesmo modo >> que as coisas quando as olhamos através de um >> binóculo usado >> ao contrário; mas, ao >> seu final, ela se parece com as coisas tal qual >> são vistas >> quando o binóculo >> é usado de modo normal. Um homem precisa ter >> envelhecido e >> vivido >> bastante para perceber como a vida é curta”. >> >> (Poema de Arthur Schopenhauer) >> >> ______________________________**___________________ >> Users mailing list >> Users(a)ovirt.org <mailto:Users@ovirt.org> <mailto:Users@ovirt.org >> <mailto:Users@ovirt.org>> >> >> http://lists.ovirt.org/__**mailman/listinfo/users<http://lists.ovirt.org/__mailman/listinfo/users> >> >> <http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >> > >> >> >> >> >> >> -- >> “Encarada do ponto de vista da juventude, a vida parece um >> futuro >> indefinidamente longo, ao passo que, na velhice, ela parece >> um passado >> deveras curto. Assim, a vida no seu início se apresenta do >> mesmo modo >> que as coisas quando as olhamos através de um binóculo usado >> ao >> contrário; mas, ao >> seu final, ela se parece com as coisas tal qual são vistas >> quando o >> binóculo >> é usado de modo normal. Um homem precisa ter envelhecido e >> vivido >> bastante para perceber como a vida é curta”. >> >> (Poema de Arthur Schopenhauer) >> >> >> >> >> -- >> “Encarada do ponto de vista da juventude, a vida parece um futuro >> indefinidamente longo, ao passo que, na velhice, ela parece um >> passado >> deveras curto. Assim, a vida no seu início se apresenta do mesmo >> modo >> que as coisas quando as olhamos através de um binóculo usado ao >> contrário; mas, ao >> seu final, ela se parece com as coisas tal qual são vistas >> quando o >> binóculo >> é usado de modo normal. Um homem precisa ter envelhecido e vivido >> bastante para perceber como a vida é curta”. >> >> (Poema de Arthur Schopenhauer) >> >> >> >> >> -- >> “Encarada do ponto de vista da juventude, a vida parece um futuro >> indefinidamente longo, ao passo que, na velhice, ela parece um passado >> deveras curto. Assim, a vida no seu início se apresenta do mesmo modo >> que as coisas quando as olhamos através de um binóculo usado ao >> contrário; mas, ao >> seu final, ela se parece com as coisas tal qual são vistas quando o >> binóculo >> é usado de modo normal. Um homem precisa ter envelhecido e vivido >> bastante para perceber como a vida é curta”. >> >> (Poema de Arthur Schopenhauer) >> > -- “Encarada do ponto de vista da juventude, a vida parece um futuro indefinidamente longo, ao passo que, na velhice, ela parece um passado deveras curto. Assim, a vida no seu início se apresenta do mesmo modo que as coisas quando as olhamos através de um binóculo usado ao contrário; mas, ao seu final, ela se parece com as coisas tal qual são vistas quando o binóculo é usado de modo normal. Um homem precisa ter envelhecido e vivido bastante para perceber como a vida é curta”. (Poema de Arthur Schopenhauer)

5 11

[Users] RESOLVED: Problems after upgrading to latest rpms from the dre repository
by Joern Ott 18 Dec '12

18 Dec '12

Hello Roy, From: users-bounces(a)ovirt.org [mailto:users-bounces@ovirt.org] On Behalf Of Roy Golan Sent: Dienstag, 18. Dezember 2012 07:58 To: users(a)ovirt.org Subject: Re: [Users] Problems after upgrading to latest rpms from the dre repository On 12/17/2012 06:28 PM, Joern Ott wrote: >Hello everybody, >> I just upgraded the engine with the engine upgrade script and get a lot of these errors: >> 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-84) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-72) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-94) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-7) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-60) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-55) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-69) Failed to decrypt Data must not be longer than 256 bytes >> 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-68) Failed to decrypt java.lang.NullPointerException >> In addition, I am no longer able to log in with admin@internal and the password we set before. As we use keepass generated passwords, I am pretty sure that I don't have any typing errors >> in there. The engine log shows this: >> 2012-12-17 17:26:43,328 ERROR [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-2) USER_FAILED_TO_AUTHENTICATE : admin >> 2012-12-17 17:26:43,328 WARN [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-2) CanDoAction of action LoginAdminUser failed. >> >> Reasons:USER_FAILED_TO_AUTHENTICATE >> 2012-12-17 17:26:46,290 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-94) Failed to decrypt Blocktype mismatch: 0 >> 2012-12-17 17:26:46,290 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_Worker-91) Failed to decrypt Blocktype mismatch: 0 >> Any way of resetting the password in the database or fixing some encryption routines? > engine-config -s AdminPassword {your passwd} I needed a slight adjustment of the syntax as this gives me "Argument for set action must be in format of key=value" [root@leob220 ~]# engine-config -s AdminPassword=xxxxxxxxxxxxx Cannot set value xxxxxxxxxxxxx to key AdminPassword. >can you please also search the upgrade/install log to see if the engine setup threw an error *encrypting* your supplied password? It seems that the database setup failed (excerpt): 2012-12-17 15:18:54::DEBUG::engine-upgrade::425::root:: DB Update started 2012-12-17 15:18:54::DEBUG::common_utils::424::root:: Executing command --> '/usr/share/ovirt-engine/dbscripts/upgrade.sh -s localhost -p 5432 -u engine -d engine_2012_12_17_15_18_29' 2012-12-17 15:18:56::DEBUG::common_utils::462::root:: output = upgrade script detected a change in Config, View or Stored Procedure... 2012-12-17 15:18:56::DEBUG::common_utils::463::root:: stderr = psql:create_functions.sql:679: ERROR: must be owner of function uuid_generate_v1 2012-12-17 15:18:56::DEBUG::common_utils::464::root:: retcode = 3 2012-12-17 15:18:56::ERROR::engine-upgrade::1072::root:: Traceback (most recent call last): File "/usr/bin/engine-upgrade", line 1059, in main runFunc([db.update], MSG_INFO_DB_UPDATE) File "/usr/bin/engine-upgrade", line 607, in runFunc func() File "/usr/bin/engine-upgrade", line 442, in update output, rc = utils.execCmd(cmdList=cmd, failOnError=True, msg=MSG_ERROR_UPDATE_DB) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 467, in execCmd raise Exception(msg) Exception: Error: Database update failed 2012-12-17 15:18:56::ERROR::engine-upgrade::1073::root:: Rolling back update 2012-12-17 15:18:56::DEBUG::engine-upgrade::392::root:: DB Restore started 2012-12-17 15:18:56::DEBUG::common_utils::424::root:: Executing command --> '/usr/bin/dropdb -U engine -h localhost -p 5432 engine_2012_12_17_15_18_29' 2012-12-17 15:19:15::DEBUG::common_utils::462::root:: output = 2012-12-17 15:19:15::DEBUG::common_utils::463::root:: stderr = 2012-12-17 15:19:15::DEBUG::common_utils::464::root:: retcode = 0 2012-12-17 15:19:15::DEBUG::common_utils::424::root:: Executing command --> '/usr/bin/psql -U engine -h localhost -p 5432 -d template1 -f /var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql' Then the rollback happened causing these errors: 2012-12-17 15:19:20::DEBUG::common_utils::463::root:: stderr = psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:8121: WARNING: column "status" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:8121: WARNING: column "owner" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:8121: WARNING: column "storage_pool_id" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:8121: WARNING: column "storage_pool_name" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13543: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13546: ERROR: function public.uuid_generate_v1() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13554: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13557: ERROR: function public.uuid_generate_v1mc() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13565: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13568: ERROR: function public.uuid_generate_v3(uuid, text) does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13576: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13579: ERROR: function public.uuid_generate_v4() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13587: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13590: ERROR: function public.uuid_generate_v5(uuid, text) does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13598: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13601: ERROR: function public.uuid_nil() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13609: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13612: ERROR: function public.uuid_ns_dns() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13620: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13623: ERROR: function public.uuid_ns_oid() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13631: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13634: ERROR: function public.uuid_ns_url() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13642: ERROR: permission denied for language c psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:13645: ERROR: function public.uuid_ns_x500() does not exist psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:14015: WARNING: column "owner" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:14015: WARNING: column "storage_pool_id" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:14015: WARNING: column "storage_pool_name" has type "unknown" DETAIL: Proceeding with relation creation anyway. psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:21103: WARNING: no privileges could be revoked for "public" psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:21104: WARNING: no privileges could be revoked for "public" psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:21105: WARNING: no privileges were granted for "public" psql:/var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql:21106: WARNING: no privileges were granted for "public" 2012-12-17 15:19:20::DEBUG::common_utils::464::root:: retcode = 0 2012-12-17 15:19:20::DEBUG::engine-upgrade::414::root:: DB Restore completed successfully And finally, the yum downgrade failed: 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-backend-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-config-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-dbscripts-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-genericapi-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-notification-service-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-restapi-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-tools-common-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-userportal-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Failed to downgrade: ovirt-engine-webadmin-portal-3.1.0-3.26.el6.noarch 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Building transaction 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Transaction built 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Processing transaction 2012-12-17 15:19:33::INFO::common_utils::327::root:: YUM: OK: Status: Downloading Packages 2012-12-17 15:19:33::INFO::common_utils::327::root:: YUM: OK: Status: Running Test Transaction 2012-12-17 15:19:33::DEBUG::common_utils::324::root:: YUM: VERB: Running rpm_check_debug 2012-12-17 15:19:33::ERROR::common_utils::330::root:: YUM: FAIL: [u'ERROR with rpm_check_debug vs depsolve:', 'ovirt-engine-setup >= 3.2.0-1.33.el6 is needed by ovirt-engine-3.2.0-1.33.el6.noarch', u'Please report this error at http://bugs.centos.org/set_project.php?project_id=16&ref=http://bugs.centos…'] 2012-12-17 15:19:34::ERROR::common_utils::330::root:: YUM: FAIL: Transaction end failed: Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/miniyum.py", line 370, in _endTransaction self.processTransaction() File "/usr/share/ovirt-engine/scripts/miniyum.py", line 678, in processTransaction rpmDisplay=MiniYum._rpmcallback(sink=self._sink) File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 4928, in processTransaction self._doTestTransaction(callback,display=rpmTestDisplay) File "/usr/lib/python2.6/site-packages/yum/__init__.py", line 5002, in _doTestTransaction raise Errors.YumRPMCheckError,retmsgs YumRPMCheckError: [u'ERROR with rpm_check_debug vs depsolve:', 'ovirt-engine-setup >= 3.2.0-1.33.el6 is needed by ovirt-engine-3.2.0-1.33.el6.noarch', u'Please report this error at http://bugs.centos.org/set_project.php?project_id=16&ref=http://bugs.centos…'] 2012-12-17 15:19:34::DEBUG::common_utils::1286::root:: Locking rpms in yum-version-lock 2012-12-17 15:19:36::ERROR::engine-upgrade::1123::root:: Traceback (most recent call last): File "/usr/bin/engine-upgrade", line 1116, in <module> main(options) File "/usr/bin/engine-upgrade", line 1059, in main runFunc([db.update], MSG_INFO_DB_UPDATE) File "/usr/bin/engine-upgrade", line 607, in runFunc func() File "/usr/bin/engine-upgrade", line 442, in update output, rc = utils.execCmd(cmdList=cmd, failOnError=True, msg=MSG_ERROR_UPDATE_DB) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 467, in execCmd raise Exception(msg) Exception: Error: Database update failed 2012-12-17 15:19:36::DEBUG::engine-upgrade::365::root:: DB Backup available at /var/lib/ovirt-engine/backups/ovirt-engine_db_backup_2012_12_17_15_18_29.sql So, what I did to resolve the issue was to manually downgrade all the RPMs which failed in the script. I had to provide absolute URLs to the RPMs though. After that I restarted ovirt-engine and ran the engine-upgrade again. Miraculously everything worked this time and now I am running ovirt-engine-3.2.0-1.33. Kind regards Jörn _______________________________________________ Users mailing list Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users

2 1

[Users] Problems after upgrading to latest rpms from the dre repository
by Joern Ott 18 Dec '12

18 Dec '12

--_000_D05C1D04061DE64AA1AE65E2D40211EE3A5B2333AMXPRD0610MB378_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello everybody, I just upgraded the engine with the engine upgrade script and get a lot of = these errors: 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-84) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-72) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-94) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-7) Failed to decrypt Data must not be= longer than 256 bytes 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-60) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-55) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-69) Failed to decrypt Data must not b= e longer than 256 bytes 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-68) Failed to decrypt java.lang.NullP= ointerException In addition, I am no longer able to log in with admin@internal and the pass= word we set before. As we use keepass generated passwords, I am pretty sure= that I don't have any typing errors in there. The engine log shows this: 2012-12-17 17:26:43,328 ERROR [org.ovirt.engine.core.bll.LoginAdminUserComm= and] (ajp--127.0.0.1-8702-2) USER_FAILED_TO_AUTHENTICATE : admin 2012-12-17 17:26:43,328 WARN [org.ovirt.engine.core.bll.LoginAdminUserComm= and] (ajp--127.0.0.1-8702-2) CanDoAction of action LoginAdminUser failed. R= easons:USER_FAILED_TO_AUTHENTICATE 2012-12-17 17:26:46,290 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-94) Failed to decrypt Blocktype misma= tch: 0 2012-12-17 17:26:46,290 ERROR [org.ovirt.engine.core.engineencryptutils.Enc= ryptionUtils] (QuartzScheduler_Worker-91) Failed to decrypt Blocktype misma= tch: 0 Any way of resetting the password in the database or fixing some encryption= routines? Kind regards J=F6rn --_000_D05C1D04061DE64AA1AE65E2D40211EE3A5B2333AMXPRD0610MB378_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"DE" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hello everybody,<o:p></o:p></sp= an> <o:p> </o:p> I just upgraded the engine with= the engine upgrade script and get a lot of these errors:<o:p></o:p>= 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-84) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:00,498 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-72) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-94) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:03,033 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-7) Failed to decrypt Data must not= be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-60) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:15,606 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-55) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-69) Failed to decrypt Data must no= t be longer than 256 bytes<o:p></o:p> 2012-12-17 17:25:39,663 ERROR [org.ovirt.engine.core.engineencryptutils.= EncryptionUtils] (QuartzScheduler_Worker-68) Failed to decrypt java.lang.Nu= llPointerException<o:p></o:p> <o:p> </o:p> In addition, I am no longer abl= e to log in with admin@internal and the password we set before. As we use k= eepass generated passwords, I am pretty sure that I don’t have any ty= ping errors in there. The engine log shows this:<o:p></o:p> <o:p> </o:p> 2012-12-17 17:26:43,328 ERROR [= org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-2) US= ER_FAILED_TO_AUTHENTICATE : admin<o:p></o:p> 2012-12-17 17:26:43,328 WARN&nb= sp; [org.ovirt.engine.core.bll.LoginAdminUserCommand] (ajp--127.0.0.1-8702-= 2) CanDoAction of action LoginAdminUser failed. Reasons:USER_FAILED_TO_AUTH= ENTICATE<o:p></o:p> 2012-12-17 17:26:46,290 ERROR [= org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_= Worker-94) Failed to decrypt Blocktype mismatch: 0<o:p></o:p> 2012-12-17 17:26:46,290 ERROR [= org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (QuartzScheduler_= Worker-91) Failed to decrypt Blocktype mismatch: 0<o:p></o:p> <o:p> </o:p> Any way of resetting the passwo= rd in the database or fixing some encryption routines?<o:p></o:p></p= > <o:p> </o:p> Kind regards<o:p></o:p><= /p> J=F6rn<o:p></o:p> </div> </body> </html> --_000_D05C1D04061DE64AA1AE65E2D40211EE3A5B2333AMXPRD0610MB378_--

3 2

[Users] Problem with VDSM becoming unresponsive
by Daniel Rowe 17 Dec '12

17 Dec '12

Hi I have an issue with a one node ovirt setup with gluster storage. Every so often (twice a week or) the management console show the node as unresponsive. I can ssh to the node fine and it is indeed responsive. I can see the VM processes taking CPU with top. I can see the VDSM process as well. Restarting vsdmd causes the node to become in the up state again, but I have to restart all the VMs that are running. In the engine log file (attached) there is "VDS::handleNetworkException Server failed to respond" error. I am not sure how I can fix this so any help appreciated. Attached is the engine log. Regards Daniel

2 1

[Users] migration & missing cert - 3.2 alpha
by Jeff Bailey 16 Dec '12

16 Dec '12

Hi, I have an F18 Beta + oVirt 3.2 alpha setup with two hosts. When I try to migrate from one host to the other I get 2012-12-15 15:18:51.381+0000: 1541: error : virNetTLSContextCheckCertFile:113 : Cannot read CA certificate '/etc/pki/CA/cacert.pem': No such file or directory in libvirtd.log on the source host. Is that actually where the cert should be and I should try to track down why it's not there or should it be somewhere else? If it should be somewhere else where would that be configured? The default location for the client certificates seems to be /etc/pki/libvirt which doesn't exist so even with a cacert it still probably wouldn't work. Could this be related to the missing spice certificates (I manually made the symbolic links for those). Thanks, Jeff

2 6

[Users] Single Sign On (Kerberos) to the user portal
by Sigbjorn Lie 16 Dec '12

16 Dec '12

Hi, Is it possible to do Single Sign On to the user portal using Kerberos? We have deployed FreeIPA where all our workstations are authenticating. We are already using SSO w/kerberos for web servers, and it would be handy if we could use SSO w/kerberos to authenticate to the User Portal too. Regards, Siggi

2 5

[Users] Translation mailing list
by Mohsen Saeedi 14 Dec '12

14 Dec '12

2 1

[Users] web gui and bonded nic changes
by Jim Kinney 14 Dec '12

14 Dec '12

I hit a snag last night. I needed to remove a nic from a host bond in ovirtmanage to create a new bridge line for user access to VMs. The process hung the box and I had to go put hands on the physical console (more reason to get the ipmi network setup!). The error message was "can't add eth3 to bond. already bonded" (or close). It seems the only way to remove a nic from a bond is to unload the bonding module. Apparently the ovirt process doesn't call a modprobe -r bonding during a network reset on the managed hosts. stop network, unload bonding, start network worked fine from the console. -- -- James P. Kinney III * *Every time you stop a school, you will have to build a jail. What you gain at one end you lose at the other. It's like feeding a dog on his own tail. It won't fatten the dog. - Speech 11/23/1900 Mark Twain * http://electjimkinney.org http://heretothereideas.blogspot.com/ *

3 2