November 2013 - Users - oVirt List Archives

Re: [Users] Resizing the iscsi data domain
by Juan Pablo Lorier 19 Nov '13

19 Nov '13

Hi Eduardo, I've tried your way without success. Plus, I'm now receiving this error in one of the hosts: Message from syslogd@virt2 at Nov 19 09:30:16 ... �<11>vdsm Storage.DomainMonitorThread ERROR Error while collecting domain 0d22a7d7-a7e0-4c17-b132-5764b7940a70 monitoring information#012Traceback (most recent call last):#012 File "/usr/share/vdsm/storage/domainMonitor.py", line 186, in _monitorDomain#012 self.domain.selftest()#012 File "/usr/share/vdsm/storage/sdc.py", line 49, in __getattr__#012 return getattr(self.getRealDomain(), attrName)#012 File "/usr/share/vdsm/storage/sdc.py", line 52, in getRealDomain#012 return self._cache._realProduce(self._sdUUID)#012 File "/usr/share/vdsm/storage/sdc.py", line 119, in _realProduce#012 self.refreshStorage()#012 File "/usr/share/vdsm/storage/misc.py", line 1073, in helper#012 return sm(*args, **kwargs)#012 File "/usr/share/vdsm/storage/misc.py", line 1058, in __call__#012 self.__lastResult = self.__func(*args, **kwargs)#012 File "/usr/share/vdsm/storage/sdc.py", line 82, in refreshStorage#012 multipath.rescan()#012 File "/usr/share/vdsm/storage/multipath.py", line 106, in rescan#012 supervdsm.getProxy().forceIScsiScan()#012 File "/usr/share/vdsm/supervdsm.py", line 81, in __call__#012 return callMethod()#012 File "/usr/share/vdsm/supervdsm.py", line 72, in <lambda>#012 **kwargs)#012 File "<string>", line 2, in forceIScsiScan#012 File "/usr/lib64/python2.6/multiprocessing/managers.py", line 740, in _callmethod#012 raise convert_to_error(kind, result)#012RemoteError: #012---------------------------------------------------------------------------#012Traceback (most recent call last):#012 File "/usr/lib64/python2.6/multiprocessing/managers.py", line 216, in serve_client#012 obj, exposed, gettypeid = id_to_obj[ident]#012KeyError: '285c110'#012--------------------------------------------------------------------------- I had to set back the master to get rid of it. Regards,

1 0

[Users] Hosts emulated machines
by Paco qw 18 Nov '13

18 Nov '13

Hi all Ovirt 3.3.0.1-1 set in MSVsphere 6.3 based on CentOs 6.3. After deploy first node on MSVsphere 6.3 last message in ovirt console: Host gh does not comply with the cluster Default emulated machines. The Hosts emulated machines are rhel6.3.0,pc,rhel6.2.0,rhel6.1.0,rhel6.0.0,rhel5.5.0,rhel5.4.4,rhel5.4.0 and the cluster is [rhel6.4.0, pc-1.0]} Could not get hardware information for host gh State was set to NonOperational for host gh. vdsClient -s 0 getVdsCaps | grep emulatedMachines emulatedMachines = ['rhel6.3.0', What to do?

3 2

[Users] openldap
by Jonas Israelsson 18 Nov '13

18 Nov '13

I saw that openldap is now listed as a provider when invoking engine-manage-domains. I'm eager to find more information about this. Does anyone know if there is any updated documentation floating around somewhere ? Found this: http://www.ovirt.org/LDAP_Quick_Start But the article seem only half-finished. Rgds Jonas

3 5

Re: [Users] openldap
by Jonas Israelsson 18 Nov '13

18 Nov '13

On 18/11/13 17:24, Juan Hernandez wrote: > On 11/18/2013 12:17 PM, Jonas Israelsson wrote: >> On 17/10/13 17:22, Juan Hernandez wrote: >>> On 10/17/2013 05:15 PM, Itamar Heim wrote: >>>> On 10/17/2013 09:57 AM, Jonas Israelsson wrote: >>>>> I saw that openldap is now listed as a provider when invoking >>>>> engine-manage-domains. I'm eager to find more information about this. >>>>> Does anyone know if there is any updated documentation floating around >>>>> somewhere ? >>>>> >>>>> Found this:http://www.ovirt.org/LDAP_Quick_Start >>>>> >>>>> But the article seem only half-finished. >>>>> >>>>> Rgds Jonas >>>>> >>>> this may help you. >>>> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c4 >>>> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5 >>>> >>>> help finishing the wiki would be great... >>>> >>>> thanks, >>>> Itamar >>>> >>> I am attaching slightly updated notes on how to configure OpenLDAP and >>> Kerberos for both Fedora and RHEL/CentOS. >>> > I just updated the wiki with the latest version of the instructions that > I use. I think they work. Any enhancement is welcome. > >> Anyone knows if ovirt is able to handle that the kdc and directory >> service are running on separate hosts ? In my environment this is the >> case where the kdc is located at a service with it's own name/IP >> (admin.elementary.se), and the directory-service on ldap.elementary.se. >> Even though I see both names are resolved by a name server lookup a >> network sniffer trace shows that later (ldap.elementary.se) used for >> both kerberos and ldap access. >> > By default oVirt uses the Kerberos and LDAP servers that are provided by > DNS. Can you please check what is the result of the following DNS query? > > # dig -t SRV _kerberos._tcp.elementary.se All DNS querys gets the correct answer (both forward and reverse) Engine -- 192.168.24.217 -- dashboard.elementary.se LDAP-Server -- 192.168.24.239 -- ldap.elementary.se KDC -- 192.168.24.240 -- admin.elementary.se dig -t SRV _kerberos._tcp.elementary.se ; <<>> DiG 9.9.3-rpz2+rl.156.01-P2 <<>> -t SRV _kerberos._tcp.elementary.se ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19187 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 4 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;_kerberos._tcp.elementary.se. IN SRV ;; ANSWER SECTION: _kerberos._tcp.elementary.se. 3600 IN SRV 0 0 88 admin.elementary.se. ;; AUTHORITY SECTION: elementary.se. 3600 IN NS ns2.elementary.se. elementary.se. 3600 IN NS ns1.elementary.se. ;; ADDITIONAL SECTION: admin.elementary.se. 3600 IN A 192.168.24.240 ns1.elementary.se. 3600 IN A 192.168.24.231 ns2.elementary.se. 3600 IN A 192.168.24.232 ;; Query time: 0 msec ;; SERVER: 192.168.24.231#53(192.168.24.231) ;; WHEN: Mon Nov 18 18:05:05 CET 2013 ;; MSG SIZE rcvd: 180 Still... 18:13:41.232154 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [S], seq 3592225170, win 14600, options [mss 1460,sackOK,TS val 160790012 ecr 0,nop,wscale 7], length 0 18:13:41.232238 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [S.], seq 2526310478, ack 3592225171, win 14480, options [mss 1460,sackOK,TS val 174749087 ecr 160790012,nop,wscale 7], length 0 18:13:41.232739 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [.], ack 1, win 115, options [nop,nop,TS val 160790013 ecr 174749087], length 0 18:13:41.232787 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [P.], seq 1:141, ack 1, win 115, options [nop,nop,TS val 160790013 ecr 174749087], length 140 18:13:41.232804 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [.], ack 141, win 122, options [nop,nop,TS val 174749087 ecr 160790013], length 0 18:13:41.245137 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [P.], seq 1:704, ack 141, win 122, options [nop,nop,TS val 174749090 ecr 160790013], length 703 18:13:41.245517 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [.], ack 704, win 126, options [nop,nop,TS val 160790026 ecr 174749090], length 0 18:13:41.245578 IP 192.168.24.217.42362 > 192.168.24.239.88: Flags [F.], seq 141, ack 704, win 126, options [nop,nop,TS val 160790026 ecr 174749090], length 0 18:13:41.246606 IP 192.168.24.239.88 > 192.168.24.217.42362: Flags [F.], seq 704, ack 142, win 122, options [nop,nop,TS val 174749090 ecr 160790026], length 0 >> wouFurthermore this (incorrect) configuration file is created >> >> [libdefaults] >> >> default_realm = ELEMENTARY.SE >> dns_lookup_realm = false >> dns_lookup_kdc = false >> ticket_lifetime = 24h >> renew_lifetime = 7d >> forwardable = no >> default_tkt_enctypes = arcfour-hmac-md5 >> udp_preference_limit = 1 >> >> [realms] >> ELEMENTARY.SE = { >> kdc = ldap.elementary.se >> } >> >> >> [domain_realm] >> elementary.se = ELEMENTARY.SE >> >> >> In my lab both these services are actually placed on the same physical >> server and since the kdc binds to all local interfaces ovirt actually >> does reach the kdc via the incorrect name, this is however not the case >> later in production. >> > This file is generated from the above mentioned DNS queries. Please let > us know what is the content of your SRV DNS records. > >> When trying to add the domain it crashes with the following stack trace >> >> General error has occurednull >> java.lang.NegativeArraySizeException >> at >> sun.security.jgss.krb5.CipherHelper.aes256Encrypt(CipherHelper.java:1367) >> at >> sun.security.jgss.krb5.CipherHelper.encryptData(CipherHelper.java:722) >> at sun.security.jgss.krb5.WrapToken_v2.<init>(WrapToken_v2.java:200) >> at sun.security.jgss.krb5.Krb5Context.wrap(Krb5Context.java:861) >> at sun.security.jgss.GSSContextImpl.wrap(GSSContextImpl.java:385) >> at >> com.sun.security.sasl.gsskerb.GssKrb5Base.wrap(GssKrb5Base.java:104) >> at >> com.sun.jndi.ldap.sasl.SaslOutputStream.write(SaslOutputStream.java:89) >> at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:430) >> at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:555) >> at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1985) >> at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1847) >> at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1772) >> at >> com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386) >> at >> com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356) >> at >> com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339) >> at >> javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267) >> at >> org.ovirt.engine.core.ldap.RootDSEData.<init>(RootDSEData.java:52) >> at >> org.ovirt.engine.core.utils.kerberos.JndiAction.getDomainDN(JndiAction.java:257) >> at >> org.ovirt.engine.core.utils.kerberos.JndiAction.run(JndiAction.java:87) >> at java.security.AccessController.doPrivileged(Native Method) >> at javax.security.auth.Subject.doAs(Subject.java:356) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.promptSuccessfulAuthentication(KerberosConfigCheck.java:174) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.validateKerberosInstallation(KerberosConfigCheck.java:150) >> at >> org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck.checkInstallation(KerberosConfigCheck.java:135) >> at >> org.ovirt.engine.core.domains.ManageDomains.checkKerberosConfiguration(ManageDomains.java:746) >> at >> org.ovirt.engine.core.domains.ManageDomains.testConfiguration(ManageDomains.java:917) >> at >> org.ovirt.engine.core.domains.ManageDomains.addDomain(ManageDomains.java:539) >> at >> org.ovirt.engine.core.domains.ManageDomains.runCommand(ManageDomains.java:311) >> at >> org.ovirt.engine.core.domains.ManageDomains.main(ManageDomains.java:206) >> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) >> at >> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) >> at >> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) >> at java.lang.reflect.Method.invoke(Method.java:606) >> at org.jboss.modules.Module.run(Module.java:260) >> at org.jboss.modules.Main.main(Main.java:291) >> Failure while testing domain %1$s. Details: %2$s: One of the parameters >> for this error is null and no default message to show >> >> And this gets written to the log >> >> 2013-11-18 10:22:12,479 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Creating kerberos >> configuration for domain(s): elementary.se >> 2013-11-18 10:22:12,493 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Successfully created >> kerberos configuration for domain(s): elementary.se >> 2013-11-18 10:22:12,493 INFO >> [org.ovirt.engine.core.domains.ManageDomains] Testing kerberos >> configuration for domain: elementary.se >> 2013-11-18 10:22:12,569 ERROR >> [org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck] Error: >> exception message: Checksum failed >> 2013-11-18 10:22:12,571 ERROR >> [org.ovirt.engine.core.domains.ManageDomains] Failure while testing >> domain elementary.se. Details: Kerberos error. Please check log for >> further details. >> >> Could this checksum error be a result of the incorrect name being used ? >> > I don't think so. This is a known problem with the Kerberos > implementation in the Java virtual machine. It generates this error when > the SASL minssf configuration parameter is 0. You should be able to > change this OpenLDAP setting as follows: > > # cat > fixssf.ldif <<'.' > dn: cn=config > replace: olcSaslSecProps > olcSaslSecProps: noanonymous,noplain,minssf=1 > - > . > # ldapmodify -H ldapi:/// -Y EXTERNAL -f fixssf.ldif > > OK Great, I'll have a look.

2 5

[Users] Fence-virt support
by Sander Grendelman 18 Nov '13

18 Nov '13

I'm currently building a ovirt test-environment using nested virtualization on libvirt/kvm. For the most part this works great. However, I can't configure fencing/power management because only hardware BMC's/fencing devices are supported. Is this something that could/should be included in a future oVirt version? Or is there another option/workaround to test power management?

3 8

[Users] FC19 and ovirt 3.3
by Zhang, Hongyi 18 Nov '13

18 Nov '13

--_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I now upgrade my machine to use FC19 and oVirt 3.3 engine to manage my oVir= t node. When I tried to attach my ovirt node, I failed and got error message on my = engine side: 2013-11-15 17:27:56,573 INFO [org.ovirt.engine.core.dal.dbbroker.auditlogh= andling.AuditLogDirector] (VdsDeploy) Correlation ID: dd614eb, Call Stack: = null, Custom Event ID: -1, Message: Installing Host node1. Stage: Environme= nt customization. 2013-11-15 17:27:56,574 ERROR [org.ovirt.engine.core.bll.InstallerMessages]= (VdsDeploy) Installation 128.224.147.207: Failed to execute stage 'Environ= ment customization': Command 'initctl' is required but missing 2013-11-15 17:27:56,588 INFO [org.ovirt.engine.core.dal.dbbroker.auditlogh= andling.AuditLogDirector] (VdsDeploy) Correlation ID: dd614eb, Call Stack: = null, Custom Event ID: -1, Message: Failed to install Host node1. Failed to= execute stage 'Environment customization': Command 'initctl' is required b= ut missing. 2013-11-15 17:27:56,589 INFO [org.ovirt.engine.core.bll.InstallerMessages]= (VdsDeploy) Installation 128.224.147.207: Stage: Pre-termination Please someone help me to fix the problem. uname -a Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP Mon Nov 4 14:09:03 UTC 2= 013 x86_64 x86_64 x86_64 GNU/Linux And I use: ovirt-engine-setup-3.3.0.1-1.fc19.noarch Thanks, Hongyi --_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 14 (filtered medium)"> <style></style> </head> <body lang=3D"EN-US" link=3D"blue" vlink=3D"purple"> <div class=3D"WordSection1"> Hello,<o:p></o:p> <o:p> </o:p></sp= an> I now upgrade my mach= ine to use FC19 and oVirt 3.3 engine to manage my oVirt node. <o:p></o:p> <o:p> </o:p></sp= an> When I tried to attac= h my ovirt node, I failed and got error message on my engine side:<o:p></o:= p> <o:p> </o:p></sp= an> 2013-11-15 17:27:56,5= 73 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLog= Director] (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Eve= nt ID: -1, Message: Installing Host node1. Stage: Environment customization.<o:p></o:p> 2013-11-15 17:27:56,5= 74 ERROR [org.ovirt.engine.core.bll.InstallerMessages] (VdsDeploy) Installa= tion 128.224.147.207: Failed to execute stage 'Environment customization'</= span>: Command 'initctl' is required but missing<o:p><= /o:p> 2013-11-15 17:27:56,5= 88 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLog= Director] (VdsDeploy) Correlation ID: dd614eb, Call Stack: null, Custom Eve= nt ID: -1, Message: Failed to install Host node1. Failed to execute stage 'Environment customization': <spa= n style=3D"color:red">Command 'initctl' is required but missing<= span style=3D"color:black">.<o:p></o:p> 2013-11-15 17:27:56,5= 89 INFO  [org.ovirt.engine.core.bll.InstallerMessages] (VdsDeploy) Ins= tallation 128.224.147.207: Stage: Pre-termination<o:p></o:p> <o:p> </o:p> Please someone help me to  fix the problem.<o:p= ></o:p> <o:p> </o:p> uname -a<o:p></o:p> Linux engine.wrs.com 3.11.7-200.fc19.x86_64 #1 SMP M= on Nov 4 14:09:03 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux<o:p></o:p> And I use:<o:p></o:p> ovirt-engine-setup-3.3.0.1-1.fc19.noarch<o:p></o:p><= /p> <o:p> </o:p> Thanks,<o:p></o:p> Hongyi<o:p></o:p> </div> </body> </html> --_000_B5488210B44F434FA68B7430CC196BCFA7088B2EALAMBAcorpadwrs_--

2 3

[Users] oVirt 3.3.2 beta status
by Sandro Bonazzola 18 Nov '13

18 Nov '13

Hi, we're going to branch and build oVirt 3.3.2 beta on Nov 27th. A bug tracker is available at [1] and it shows only 2 bugs blocking the release: Bug 1029792 - VDSM does not report the qemu version in capabilities, if qemu-kvm-rhev is used Bug 1029885 - cloud-init testcase does not work in engine 3.3.1 The following is a list of the bugs still open with target 3.3.2 or 3.3: Whiteboard Bug ID Summary 991267 [RFE] Add TUI information to log file. infra 987982 When adding a host through the REST API, the error message says that "rootPassword" is required, but ... infra 1017267 Plaintext user passwords in async_tasks database infra 1020344 Power Managent with cisco_ucs problem infra 1009899 exportDbSchema scripts generates output file with wrong name infra 1029792 VDSM does not report the qemu version in capabilities, if qemu-kvm-rhev is used integration 1026933 pre-populate ISO domain with virtio-win ISO integration 1026930 Package virtio-win and put it in ovirt repositories integration 1030437 RFE: Configuration of email notifications integration 1022440 AIO - configure the AIO host to be a gluster cluster/host integration 902979 ovirt-live - firefox doesn't trust the installed engine integration 1021805 oVirt Live - use motd to show the admin password network 988002 [oVirt] [network] Add button shouldn't appear on specific network network 987916 [oVirt] [provider] Dialog doesn't update unless focus lost network 987999 [oVirt] [provider] Add button shouldn't appear on specific provider network 906313 [oVirt-webadmin] [setupNetworks] "No valid Operation for <network_name> and Unassigned Logical Networks panel" network 1023722 [oVirt-webadmin][network] Network roles in cluster management should be radio buttons network 997197 Some AppErrors messages are grammatically incorrect (singular vs plural) storage 1016118 async between masterVersion : can't connect to StoragePool storage 987917 [oVirt] [glance] API version not specified in provider dialog storage 1029069 Live storage migration snapshot removal fails, probably due to unexpected qemu-img output ux 906394 [oVirt-webadmin] [network] Loading animation in network main tab 'hosts' and 'vms' subtab is stuck on first view... virt 1007940 Cannot clone from snapshot while using GlusterFS as POSIX Storage Domain Please set the target to 3.3.2 and add the bug to the tracker if you think that 3.3.2 should not be released without it fixed. Please also update the target to 3.3.3 or any next release for bugs that won't be in 3.3.2: it will ease gathering the blocking bugs for next releases. For those who want to help testing the bugs, I suggest to add yourself as QA contact for the bug and add yourself to the testing page [2]. [1] https://bugzilla.redhat.com/1027349 [2] http://www.ovirt.org/Testing/Ovirt_3.3.2_testing -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

2 1

[Users] oVirt 3.3.1 RC
by Sandro Bonazzola 18 Nov '13

18 Nov '13

The oVirt team is pleased to announce that the 3.3.1 Release candidate is now available in beta [1] and will be released on Tue Nov 19th 2013 if no other blockers will be found while we're testing it [2]. Feel free to join us verifying the bugzilla entries actually under verification [3]. Release notes for this update are available on the wiki [4]. A new oVirt Node build will be available soon as well. [1] http://resources.ovirt.org/releases/beta [2] http://www.ovirt.org/Testing/Ovirt_3.3.1_testing [3] http://red.ht/1gQAdEo [4] http://www.ovirt.org/OVirt_3.3.1_release_notes -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com

1 0

[Users] Fencing virtual machines
by Nicolas Ecarnot 18 Nov '13

18 Nov '13

Hi, In the case I want to setup a virtual cluster amongst many virtual machines, and this virtual cluster needs to fence some VM, what is the best way to achieve this? I guess this has to use something like vdsClient to "unplug" the VM, but I found it hard to find any more information about this. -- Nicolas Ecarnot

4 6

Re: [Users] [Spice-devel] govirt 0.30 plans
by Itamar Heim 18 Nov '13

18 Nov '13

On 11/06/2013 11:15 PM, i iordanov wrote: > Hi Christophe, > > This one may turn out to not be an actual issue. > > I had gotten used to the functionality offered by oVirt Live 0.8 (I > think it bundles oVirt 3.0) where I was able to attach as user > "admin@internal" to virtual machines created in the Administrative > Console (rather than in the User Console). > > It appears that oVirt 3.2 and 3.3 either do not allow this anymore or > something else is amiss. One may not attach to such machines despite > them being reported at /api/vms. > > To make a long story short, I made one of these machines a Template > and created a VM based on it in the User Console of admin@internal. > After that, I was able to connect! > > Do you think there is still anything wrong? Should we be able to > attach to those vms (e.g. win and winbak)? (if you see a behavior change in ovirt, you an also ask/cc on users(a)ovirt.org) in 3.0 we only allowed admin access to the API. in 3.1 we added user level access. main difference is users only get entities they have permissions with User Role on. an user with admin role can ask to get 'all', or just "me as a user" - all VMs which that admin has a User Role to. to not break api backward compatibility, default mode of the API remained 'admin mode', so you need to pass to the API "filter=true" to behave as a user. (we don't like this, and will try to come up with a better solution). i assume from Christophe next reply govirt (sensibly, as its geared for user access) default to user mode api. so you have two options - move to admin mode in govirt, or easier (and probably more consistent if you are aiming your solution for users rather than admins), give admin@internal a UserRole on the VMs, not an Admin Role. HTH, ITamar > > Cheers, > iordan > > > > On Wed, Nov 6, 2013 at 4:22 AM, Christophe Fergeau <cfergeau(a)redhat.com> wrote: >> On Tue, Nov 05, 2013 at 06:03:21PM -0600, i iordanov wrote: >>> What I have done is manually navigated to https://FQDN/api/vms in >>> order to attach the output I get there for you to see if you can spot >>> why libgovirt fails to look up the VMs. The call failed with name set >>> to both "win" and "winbak". >> >> This code is happily parsed by the attached test program, so I'm not sure >> parsing is at fault. You can look at the REST calls by setting the >> REST_DEBUG env variable to 'proxy' >> >> Christophe > > >

3 2