April 2015 - Users - oVirt List Archives

Cannot add Posix Storage
by shimano 12 Apr '15

12 Apr '15

Hi everyone... I have a little strange situation... I'm trying to add Posix Compliant FS Storage Domain based on MooseFS. As You can read below, oVirt is mounting it correctly but it cannot make a Storage Domain. Anybody could help? // Quick investigation Is /posix mounted? root@host008:/tmp mount |grep fuse root@host008:/tmp Nope. Add Storage Domain via Web Panel with parameters: Name: MooseFS Domain Function / Storage Type: Data / POSIX Compliant FS Use Host: HOST008 Path: mfsmount VFS Type: fuse Mount Options: mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev Debug logs from task: JsonRpc (StompReactor)::DEBUG::2015-04-02 08:52:58,231::stompReactor::98::Broker.StompAdapter::(handle_frame) Handling message <StompFrame command='SEND'> JsonRpcServer::DEBUG::2015-04-02 08:52:58,232::__init__::506::jsonrpc.JsonRpcServer::(serve_requests) Waiting for request Thread-549209::DEBUG::2015-04-02 08:52:58,232::__init__::469::jsonrpc.JsonRpcServer::(_serveRequest) Calling 'StoragePool.connectStorageServer' in bridge with {'connectionParams': [{'password': '', 'id': '00000000-0000-0000-0000-000000000000', 'connection': 'mfsmount', 'mnt_options': 'mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev', 'user': '', 'tpgt': '1', 'vfs_type': 'fuse', 'iqn': '', 'port': ''}], 'storagepoolID': '00000000-0000-0000-0000-000000000000', 'domainType': 6} Thread-549209::DEBUG::2015-04-02 08:52:58,234::task::595::Storage.TaskManager.Task::(_updateState) Task=`9bb09583-d8f7-4189-b9ab-81b925f8fc13`::moving from state init -> state preparing Thread-549209::INFO::2015-04-02 08:52:58,234::logUtils::44::dispatcher::(wrapper) Run and protect: connectStorageServer(domType=6, spUUID='00000000-0000-0000-0000-000000000000', conList=[{'iqn': '', 'port': '', 'connection': 'mfsmount', 'mnt_options': 'mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev', 'user': '', 'tpgt': '1', 'vfs_type': 'fuse', 'password': '******', 'id': '00000000-0000-0000-0000-000000000000'}], options=None) Thread-549209::DEBUG::2015-04-02 08:52:58,237::fileUtils::142::Storage.fileUtils::(createdir) Creating directory: /rhev/data-center/mnt/mfsmount Thread-549209::WARNING::2015-04-02 08:52:58,237::fileUtils::149::Storage.fileUtils::(createdir) Dir /rhev/data-center/mnt/mfsmount already exists Thread-549209::DEBUG::2015-04-02 08:52:58,238::mount::227::Storage.Misc.excCmd::(_runcmd) /usr/bin/sudo -n /bin/mount -t fuse -o mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev mfsmount /rhev/data-center/mnt/mfsmount (cwd None) JsonRpc (StompReactor)::DEBUG::2015-04-02 08:52:58,271::stompReactor::98::Broker.StompAdapter::(handle_frame) Handling message <StompFrame command='SEND'> JsonRpcServer::DEBUG::2015-04-02 08:52:58,273::__init__::506::jsonrpc.JsonRpcServer::(serve_requests) Waiting for request Thread-549210::DEBUG::2015-04-02 08:52:58,276::stompReactor::163::yajsonrpc.StompServer::(send) Sending response JsonRpc (StompReactor)::DEBUG::2015-04-02 08:52:58,279::stompReactor::98::Broker.StompAdapter::(handle_frame) Handling message <StompFrame command='SEND'> JsonRpcServer::DEBUG::2015-04-02 08:52:58,280::__init__::506::jsonrpc.JsonRpcServer::(serve_requests) Waiting for request Thread-549211::DEBUG::2015-04-02 08:52:58,282::stompReactor::163::yajsonrpc.StompServer::(send) Sending response Thread-549209::ERROR::2015-04-02 08:52:58,523::hsm::2424::Storage.HSM::(connectStorageServer) Could not connect to storageServer Traceback (most recent call last): File "/usr/share/vdsm/storage/hsm.py", line 2421, in connectStorageServer conObj.connect() File "/usr/share/vdsm/storage/storageServer.py", line 222, in connect self.getMountObj().getRecord().fs_file) File "/usr/share/vdsm/storage/mount.py", line 278, in getRecord (self.fs_spec, self.fs_file)) OSError: [Errno 2] Mount of `mfsmount` at `/rhev/data-center/mnt/mfsmount` does not exist Thread-549209::DEBUG::2015-04-02 08:52:58,524::hsm::2443::Storage.HSM::(connectStorageServer) knownSDs: {2df46204-217e-416f-a072-ab8ef17cd8d2: storage.nfsSD.findDomain, 316c3e1c-4e61-4b0a-b2f6-63cc22d3ab25: storage.nfsSD.findDomain, 6c348f77-bb02-4135-b629-2c9cacb0b85c: storage.nfsSD.findDomain, 00697722-a1ce-4911-a84c-c4688e5076fe: storage.nfsSD.findDomain, 6ac038d7-969d-45b5-be5f-c58a66a78a90: storage.nfsSD.findDomain} Thread-549209::INFO::2015-04-02 08:52:58,524::logUtils::47::dispatcher::(wrapper) Run and protect: connectStorageServer, Return response: {'statuslist': [{'status': 100, 'id': '00000000-0000-0000-0000-000000000000'}]} Thread-549209::DEBUG::2015-04-02 08:52:58,525::task::1191::Storage.TaskManager.Task::(prepare) Task=`9bb09583-d8f7-4189-b9ab-81b925f8fc13`::finished: {'statuslist': [{'status': 100, 'id': '00000000-0000-0000-0000-000000000000'}]} Thread-549209::DEBUG::2015-04-02 08:52:58,525::task::595::Storage.TaskManager.Task::(_updateState) Task=`9bb09583-d8f7-4189-b9ab-81b925f8fc13`::moving from state preparing -> state finished Thread-549209::DEBUG::2015-04-02 08:52:58,526::resourceManager::940::Storage.ResourceManager.Owner::(releaseAll) Owner.releaseAll requests {} resources {} Thread-549209::DEBUG::2015-04-02 08:52:58,526::resourceManager::977::Storage.ResourceManager.Owner::(cancelAll) Owner.cancelAll requests {} Thread-549209::DEBUG::2015-04-02 08:52:58,526::task::993::Storage.TaskManager.Task::(_decref) Task=`9bb09583-d8f7-4189-b9ab-81b925f8fc13`::ref 0 aborting False Thread-549209::DEBUG::2015-04-02 08:52:58,527::__init__::500::jsonrpc.JsonRpcServer::(_serveRequest) Return 'StoragePool.connectStorageServer' in bridge with [{'status': 100, 'id': '00000000-0000-0000-0000-000000000000'}] Thread-549209::DEBUG::2015-04-02 08:52:58,527::stompReactor::163::yajsonrpc.StompServer::(send) Sending response Thread-29::DEBUG::2015-04-02 08:52:59,236::domainMonitor::209::Storage.DomainMonitorThread::(_monitorDomain) Refreshing domain 316c3e1c-4e61-4b0a-b2f6-63cc22d3ab25 Really? Incorrect mount options? Trying mount from hand... But first, check for mounts: root@host008:/tmp mount |grep fuse mfsmaster:9421 on /rhev/data-center/mnt/mfsmount type fuse.mfs (rw,allow_other) Oh! It is already mounted! So oVirt mounted it correctly, but cannot use mountpoint? Hm, permissions? root@host008:/tmp ls -al /rhev/data-center/mnt/mfsmount/ total 4 drwxr-xr-x 2 vdsm kvm 0 Apr 1 14:57 . drwxr-xr-x 8 vdsm kvm 4096 Apr 2 08:43 .. Looks fine... Ok, try to unmount and mount manually. root@host008:/tmp umount /rhev/data-center/mnt/mfsmount/ root@host008:/tmp mount |grep fuse root@host008:/tmp mount -t fuse -o mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev mfsmount /rhev/data-center/mnt/mfsmount mfsmaster accepted connection with parameters: read-write,restricted_ip ; root mapped to root:root root@host008:/tmp mount |grep fuse mfsmaster:9421 on /rhev/data-center/mnt/mfsmount type fuse.mfs (rw,allow_other) root@host008:/tmp ls -al /rhev/data-center/mnt/mfsmount/ total 4 drwxr-xr-x 2 vdsm kvm 0 Apr 1 14:57 . drwxr-xr-x 8 vdsm kvm 4096 Apr 2 08:43 .. Ok, but I'm root. Try to do it as vdsm user. root@host008:/tmp cat /etc/passwd /etc/group |grep :36: vdsm:x:36:36:Node Virtualization Manager:/var/lib/vdsm:/bin/bash kvm:x:36:qemu,sanlock root@host008:/tmp umount /rhev/data-center/mnt/mfsmount/ root@host008:/tmp su vdsm vdsm@host008:/tmp /usr/bin/sudo -n /bin/mount -t fuse -o mfsmaster=mfsmaster,mfsport=9421,mfssubfolder=/posix,_netdev mfsmount /rhev/data-center/mnt/mfsmount mfsmaster accepted connection with parameters: read-write,restricted_ip ; root mapped to root:root vdsm@host008:/tmp ls -al /rhev/data-center/mnt/mfsmount/ total 4 drwxr-xr-x 2 vdsm kvm 0 Apr 1 14:57 . drwxr-xr-x 8 vdsm kvm 4096 Apr 2 08:43 .. vdsm@host008:/tmp mkdir /rhev/data-center/mnt/mfsmount/ovirt-storage-test vdsm@host008:/tmp ls -al /rhev/data-center/mnt/mfsmount/ total 4 drwxr-xr-x 3 vdsm kvm 0 Apr 2 2015 . drwxr-xr-x 8 vdsm kvm 4096 Apr 2 08:43 .. drwxr-xr-x 2 vdsm kvm 0 Apr 2 2015 ovirt-storage-test // End of quick investigation

2 2

Issue with vdsm on EL6 nodes
by knarra 12 Apr '15

12 Apr '15

Hi Everyone, I have updated my nodes to the latest vdsm. After updating when i try to run "vdsClient -s localhost glusterVolumeStatsInfoGet volumeName=<vol_name>" i see the following output displayed. Traceback (most recent call last): File "/usr/share/vdsm/vdsClient.py", line 2839, in <module> code, message = commands[command][0](commandArgs) File "/usr/share/vdsm/vdsClientGluster.py", line 430, in do_glusterVolumeStatsInfoGet status = self.s.glusterVolumeStatsInfoGet(volumeName) File "/usr/lib64/python2.6/xmlrpclib.py", line 1199, in __call__ return self.__send(self.__name, args) File "/usr/lib64/python2.6/xmlrpclib.py", line 1489, in __request verbose=self.__verbose File "/usr/lib64/python2.6/xmlrpclib.py", line 1237, in request errcode, errmsg, headers = h.getreply() File "/usr/lib64/python2.6/httplib.py", line 1064, in getreply response = self._conn.getresponse() File "/usr/lib64/python2.6/httplib.py", line 990, in getresponse response.begin() File "/usr/lib64/python2.6/httplib.py", line 391, in begin version, status, reason = self._read_status() File "/usr/lib64/python2.6/httplib.py", line 349, in _read_status line = self.fp.readline() File "/usr/lib64/python2.6/socket.py", line 433, in readline data = recv(1) File "/usr/lib64/python2.6/ssl.py", line 215, in recv return self.read(buflen) File "/usr/lib64/python2.6/ssl.py", line 136, in read return self._sslobj.read(len) SSLError: [Errno 1] _ssl.c:1390: error:1409442E:SSL routines:SSL3_READ_BYTES:tlsv1 alert protocol version Can some one help me to resolve this issue. Version of vdsm: vdsm-python-4.17.0-616.git7548f81.el6.noarch vdsm-4.17.0-616.git7548f81.el6.x86_64 vdsm-cli-4.17.0-616.git7548f81.el6.noarch vdsm-yajsonrpc-4.17.0-616.git7548f81.el6.noarch vdsm-xmlrpc-4.17.0-616.git7548f81.el6.noarch vdsm-gluster-4.17.0-616.git7548f81.el6.noarch vdsm-infra-4.17.0-616.git7548f81.el6.noarch vdsm-jsonrpc-4.17.0-616.git7548f81.el6.noarch Thanks kasturi.

3 9

oVirt 3.5 - Node Non-Operational
by Marcelo Donato 10 Apr '15

10 Apr '15

*Hi everyone! Suggestions are welcome and since I thank you.* *I have the following scenario:* Host-01: sequoia.din.uem.br - 10.30.4.1 - Manager Host-02: jacaranda.din.uem.br - 10.30.4.2 - Node-01 *As indicated below, the hosts communicate normally:* [root@jacaranda ~]# ping -c 3 sequoia PING sequoia.din.uem.br (10.30.4.1) 56(84) bytes of data. 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=1 ttl=64 time=0.436 ms 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=2 ttl=64 time=0.612 ms 64 bytes from sequoia.din.uem.br (10.30.4.1): icmp_seq=3 ttl=64 time=0.635 ms [root@sequoia ~]# ping -c 3 jacaranda PING jacaranda.din.uem.br (10.30.4.2) 56(84) bytes of data. 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=1 ttl=64 time=0.443 ms 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=2 ttl=64 time=0.587 ms 64 bytes from jacaranda.din.uem.br (10.30.4.2): icmp_seq=3 ttl=64 time=0.563 ms *Network interfaces* [root@jacaranda ~]# ifconfig ovirtmgmt ovirtmgmt Link encap:Ethernet Endereço de HW D4:AE:52:78:4C:17 inet end.: 10.30.4.2 Bcast:10.30.4.255 Masc:255.255.255.0 [root@sequoia ~]# ifconfig eth0 Link encap:Ethernet Endereço de HW 52:54:00:D2:0F:95 inet end.: 10.30.4.1 Bcast:10.30.4.255 Masc:255.255.255.0 *However engine.log, as highlighted below, the problem is in the network.* 2015-03-26 15:00:01,799 ERROR [org.ovirt.engine.core.bll.SetNonOperationalVdsCommand] (DefaultQuartzScheduler_Worker-91) [35dba220] Host Node-01 is set to Non-Operational, it is missing the following networks: ovirtmgmt 2015-03-26 15:00:01,806 WARN [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-91) [35dba220] Correlation ID: 35dba220, Job ID: 1b3c2410-a941-4d65-b39d-1a3d2ef378b8, Call Stack: null, Custom Event ID: -1, Message: Host Node-01 does not comply with the cluster Cst-01 networks, the following networks are missing on host: 'ovirtmgmt' 2015-03-26 15:00:01,864 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-91) [6ba58858] Host 4aaf9afb-ae0e-40af-9ef8-ef098d3be91e : Node-01 is already in NonOperational status for reason NETWORK_UNREACHABLE. SetNonOperationalVds command is skipped. [image: Imagem inline 1] -- Ao encaminhar esta mensagem, por favor: 1. Apague o meu e-mail e o meu nome. 2. Apague também os endereços dos amigos antes de reenviar 3. Use Cco ou Bcc para enviar mensagens! Dificulte a disseminação de vírus e spam.

5 39

Can I somehow disable vdsms "restore_nets" ?
by Ernest Beinrohr 10 Apr '15

10 Apr '15

This is a multi-part message in MIME format. --------------060203060101020203010704 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit I use quite a lot of my own config and vdsm restores his version of /etc/sysconfig/network-scripts/ifcfg-* on each start. Can the restore_nets be disabled somehow? -- Ernest Beinrohr, AXON PRO Ing <http://www.beinrohr.sk/ing.php>, RHCE <http://www.beinrohr.sk/rhce.php>, RHCVA <http://www.beinrohr.sk/rhce.php>, LPIC <http://www.beinrohr.sk/lpic.php>, VCA <http://www.beinrohr.sk/vca.php>, +421-2-62410360 +421-903-482603 --------------060203060101020203010704 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> I use quite a lot of my own config and vdsm restores his version of /etc/sysconfig/network-scripts/ifcfg-* on each start. Can the restore_nets be disabled somehow? <div class="moz-signature">-- <div id="oernii_footer" style="color: gray;"> Ernest Beinrohr, AXON PRO <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/ing.php">Ing</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCE</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/rhce.php">RHCVA</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/lpic.php">LPIC</a>, <a style="text-decoration: none; color: gray;" href="http://www.beinrohr.sk/vca.php">VCA</a>, +421-2-62410360 +421-903-482603 </div> <img src="http://nojsstats.appspot.com/UA-44497096-1/email.beinrohr.sk" moz-do-not-send="true" border="0" width="1" height="1"> </div> </body> </html> --------------060203060101020203010704--

1 1

RARP and Vlan problem
by Pavel Gandalipov 10 Apr '15

10 Apr '15

Hello, we have logical cluster, that consists of two servers. Each server connected to each of two switches. On the server cluster we run the virtualization farm on which testing virtual machine's migration. In our topology we separate servers's network and virtual machines' network to vlan 3 and 4, respectively. When we manually migrating VM that belongs to Vlan 4 from one host to another we are loosing access to VM because although host sends RARP packet it isn't updating arp table . So host belongs to another vlan then RARP packet from host isn't updating arp entry of VM on the switch. And i have no idea how to make it work. Pavel Gandalipov

2 1

Cancel a running task | Zombie Task
by Punit Dambiwal 10 Apr '15

10 Apr '15

Hi, I have checked and found two tasks running from last 14 hours and there is no option to kill it... [image: Inline image 1] from the SPM host :- [root@cpu11 ~]# vdsClient -s 0 getAllTasksStatuses {'status': {'message': 'OK', 'code': 0}, 'allTasksStatus': {}} [root@cpu11 ~]# Please let me know how i can kill those processes... Thanks, Punit

3 3

install IOPS limits
by Roman Nikolayevich Drovalev 10 Apr '15

10 Apr '15

Ýòî ñîîáùåíèå èç íåñêîëüêèõ ÷àñòåé â ôîðìàòå MIME. --=_alternative 0029826F43257E22_= Content-Type: text/plain; charset="US-ASCII" Hello, How it is possible to instal restrictions for everyone VM IOPS restrictions? I have read the documentation, how it can be made? http://www.ovirt.org/Features/blkio-support >From the documentation: Engine Core DB qos: added limit fields to qos table: max_throughput max_read_throughput max_write_throughput max_iops max_read_iops max_write_iops Thanks, Roman Drovalev --=_alternative 0029826F43257E22_= Content-Type: text/html; charset="US-ASCII" Hello, How it is possible to instal restrictions for everyone VM  IOPS restrictions?  I have read the documentation, how it can be made? <a href="http://www.ovirt.org/Features/blkio-support">http://www.ovirt.org/Features/blkio-support</a> From the documentation: Engine Core DB qos: added limit fields to qos table: <tt> max_throughput max_read_throughput max_write_throughput max_iops max_read_iops max_write_iops </tt> Thanks, Roman Drovalev --=_alternative 0029826F43257E22_=--

2 2

FW: gluster and multipath
by Bill Dossett 10 Apr '15

10 Apr '15

--_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Fumble fingered accidental send... From: Bill Dossett Sent: 09 April 2015 11:33 To: users(a)ovirt.org Subject: gluster and multipath Hi, Just got very confused trying to add create an additional brick on my glust= er node (I had created one yesterday and all was fine0 I had already created a partition on my /dev/sdb called sdb1 But when I tried mkfs.xfs (I am using xfs as that was in the example I was= following - if LVM or something else would be better I am open to suggesti= ons!) It said /dev/sdb1 no such file or directory - which confused me as this wor= ked yesterday. I deleted the partition recreated it and tried and then it said that the de= vice was busy. It appears that multipathd is the culprit... but what I am struggling with = is why it worked yesterday?? I may have created the partition before I pus= hed the gluster install to it from the ovirt-engine? And does that install= multipathd and it is now grabbing my devices? It is the only thing I can = think of. And if that is the case - I guess I have to blacklist these devices in mult= ipath.conf while I create the partitions? And reboot and then remove the b= lacklist and reboot - seems a bit clunky, is there a better way to add part= itions and bricks? Or I am just in a vortex wormhole of misunderstanding and grasping at stars= to try and pull myself out ? Thankyou for any advice - especially as this may not be so ovirt or a quest= ion, but it's what I am working on. Bill Dossett Systems Architect Tech Central - Global Engineering Services T +1 303 440 3523 M +44 (0)777 590 8612 bill.dossett(a)pb.com<mailto:bill.dossett@pb.com> pitneybowes.com<http://pitneybowes.com/> Pitney Bowes 4750 Walnut Street | Boulder, Colorado, 80301 | USA In Engineering? Raise a ticket via Remedy Anywhere [HERE<applewebdata://5D25CA10-0BA9-4233-= 9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCPPM/GES/Lists/Create%20Inc= ident/newIncident.aspx>] takes less than a minute CloudForms User Guide available [HERE<https://dl.dropboxusercontent.com/u/6= 219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf>] ________________________________ --_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-GB" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Fumble fingered accide= ntal send…<o:p></o:p> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <div> <div style=3D"border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm = 0cm 0cm"> From: Bill Dossett Sent: 09 April 2015 11:33 To: users(a)ovirt.org Subject: gluster and multipath<o:p></o:p> </div> </div> <o:p> </o:p> Hi,<o:p></o:p> <o:p> </o:p> Just got very confused trying to add create an addit= ional brick on my gluster node (I had created one yesterday and all was fin= e0<o:p></o:p> <o:p> </o:p> I had already created a partition on my /dev/sdb cal= led sdb1<o:p></o:p> <o:p> </o:p> But when I tried mkfs.xfs  (I am using xfs as t= hat was in the example I was following – if LVM or something else wou= ld be better I am open to suggestions!)<o:p></o:p> <o:p> </o:p> It said /dev/sdb1 no such file or directory – = which confused me as this worked yesterday.<o:p></o:p> <o:p> </o:p> I deleted the partition recreated it and tried and t= hen it said that the device was busy.<o:p></o:p> <o:p> </o:p> It appears that multipathd is the culprit… but= what I am struggling with is why it worked yesterday??  I may have cr= eated the partition before I pushed the gluster install to it from the ovir= t-engine?  And does that install multipa= thd and it is now grabbing my devices?  It is the only thing I can think = of.<o:p></o:p> <o:p> </o:p></spa= n> And if that is the cas= e – I guess I have to blacklist these devices in multipath.conf while= I create the partitions?  And reboot and then remove the blacklist an= d reboot – seems a bit clunky, is there a better way to add partitions and bricks?<o:p></o:p> <o:p> </o:p></spa= n> Or I am just in a vort= ex wormhole of misunderstanding and grasping at stars to try and pull mysel= f out ?<o:p></o:p> <o:p> </o:p></spa= n> Thankyou for any advic= e – especially as this may not be so ovirt or a question, but it&#821= 7;s what I am working on.<o:p></o:p> <o:p> </o:p></spa= n> <o:p> </o:p></spa= n> <o:p> </o:p> <table class=3D"MsoNormalTable" border=3D"0" cellspacing=3D"0" cellpadding= =3D"0" width=3D"1280" style=3D"width:960.0pt"> <tbody> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Bill Dossett<o:p><= /o:p> Systems Archit= ect<o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> Tech Centra= l – Global Engineering Services<o:p></o:p>  <o:p></o:p>= T</b= > +1 303 440 3523<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> M</b= > +44 (0)777 590 8612= <o:p></o:p> <a href= =3D"mailto:bill.dossett@pb.com">bill.dossett@= pb.com</a><o:p></o:p> <a href= =3D"http://pitneybowes.com/">pitneybowes.com<= /span></a><o:p></o:p> Pitney Bowes<spa= n style=3D"mso-fareast-language:EN-GB"><o:p></o:p> 4750 Walnut St= reet | Boulder, Colorado, 80301 | USA<o:p></o:p>  <= span style=3D"mso-fareast-language:EN-GB"><o:p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm">  <o:= p></o:p> </td> </tr> <tr> <td width=3D"640" style=3D"width:480.0pt;padding:0cm 0cm 0cm 0cm"> In Engineering?<o:p></o:p> Raise a tic= ket via Remedy Anywhere [<a href=3D"applewebd= ata://5D25CA10-0BA9-4233-9DDF-69951F87F8AB/teamsite.inside.pb.com/sites/TCP= PM/GES/Lists/Create%20Incident/newIncident.aspx">HERE</a>] takes less than a minute<o= :p></o:p>  </spa= n><o:p></o:p> CloudForms = User Guide available = [<a href=3D"https://dl.dropboxusercontent.= com/u/6219441/ManageIQ%20-%20User%20Manual%20PB%20v5.pdf">HERE</a>]<o:p></o:p> </td> </tr> </tbody> </table> <o:p>&nbs= p;</o:p> <o:p> </o:p> </div> <hr> </body> </html> --_000_B47F00825D68444ABC03733078275360377AEF00013BR1MPN1011MG_--

2 1

simple-sso w. kerberos & iplanet ldap - login slow and unreliable (ovirt 3.5.1.1)
by Alastair Neil 09 Apr '15

09 Apr '15

I have configured the simple-sso with kerberos. I can successfully login most of the time, but often the login fails and I am dropped at the portal login window and prompted for the internal account username and password. Host is FC 20. Also, adding users in the GMU-authz o=gmu.edu namespace is agonisingly slow returning from the directory lookup. I can see from the apache logs that the kerberos authentication is successful, but in the engine logs I see many errors: 2015-04-09 13:39:28,493 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-11) Cannot obtain profile for user aneil2 and eventually: 2015-04-09 13:39:28,342 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-5) Cannot obtain profile for user aneil2 > {Extkey[name=EXTENSION_INVOKE_CONTEXT;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_INVOKE_CONTEXT[886d2ebb-312a-49ae-9cc3-e1f849834b7d];]={Extkey[name=EXTENSION_INTERFACE_VERSION_MAX;type=class > java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MAX[f4cff49f-2717-4901-8ee9-df362446e3e7];]=0, > Extkey[name=EXTENSION_LICENSE;type=class > java.lang.String;uuid=EXTENSION_LICENSE[8a61ad65-054c-4e31-9c6d-1ca4d60a4c18];]=ASL > 2.0, Extkey[name=EXTENSION_NOTES;type=class > java.lang.String;uuid=EXTENSION_NOTES[2da5ad7e-185a-4584-aaff-97f66978e4ea];]=Display > name: ovirt-engine-extension-aaa-ldap-1.0.2-1.fc20, > Extkey[name=EXTENSION_HOME_URL;type=class > java.lang.String;uuid=EXTENSION_HOME_URL[4ad7a2f4-f969-42d4-b399-72d192e18304];]= > http://www.ovirt.org, Extkey[name=EXTENSION_LOCALE;type=class > java.lang.String;uuid=EXTENSION_LOCALE[0780b112-0ce0-404a-b85e-8765d778bb29];]=en_US, > Extkey[name=EXTENSION_NAME;type=class > java.lang.String;uuid=EXTENSION_NAME[651381d3-f54f-4547-bf28-b0b01a103184];]=ovirt-engine-extension-aaa-ldap.authz, > Extkey[name=EXTENSION_INTERFACE_VERSION_MIN;type=class > java.lang.Integer;uuid=EXTENSION_INTERFACE_VERSION_MIN[2b84fc91-305b-497b-a1d7-d961b9d2ce0b];]=0, > Extkey[name=EXTENSION_CONFIGURATION;type=class > java.util.Properties;uuid=EXTENSION_CONFIGURATION[2d48ab72-f0a1-4312-b4ae-5068a226b0fc];]=***, > Extkey[name=EXTENSION_AUTHOR;type=class > java.lang.String;uuid=EXTENSION_AUTHOR[ef242f7a-2dad-4bc5-9aad-e07018b7fbcc];]=The > oVirt Project, Extkey[name=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE;type=class > java.lang.Integer;uuid=AAA_AUTHZ_QUERY_MAX_FILTER_SIZE[2eb1f541-0f65-44a1-a6e3-014e247595f5];]=50, > Extkey[name=EXTENSION_INSTANCE_NAME;type=class > java.lang.String;uuid=EXTENSION_INSTANCE_NAME[65c67ff6-aeca-4bd5-a245-8674327f011b];]=GMU-authz, > Extkey[name=EXTENSION_BUILD_INTERFACE_VERSION;type=class > java.lang.Integer;uuid=EXTENSION_BUILD_INTERFACE_VERSION[cb479e5a-4b23-46f8-aed3-56a4747a8ab7];]=0, > Extkey[name=EXTENSION_CONFIGURATION_SENSITIVE_KEYS;type=interface > java.util.Collection;uuid=EXTENSION_CONFIGURATION_SENSITIVE_KEYS[a456efa1-73ff-4204-9f9b-ebff01e35263];]=[], > Extkey[name=EXTENSION_GLOBAL_CONTEXT;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=EXTENSION_GLOBAL_CONTEXT[9799e72f-7af6-4cf1-bf08-297bc8903676];]=*skip*, > Extkey[name=EXTENSION_VERSION;type=class > java.lang.String;uuid=EXTENSION_VERSION[fe35f6a8-8239-4bdb-ab1a-af9f779ce68c];]=1.0.2, > Extkey[name=AAA_AUTHZ_AVAILABLE_NAMESPACES;type=interface > java.util.Collection;uuid=AAA_AUTHZ_AVAILABLE_NAMESPACES[6dffa34c-955f-486a-bd35-0a272b45a711];]=[o= > gmu.edu] Extkey[name=EXTENSION_MANAGER_TRACE_LOG;type=interface > org.slf4j.Logger;uuid=EXTENSION_MANAGER_TRACE_LOG[863db666-3ea7-4751-9695-918a3197ad83];]=org.slf4j.impl.Slf4jLogger(org.ovirt.engine.core.extensions.mgr.ExtensionsManager.trace.ovirt-engine-extension-aaa-ldap.authz.GMU-authz), > Extkey[name=EXTENSION_PROVIDES;type=interface > java.util.Collection;uuid=EXTENSION_PROVIDES[8cf373a6-65b5-4594-b828-0e275087de91];]=[org.ovirt.engine.api.extensions.aaa.Authz], > Extkey[name=EXTENSION_CONFIGURATION_FILE;type=class > java.lang.String;uuid=EXTENSION_CONFIGURATION_FILE[4fb0ffd3-983c-4f3f-98ff-9660bd67af6a];]=/etc/ovirt-engine/extensions.d/GMU-authz.properties}, > Extkey[name=AAA_AUTHZ_QUERY_FLAGS;type=class > java.lang.Integer;uuid=AAA_AUTHZ_QUERY_FLAGS[97d226e9-8d87-49a0-9a7f-af689320907b];]=3, > Extkey[name=EXTENSION_INVOKE_COMMAND;type=class > org.ovirt.engine.api.extensions.ExtUUID;uuid=EXTENSION_INVOKE_COMMAND[485778ab-bede-4f1a-b823-77b262a2f28d];]=AAA_AUTHZ_FETCH_PRINCIPAL_RECORD[5a5bf9bb-9336-4376-a823-26efe1ba26df], > Extkey[name=AAA_AUTHN_AUTH_RECORD;type=class > org.ovirt.engine.api.extensions.ExtMap;uuid=AAA_AUTHN_AUTH_RECORD[e9462168-b53b-44ac-9af5-f25e1697173e];]={Extkey[name=AAA_AUTHN_AUTH_RECORD_PRINCIPAL;type=class > java.lang.String;uuid=AAA_AUTHN_AUTH_RECORD_PRINCIPAL[c3498f07-11fe-464c-958c-8bd7490b119a];]=aneil2}} > {Extkey[name=EXTENSION_INVOKE_RESULT;type=class > java.lang.Integer;uuid=EXTENSION_INVOKE_RESULT[0909d91d-8bde-40fb-b6c0-099c772ddd4e];]=2, > Extkey[name=EXTENSION_INVOKE_MESSAGE;type=class > java.lang.String;uuid=EXTENSION_INVOKE_MESSAGE[b7b053de-dc73-4bf7-9d26-b8bdb72f5893];]=Cannot > locate principal 'aneil2'} > 2015-04-09 13:39:28,527 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-6) Cannot obtain profile for user aneil2 > 2015-04-09 13:39:28,493 ERROR > [org.ovirt.engine.core.aaa.filters.BasicAuthenticationFilter] > (ajp--127.0.0.1-8702-11) Cannot obtain profile for user aneil2 > 2015-04-09 13:39:28,593 INFO > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] > (ajp--127.0.0.1-8702-6) Correlation ID: null, Call Stack: null, Custom > Event ID: -1, Message: User aneil2@GMU.EDU@GMU-http logged in. I suspect the ldap lookup is not working correctly. Here are the relevant config files: cat /etc/ovirt-engine/aaa/GMU.properties file: # Select one > # > #include = <openldap.properties> > #include = <389ds.properties> > #include = <rhds.properties> > #include = <ipa.properties> > include = <iplanet.properties> > #include = <rfc2307.properties> > #include = <rfc2307-openldap.properties> > # > # Server > # > vars.server = dirapps.gmu.edu > # > # Search user and its password. > # > vars.user = uid=proxy,ou=people,o=gmu.edu > vars.password = XXXXXXXXXX > pool.default.serverset.single.server = ${global:vars.server} > pool.default.auth.simple.bindDN = ${global:vars.user} > pool.default.auth.simple.password = ${global:vars.password} > # Create keystore, import certificate chain and uncomment > # if using ssl/tls. > #pool.default.ssl.startTLS = true > #pool.default.ssl.truststore.file = > ${local:_basedir}/${global:vars.server}.jks > #pool.default.ssl.truststore.password = changeit > cat /etc/ovirt-engine/extensions.d/GMU-authz.properties > ovirt.engine.extension.name = GMU-authz > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.ldap > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.ldap.AuthzExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz > config.profile.file.1 = ../aaa/GMU.properties > #config.globals.bindFormat.simple_bindFormat = realm cat /etc/ovirt-engine/extensions.d/GMU-http-authn.properties > ovirt.engine.extension.name = GMU-http-authn > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.misc > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.misc.http.AuthnExtension > ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn > ovirt.engine.aaa.authn.profile.name = GMU-http > ovirt.engine.aaa.authn.authz.plugin = GMU-authz > ovirt.engine.aaa.authn.mapping.plugin = http-mapping > config.artifact.name = HEADER > config.artifact.arg = X-Remote-User cat /etc/ovirt-engine/extensions.d/http-mapping.properties > ovirt.engine.extension.name = http-mapping > ovirt.engine.extension.bindings.method = jbossmodule > ovirt.engine.extension.binding.jbossmodule.module = > org.ovirt.engine-extensions.aaa.misc > ovirt.engine.extension.binding.jbossmodule.class = > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension > ovirt.engine.extension.provides = > org.ovirt.engine.api.extensions.aaa.Mapping > config.mapAuthRecord.type = regex > config.mapAuthRecord.regex.mustMatch = true > config.mapAuthRecord.regex.pattern = > ^(?<user>.*?)((\\\\(?<at>@)(?<suffix>.*?)@.*)|(?<realm>@.*))$ > config.mapAuthRecord.regex.replacement = ${user}${at}${suffix} > cat /etc/ovirt-engine/aaa/ovirt-sso.conf > # > # 1. make sure /etc/krb5.keytab is available and valid. > # 2. update KrbAuthRealms > # 3. symlink into /etc/httpd/conf.d > # > <LocationMatch ^(/ovirt-engine/(webadmin|userportal|api)|/api)> > RewriteEngine on > RewriteCond %{LA-U:REMOTE_USER} ^(.*)$ > RewriteRule ^(.*)$ - [L,P,E=REMOTE_USER:%1] > RequestHeader set X-Remote-User %{REMOTE_USER}s > LogLevel debug > AuthType Kerberos > AuthName "Kerberos Login" > Krb5Keytab /etc/httpd/http.keytab > KrbAuthRealms GMU.EDU VSNET.GMU.EDU > KrbServiceName HTTP/ovirt-admin-hosted.vsnet.gmu.edu > Require valid-user > </LocationMatch> The LDAP server is: Sun-Directory-Server/11.1.1.5.0 I have no administrative access to the ldap server, but I can successfully search via ldapsearch by binding with the proxy dn and password. Any ideas what might be wrong, or how to troubleshoot? -Alastair >

2 1

PXE boot issue
by Brandon Merjil 09 Apr '15

09 Apr '15

Hello, I am testing provisioning from foreman 1.8.0 to ovirt 3.5 with both on CentOS 7.1503 and have run into an issue after the system has been deployed to ovirt. When the guest system reboots after the kickstart completes it loads the PXE menu from a the same tftp server which tries to start localboot 0. It then tries to boot based on the order that ovirt had set for the guest, which is PXE first and HD second. The message I'm seeing is "Booting from local disk... No more network devices No bootable device" If I change the guest boot options to only the virtual HD the guest boots up without an issue. I have also done a provision to a plain libvirt/kvm server and had no issue after the reboot. Same foreman server and tftp server with PXE menu localboot 0 option were used. Any ideas what I might be running into here, and any additional information needed. Thanks.

4 8