June 2016 - Users - oVirt List Archives

Recall: Migrate hosted-engine from NFS to ISCSI
by Madhuranthakam, Ravi Kumar 15 Jun '16

15 Jun '16

Madhuranthakam, Ravi Kumar would like to recall the message, "[ovirt-users] Migrate hosted-engine from NFS to ISCSI".

1 0

hosted-engine vm-status stale data and cluster seems "broken"
by Charles Kozler 15 Jun '16

15 Jun '16

See linked images please. As you can see all three nodes are reporting stale data. The results of this are: 1. Not all VM's migrate seamlessly in the cluster. Sometimes I have to shut them down to get them to be able to migrate again 2. Hosted engine refuses to move due to constraints (image). This part doesnt make sense to me because I can forcefully shut it down and then go directly on a hosted engine node and bring it back up. Also, the Web UI shows all nodes under the cluster except then it thinks its not apart of the cluster 3. Time is in sync (image) 4. Storage is 100% fine. Gluster back end reports mirroring and status 'started'. No split brain has occurred and ovirt nodes have never lost connectivity to storage 5. I reinstalled all three nodes. For some reason only node 3 still shows as having updates available. (image). For clarity, I did not click "upgrade" I simply did 'reinstall' from the Web UI. Having looked at the output and yum.log from /var/log it almost looks like it did do an update. All package versions across all three nodes are the same (respective to ovirt/vdsm) (image). For some reason though ovirt-engine-appliance-3.6-20160126.1.el7.centos.noarch exists on node 1 but not on node 2 or 3. Could this be relative? I dont recall installing that specifically on node 1 but I may have Been slamming my head on this so I am hoping you can provide some assistance http://imgur.com/a/6xkaS Thanks! -- *Charles Kozler* *Vice President, IT Operations* FIX Flyer, LLC 225 Broadway | Suite 1600 | New York, NY 10007 1-888-349-3593 http://www.fixflyer.com <http://fixflyer.com> NOTICE TO RECIPIENT: THIS E-MAIL IS MEANT ONLY FOR THE INTENDED RECIPIENT(S) OF THE TRANSMISSION, AND CONTAINS CONFIDENTIAL INFORMATION WHICH IS PROPRIETARY TO FIX FLYER LLC. ANY UNAUTHORIZED USE, COPYING, DISTRIBUTION, OR DISSEMINATION IS STRICTLY PROHIBITED. ALL RIGHTS TO THIS INFORMATION IS RESERVED BY FIX FLYER LLC. IF YOU ARE NOT THE INTENDED RECIPIENT, PLEASE CONTACT THE SENDER BY REPLY E-MAIL AND PLEASE DELETE THIS E-MAIL FROM YOUR SYSTEM AND DESTROY ANY COPIES.

4 13

free-IPA Multi-Master Authentication Problem
by Kilian Ries 15 Jun '16

15 Jun '16

--_000_ef9bab9b95a64bbfbda0fcdfb57bcf55kilianriesde_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, i have two free-IPA directories setup in multi-master replication. Both are= running on CentOS 7.2 with latest Software installed. Replication between = both IPAs is setup correctly and i am able to authenticate against each of = the two manually. However, if i shutdown IPA1 and try to authenticate from oVirt 3.5.6.2 agai= nst IPA2 i can't login. Login is only working if IPA1 is running (keep in m= ind that manual authentication against IPA2 is working). In the dirSRV Error-Logfile nothing is logged, however i can see the authen= tication in the access log from IPA2: ### filter=3D"(&(|(objectClass=3Dkrbprincipalaux)(objectClass=3Dkrbprincipal)(o= bjectClass=3Dipakrbprincipal))(|(ipaKrbPrincipalAlias=3Dkrbtgt/INTERN.CUSTO= MER-VIRT.EU@INTERN.CUSTOMER-VIRT.EU)(krbPrincipalName=3Dkrbtgt/INTERN.CUSTO= MER-VIRT.EU(a)INTERN.CUSTOMER-VIRT.EU)))" attrs=3D"krbPrincipalName krbCanoni= calName ipaKrbPrincipalAlias krbUPEnabled krbPrincipalKey krbTicketPolicyRe= ference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference = krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLast= SuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbExtraData krbLastAd= minUnlock krbObjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewab= leAge nsAccountLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatoke= nRadiusConfigLink objectClass" [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D758 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D759 SRCH base=3D"cn=3Dglobal_pol= icy,cn=3DINTERN.CUSTOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc=3Dcustomer-vi= rt,dc=3Deu" scope=3D0 filter=3D"(objectClass=3D*)" attrs=3D"krbMaxPwdLife k= rbMinPwdLife krbPwdMinDiffChars krbPwdMinLength krbPwdHistoryLength krbPwdM= axFailure krbPwdFailureCountInterval krbPwdLockoutDuration" [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D759 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D760 SRCH base=3D"uid=3Dkries,cn= =3Dusers,cn=3Daccounts,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope=3D0 fi= lter=3D"(objectClass=3D*)" attrs=3D"objectClass uid cn fqdn gidNumber krbPr= incipalName krbCanonicalName krbTicketPolicyReference krbPrincipalExpiratio= n krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbLastPwdCh= ange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFa= iledCount krbLastAdminUnlock krbTicketFlags ipaNTSecurityIdentifier ipaNTLo= gonScript ipaNTProfilePath ipaNTHomeDirectory ipaNTHomeDirectoryDrive" [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D760 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D761 MOD dn=3D"uid=3Dkries,cn=3Du= sers,cn=3Daccounts,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu" [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D761 RESULT err=3D0 tag=3D103 nen= tries=3D0 etime=3D0 csn=3D5751a1820001000d0000 [03/Jun/2016:17:18:39 +0200] conn=3D95 fd=3D109 slot=3D109 connection from = 192.168.210.45 to 192.168.210.181 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D937 SRCH base=3D"dc=3Dintern,dc= =3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(|(objectClass=3Dkrbprincip= alaux)(objectClass=3Dkrbprincipal)(objectClass=3Dipakrbprincipal))(|(ipaKrb= PrincipalAlias=3Dkrbtgt/INTERN.CUSTOMER-VIRT.EU(a)INTERN.CUSTOMER-VIRT.EU)(kr= bPrincipalName=3Dkrbtgt/INTERN.CUSTOMER-VIRT.EU(a)INTERN.CUSTOMER-VIRT.EU)))"= attrs=3D"krbPrincipalName krbCanonicalName ipaKrbPrincipalAlias krbUPEnabl= ed krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krbPassw= ordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krbLastP= wdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLog= inFailedCount krbExtraData krbLastAdminUnlock krbObjectReferences krbTicket= Flags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHistory ipa= KrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D937 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D938 SRCH base=3D"dc=3Dintern,dc= =3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(|(objectClass=3Dkrbprincip= alaux)(objectClass=3Dkrbprincipal)(objectClass=3Dipakrbprincipal))(|(ipaKrb= PrincipalAlias=3Dldap/auth02.intern.customer-virt.eu(a)INTERN.CUSTOMER-VIRT.E= U)(krbPrincipalName=3Dldap/auth02.intern.customer-virt.eu(a)INTERN.CUSTOMER-V= IRT.EU)))" attrs=3D"krbPrincipalName krbCanonicalName ipaKrbPrincipalAlias = krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiratio= n krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistor= y krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedA= uth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbObjectReferences= krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordH= istory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass= " [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D938 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D939 SRCH base=3D"cn=3DINTERN.CUS= TOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope= =3D0 filter=3D"(objectClass=3Dkrbticketpolicyaux)" attrs=3D"krbMaxTicketLif= e krbMaxRenewableAge krbTicketFlags" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D939 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D940 SRCH base=3D"dc=3Dintern,dc= =3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(|(objectClass=3Dkrbprincip= alaux)(objectClass=3Dkrbprincipal))(krbPrincipalName=3Dkries(a)INTERN.CUSTOME= R-VIRT.EU))" attrs=3D"krbPrincipalName krbCanonicalName ipaKrbPrincipalAlia= s krbUPEnabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpirat= ion krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHist= ory krbLastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFaile= dAuth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbObjectReferenc= es krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwor= dHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectCla= ss" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D940 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D941 SRCH base=3D"cn=3DINTERN.CUS= TOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope= =3D0 filter=3D"(objectClass=3Dkrbticketpolicyaux)" attrs=3D"krbMaxTicketLif= e krbMaxRenewableAge krbTicketFlags" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D941 RESULT err=3D0 tag=3D101 nen= tries=3D1 etime=3D0 ### In the oVirt Engine log i can see the following: ### 2016-06-03 17:18:40,402 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LdapSearchExceptionHandler] (ajp--127.0.0.1-8702-3) Error in commu= nicating with LDAP server auth02.intern.customer-virt.eu.intern.customer-vi= rt.eu:389; nested exception is javax.naming.CommunicationException: auth02.= intern.customer-virt.eu.intern.customer-virt.eu:389 [Root exception is java= .net.UnknownHostException: auth02.intern.customer-virt.eu.intern.customer-v= irt.eu] 2016-06-03 17:18:40,416 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.DirectorySearcher] (ajp--127.0.0.1-8702-3) Failed ldap search serv= er ldap://auth02.intern.customer-virt.eu.intern.customer-virt.eu:389 using = user kries(a)INTERN.CUSTOMER-VIRT.EU due to auth02.intern.customer-virt.eu.in= tern.customer-virt.eu:389; nested exception is javax.naming.CommunicationEx= ception: auth02.intern.customer-virt.eu.intern.customer-virt.eu:389 [Root e= xception is java.net.UnknownHostException: auth02.intern.customer-virt.eu.i= ntern.customer-virt.eu]. We should try the next server 2016-06-03 17:18:41,675 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LDAPTemplateWrapper] (ajp--127.0.0.1-8702-3) Error in running LDAP= query. BaseDN is , filter is (&(objectClass=3DposixAccount)(objectClass=3D= krbPrincipalAux)(uid=3Dkries)). Exception message is: null 2016-06-03 17:18:41,681 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LdapSearchExceptionHandler] (ajp--127.0.0.1-8702-3) Ldap authentic= ation failed. Please check that the login name , password and path are corr= ect. 2016-06-03 17:18:41,690 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.DirectorySearcher] (ajp--127.0.0.1-8702-3) Failed ldap search serv= er ldap://auth02.intern.customer-virt.eu:389 using user kries(a)INTERN.CUSTOM= ER-VIRT.EU due to Kerberos error. Please check log for further details.. We= should not try the next server 2016-06-03 17:18:41,698 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LdapAuthenticateUserCommand] (ajp--127.0.0.1-8702-3) Failed authen= ticating user: kries to domain intern.customer-virt.eu. Ldap Query Type is = getUserByName 2016-06-03 17:18:41,703 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LdapAuthenticateUserCommand] (ajp--127.0.0.1-8702-3) Kerberos erro= r. Please check log for further details. 2016-06-03 17:18:41,706 ERROR [org.ovirt.engine.extensions.aaa.builtin.kerb= erosldap.LdapBrokerCommandBase] (ajp--127.0.0.1-8702-3) Failed to run comma= nd LdapAuthenticateUserCommand. Domain is intern.customer-virt.eu. User is = kries. 2016-06-03 17:18:41,712 INFO [org.ovirt.engine.core.bll.aaa.LoginBaseComma= nd] (ajp--127.0.0.1-8702-3) Cant login user "kries" with authentication pro= file "intern.customer-virt.eu" because the authentication failed. 2016-06-03 17:18:41,719 ERROR [org.ovirt.engine.core.dal.dbbroker.auditlogh= andling.AuditLogDirector] (ajp--127.0.0.1-8702-3) Correlation ID: null, Cal= l Stack: null, Custom Event ID: -1, Message: User kries(a)intern.customer-vir= t.eu failed to log in. 2016-06-03 17:18:41,723 WARN [org.ovirt.engine.core.bll.aaa.LoginAdminUser= Command] (ajp--127.0.0.1-8702-3) CanDoAction of action LoginAdminUser faile= d for user kries(a)intern.customer-virt.eu. Reasons: USER_FAILED_TO_AUTHENTIC= ATE ### Any thoughts why i can't authenticate via oVirt against IPA2? Thanks Greets Kilian --_000_ef9bab9b95a64bbfbda0fcdfb57bcf55kilianriesde_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-= 1"> <style type=3D"text/css" style=3D"display:none;"></style> </head> <body dir=3D"ltr"> <div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;back= ground-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;"> Hi, i have two free-IPA directories setup in multi-master replication. Both = are running on CentOS 7.2 with latest Software installed. Replication betwe= en both IPAs is setup correctly and i am able to authenticate against each = of the two manually. However, if i shutdown IPA1 and try to authenticate from oVirt 3.5.6.2 a= gainst IPA2 i can't login. Login is only working if IPA1 is running (k= eep in mind that manual authentication against IPA2 is working). In the dirSRV Error-Logfile nothing is logged, however i can see the aut= hentication in the access log from IPA2: ### filter=3D"(&(|(objectClass=3Dkrbprincipalaux)(objectClass=3Dkrb= principal)(objectClass=3Dipakrbprincipal))(|(ipaKrbPrincipalAlias=3Dkrbtgt/= INTERN.CUSTOMER-VIRT.EU(a)INTERN.CUSTOMER-VIRT.EU)(krbPrincipalName=3Dkrbtgt/= INTERN.CUSTOMER-VIRT.EU(a)INTERN.CUSTOMER-VIRT.EU)))" attrs=3D"krbP= rincipalName krbCanonicalName ipaKrbPrincipalAlias krbUPEnabled krbPrincipalKey krbTick= etPolicyReference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicy= Reference krbPrincipalType krbPwdHistory krbLastPwdChange krbPrincipalAlias= es krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbObjectReferences kr= bTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccountLock passwordHist= ory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigLink objectClass&qu= ot; [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D758 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D759 SRCH base=3D"cn= =3Dglobal_policy,cn=3DINTERN.CUSTOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc= =3Dcustomer-virt,dc=3Deu" scope=3D0 filter=3D"(objectClass=3D*)&q= uot; attrs=3D"krbMaxPwdLife krbMinPwdLife krbPwdMinDiffChars krbPwdMin= Length krbPwdHistoryLength krbPwdMaxFailure krbPwdFailureCountInterval krbPwdLockoutDuration"</p= > [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D759 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D760 SRCH base=3D"uid= =3Dkries,cn=3Dusers,cn=3Daccounts,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu&qu= ot; scope=3D0 filter=3D"(objectClass=3D*)" attrs=3D"objectCl= ass uid cn fqdn gidNumber krbPrincipalName krbCanonicalName krbTicketPolicy= Reference krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrincipalType krbLastPwdCha= nge krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFai= ledCount krbLastAdminUnlock krbTicketFlags ipaNTSecurityIdentifier ipaNTLog= onScript ipaNTProfilePath ipaNTHomeDirectory ipaNTHomeDirectoryDrive" [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D760 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D761 MOD dn=3D"uid=3D= kries,cn=3Dusers,cn=3Daccounts,dc=3Dintern,dc=3Dcustomer-virt,dc=3Deu"= [03/Jun/2016:17:18:39 +0200] conn=3D5 op=3D761 RESULT err=3D0 tag=3D= 103 nentries=3D0 etime=3D0 csn=3D5751a1820001000d0000 [03/Jun/2016:17:18:39 +0200] conn=3D95 fd=3D109 slot=3D109 connectio= n from 192.168.210.45 to 192.168.210.181 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D937 SRCH base=3D"dc= =3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(= |(objectClass=3Dkrbprincipalaux)(objectClass=3Dkrbprincipal)(objectClass=3D= ipakrbprincipal))(|(ipaKrbPrincipalAlias=3Dkrbtgt/INTERN.CUSTOMER-VIRT.EU@I= NTERN.CUSTOMER-VIRT.EU)(krbPrincipalName=3Dkrbtgt/INTERN.CUSTOMER-VIRT.EU@I= NTERN.CUSTOMER-VIRT.EU)))" attrs=3D"krbPrincipalName krbCanonicalName ipaKrbPrincipalAlias krbUP= Enabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krb= PasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krb= LastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbO= bjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccoun= tLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigL= ink objectClass" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D937 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D938 SRCH base=3D"dc= =3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(= |(objectClass=3Dkrbprincipalaux)(objectClass=3Dkrbprincipal)(objectClass=3D= ipakrbprincipal))(|(ipaKrbPrincipalAlias=3Dldap/auth02.intern.customer-virt= .eu@INTERN.CUSTOMER-VIRT.EU)(krbPrincipalName=3Dldap/auth02.intern.customer= -virt.eu(a)INTERN.CUSTOMER-VIRT.EU)))" attrs=3D"krbPrincipalName krbCanonicalName ipaKrbPrincipalAlias krbUP= Enabled krbPrincipalKey krbTicketPolicyReference krbPrincipalExpiration krb= PasswordExpiration krbPwdPolicyReference krbPrincipalType krbPwdHistory krb= LastPwdChange krbPrincipalAliases krbLastSuccessfulAuth krbLastFailedAuth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbO= bjectReferences krbTicketFlags krbMaxTicketLife krbMaxRenewableAge nsAccoun= tLock passwordHistory ipaKrbAuthzData ipaUserAuthType ipatokenRadiusConfigL= ink objectClass" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D938 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D939 SRCH base=3D"cn= =3DINTERN.CUSTOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc=3Dcustomer-virt,dc= =3Deu" scope=3D0 filter=3D"(objectClass=3Dkrbticketpolicyaux)&quo= t; attrs=3D"krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"</= p> [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D939 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D940 SRCH base=3D"dc= =3Dintern,dc=3Dcustomer-virt,dc=3Deu" scope=3D2 filter=3D"(&(= |(objectClass=3Dkrbprincipalaux)(objectClass=3Dkrbprincipal))(krbPrincipalN= ame=3Dkries(a)INTERN.CUSTOMER-VIRT.EU))" attrs=3D"krbPrincipalName = krbCanonicalName ipaKrbPrincipalAlias krbUPEnabled krbPrincipalKey krbTicketPolicyReference= krbPrincipalExpiration krbPasswordExpiration krbPwdPolicyReference krbPrin= cipalType krbPwdHistory krbLastPwdChange krbPrincipalAliases krbLastSuccess= fulAuth krbLastFailedAuth krbLoginFailedCount krbExtraData krbLastAdminUnlock krbObjectReferences krbTicketFlags krbMaxT= icketLife krbMaxRenewableAge nsAccountLock passwordHistory ipaKrbAuthzData = ipaUserAuthType ipatokenRadiusConfigLink objectClass" [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D940 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D941 SRCH base=3D"cn= =3DINTERN.CUSTOMER-VIRT.EU,cn=3Dkerberos,dc=3Dintern,dc=3Dcustomer-virt,dc= =3Deu" scope=3D0 filter=3D"(objectClass=3Dkrbticketpolicyaux)&quo= t; attrs=3D"krbMaxTicketLife krbMaxRenewableAge krbTicketFlags"</= p> [03/Jun/2016:17:18:39 +0200] conn=3D6 op=3D941 RESULT err=3D0 tag=3D= 101 nentries=3D1 etime=3D0 ### In the oVirt Engine log i can see the following: ### 2016-06-03 17:18:40,402 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LdapSearchExceptionHandler] (ajp--127.0.0.1-8702-3) Error in co= mmunicating with LDAP server auth02.intern.customer-virt.eu.intern.customer= -virt.eu:389; nested exception is javax.naming.CommunicationException: auth02.intern.customer-virt.eu.intern= .customer-virt.eu:389 [Root exception is java.net.UnknownHostException: aut= h02.intern.customer-virt.eu.intern.customer-virt.eu] 2016-06-03 17:18:40,416 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.DirectorySearcher] (ajp--127.0.0.1-8702-3) Failed ldap search s= erver ldap://auth02.intern.customer-virt.eu.intern.customer-virt.eu:389 usi= ng user kries(a)INTERN.CUSTOMER-VIRT.EU due to auth02.intern.customer-virt.eu.intern.customer-virt.eu:389; nested = exception is javax.naming.CommunicationException: auth02.intern.customer-vi= rt.eu.intern.customer-virt.eu:389 [Root exception is java.net.UnknownHostEx= ception: auth02.intern.customer-virt.eu.intern.customer-virt.eu]. We should try the next server 2016-06-03 17:18:41,675 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LDAPTemplateWrapper] (ajp--127.0.0.1-8702-3) Error in running L= DAP query. BaseDN is , filter is (&(objectClass=3DposixAccount)(objectC= lass=3DkrbPrincipalAux)(uid=3Dkries)). Exception message is: null 2016-06-03 17:18:41,681 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LdapSearchExceptionHandler] (ajp--127.0.0.1-8702-3) Ldap authen= tication failed. Please check that the login name , password and path are c= orrect.  2016-06-03 17:18:41,690 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.DirectorySearcher] (ajp--127.0.0.1-8702-3) Failed ldap search s= erver ldap://auth02.intern.customer-virt.eu:389 using user kries(a)INTERN.CUS= TOMER-VIRT.EU due to Kerberos error. Please check log for further details.. We should not try the next server</= p> 2016-06-03 17:18:41,698 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LdapAuthenticateUserCommand] (ajp--127.0.0.1-8702-3) Failed aut= henticating user: kries to domain intern.customer-virt.eu. Ldap Query Type = is getUserByName 2016-06-03 17:18:41,703 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LdapAuthenticateUserCommand] (ajp--127.0.0.1-8702-3) Kerberos e= rror. Please check log for further details. 2016-06-03 17:18:41,706 ERROR [org.ovirt.engine.extensions.aaa.builtin.k= erberosldap.LdapBrokerCommandBase] (ajp--127.0.0.1-8702-3) Failed to run co= mmand LdapAuthenticateUserCommand. Domain is intern.customer-virt.eu. User = is kries. 2016-06-03 17:18:41,712 INFO  [org.ovirt.engine.core.bll.aaa.LoginB= aseCommand] (ajp--127.0.0.1-8702-3) Cant login user "kries" with = authentication profile "intern.customer-virt.eu" because the auth= entication failed. 2016-06-03 17:18:41,719 ERROR [org.ovirt.engine.core.dal.dbbroker.auditl= oghandling.AuditLogDirector] (ajp--127.0.0.1-8702-3) Correlation ID: null, = Call Stack: null, Custom Event ID: -1, Message: User kries(a)intern.customer-= virt.eu failed to log in. 2016-06-03 17:18:41,723 WARN  [org.ovirt.engine.core.bll.aaa.LoginA= dminUserCommand] (ajp--127.0.0.1-8702-3) CanDoAction of action LoginAdminUs= er failed for user kries(a)intern.customer-virt.eu. Reasons: USER_FAILED_TO_A= UTHENTICATE ### Any thoughts why i can't authenticate via oVirt against IPA2? Thanks Greets Kilian </div> </body> </html> --_000_ef9bab9b95a64bbfbda0fcdfb57bcf55kilianriesde_--

3 5

how to build and install ovirt to the Product Environment
by Dewey Du 15 Jun '16

15 Jun '16

To build and install ovirt-engine at your home folder under ovirt-engine directory execute the folllowing command: $ make clean install-dev PREFIX="${PREFIX}" What about installing a Product Environment. Is the folllowing command right? $ make clean install PREFIX="${PREFIX}"

4 5

RHEV-M installation failure
by Grant Lowe 15 Jun '16

15 Jun '16

--_000_SN2PR20MB0815B389E957D3EE2074741DD0540SN2PR20MB0815namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, I'm trying to install an RHEV-M image on an RHEV-V hypervisor. When I do, t= he installation finishes with this error: 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/consoleUUID=3Dstr:'e6bed88f-2b2e-4d1d-8e63-40a404a75a12' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/emulatedMachine=3Dstr:'rhel6.5.0' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/nicUUID=3Dstr:'a3bdab54-72a2-404b-b899-a9e93d04c56f' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/ovfArchive=3Dstr:'/data/ovirt-hosted-engine-setup/rhevm-appliance= -20160515.0-1.x86_64.rhevm.ova' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/subst=3Ddict:'{}' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmBoot=3Dstr:'disk' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmCDRom=3DNoneType:'None' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmMACAddr=3Dstr:'00:16:3e:69:8b:6b' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmMemSizeMB=3Dint:'4096' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmUUID=3Dstr:'b25144f2-cbdb-4d18-a344-171d5d631ef2' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= HOSTED_VM/vmVCpus=3Dstr:'2' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV OVE= SETUP_CORE/offlinePackager=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/dnfDisabledPlugins=3Dlist:'[]' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/dnfExpireCache=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/dnfRollback=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/dnfpackagerEnabled=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/keepAliveInterval=3Dint:'30' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/yumDisabledPlugins=3Dlist:'[]' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/yumEnabledPlugins=3Dlist:'[]' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/yumExpireCache=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/yumRollback=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV PAC= KAGER/yumpackagerEnabled=3Dbool:'False' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/clockMaxGap=3Dint:'5' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/clockSet=3Dbool:'False' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/commandPath=3Dstr:'/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/s= bin:/bin' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/reboot=3Dbool:'False' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/rebootAllow=3Dbool:'True' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:510 ENV SYS= TEM/rebootDeferTime=3Dint:'10' 2016-06-14 15:00:21 DEBUG otopi.context context.dumpEnvironment:514 ENVIRON= MENT DUMP - END 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:142 Stage pr= e-terminate METHOD otopi.plugins.otopi.dialog.cli.Plugin._pre_terminate 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:148 conditio= n False 2016-06-14 15:00:21 INFO otopi.context context.runSequence:427 Stage: Termi= nation 2016-06-14 15:00:21 DEBUG otopi.context context.runSequence:431 STAGE termi= nate 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:142 Stage te= rminate METHOD otopi.plugins.ovirt_hosted_engine_setup.core.misc.Plugin._te= rminate 2016-06-14 15:00:21 ERROR otopi.plugins.ovirt_hosted_engine_setup.core.misc= misc._terminate:170 Hosted Engine deployment failed: this system is not re= liable, please check the issue, fix and redeploy 2016-06-14 15:00:21 DEBUG otopi.plugins.otopi.dialog.human dialog.__logStri= ng:219 DIALOG:SEND Log file is located at /var/log/ovirt-ho= sted-engine-setup/ovirt-hosted-engine-setup-20160614145427-u8mxun.log 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:142 Stage te= rminate METHOD otopi.plugins.otopi.dialog.human.Plugin._terminate 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:142 Stage te= rminate METHOD otopi.plugins.otopi.dialog.machine.Plugin._terminate 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:148 conditio= n False 2016-06-14 15:00:21 DEBUG otopi.context context._executeMethod:142 Stage te= rminate METHOD otopi.plugins.otopi.core.log.Plugin._terminate [root@rhev-v data] So what do I need to do? I'm new to the whole oVirt world. So any and all h= elp is appreciated. Thanks. Grant Lowe Global Services Engineer II Office: +1 858 677 7800 Ext 1084 6059 Cornerstone Court West San Diego, CA. 92121-3713 Verimatrix, Inc. www.verimatrix.com<http://www.verimatrix.com/> Follow us at: Verimatrix LinkedIn<http://www.linkedin.com/company/verimatri= x> This communication may contain information that is confidential in nature a= nd unauthorized use or disclosure is strictly prohibited. If you are not t= he intended recipient, kindly reply or call at the number above to alert us= . Afterward, please delete this communication in its entirety. --_000_SN2PR20MB0815B389E957D3EE2074741DD0540SN2PR20MB0815namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"= > <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <style></style> </head> <body lang=3D"EN-US" link=3D"#0563C1" vlink=3D"#954F72"> <div class=3D"WordSection1"> Hi all,<o:p></o:p> <o:p> </o:p> I’m trying to install an RHEV-M image on an RH= EV-V hypervisor. When I do, the installation finishes with this error:<o:p>= </o:p> <o:p> </o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/consoleUUID=3Dst= r:'e6bed88f-2b2e-4d1d-8e63-40a404a75a12'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/emulatedMachine= =3Dstr:'rhel6.5.0'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/nicUUID=3Dstr:'a= 3bdab54-72a2-404b-b899-a9e93d04c56f'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/ovfArchive=3Dstr= :'/data/ovirt-hosted-engine-setup/rhevm-appliance-20160515.0-1.x86_64.rhevm= .ova'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/subst=3Ddict:'{}= '<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmBoot=3Dstr:'di= sk'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmCDRom=3DNoneTy= pe:'None'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmMACAddr=3Dstr:= '00:16:3e:69:8b:6b'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmMemSizeMB=3Din= t:'4096'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmUUID=3Dstr:'b2= 5144f2-cbdb-4d18-a344-171d5d631ef2'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVEHOSTED_VM/vmVCpus=3Dstr:'2= '<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV OVESETUP_CORE/offlinePackager= =3Dbool:'True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/dnfDisabledPlugins= =3Dlist:'[]'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/dnfExpireCache=3Dboo= l:'True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/dnfRollback=3Dbool:'= True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/dnfpackagerEnabled= =3Dbool:'True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/keepAliveInterval=3D= int:'30'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/yumDisabledPlugins= =3Dlist:'[]'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/yumEnabledPlugins=3D= list:'[]'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/yumExpireCache=3Dboo= l:'True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/yumRollback=3Dbool:'= True'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV PACKAGER/yumpackagerEnabled= =3Dbool:'False'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/clockMaxGap=3Dint:'5'<= o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/clockSet=3Dbool:'False= '<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/commandPath=3Dstr:'/us= r/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin'<o:p></o:p></span= > 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/reboot=3Dbool:'False'<= o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/rebootAllow=3Dbool:'Tr= ue'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:510 ENV SYSTEM/rebootDeferTime=3Dint:= '10'<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context.dumpEnvironment:514 ENVIRONMENT DUMP - END<o:p></o:p>= 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:142 Stage pre-terminate METHOD otopi.p= lugins.otopi.dialog.cli.Plugin._pre_terminate<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:148 condition False<o:p></o:p><= /p> 2016-06-14 15:00:21 INFO o= topi.context context.runSequence:427 Stage: Termination<o:p></o:p></= p> 2016-06-14 15:00:21 DEBUG = otopi.context context.runSequence:431 STAGE terminate<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:142 Stage terminate METHOD otopi.plugi= ns.ovirt_hosted_engine_setup.core.misc.Plugin._terminate<o:p></o:p><= /p> 2016-06-14 15:00:21 ERROR = otopi.plugins.ovirt_hosted_engine_setup.core.misc misc._terminate:170 Hoste= d Engine deployment failed: this system is not reliable, please check the issue, fix and redeploy<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.plugins.otopi.dialog.human dialog.__logString:219 DIALOG:SEND &n= bsp;           &nbsp= ;   Log file is located at /var/log/ovirt-hosted-engine-setup/ovi= rt-hosted-engine-setup-20160614145427-u8mxun.log<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:142 Stage terminate METHOD otopi.plugi= ns.otopi.dialog.human.Plugin._terminate<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:142 Stage terminate METHOD otopi.plugi= ns.otopi.dialog.machine.Plugin._terminate<o:p></o:p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:148 condition False<o:p></o:p><= /p> 2016-06-14 15:00:21 DEBUG = otopi.context context._executeMethod:142 Stage terminate METHOD otopi.plugi= ns.otopi.core.log.Plugin._terminate<o:p></o:p> [root@rhev-v data]<o:p></o:p> <o:p> </o:p> So what do I need to do? I’m new to the whole = oVirt world. So any and all help is appreciated.<o:p></o:p> <o:p> </o:p> Thanks.<o:p></o:p> <o:p> </o:p> <o:p> </o:p> Grant Lowe<o:p></o:p></= p> Global Services Engineer II<o:p></o:p></= span> Office: +1 858 677 7800 Ext 1084</sp= an><o:p></o:p> 6059 Cornerstone Court West<o:p></o:p></= span> San Diego, CA. 92121-3713<o:p></o:p>  <o:p></o:p> Verimat= rix, Inc.<o:p></o:p> <a href=3D"http://www.verimatrix.com/">= www.verimatrix.com</a><o:p></o:p> Follow us at: <a href=3D"http://ww= w.linkedin.com/company/verimatrix">Verimatrix = LinkedIn</a><o:p></o:p></p= >  = <o:p></o:p> This communication may contain informati= on that is confidential in nature and unauthorized use or disclosure is str= ictly prohibited.  If you are not the intended recipient, kindly reply or call at the number above to alert us. Afterward= , please delete this communication in its entirety.<o:p></o:p> <o:p> </o:p> </div> </body> </html> --_000_SN2PR20MB0815B389E957D3EE2074741DD0540SN2PR20MB0815namp_--

3 2

host kernel upgrade
by Rafael Almeida 15 Jun '16

15 Jun '16

This is a multi-part message in MIME format. --------------FB92082517321562AFD6FE10 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Hello, friends, it is safe reboot my host after update the kernel in my centos 7.2 x64, the ovirt engine 3.6 run over this centos in a independent host. which it is the frequency at which the host/hypervisors communicates with the engine oVirt? greetings -- Rafhael Almeida Orellana --------------FB92082517321562AFD6FE10 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body text="#000000" bgcolor="#FFFFFF"> <div class="moz-forward-container"> <pre>Hello, friends, it is safe reboot my host after update the kernel in my centos 7.2 x64, the ovirt engine 3.6 run over this centos in a independent host. which it is the frequency at which the host/hypervisors communicates with the engine oVirt? greetings -- Rafhael Almeida Orellana </pre> </div> </body> </html> --------------FB92082517321562AFD6FE10--

3 5

Re: [ovirt-users] Storage types in oVirt
by Dan Yasny 15 Jun '16

15 Jun '16

On Jun 14, 2016 5:37 PM, "Fernando Frediani" <fernando.frediani(a)upx.com.br> wrote: > > Hi Nir, > > I wouldn't say that the performance coming from LVM is significantly better than from a filesystem if the last is well built. In VMware the performance from a VMDK running on the top of VMFS5 and from a RDM has no significant gain one over another. I've always preferred to have machines in a filesystem for the ease of management. In some cases with hundreds of them in a single filesystem never faced performance issues. The bottleneck normally is down to the storage architecture (Storage Controller, RAID config, etc). > > The multipath is certainly a plus that helps in certain cases. > Extended scalability (200 node clusters) and no bottlenecks around scsi3 pr are another couple of pluses. > I guess the answer to my original question is clear. If I want to use block storage shared among different hosts there is no choice in oVirt other than LVM. > In a particular case I have a storage shared via a kind of internal SAS backplane to all servers. The only alternative to that would be dedicate a server to own the storage and export it as NFS, but in that case there would be some looses in the terms of hardware an reliability. If your SAS storage is exposed to multiple hosts and presents the same wwid to all clients you can set it up as fc, as long as multipath can detect it. DDAS like dell md3000 works great this way. > > Thanks > Fernando > > > On Tue, Jun 14, 2016 at 11:23 PM, Fernando Frediani < fernando.frediani(a)upx.com.br> wrote: >>> >>> Hi Nir, >>> Thanks for clarification. >>> >>> Answering your questions: The intent was to use a Posix like filesystem >>> similar to VMFS5 (GFS2, OCFS2, or other) where you have no choice for how >>> the block storage is presented to multiple servers. Yes I heard about GFS2 >>> escalation issues in the past, but thought it had been gone now a days, it >>> seems not. >>> >>> I had the impression that qcow2 images have both thin-provisioning and >>> snapshot capabilities. >> >> Yes, using file based storage, you have both snapshots and thin provisioning, >> this is the most reliable way to get thin provisioning in ovirt. >> >> But then you pay for the file system overhead, where in block storage the qemu >> image is using the lv directly. >> >> In block storage we use multipath, so if you have mutiple nics and networks, >> you get better reliability and performance. >> >>> Regarding LVM I don't like the idea of having VMs buried into a LVM volume >>> nor the idea of troubleshooting LVM volumes when necessary. Dealing with >>> qcow2 images for every VM separately makes things much easier for doing >>> several tasks. I would say that people coming from VMware would prefer to >>> deal with a VMDK rather than a RDM LUN. In the other hand I have nothing to >>> say about LVM performance. >> >> LVM has its own issues with many lvs on the same vg - we recommend to >> use up to 350 lvs per vg. If you need more, you need to use another vg. >> >> The best would be to try both and use the best storage for the particular >> use case. >> >> Nir > > > _______________________________________________ > Users mailing list > Users(a)ovirt.org > http://lists.ovirt.org/mailman/listinfo/users

1 0

which NIC/network NFS storage is using
by Ryan Mahoney 15 Jun '16

15 Jun '16

On my hosts, I have configured a 1gbe nic for ovirtmgmt whose usage is currently setup for Management, Display, VM and Migration. I also have a 2 10gbe nics bonded LACP which are VLAN tagged and assigned the dozen or so VLANS needed for the various VM's to access. I have NFS storage mounted to the Data Center, and I would like to know how I check/specify which network connection ovirt is using for that NFS storage. I want to make sure it is utilizing the 10gbe bond on each host vs using the 1gbe connection. Thanks, Ryan

5 8

Storage types in oVirt
by Fernando Frediani 15 Jun '16

15 Jun '16

Hi there, I see that supported storage types in oVirt are: iSCSI, FCoE NFS, Local and Gluster. Specifically speaking about iSCSI and FCoE I see they use LVM on the block storage level to store the Virtual Machines. I just wanted to understand why the choice was to have LVM and if that is the only option at the moment. Was ever considered to have something like GFS2 ou OCFS2 in comparison with VMFS5 and VMs running in qcow2 ou raw files on the top of it ? I don't like LVM and have a strong preference for anything related to storage that doesn't use it so the reason I'm looking for a different way to use block storage without it having to be a LVM. Thanks Fernando

2 4

Neutron appliance & Cloud-init - no bootable device
by Bill Bill 14 Jun '16

14 Jun '16

--_000_SN1PR08MB1389CC3F08A78A5BCC91A4BAA6440SN1PR08MB1389namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGVsbG8sDQoNClRyeWluZyB0byBjb25maWd1cmUgdGhlIE5ldXRyb24gYXBwbGlhbmNlIGhvd2V2 ZXIsIHdoZW4gcnVubmluZyBjbG91ZC1pbml0IHRvIGF0dGVtcHQgdG8gc2V0IGEgcm9vdCBwYXNz d29yZCBvciBhbm90aGVyIHVzZXIgcGFzc3dvcmQsIHRoZSBWTSBzaW1wbHkgYm9vdHMgdG8gYSDi gJxubyBib290YWJsZSBkZXZpY2XigJ0gc3RhdGUuIFdpdGhvdXQgY2xvdWQtaW5pdCwgdGhlIFZN IGJvb3RzIGhvd2V2ZXIsIGhhdmUgbm8gaWRlYSB3aGF0IHRoZSBkZWZhdWx0IHJvb3QgbG9naW4g aXMuDQoNCknigJl2ZSBhbHNvIHRyaWVkIGJvb3RpbmcgaW50byBzaW5nbGUgdXNlciBtb2RlIHdo aWNoIGFsc28gZmFpbHMg4oCTIGhhcyB0aGlzIE5ldXRyb24gYXBwbGlhbmNlIGFuZCBjbG91ZC1p bml0IGJlZW4gdGVzdGVkIGZvciB2IDMuNj8NCg== --_000_SN1PR08MB1389CC3F08A78A5BCC91A4BAA6440SN1PR08MB1389namp_ Content-Type: text/html; charset="utf-8" Content-ID: <18DF5AC3DAE2C644913349334C4AE079(a)sct-15-1-485-2-msonline-outlook-1173a.templateTenant> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQouTXNv Q2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHls ZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0iIzk1NEY3 MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVs bG8sPC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UcnlpbmcgdG8gY29uZmlndXJlIHRoZSBOZXV0cm9uIGFwcGxpYW5j ZSBob3dldmVyLCB3aGVuIHJ1bm5pbmcgY2xvdWQtaW5pdCB0byBhdHRlbXB0IHRvIHNldCBhIHJv b3QgcGFzc3dvcmQgb3IgYW5vdGhlciB1c2VyIHBhc3N3b3JkLCB0aGUgVk0gc2ltcGx5IGJvb3Rz IHRvIGEg4oCcbm8gYm9vdGFibGUgZGV2aWNl4oCdIHN0YXRlLiBXaXRob3V0IGNsb3VkLWluaXQs IHRoZSBWTSBib290cyBob3dldmVyLCBoYXZlIG5vDQogaWRlYSB3aGF0IHRoZSBkZWZhdWx0IHJv b3QgbG9naW4gaXMuPC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J4oCZdmUgYWxzbyB0cmllZCBib290aW5nIGludG8g c2luZ2xlIHVzZXIgbW9kZSB3aGljaCBhbHNvIGZhaWxzIOKAkyBoYXMgdGhpcyBOZXV0cm9uIGFw cGxpYW5jZSBhbmQgY2xvdWQtaW5pdCBiZWVuIHRlc3RlZCBmb3IgdiAzLjY/PC9wPg0KPC9kaXY+ DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_SN1PR08MB1389CC3F08A78A5BCC91A4BAA6440SN1PR08MB1389namp_--

3 3