November 2018 - Users - oVirt List Archives

Re: selfhost
by Simone Tiraboschi 28 Nov '18

28 Nov '18

On Wed, Nov 28, 2018 at 2:26 PM mustafa taha <mustafa.taha.mu95(a)gmail.com> wrote: > I use this doc. To enable it . > > > > > https://docs.fedoraproject.org/en-US/quick-docs/using-nested-virtualization… > Can you please share the output of: virt-host-validate executed on the VMs created on the external oVirt instance (L1 VMs)? > > > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows 10 > > > > *From: *Simone Tiraboschi <stirabos(a)redhat.com> > *Sent: *Wednesday, November 28, 2018 3:23 PM > *To: *mustafa taha <mustafa.taha.mu95(a)gmail.com> > *Subject: *Re: [ovirt-users] selfhost > > > > > > On Wed, Nov 28, 2018 at 2:21 PM mustafa taha <mustafa.taha.mu95(a)gmail.com> > wrote: > > I enable nested virtualization in the base node and create vNIC but > this error up : > > [image: cid:image001.png@01D4872D.C3694080] > > > > > > Do you have any idea to solve this problem ,please help me ? > > > > Please double check how you enabled nested virtualization. > > > > > > Sent from Mail <https://go.microsoft.com/fwlink/?LinkId=550986> for > Windows 10 > > > > *From: *Simone Tiraboschi <stirabos(a)redhat.com> > *Sent: *Tuesday, November 27, 2018 4:32 PM > *To: *mustafa taha <mustafa.taha.mu95(a)gmail.com> > *Cc: *users <users(a)ovirt.org> > *Subject: *Re: [ovirt-users] selfhost > > > > > > On Tue, Nov 27, 2018 at 12:37 PM <mustafa.taha.mu95(a)gmail.com> wrote: > > Hi , > can we build ovirt-selfhost inside ovirt-selfhost ? > > > > Yes, you have to: > > - enable nested-vritualization on L0 host > > - create a custom vNic profile on the external oVirt in order to disable > the nomacspoof filter. You have to assign that profile to the interface of > the VM you are going to use as hosts in your nested env. > > > > > > can anybody answer this question ,please > _______________________________________________ > Users mailing list -- users(a)ovirt.org > To unsubscribe send an email to users-leave(a)ovirt.org > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ > List Archives: > https://lists.ovirt.org/archives/list/users@ovirt.org/message/V43WNJGSDEPMO… > > > > >

1 0

Re: AffinityGroup API
by Ondra Machacek 28 Nov '18

28 Nov '18

Can you please share the script? And also what's the permission of the user you are executing the script. When see error 'User is not authorized to perform the action', we print in engine.log, what's exactly wrong meaning we print what permissions the user is missing in order to execute that action. So it may help you find out what's wrong as well. On 11/26/18 5:35 PM, Schreuders, Cliffe wrote: > Yes, the related issue we came across was that when using the Ruby gem, > assigning a VM to an Affinity Group raises an exception that states the > User is not authorized to perform the action; however, using the same > account works fine from the Admin portal and carrying out the exact same > steps via the Python SDK works as expected. The end result is that we > ended up calling a Python script from our Ruby code just to set the > affinity group. > > Thanks, Paul. > > On 26/11/2018 12:11, Staniforth, Paul wrote: >> Hi Andrej >> >> I believe they are using 4.2.5 they get a permission error although they can use the python SDK with the same account. >> >> Paul S. >> ________________________________________ >> From: Ondra Machacek <omachace(a)redhat.com> >> Sent: 26 November 2018 11:41 >> To: Staniforth, Paul >> Cc: Andrej Krejcir; users >> Subject: Re: [ovirt-users] AffinityGroup API >> >> What version of the SDK do you use? >> I can see it's supported in latest version. >> >> On 11/26/18 11:13 AM, Andrej Krejcir wrote: >>> Hi, >>> >>> I don't know much about ruby SDK. I think the SDKs for various languages >>> are generated from the API specification. >>> >>> Ondra, is this a bug in ruby SDK? >>> >>> >>> Andrej >>> >>> On Fri, 23 Nov 2018 at 18:06, Staniforth, Paul < >>> P.Staniforth(a)leedsbeckett.ac.uk> wrote: >>> >>>> Hello Andrej, >>>> >>>> Also the Affinity Groups apparently aren't available >>>> in the Ruby SDK should I add this to the bug report? >>>> >>>> >>>> Thanks, >>>> >>>> Paul S. >>>> ------------------------------ >>>> *From:* Andrej Krejcir <akrejcir(a)redhat.com> >>>> *Sent:* 21 November 2018 13:32 >>>> *To:* Staniforth, Paul >>>> *Cc:* users >>>> *Subject:* Re: [ovirt-users] AffinityGroup API >>>> >>>> Hi, >>>> >>>> Yes, the AffinityGroupHosts is missing. Can you please open a bug[1] so we >>>> can add it? >>>> >>>> As a workaround, the hosts can be modified by PUT request to the >>>> AffinityGroup endpoint directly, for example: >>>> >>>> PUT /ovirt-engine/api/clusters/1234/affinitygroups/5678 >>>> <affinity_group> >>>> <hosts> >>>> <host id="123456789"/> >>>> <host id="987654321"/> >>>> </hosts> >>>> </affinity_group> >>>> >>>> However, this will replace all hosts in the affinity group with the hosts >>>> listed. >>>> >>>> >>>> Best regards, >>>> Andrej >>>> >>>> >>>> [1] - https://bugzilla.redhat.com/enter_bug.cgi?product=ovirt-engine >>>> >>>> On Wed, 21 Nov 2018 at 13:26, <p.staniforth(a)leedsbeckett.ac.uk> wrote: >>>> >>>>> Hello, >>>>> When using the API to update an AffinityGroup there is a >>>>> AffinityGroupVm and AffinityGroupVms so I can add or remove VMs but there >>>>> is no AffinityGroupHost or AffinityGroupHosts, therefore I can't add or >>>>> remove hosts. >>>>> >>>>> Thanks, >>>>> Paul S. >>>>> _______________________________________________ >>>>> Users mailing list -- users(a)ovirt.org >>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >>>>> oVirt Code of Conduct: >>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>> List Archives: >>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/BUMDJ34JRLDHS… >>>>> >>>> To view the terms under which this email is distributed, please go to:- >>>> http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html >>>> >>>> > To view the terms under which this email is distributed, please go to:- > http://disclaimer.leedsbeckett.ac.uk/disclaimer/disclaimer.html >

3 4

vGPU not available in "type mdev"
by Marc Le Grand 27 Nov '18

27 Nov '18

Hello I followed the tutorial regarding vGPU but it's not working, i i guess it's a Nvidia licence issue, but i need to be sure. My node is installed using the node ISO image. I just removed the nouveau driver ans installed the nVidia one. My product is : "GK106GL [Quadro K4000]" My driver is : NVIDIA-Linux-x86_64-390.87 In the host peripherals I see my card (pci_0000_05_00_0) listed, but the column "type mdev" is empty, as the doc says I should see vGPU i guess something is missing. I took a look, there seems to be nVidia vGPU copatible driver, but no trace of it. The only vGPU stuff i found it's "NVIDIA VIRTUAL GPU" and i understand I have to pay to use vGPU on my nVidia card. is this correct or no ? If i'm supposed to pay is there a free workaround ? thanks for your help marc

3 5

extract nested attribute from a href link with ansible ovirt_vm_facts
by Nathanaël Blanchet 27 Nov '18

27 Nov '18

Hello I'd like to extract all vms which have the lease optionnal attribute and display the name of the storage domain of that lease. I managed to get that dict: "lease": { "storage_domain": { "href": "/ovirt-engine/api/storagedomains/0dc2941a-bdc2-4ce4-8ad7-43fa9c944f88", "id": "0dc2941a-bdc2-4ce4-8ad7-43fa9c944f88" } but how can I get the name of the storage instead of its id? thank you for your help -- Nathanaël Blanchet Supervision réseau Pôle Infrastrutures Informatiques 227 avenue Professeur-Jean-Louis-Viala 34193 MONTPELLIER CEDEX 5 Tél. 33 (0)4 67 54 84 55 Fax 33 (0)4 67 54 84 14 blanchet(a)abes.fr

2 1

selfhost
by mustafa.taha.mu95＠gmail.com 27 Nov '18

27 Nov '18

Hi , can we build ovirt-selfhost inside ovirt-selfhost ? can anybody answer this question ,please

3 2

Re: Recover accidentally deleted gluster node having bricks ( Engine, Data and Vmstore)
by Kaustav Majumder 27 Nov '18

27 Nov '18

On Tue, Nov 27, 2018 at 4:05 PM Abhishek Sahni <abhishek(a)iiserb.ac.in> wrote: > That is amazing, resetting bricks resolved the issue. > > Thanks much Sahina and Kaustav. > > However, Do we have manual steps to recover those bricks. > https://gluster.readthedocs.io/en/latest/release-notes/3.9.0/ > > On Tue, Nov 27, 2018 at 3:57 PM Abhishek Sahni <abhishek(a)iiserb.ac.in> > wrote: > >> I just enabled it on default cluster and now the volumes are visible. It >> seems like gluster service was disabled by default on cluster. >> >> On Tue, Nov 27, 2018 at 3:51 PM Sahina Bose <sabose(a)redhat.com> wrote: >> >>> >>> >>> On Tue, Nov 27, 2018 at 3:45 PM Kaustav Majumder <kmajumde(a)redhat.com> >>> wrote: >>> >>>> I am not sure why ovirt is not showing any volume. >>>> Sahina, is this a bug? >>>> >>> >>> Check if gluster service is enabled on the cluster. >>> The volumes are managed only if this is true >>> >>> >>>> On Tue, Nov 27, 2018 at 3:10 PM Abhishek Sahni < >>>> abhishek.sahni1991(a)gmail.com> wrote: >>>> >>>>> Hello Kaustav, >>>>> >>>>> That's weird, I never saw any volumes under the storage tab since >>>>> installation. I am using HC setup deployed using cockpit console. >>>>> >>>>> https://imgur.com/a/nH9rzK8 >>>>> >>>>> Did I miss something? >>>>> >>>>> >>>>> On Tue, Nov 27, 2018 at 2:50 PM Kaustav Majumder <kmajumde(a)redhat.com> >>>>> wrote: >>>>> >>>>>> Click on volume for which you want to reset the brick-> under bricks >>>>>> tab select the brick you wan to reset -> once you do you will see the >>>>>> 'Reset Brick' option is active. >>>>>> Attached is a screenshot -> https://i.imgur.com/QUMSrzt.png >>>>>> >>>>>> On Tue, Nov 27, 2018 at 2:43 PM Abhishek Sahni < >>>>>> abhishek.sahni1991(a)gmail.com> wrote: >>>>>> >>>>>>> Thanks Sahina for your response, I am not able to find it on UI, >>>>>>> please help me to navigate? and yes I am using oVirt 4.2.6.4-1. >>>>>>> >>>>>>> On Tue, Nov 27, 2018 at 12:55 PM Sahina Bose <sabose(a)redhat.com> >>>>>>> wrote: >>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> On Tue, Nov 20, 2018 at 5:56 PM Abhishek Sahni < >>>>>>>> abhishek.sahni1991(a)gmail.com> wrote: >>>>>>>> >>>>>>>>> Hello Team, >>>>>>>>> >>>>>>>>> We are running a setup of 3-way replica HC gluster setup >>>>>>>>> configured during the initial deployment from the cockpit console using >>>>>>>>> ansible. >>>>>>>>> >>>>>>>>> NODE1 >>>>>>>>> - /dev/sda (OS) >>>>>>>>> - /dev/sdb ( Gluster Bricks ) >>>>>>>>> * /gluster_bricks/engine/engine/ >>>>>>>>> * /gluster_bricks/data/data/ >>>>>>>>> * /gluster_bricks/vmstore/vmstore/ >>>>>>>>> >>>>>>>>> NODE2 and NODE3 with a similar setup. >>>>>>>>> >>>>>>>>> There is a mishap that /dev/sdb on NODE2 totally got crashed and >>>>>>>>> now there is nothing inside. However, I have created similar directories >>>>>>>>> after mounting it back i.e., >>>>>>>>> >>>>>>>>> * /gluster_bricks/engine/engine/ >>>>>>>>> * /gluster_bricks/data/data/ >>>>>>>>> * /gluster_bricks/vmstore/vmstore/ >>>>>>>>> but it is not yet recovered. >>>>>>>>> >>>>>>>>> ===================================================== >>>>>>>>> [root@node2 ~]# gluster volume status >>>>>>>>> Status of volume: data >>>>>>>>> Gluster process TCP Port RDMA Port >>>>>>>>> Online Pid >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> Brick *.*.*.1:/gluster_bricks/data/data 49152 0 Y >>>>>>>>> 11111 >>>>>>>>> Brick *.*.*.2:/gluster_bricks/data/data N/A N/A N >>>>>>>>> N/A >>>>>>>>> Brick *.*.*.3:/gluster_bricks/data/data 49152 0 Y >>>>>>>>> 4303 >>>>>>>>> Self-heal Daemon on localhost N/A N/A >>>>>>>>> Y 23976 >>>>>>>>> Self-heal Daemon on *.*.*.1 N/A N/A Y >>>>>>>>> 27838 >>>>>>>>> Self-heal Daemon on *.*.*.3 N/A N/A Y >>>>>>>>> 27424 >>>>>>>>> >>>>>>>>> Task Status of Volume data >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> There are no active volume tasks >>>>>>>>> >>>>>>>>> Status of volume: engine >>>>>>>>> Gluster process TCP Port RDMA Port >>>>>>>>> Online Pid >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> Brick *.*.*.1:/gluster_bricks/engine/eng >>>>>>>>> ine 49153 0 >>>>>>>>> Y 11117 >>>>>>>>> Brick *.*.*.2:/gluster_bricks/engine/eng >>>>>>>>> ine N/A N/A >>>>>>>>> N N/A >>>>>>>>> Brick *.*.*.3:/gluster_bricks/engine/eng >>>>>>>>> ine 49153 0 >>>>>>>>> Y 4314 >>>>>>>>> Self-heal Daemon on localhost N/A N/A >>>>>>>>> Y 23976 >>>>>>>>> Self-heal Daemon on *.*.*.3 N/A N/A Y >>>>>>>>> 27424 >>>>>>>>> Self-heal Daemon on *.*.*.1 N/A N/A Y >>>>>>>>> 27838 >>>>>>>>> >>>>>>>>> Task Status of Volume engine >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> There are no active volume tasks >>>>>>>>> >>>>>>>>> Status of volume: vmstore >>>>>>>>> Gluster process TCP Port RDMA Port >>>>>>>>> Online Pid >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> Brick *.*.*.1:/gluster_bricks/vmstore/vm >>>>>>>>> store 49154 0 >>>>>>>>> Y 21603 >>>>>>>>> Brick *.*.*.2:/gluster_bricks/vmstore/vm >>>>>>>>> store N/A N/A >>>>>>>>> N N/A >>>>>>>>> Brick *.*.*.3:/gluster_bricks/vmstore/vm >>>>>>>>> store 49154 0 >>>>>>>>> Y 26845 >>>>>>>>> Self-heal Daemon on localhost N/A N/A >>>>>>>>> Y 23976 >>>>>>>>> Self-heal Daemon on *.*.*.3 N/A N/A Y >>>>>>>>> 27424 >>>>>>>>> Self-heal Daemon on *.*.*.1 N/A N/A Y >>>>>>>>> 27838 >>>>>>>>> >>>>>>>>> Task Status of Volume vmstore >>>>>>>>> >>>>>>>>> ------------------------------------------------------------------------------ >>>>>>>>> There are no active volume tasks >>>>>>>>> ============================================================= >>>>>>>>> >>>>>>>>> >>>>>>>>> Can someone please suggest the steps to recover the setup? >>>>>>>>> >>>>>>>>> I have tried the below workaround but it doesn't help. >>>>>>>>> >>>>>>>>> >>>>>>>>> https://lists.gluster.org/pipermail/gluster-users/2013-November/015079.html >>>>>>>>> >>>>>>>> >>>>>>>> You can reset the brick - if you're on oVirt 4.2.x, there's a UI >>>>>>>> option in the bricks subtab to do this. >>>>>>>> >>>>>>>> >>>>>>>>> >>>>>>>>> -- >>>>>>>>> >>>>>>>>> ABHISHEK SAHNI >>>>>>>>> Mob : +91-990-701-5143 >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> Users mailing list -- users(a)ovirt.org >>>>>>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>>>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >>>>>>>>> oVirt Code of Conduct: >>>>>>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>>>>>> List Archives: >>>>>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/WFYUBA4DPHOSA… >>>>>>>>> >>>>>>>> >>>>>>> >>>>>>> -- >>>>>>> >>>>>>> ABHISHEK SAHNI >>>>>>> Mob : +91-990-701-5143 >>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Users mailing list -- users(a)ovirt.org >>>>>>> To unsubscribe send an email to users-leave(a)ovirt.org >>>>>>> Privacy Statement: https://www.ovirt.org/site/privacy-policy/ >>>>>>> oVirt Code of Conduct: >>>>>>> https://www.ovirt.org/community/about/community-guidelines/ >>>>>>> List Archives: >>>>>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/GEZZIGBWA6HQ5… >>>>>>> >>>>>> >>>>>> >>>>>> Thanks, >>>>>> Kaustav >>>>>> >>>>> >>>>> >>>>> -- >>>>> >>>>> ABHISHEK SAHNI >>>>> Mob : +91-990-701-5143 >>>>> >>>>> >>>>> >>>> >>>> -- >>>> >>>> KAUSTAV MAJUMDER >>>> >>>> ASSOCIATE SOFTWARE ENGINEER >>>> >>>> Red Hat India PVT LTD. <https://www.redhat.com/> >>>> >>>> kmajumder(a)redhat.com M: 08981884037 IM: IRC: kmajumder >>>> <https://red.ht/sig> >>>> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted> >>>> @redhatway <https://twitter.com/redhatway> @redhatinc >>>> <https://instagram.com/redhatinc> @redhatsnaps >>>> <https://snapchat.com/add/redhatsnaps> >>>> >>> >> >> -- >> Thanks, >> >> Abhishek Sahni >> Computer Centre >> IISER Bhopal >> > > > -- > Thanks, > > Abhishek Sahni > Computer Centre > IISER Bhopal > Thanks, Kaustav

2 2

Remote console access for old Ovirt 3.6 install
by David Gossage 27 Nov '18

27 Nov '18

I have an older 3.6.7 setup I am still using at a location. The hosted-engine is up but not responding {"reason": "failed liveliness check", "health": "bad", "vm": "up", "detail": "up"} I am guessing it got into some paused or halted state after a power outage and storage went offline for a short bit and I may need to manually perform some tasks. When I attempt the suggested method of hosted-engine --set-maintenance --mode=global hosted-engine --console I get an error about Use the password you've set using --add-console-password for logging in ** (remote-viewer:11479): WARNING **: Could not open X display Cannot open display: Run 'remote-viewer --help' to see a full list of available command line options Their are 7 other VM's running I was able to manually continue from vdsClient Is their a way to get remote access to this engine? *David Gossage* *Carousel Checks Inc. | System Administrator* *Office* 708.613.2284

2 2

Recover accidentally deleted gluster node having bricks ( Engine, Data and Vmstore)
by Abhishek Sahni 27 Nov '18

27 Nov '18

Hello Team, We are running a setup of 3-way replica HC gluster setup configured during the initial deployment from the cockpit console using ansible. NODE1 - /dev/sda (OS) - /dev/sdb ( Gluster Bricks ) * /gluster_bricks/engine/engine/ * /gluster_bricks/data/data/ * /gluster_bricks/vmstore/vmstore/ NODE2 and NODE3 with a similar setup. There is a mishap that /dev/sdb on NODE2 totally got crashed and now there is nothing inside. However, I have created similar directories after mounting it back i.e., * /gluster_bricks/engine/engine/ * /gluster_bricks/data/data/ * /gluster_bricks/vmstore/vmstore/ but it is not yet recovered. ===================================================== [root@node2 ~]# gluster volume status Status of volume: data Gluster process TCP Port RDMA Port Online Pid ------------------------------------------------------------------------------ Brick *.*.*.1:/gluster_bricks/data/data 49152 0 Y 11111 Brick *.*.*.2:/gluster_bricks/data/data N/A N/A N N/A Brick *.*.*.3:/gluster_bricks/data/data 49152 0 Y 4303 Self-heal Daemon on localhost N/A N/A Y 23976 Self-heal Daemon on *.*.*.1 N/A N/A Y 27838 Self-heal Daemon on *.*.*.3 N/A N/A Y 27424 Task Status of Volume data ------------------------------------------------------------------------------ There are no active volume tasks Status of volume: engine Gluster process TCP Port RDMA Port Online Pid ------------------------------------------------------------------------------ Brick *.*.*.1:/gluster_bricks/engine/eng ine 49153 0 Y 11117 Brick *.*.*.2:/gluster_bricks/engine/eng ine N/A N/A N N/A Brick *.*.*.3:/gluster_bricks/engine/eng ine 49153 0 Y 4314 Self-heal Daemon on localhost N/A N/A Y 23976 Self-heal Daemon on *.*.*.3 N/A N/A Y 27424 Self-heal Daemon on *.*.*.1 N/A N/A Y 27838 Task Status of Volume engine ------------------------------------------------------------------------------ There are no active volume tasks Status of volume: vmstore Gluster process TCP Port RDMA Port Online Pid ------------------------------------------------------------------------------ Brick *.*.*.1:/gluster_bricks/vmstore/vm store 49154 0 Y 21603 Brick *.*.*.2:/gluster_bricks/vmstore/vm store N/A N/A N N/A Brick *.*.*.3:/gluster_bricks/vmstore/vm store 49154 0 Y 26845 Self-heal Daemon on localhost N/A N/A Y 23976 Self-heal Daemon on *.*.*.3 N/A N/A Y 27424 Self-heal Daemon on *.*.*.1 N/A N/A Y 27838 Task Status of Volume vmstore ------------------------------------------------------------------------------ There are no active volume tasks ============================================================= Can someone please suggest the steps to recover the setup? I have tried the below workaround but it doesn't help. https://lists.gluster.org/pipermail/gluster-users/2013-November/015079.html -- ABHISHEK SAHNI Mob : +91-990-701-5143

4 7

Upgrade 4.0 to 4.1: Global Maintenance Mode not recognized
by gregor 27 Nov '18

27 Nov '18

Hello, I upgraded one host from 4.0 to 4.1 without problems. Now I have a problem with another host, in another network, where the Global Maintenance mode is not recognized by engine-setup. Is there a way to force the setup or set the maintenance mode inside the database? One problem can be that an the host was accidentally upgraded to 4.1 before I upgraded the engine. kind regards gregor

3 6

Re: The user admin@internal is not authorized to perform login
by Greg Sheremeta 26 Nov '18

26 Nov '18

Perhaps Ravi can assist with this. ---------- Forwarded message --------- From: Shawn Southern <shawn.southern(a)entegrus.com> Date: Fri, Nov 23, 2018 at 9:52 PM Subject: [ovirt-users] The user admin@internal is not authorized to perform login To: users(a)ovirt.org <users(a)ovirt.org> No one can log in to our oVirt instance today. LDAP users cannot authenticate, and the internal ‘admin’ user gets “The user admin@internal is not authorized to perform login” after being authenticated. From engine.log: 2018-11-23 10:17:12,454-05 INFO [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-24) [] User admin@internal successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access 2018-11-23 10:17:12,576-05 INFO [org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-24) [43bd2e4f] Running command: CreateUserSessionCommand internal: false. 2018-11-23 10:17:12,584-05 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-24) [43bd2e4f] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User admin@internal-authz connecting from '10.11.12.13' failed to log in<UNKNOWN>. 2018-11-23 10:17:12,585-05 ERROR [org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-24) [] The user admin@internal is not authorized to perform login Where do I go from here? _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/OQNDRRXT3EZGG… -- GREG SHEREMETA SENIOR SOFTWARE ENGINEER - TEAM LEAD - RHV UX Red Hat NA <https://www.redhat.com/> gshereme(a)redhat.com IRC: gshereme <https://red.ht/sig>

3 2