[ovirt-users] Ovirt 4.0 and EL 7.4

[VONDRA Alain]

Hi,
Did you modify your /etc/sasl2/libvirt.conf, because the update has modify the way to authenticate from md5 to gssapi.

If not just change this line :
mech_list: gssapi
to
mech_list: digest-md5

And restart services

As mentioned in the libvirt.conf file :

# NB, previously DIGEST-MD5 was set as the default mechanism for
# libvirt. Per RFC 6331 this is vulnerable to many serious security
# flaws and should no longer be used. Thus GSSAPI is now the default.
#
# To use GSSAPI requires that a libvirtd service principal is
# added to the Kerberos server for each host running libvirtd.
# This principal needs to be exported to the keytab file listed below

Alain



Alain VONDRA

Chargé d'Exploitation et de Sécurité des Systèmes d'Information
Direction Administrative et Financière
+33 1 44 39 77 76

UNICEF France
3 rue Duguay Trouin  75006
PARIS
www.unicef.fr
-----Message d'origine-----
De : users-bounces at ovirt.org [mailto:users-bounces at ovirt.org] De la part de Alan Griffiths
Envoyé : mercredi 4 octobre 2017 15:50
À : Ovirt Users <users at ovirt.org>
Objet : [ovirt-users] Ovirt 4.0 and EL 7.4

Hi,

Is 4.0 supported/known to work on CentOS 7.4?

I've just tried to upgrade one of the hosts in my lab from 7.3 to 7.4 and now vdsm-network fails to start with

vdsm-tool: libvirt: XML-RPC error : authentication failed: authentication failed

To even get this far I had to exclude gluster packages as 7.4 introduces 3.8 but ovirt 4.0 repo is still on 3.7.

So, more generally. If I'm on ovirt 4.0, gluster 3.7 and EL 7.3. What is the best ordering for getting to ovirt 4.1 and EL 7.4?

Thanks,

Alan
_______________________________________________
Users mailing list
Users at ovirt.org
http://lists.ovirt.org/mailman/listinfo/users