<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Sep 27, 2017 at 7:01 PM, VONDRA Alain <span dir="ltr"><<a href="mailto:AVONDRA@unicef.fr" target="_blank">AVONDRA@unicef.fr</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="FR">
<div class="gmail-m_-6491898328862618844WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Hello,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">I have exactly the same problem after an upgrade from CentOS 7.3 to 7.4, but I don’t want to plan now the migration to oVirt 4.x.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Can you help me to correct the bug and keep oVirt 3.6 for a few months ?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">It really seems to be a modification in libvirt authentication because when I comment out
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">#auth_unix_rw="sasl"
<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">in libvirtd.conf, libvirtd starts but my Host is still unresponsive in oVirt.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">My production environment is running on a single Hypervisor and I need the second one.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Thanks</span></p></div></div></blockquote><div><br></div><div>The fix is[1]. I suppose you need to change:</div><div>mech_list: scram-sha-1</div><div><br></div><div>Y.</div><div><br></div><div>[1] <a href="https://gerrit.ovirt.org/#/c/76934/">https://gerrit.ovirt.org/#/c/76934/</a> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="FR"><div class="gmail-m_-6491898328862618844WordSection1"><p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">De :</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> <a href="mailto:users-bounces@ovirt.org" target="_blank">users-bounces@ovirt.org</a> [mailto:<a href="mailto:users-bounces@ovirt.org" target="_blank">users-bounces@ovirt.<wbr>org</a>]
<b>De la part de</b> Yaniv Kaul<br>
<b>Envoyé :</b> mardi 19 septembre 2017 13:36<br>
<b>À :</b> Ozan Uzun <<a href="mailto:ozanuzun@gmail.com" target="_blank">ozanuzun@gmail.com</a>><br>
<b>Cc :</b> Ovirt Users <<a href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>><br>
<b>Objet :</b> Re: [ovirt-users] libvirt: XML-RPC error : authentication failed: Failed to start SASL<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
<div><span class="gmail-">
<p class="MsoNormal">On Tue, Sep 19, 2017 at 12:24 PM, Ozan Uzun <<a href="mailto:ozanuzun@gmail.com" target="_blank">ozanuzun@gmail.com</a>> wrote:<u></u><u></u></p>
</span><div>
<table style="border-collapse:collapse" class="gmail-m_-64918983288626188443a8ded91-40ea-4011-8a93-273b83b3e250Table" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="width:auto">
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-64918983288626188443a8ded91-40ea-4011-8a93-273b83b3e250">
</p>
<hr color="#0099ff" size="1">
<p style="font-family:Arial;font-size:10pt"></p>
<p style="font-family:Arial;font-size:10pt"></p>
<p></p>
</td>
</tr>
<tr>
<td style="width:auto">
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d">
</p>
<table style="border-bottom:medium none;width:507px;border-collapse:collapse;height:211px;border-top:medium none" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505dTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="width:auto">
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="left">
<font color="#0099ff" size="2" face="Arial"><strong>Alain VONDRA </strong></font><br>
<font color="#808080" size="1" face="Arial"><strong>Chargé d'Exploitation et de Sécurité des Systèmes d'Information </strong></font><br>
<font color="#808080" size="1" face="Arial"><strong>Direction Administrative et Financière</strong></font><strong><br>
<font color="#808080" size="1"><a href="tel:+33%201%2044%2039%2077%2076" value="+33144397776" target="_blank">+33 1 44 39 77 76</a> </font></strong><strong><font color="#808080" size="1"></font></strong><strong><br>
</strong><strong><font color="#808080" size="1">UNICEF France</font><br>
<font color="#808080" size="1"><a href="https://maps.google.com/?q=3+rue+Duguay+Trouin%C2%A0%C2%A075006+PARIS&entry=gmail&source=g">3 rue Duguay Trouin</a> <a href="https://maps.google.com/?q=3+rue+Duguay+Trouin%C2%A0%C2%A075006+PARIS&entry=gmail&source=g">75006 PARIS</a></font></strong><strong><br>
<font color="#0099ff" size="1" face="Arial"><strong><a href="http://www.unicef.fr/" target="_blank">www.unicef.fr</a></strong></font>
</strong></p>
</td>
<td style="width:auto"><a href="http://www.unicef.fr" target="_blank"></a>
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
<a href="http://www.unicef.fr/" target="_blank"></a></p>
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
<a href="http://www.unicef.fr/" target="_blank"></a><a href="http://www.unicef.fr/" target="_blank"></a><a title="" href="https://don.unicef.fr/b?cid=73" target="_blank"><img style="width: 100px; height: 100px;" border="0" src="cid:signature_Unicef-France_ade377bf-317d-4502-9e2f-a0b487c09563.gif"></a></p>
</td>
<td style="width:auto">
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d" align="right">
</p>
</td>
</tr>
</tbody>
</table>
<p style="font-family:Arial;font-size:10pt"></p>
</td>
</tr>
<tr>
<td style="width:auto">
<p style="font-family:Arial;font-size:10pt" class="gmail-m_-6491898328862618844d25f83d3-f6d0-434b-863d-6b70d6fe505d">
</p>
<hr color="#0099ff" size="1">
<a href="http://www.unicef.fr" target="_blank"></a>
<p></p>
</td>
</tr>
</tbody>
</table>
</div><div><div class="gmail-h5">
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<p class="MsoNormal">After hours of struggle, I removed all the hosts.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Installed a fresh centos 6.x on a host. Now it works like a charm.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">I will install a fresh ovirt 4.x, and start migration my vm's on new centos 7.4 hosts.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The only supported way seems exporting/importing vm's for different ovirt engines. I wish I had plain qcow2 images to copy...<u></u><u></u></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">You could detach and attach a whole storage domain.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Y.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal">On Tue, 19 Sep 2017 at 10:18, Yaniv Kaul <<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<p class="MsoNormal">On Mon, Sep 18, 2017 at 11:47 PM, Ozan Uzun <<a href="mailto:ozanuzun@gmail.com" target="_blank">ozanuzun@gmail.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">Hello,<u></u><u></u></p>
</div>
<p class="MsoNormal">Today I updated my ovirt engine v3.5 and all my hosts on one datacenter (centos 7.4 ones).<u></u><u></u></p>
</div>
</div>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">You are mixing an ancient release (oVirt 3.5) with the latest CentOS. This is not supported at best, and who knows if it works.<u></u><u></u></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">and suddenly my vdsm and vdsm-network services stopped working.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">btw: My other DC is centos 6 based (managed from the same ovirt engine), everything works just fine there.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12pt">vdsm fails dependent on vdsm-network service, with lots of RPC error.<u></u><u></u></p>
</div>
<p class="MsoNormal">I tried to configure vdsm-tool configure --force, deleted everything (vdsm-libvirt), reinstalled.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Could not make it work.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">My logs are filled with the follogin<br>
<br>
Sep 18 23:06:01 node6 python[5340]: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: KEYRING:persistent:0))<u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal">This may sound like a change that happened in libvirt authentication, which we've adjusted to in oVirt 4.1.5 (specifically VDSM) I believe. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Y.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
<div>
<div>
<div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<div>
<div>
<p class="MsoNormal">Sep 18 23:06:01 node6 vdsm-tool[5340]: libvirt: XML-RPC error : authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No
Kerberos credent<br>
Sep 18 23:06:01 node6 libvirtd[4312]: 2017-09-18 20:06:01.954+0000: 4312: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
<br>
-------<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">journalctl -xe output for vdsm-network<u></u><u></u></p>
</div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt"><br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: libvirt: XML-RPC error : authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credent<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: Traceback (most recent call last):<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/bin/vdsm-tool", line 219, in main<br>
Sep 18 23:06:02 node6 libvirtd[4312]: 2017-09-18 20:06:02.558+0000: 4312: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return tool_command[cmd]["command"](*<wbr>args)<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-<wbr>packages/vdsm/tool/upgrade_<wbr>300_networks.py", line 83, in upgrade_networks<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: networks = netinfo.networks()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-<wbr>packages/vdsm/netinfo.py", line 112, in networks<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: conn = libvirtconnection.get()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-<wbr>packages/vdsm/<wbr>libvirtconnection.py", line 159, in get<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: conn = _open_qemu_connection()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-<wbr>packages/vdsm/<wbr>libvirtconnection.py", line 95, in _open_qemu_connection<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return utils.retry(libvirtOpen, timeout=10, sleep=0.2)<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib/python2.7/site-<wbr>packages/vdsm/utils.py", line 1108, in retry<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: return func()<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: File "/usr/lib64/python2.7/site-<wbr>packages/libvirt.py", line 105, in openAuth<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: if ret is None:raise libvirtError('<wbr>virConnectOpenAuth() failed')<br>
Sep 18 23:06:02 node6 vdsm-tool[5340]: libvirtError: authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials availa<br>
Sep 18 23:06:02 node6 systemd[1]: vdsm-network.service: control process exited, code=exited status=1<br>
Sep 18 23:06:02 node6 systemd[1]: Failed to start Virtual Desktop Server Manager network restoration.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">-----<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12pt">libvirt is running but throws some errors.<br>
<br>
[root@node6 ~]# systemctl status libvirtd<br>
● libvirtd.service - Virtualization daemon<br>
Loaded: loaded (/usr/lib/systemd/system/<wbr>libvirtd.service; enabled; vendor preset: enabled)<br>
Drop-In: /etc/systemd/system/libvirtd.<wbr>service.d<br>
└─unlimited-core.conf<br>
Active: active (running) since Mon 2017-09-18 23:15:47 +03; 19min ago<br>
Docs: man:libvirtd(8)<br>
<a href="http://libvirt.org" target="_blank">http://libvirt.org</a><br>
Main PID: 6125 (libvirtd)<br>
CGroup: /system.slice/libvirtd.service<br>
└─6125 /usr/sbin/libvirtd --listen<br>
<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.195+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.396+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
Sep 18 23:15:56 node6 libvirtd[6125]: 2017-09-18 20:15:56.597+0000: 6125: error : virNetSocketReadWire:1808 : End of file while reading data: Input/output error<br>
<br>
<br>
----------------<br>
<br>
<br>
[root@node6 ~]# virsh<br>
Welcome to virsh, the virtualization interactive terminal.<br>
<br>
Type: 'help' for help with commands<br>
'quit' to quit<br>
<br>
virsh # list<br>
error: failed to connect to the hypervisor<br>
error: authentication failed: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available (default cache: KEYRING:persistent:0)))<br>
<br>
<br>
=================<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I do not want to lose all my virtual servers, is there any way to recover them? Currenty everything is down. I am ok to install a new ovirt engine if somehow I can restore my virtual servers. I can also split centos 6 and centos 7 ovirt
engine's.<u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</blockquote>
</div>
</div>
</div>
<div>
<div>
<div>
<blockquote style="border-top:none;border-right:none;border-bottom:none;border-left:1pt solid rgb(204,204,204);padding:0cm 0cm 0cm 6pt;margin:5pt 0cm 5pt 4.8pt">
<p class="MsoNormal" style="margin-bottom:12pt">______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<wbr>mailman/listinfo/users</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div></div></div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</blockquote></div><br></div></div>