[Engine-devel] [jenkins] Request to be able to create jobs for jsonrpc project
I am working on new project vdsm-jsonrpc-java which is async client library using json which will be used for communication between engine and vdsm. I would like to create jenkins jobs for this project but have no account nor authority to do so. Can you please +1 my request? Thanks, Piotr ___ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel
[Engine-devel] Consideration of the permission type
Hello everyone, I am working on https://bugzilla.redhat.com/show_bug.cgi?id=878812 bug so I played a bit with the code to understand how permission system works and noticed few things (please correct me if I am wrong): - In order to login to admin portal user need to have one of the admin roles (role_type = 1) - system tree is built using number of queries - before running each query permission validation happens so the code checks whether the user is able to run a query - I noticed that none of the queries required to build system tree is admin query and validation depends on result of getUser().isAdmin() (Please check http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/QueriesCommandBase.java;h=42b4985830033579802c278a6bae932cf0ffa3c7;hb=refs/heads/master line 123). This statement is always true for a user which was able to log in to admin portal. I was able to come up with following ways to solve this issue (please help to find the good enough): - fix verification - filter results of query - change a bit permission model. The structure is quite flat (there are only 2 role_types) or we could go with containers as it was proposed in bug description. Thanks, Piotr ___ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel
Re: [Engine-devel] OpenLdap and Kerberos for oVirt on f19
Working closely with Juan we manged to find the issue. During the process of configuration changed the hostname and I commented old hostname in the /etc/hostname file. Removing the comment helped. On Thu, Nov 14, 2013 at 11:19 AM, Piotr Kliczewski wrote: > On Thu, Nov 14, 2013 at 11:05 AM, Juan Hernandez wrote: >> On 11/14/2013 11:01 AM, Piotr Kliczewski wrote: >>> Hello everyone, >>> >>> I working on configuring OpenLdap 2.4.36 with kerberos for oVirt running on >>> f19. >>> >>> I follow following instruction: >>> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5 >>> >>> Please note that the instruction was written for f18. In order to have >>> step 18 working from >>> command line I had to set SASL_NOCANON to off. The reason was that I got: >>> >>> ldap_sasl_interactive_bind_s: Invalid credentials (49) >>> additional info: SASL(-13): authentication failure: GSSAPI Failure: >>> gss_accept_sec_context >>> >>> When SASL_NOCANON is off I can search the ldap but have the same issue >>> from java code: >>> >>> I got javax.naming.AuthenticationException: [LDAP: error code 49 - >>> SASL(-13): authentication failure: GSSAPI Failure: >>> gss_accept_sec_context]. >>> Have this when connecting using engine-manage-domains >>> (http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/kerberos/JndiAction.java;h=467d64cb03523ba7e5144a57d6a60428f039656f;hb=refs/heads/master >>> line 84). >>> >>> Can you please point me where is my config issue? >>> >>> I copied engine-devel for reference. >>> >> >> Do you have the cyrus-sasl-gssapi package installed? That should have >> been part of step 1. Try this: >> >> # yum -y install cyrus-sasl-gssapi >> >> I think that once that is installed you shouldn't need to set >> SASL_NOCANON off. >> > You are right the package was not installed I restarted slapd, krb5kdc > and kadmin after installing. I kinit one more time and tried to > ldapsearch as in step 18 but with the same result. >> -- >> Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta >> 3ºD, 28016 Madrid, Spain >> Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L. ___ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel
Re: [Engine-devel] OpenLdap and Kerberos for oVirt on f19
On Thu, Nov 14, 2013 at 11:05 AM, Juan Hernandez wrote: > On 11/14/2013 11:01 AM, Piotr Kliczewski wrote: >> Hello everyone, >> >> I working on configuring OpenLdap 2.4.36 with kerberos for oVirt running on >> f19. >> >> I follow following instruction: >> https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5 >> >> Please note that the instruction was written for f18. In order to have >> step 18 working from >> command line I had to set SASL_NOCANON to off. The reason was that I got: >> >> ldap_sasl_interactive_bind_s: Invalid credentials (49) >> additional info: SASL(-13): authentication failure: GSSAPI Failure: >> gss_accept_sec_context >> >> When SASL_NOCANON is off I can search the ldap but have the same issue >> from java code: >> >> I got javax.naming.AuthenticationException: [LDAP: error code 49 - >> SASL(-13): authentication failure: GSSAPI Failure: >> gss_accept_sec_context]. >> Have this when connecting using engine-manage-domains >> (http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/kerberos/JndiAction.java;h=467d64cb03523ba7e5144a57d6a60428f039656f;hb=refs/heads/master >> line 84). >> >> Can you please point me where is my config issue? >> >> I copied engine-devel for reference. >> > > Do you have the cyrus-sasl-gssapi package installed? That should have > been part of step 1. Try this: > > # yum -y install cyrus-sasl-gssapi > > I think that once that is installed you shouldn't need to set > SASL_NOCANON off. > You are right the package was not installed I restarted slapd, krb5kdc and kadmin after installing. I kinit one more time and tried to ldapsearch as in step 18 but with the same result. > -- > Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta > 3ºD, 28016 Madrid, Spain > Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L. ___ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel
[Engine-devel] OpenLdap and Kerberos for oVirt on f19
Hello everyone, I working on configuring OpenLdap 2.4.36 with kerberos for oVirt running on f19. I follow following instruction: https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5 Please note that the instruction was written for f18. In order to have step 18 working from command line I had to set SASL_NOCANON to off. The reason was that I got: ldap_sasl_interactive_bind_s: Invalid credentials (49) additional info: SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context When SASL_NOCANON is off I can search the ldap but have the same issue from java code: I got javax.naming.AuthenticationException: [LDAP: error code 49 - SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context]. Have this when connecting using engine-manage-domains (http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/kerberos/JndiAction.java;h=467d64cb03523ba7e5144a57d6a60428f039656f;hb=refs/heads/master line 84). Can you please point me where is my config issue? I copied engine-devel for reference. Thanks, Piotr ___ Engine-devel mailing list Engine-devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/engine-devel
Re: [Engine-devel] fails when build engine source code
Please try to clean your target directories and rebuild using:
make clean install-dev PREFIX="$HOME/ovirt-engine"
It is always good to check
http://www.ovirt.org/OVirt_Engine_Development_Environment and look at Usage
section.
There is a bit of information which can help solving similar issues.
Piotr
On Fri, Oct 25, 2013 at 9:31 AM, Tomas Jelinek wrote:
> hey,
>
> I have tried to build the current master and it works fine.
> Which exact git commit are you trying to build?
>
> BTW for this kinds of errors I could suspect that there is some mess
> from older builds which causes the problems. If this happens to you also
> on the current HEAD
> please try to:
>
> delete ~/.m2/repository/org/ovirt/*
> delete all the targets: cd ; find . -name target -exec
> rm -rf {} \;
>
> Tomas
>
> - Original Message -
> > From: "bigclouds"
> > To: "engine-devel"
> > Sent: Friday, October 25, 2013 5:03:56 AM
> > Subject: [Engine-devel] fails when build engine source code
> >
> > hi,all
> > look at the error. UI Utils Compatibility part fails.
> > [INFO] UI Utils Compatibility (for UICommon) . FAILURE
> [0.385s]
> > [INFO] Frontend for GWT UI Projects .. SKIPPED
> > [INFO] UICommonWeb ... SKIPPED
> > [INFO] oVirt GWT UI common infrastructure SKIPPED
> > [INFO] WebAdmin .. SKIPPED
> > [INFO] UserPortal SKIPPED
> > [INFO] oVirt Server EAR .. SKIPPED
> > [ERROR] Failed to execute goal
> > org.codehaus.mojo:gwt-maven-plugin:2.5.1:compile (default) on project
> > uicompat: GWT Module org.ovirt.engine.core.SearchBackend not found in
> > project sources or resources. -> [Help 1]
> > org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute
> > goal org.codehaus.mojo:gwt-maven-plugin:2.5.1:compile (default) on
> project
> > uicompat: GWT Module org.ovirt.engine.core.SearchBackend not found in
> > project sources or resources.
> > at
> >
> org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:217)
> > at
> >
> org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
> > at
> >
> org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
> > at
> >
> org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:84)
> > at
> >
> org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:59)
> > at org.apache.maven.lifecycle.internal.L
> > ifecycleStarter.singleThreadedBuild(LifecycleStarter.java:183)
> > at
> >
> org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:161)
> > at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:320)
> > at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:156)
> > at org.apache.maven.cli.MavenCli.execute(MavenCli.java:537)
> > at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:196)
> > at org.apache.maven.cli.MavenCli.main(MavenCli.java:141)
> > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
> > at
> >
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
> > at sun.reflect.DelegatingMethodAccessorImpl
> > .invoke(DelegatingMethodAccessorImpl.java:43)
> > at java.lang.reflect.Method.invoke(Method.java:606)
> > at
> >
> org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:290)
> > at
> >
> org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:230)
> > at
> >
> org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:409)
> > at
> org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:352)
> > Caused by: org.apache.maven.plugin.MojoExecutionException: GWT Module
> > org.ovirt.engine.core.SearchBackend not found in project sources or
> > resources.
> > at
> >
> org.codehaus.mojo.gwt.shell.CompileMojo.compilationRequired(CompileMojo.java:495)
> > at org.codehaus.mojo.gwt.shell.CompileMojo.compil e(CompileMojo.java:356)
> > at
> org.codehaus.mojo.gwt.shell.CompileMojo.doExecute(CompileMojo.java:280)
> > at
> >
> org.codehaus.mojo.gwt.shell.AbstractGwtShellMojo.execute(AbstractGwtShellMojo.java:172)
> > at
> >
> org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:101)
> > at
> >
> org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:209)
> > ... 19 more
> > Caused by: org.codehaus.mojo.gwt.utils.GwtModuleReaderException: GWT
> Module
> > org.ovirt.engine.core.SearchBackend not found in project sources or
> > resources.
> > at
> >
> org.codehaus.mojo.gwt.AbstractGwtModuleMojo.readModule(AbstractGwtModuleMojo.java:205)
> > at org.codehaus.mojo.gwt.GwtModule.getLocalInherits(GwtModule.java:189)
> > at org.codehaus.mojo.gwt.GwtModule.getInherits(GwtModule.java:149)
> > at org.codehaus.mojo.gwt.GwtModule.getEntryPoints(Gw
