Signature

2013-12-12 Thread Salar Darwish
Hello,

I am very new with cloudstack and trying to generate a signature to reqeust
some simpel api's with php. I use the following script but still get the
error:

unable to verify user credentials and/or request signature

Can some one help me what is the mistake here. Thank you in advance

$apikey =
"apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";

$secretkey =
"IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";

$response = "response=json";

$urlcommand_deployvm = $apikey . "&command=listUsers" . "&" . $response;

$hashcommand = $apikey . "&". "command=listUsers" . "&". $response;

$query = str_replace("+", "%20", $hashcommand );

$lower = strtolower($hashcommand);

$hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);

$base64encoded = base64_encode($hash);

$signature = "signature=" . urlencode($base64encoded);

$url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm . "&" .
$signature;


Kind regards,
Salar Darwish


signature php

2013-12-12 Thread Salar Darwish
Hello,

I am very new with cloudstack and trying to generate a signature to reqeust
some simpel api's with php. I use the following script but still get the
error:

unable to verify user credentials and/or request signature

Can some one help me what is the mistake here. Thank you in advance

$apikey =
"apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";

$secretkey =
"IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";

$response = "response=json";

$urlcommand_deployvm = $apikey . "&command=listUsers" . "&" . $response;

$hashcommand = $apikey . "&". "command=listUsers" . "&". $response;

$query = str_replace("+", "%20", $hashcommand );

$lower = strtolower($hashcommand);

$hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);

$base64encoded = base64_encode($hash);

$signature = "signature=" . urlencode($base64encoded);

$url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm . "&" .
$signature;


Re: signature php

2013-12-12 Thread sebgoa

On Dec 12, 2013, at 10:14 AM, Salar Darwish  wrote:

> Hello,
> 
> I am very new with cloudstack and trying to generate a signature to reqeust
> some simpel api's with php. I use the following script but still get the

you might want to check this one out:

https://github.com/qpleple/cloudstack-php-client/blob/master/src/BaseCloudStackClient.php



> error:
> 
> unable to verify user credentials and/or request signature
> 
> Can some one help me what is the mistake here. Thank you in advance
> 
> $apikey =
> "apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";
> 
> $secretkey =
> "IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";
> 
> $response = "response=json";
> 
> $urlcommand_deployvm = $apikey . "&command=listUsers" . "&" . $response;
> 
> $hashcommand = $apikey . "&". "command=listUsers" . "&". $response;
> 
> $query = str_replace("+", "%20", $hashcommand );
> 
> $lower = strtolower($hashcommand);
> 
> $hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);
> 
> $base64encoded = base64_encode($hash);
> 
> $signature = "signature=" . urlencode($base64encoded);
> 
> $url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm . "&" .
> $signature;



Re: router VM hangs frequently

2013-12-12 Thread Ryo Kan
Hi,Marty

Thank you for reply
It was found that new fact
behavior occurs in the "router VM" of multi-core

Try multicore someone

Thanks,
kan


2013/12/11 Marty Sweet 

> Hi Kano,
>
> You can normally find more information in the management server log, which
> is located under /var/log/cloudstack .
> Can you let us know why you think it is hanging? Does the console freeze or
> is networking disrupted?
> Does this issue seem to occur on other VMs running on your KVM hosts?
>
> Thanks,
> Marty
>
>
>
> On Tue, Dec 10, 2013 at 11:41 AM, Ryo Kan  wrote:
>
> > Hey all,
> >
> > Nice to meet you, my name is Kano.
> > Please tell us about "CloudStack".
> > Apache CloudStack. 4.1.1 + KVM environment
> >
> > router VM hangs frequently
> > please tell me what to do in order to troubleshoot problems
> >
>


RE: CS 4.2 : installation/running usage server problem

2013-12-12 Thread Tariq Iqbal
Hi Vadim,

From the management log it appears your usage server is not running, can you 
post result of the following command: ps aux | grep java

Can you try stopping and starting the cloudstack-usage process from the init.d 
folder and then monitor the mgmt. log to confirm it has a heartbeat and is 
running.

Best Regards,

Tariq Iqbal

S: +44 20 3603 0540 | M: +447909911600

tariq.iq...@shapeblue.com | Twitter: @TariqIqbal_

-Original Message-
From: Vadim Kimlaychuk [mailto:vadim.kimlayc...@elion.ee]
Sent: 12 December 2013 07:44
To: users@cloudstack.apache.org
Subject: RE: CS 4.2 : installation/running usage server problem

Hi Tariq,



1. Usage server is running(maybe?). I got:

   root@mgmtweb1:~# service cloudstack-usage status

   * cloudstack-usage is running

2. Management log shows:

2013-12-12 00:04:35,092 INFO  
[cloud.ha.HighAvailabilityManagerImpl] (HA-1:null)  checking health of usage 
server

2013-12-12 00:04:35,096 DEBUG [cloud.ha.HighAvailabilityManagerImpl] 
(HA-1:null) usage server running? false, heartbeat: null

2013-12-12 00:04:35,096 WARN  [apache.cloudstack.alerts] (HA-1:null)  alertType:

: 13 // dataCenterId:: 0 // podId:: 0 // clusterId:: null // message:: No usage 
server process running



I have tried to find process or port, but don’t know which port 
usage server should be listening to. Here are all of them I have:

root@mgmtweb1:~# netstat -antp | grep jsvc.

tcp6   0  0 :::8250 :::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::41020:::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::55134:::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::9090 :::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::45219:::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::7080 :::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::20400:::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::8080 :::*LISTEN  
24028/jsvc.exec

tcp6   0  0 :::52881:::*LISTEN  
24028/jsvc.exec



Vadim.



-Original Message-
From: Tariq Iqbal [mailto:tariq.iq...@shapeblue.com]
Sent: Wednesday, December 11, 2013 10:32 PM
To: users@cloudstack.apache.org
Subject: RE: CS 4.2 : installation/running usage server problem



Hi Vadim,



Can you check the usage service is actually running with 'service 
cloudstack-usage status'



Have you checked the management log for 'usage' related messages and are you 
able to post the log?



Best Regards,



Tariq Iqbal



S: +44 20 3603 0540 | M: +447909911600



tariq.iq...@shapeblue.com | Twitter: 
@TariqIqbal_



-Original Message-

From: Vadim Kimlaychuk [mailto:vadim.kimlayc...@elion.ee]

Sent: 11 December 2013 10:43

To: users@cloudstack.apache.org

Subject: CS 4.2 : installation/running usage server problem



Hi all,



I am a bit confused by installation instruction for usage server 
taken from here:


http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html/Installation_Guide/install-usage-server.html



I have my management server installed on Ubuntu and I have no idea 
what ./install.sh script does this guide refer for?



I made my usage installation by executing task like this:

# apt-get install cloudstack-usage



Everything went well and at the end I was able to start usage server by 
executing “service cloudstack-usage”. Nevertheless usage server is not working! 
Table usage_job is empty. And management server can’t find usage process.

I have found only 2 files to configure usage residing in /etc/cloudstack/usage:



1.db.properties



2.log4j-cloud_usage.xml



Database settings I have checked manually and was able to log-in to database. I 
am stuck now – can’t get the point where to find error? Usage server process 
does not seem to log anything : folder /var/log/cloudstack/usage is empty.



Please, help.



Vadim Kimlaychuk



This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales.

Re: Password reset feature and "User Data" service

2013-12-12 Thread Andrija Panic
Anyone?, I'm desperate...lot of production VMs running, can't really
experiment by stopping all of them... ?

http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
 says I only need to stop VMs, if decide to use external device
instead of
CS VR (which is NOT the case with me).

So, why don't I see the edit button on the shared network? (I DO see Edit
button for isolated networks that are already in use...) ?

Regards,
Andrija


On 10 December 2013 01:04, Andrija Panic  wrote:

> Any info on this one ? Do I need to stop ALL the VMs that are using this
> shared netowrk, in order to update it with new offering... ?
>
>
> On 5 December 2013 17:10, Andrija Panic  wrote:
>
>> I should add:I can see the "edit" button on Isolated netowrks already
>> deployed and in use buy some VMs...but have only 1 shred netowrk, and no
>> edit button for it...
>>
>>
>> On 5 December 2013 17:08, Andrija Panic  wrote:
>>
>>> From the
>>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>>>
>>> There should be the "edit" button on the network, but I dont see it,
>>> only the "restart" and "delete" netowrk buttons...This shared network is
>>> shared type, defined vlan ID, and has DNS/DHCP as the services provided by
>>> Virtual Router...
>>>
>>> Not sure why I don't see the edit button...
>>>
>>>
>>> On 5 December 2013 09:57, Andrija Panic  wrote:
>>>
 Thank you Sanjeev for inputs. Can you please confirm that updating
 network is possible only from API - I can not find it anywhere in GUI ?
 Also how should I handle VLAN assigment to this shared network - now
 vlan 500 is assigned...I suppose when updating the network (with the new
 networking template), that already deployed network should retain it's vlan
 and IP ranges, right ?

 Thank you very much...


 On 5 December 2013 06:15, Sanjeev Neelarapu <
 sanjeev.neelar...@citrix.com> wrote:

> Hi,
>
> Create another network offering with dhcp,dns and userdata service and
> undate the shared network with these offerings. While doing the network
> update choose not to change the network cidr.
>
> Thanks,
> Sanjeev
>
> -Original Message-
> From: Andrija Panic [mailto:andrija.pa...@gmail.com]
> Sent: Wednesday, December 04, 2013 3:31 PM
> To: users@cloudstack.apache.org
> Subject: Password reset feature and "User Data" service
>
> Hi,
>
> I have kind of problem and need advice please.
>
> I have 1 shared network for assigning public IP addresses to all VMs
> we create - with DHCP,DNS, and Virtual Router, as the services that are
> enabled in this networking tempalte.
>
>
> Now I want to enable "password management/reset" features, but I got
> error messages "user data" service is not enabled for my network id=212.
>
> So since modifications of Network tempalte is not possible, and the
> modification of the already deployed Network (id=212) is not possible
> is there a change to hack the database to include the "User Data"
> service as the service in both the netowrk template, and for the already
> used network (id=212)
>
> Any help would be really appriciated...
>
> Thanks,
> --
>
> Andrija Panić
>



 --

 Andrija Panić
 --
   http://admintweets.com
 --

>>>
>>>
>>>
>>> --
>>>
>>> Andrija Panić
>>> --
>>>   http://admintweets.com
>>> --
>>>
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>



-- 

Andrija Panić
--
  http://admintweets.com
--


Re: Password reset feature and "User Data" service

2013-12-12 Thread Domenico De Monte

  
  
Have you tried by api ?


Regards
  
Il 12/12/2013 16:46, Andrija Panic ha
  scritto:


  Anyone?, I'm desperate...lot of production VMs running, can't really
experiment by stopping all of them... ?

http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
 says I only need to stop VMs, if decide to use external device
instead of
CS VR (which is NOT the case with me).

So, why don't I see the edit button on the shared network? (I DO see Edit
button for isolated networks that are already in use...) ?

Regards,
Andrija


On 10 December 2013 01:04, Andrija Panic  wrote:


  
Any info on this one ? Do I need to stop ALL the VMs that are using this
shared netowrk, in order to update it with new offering... ?


On 5 December 2013 17:10, Andrija Panic  wrote:



  I should add:I can see the "edit" button on Isolated netowrks already
deployed and in use buy some VMs...but have only 1 shred netowrk, and no
edit button for it...


On 5 December 2013 17:08, Andrija Panic  wrote:


  
From the
http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network

There should be the "edit" button on the network, but I dont see it,
only the "restart" and "delete" netowrk buttons...This shared network is
shared type, defined vlan ID, and has DNS/DHCP as the services provided by
Virtual Router...

Not sure why I don't see the edit button...


On 5 December 2013 09:57, Andrija Panic  wrote:



  Thank you Sanjeev for inputs. Can you please confirm that updating
network is possible only from API - I can not find it anywhere in GUI ?
Also how should I handle VLAN assigment to this shared network - now
vlan 500 is assigned...I suppose when updating the network (with the new
networking template), that already deployed network should retain it's vlan
and IP ranges, right ?

Thank you very much...


On 5 December 2013 06:15, Sanjeev Neelarapu <
sanjeev.neelar...@citrix.com> wrote:


  
Hi,

Create another network offering with dhcp,dns and userdata service and
undate the shared network with these offerings. While doing the network
update choose not to change the network cidr.

Thanks,
Sanjeev

-Original Message-
From: Andrija Panic [mailto:andrija.pa...@gmail.com]
Sent: Wednesday, December 04, 2013 3:31 PM
To: users@cloudstack.apache.org
Subject: Password reset feature and "User Data" service

Hi,

I have kind of problem and need advice please.

I have 1 shared network for assigning public IP addresses to all VMs
we create - with DHCP,DNS, and Virtual Router, as the services that are
enabled in this networking tempalte.


Now I want to enable "password management/reset" features, but I got
error messages "user data" service is not enabled for my network id=212.

So since modifications of Network tempalte is not possible, and the
modification of the already deployed Network (id=212) is not possible
is there a change to hack the database to include the "User Data"
service as the service in both the netowrk template, and for the already
used network (id=212)

Any help would be really appriciated...

Thanks,
--

Andrija Panić


  
  


--

Andrija Panić
--
  http://admintweets.com
--






--

Andrija Panić
--
  http://admintweets.com
--


  
  


--

Andrija Panić
--
  http://admintweets.com
--






--

Andrija Panić
--
  http://admintweets.com
--


  
  





-- 
  
  

  

  
  
  Supernova
  s.r.l.
  Via G. Misiticoni, 3
  65126 - Pescara
  ITALY
  
  
  www.netsons.com


   Domenico
De Monte
CEO 
   
  
  t. (+39)
085 45 100 52
  m. (+39)
339 79 033 98
  e. d.demo...@netsons.com
  
  
 
  

  
  
  
  Netsons® è un marchio registrato dalla Supernova s.r.l.
  
  
  
Le informazioni trasmesse sono riservate alla persona o alla
società indicata come destinatario, e possono includere
contenuti considerati confidenziali. Ogni elaborazione,
comunicazione, trasmissione o altro utilizzo

Re: Password reset feature and "User Data" service

2013-12-12 Thread Andrija Panic
No I have not, you think this is the UI bug ?

Sent from Google Nexus 4
On Dec 12, 2013 4:49 PM, "Domenico De Monte"  wrote:

>  Have you tried by api ?
>
>
> Regards
>  Il 12/12/2013 16:46, Andrija Panic ha scritto:
>
> Anyone?, I'm desperate...lot of production VMs running, can't really
> experiment by stopping all of them... ?
> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>  says I only need to stop VMs, if decide to use external device
> instead of
> CS VR (which is NOT the case with me).
>
> So, why don't I see the edit button on the shared network? (I DO see Edit
> button for isolated networks that are already in use...) ?
>
> Regards,
> Andrija
>
>
> On 10 December 2013 01:04, Andrija Panic  
>  wrote:
>
>
>  Any info on this one ? Do I need to stop ALL the VMs that are using this
> shared netowrk, in order to update it with new offering... ?
>
>
> On 5 December 2013 17:10, Andrija Panic  
>  wrote:
>
>
>  I should add:I can see the "edit" button on Isolated netowrks already
> deployed and in use buy some VMs...but have only 1 shred netowrk, and no
> edit button for it...
>
>
> On 5 December 2013 17:08, Andrija Panic  
>  wrote:
>
>
>  From 
> thehttp://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>
> There should be the "edit" button on the network, but I dont see it,
> only the "restart" and "delete" netowrk buttons...This shared network is
> shared type, defined vlan ID, and has DNS/DHCP as the services provided by
> Virtual Router...
>
> Not sure why I don't see the edit button...
>
>
> On 5 December 2013 09:57, Andrija Panic  
>  wrote:
>
>
>  Thank you Sanjeev for inputs. Can you please confirm that updating
> network is possible only from API - I can not find it anywhere in GUI ?
> Also how should I handle VLAN assigment to this shared network - now
> vlan 500 is assigned...I suppose when updating the network (with the new
> networking template), that already deployed network should retain it's vlan
> and IP ranges, right ?
>
> Thank you very much...
>
>
> On 5 December 2013 06:15, Sanjeev Neelarapu  
> wrote:
>
>
>  Hi,
>
> Create another network offering with dhcp,dns and userdata service and
> undate the shared network with these offerings. While doing the network
> update choose not to change the network cidr.
>
> Thanks,
> Sanjeev
>
> -Original Message-
> From: Andrija Panic [mailto:andrija.pa...@gmail.com ]
> Sent: Wednesday, December 04, 2013 3:31 PM
> To: users@cloudstack.apache.org
> Subject: Password reset feature and "User Data" service
>
> Hi,
>
> I have kind of problem and need advice please.
>
> I have 1 shared network for assigning public IP addresses to all VMs
> we create - with DHCP,DNS, and Virtual Router, as the services that are
> enabled in this networking tempalte.
>
>
> Now I want to enable "password management/reset" features, but I got
> error messages "user data" service is not enabled for my network id=212.
>
> So since modifications of Network tempalte is not possible, and the
> modification of the already deployed Network (id=212) is not possible
> is there a change to hack the database to include the "User Data"
> service as the service in both the netowrk template, and for the already
> used network (id=212)
>
> Any help would be really appriciated...
>
> Thanks,
> --
>
> Andrija Panić
>
>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>
>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>
>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>
>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>
>
>
>
>
> --
>
>
>
> *Supernova s.r.l.*
> Via G. Misiticoni, 3
> 65126 - Pescara
> ITALY
>
>
> *www.netsons.com* 
> *Domenico De Monte*
> CEO
>
>
> *t. *(+39) 085 45 100 52
> *m. *(+39) 339 79 033 98
> *e. *d.demo...@netsons.com
>
>
>  [image: View Domenico De Monte's profile on 
> LinkedIn]
>
> *Netsons® è un marchio registrato dalla Supernova s.r.l.*
>
>  Le informazioni trasmesse sono riservate alla persona o alla società
> indicata come destinatario, e possono includere contenuti considerati
> confidenziali. Ogni elaborazione, comunicazione, trasmissione o altro
> utilizzo, anche azioni conseguenti alla conoscenza di queste informazioni
> da parte di chiunque non sia espressamente indicato come destinatario è
> proibita. Nel caso abbiate ricevuto per errore questa comunicazione, siete
> pregati di darne avviso a info [at] netsons.com ed elim

Re: Password reset feature and "User Data" service

2013-12-12 Thread Domenico De Monte

  
  
I do not see your specific case
but, in my case, i notice many bugs in this release so: yes, i
think it's one of UI bugs.


Regards


Il 12/12/2013 16:50, Andrija Panic ha
  scritto:


  No I have not, you think this is the UI bug ?
  Sent from Google Nexus 4
  On Dec 12, 2013 4:49 PM, "Domenico De
Monte" 
wrote:

   Have you tried by api ?


Regards
  
Il 12/12/2013 16:46, Andrija Panic ha scritto:


  Anyone?, I'm desperate...lot of production VMs running, can't really
experiment by stopping all of them... ?

http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
 says I only need to stop VMs, if decide to use external device
instead of
CS VR (which is NOT the case with me).

So, why don't I see the edit button on the shared network? (I DO see Edit
button for isolated networks that are already in use...) ?

Regards,
Andrija


On 10 December 2013 01:04, Andrija Panic  wrote:


  
Any info on this one ? Do I need to stop ALL the VMs that are using this
shared netowrk, in order to update it with new offering... ?


On 5 December 2013 17:10, Andrija Panic  wrote:



  I should add:I can see the "edit" button on Isolated netowrks already
deployed and in use buy some VMs...but have only 1 shred netowrk, and no
edit button for it...


On 5 December 2013 17:08, Andrija Panic  wrote:


  
From the
http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network

There should be the "edit" button on the network, but I dont see it,
only the "restart" and "delete" netowrk buttons...This shared network is
shared type, defined vlan ID, and has DNS/DHCP as the services provided by
Virtual Router...

Not sure why I don't see the edit button...


On 5 December 2013 09:57, Andrija Panic  wrote:



  Thank you Sanjeev for inputs. Can you please confirm that updating
network is possible only from API - I can not find it anywhere in GUI ?
Also how should I handle VLAN assigment to this shared network - now
vlan 500 is assigned...I suppose when updating the network (with the new
networking template), that already deployed network should retain it's vlan
and IP ranges, right ?

Thank you very much...


On 5 December 2013 06:15, Sanjeev Neelarapu <
sanjeev.neelar...@citrix.com> wrote:


  
Hi,

Create another network offering with dhcp,dns and userdata service and
undate the shared network with these offerings. While doing the network
update choose not to change the network cidr.

Thanks,
Sanjeev

-Original Message-
From: Andrija Panic [mailto:andrija.pa...@gmail.com]
Sent: Wednesday, December 04, 2013 3:31 PM
To: users@cloudstack.apache.org
Subject: Password reset feature and "User Data" service

Hi,

I have kind of problem and need advice please.

I have 1 shared network for assigning public IP addresses to all VMs
we create - with DHCP,DNS, and Virtual Router, as the services that are
enabled in this networking tempalte.


Now I want to enable "password management/reset" features, but I got
error messages "user data" service is not enabled for my network id=212.

So since modifications of Network tempalte is not possible, and the
modification of the already deployed Network (id=212) is not possible
is there a change to hack the database to include the "User Data"
service as the service in both the netowrk template, and for the already
used network (id=212)

Any help would be really appriciated...

Thanks,
--

Andrija Panić


  
  

--

Andrija Panić
--
  http://admintweets.com
--





--

Andrija Panić
--
  http://admintweets.com
--


  
  

--

Andrija Panić
--
  http://admintweets.com
--





--

Andrija Panić
--
  http://admintweets.com
--


  
  




-- 
  
  

  
 
  
  Supernova

  s.r.l.
  Via G. Misiticoni, 3
  65126 - Pescara
  ITALY
   

how to add new public subnets to my cs(basic networking mode)

2013-12-12 Thread Steven Liang
Hi everyone,

Could you please tell me how to add new public subnets to my cs? Because
my existing ips will exhausted.
Thank you.

Regards,
Steven




Re: Password reset feature and "User Data" service

2013-12-12 Thread Andrija Panic
Well, I prefer to do it via CloudMonkey, not using API that much,,,:

Will the folowing do the job:

cloudmonkey update network id=xxxIdOfNetworkToBeUpdatedxxx
networkofferingid=xxxNewNetworkOfferingIDxxx

What I'm asking - do I need to define any other parametres for update
beside the "NetworkOfferingID" (I want to keep CIDR as sugested by Sanjeev)
?

Thanks for you help


On 12 December 2013 16:53, Domenico De Monte  wrote:

>  I do not see your specific case but, in my case, i notice many bugs in
> this release so: yes, i think it's one of UI bugs.
>
>
> Regards
>
>
> Il 12/12/2013 16:50, Andrija Panic ha scritto:
>
> No I have not, you think this is the UI bug ?
>
> Sent from Google Nexus 4
> On Dec 12, 2013 4:49 PM, "Domenico De Monte" 
> wrote:
>
>>  Have you tried by api ?
>>
>>
>> Regards
>>  Il 12/12/2013 16:46, Andrija Panic ha scritto:
>>
>> Anyone?, I'm desperate...lot of production VMs running, can't really
>> experiment by stopping all of them... ?
>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>>  says I only need to stop VMs, if decide to use external device
>> instead of
>> CS VR (which is NOT the case with me).
>>
>> So, why don't I see the edit button on the shared network? (I DO see Edit
>> button for isolated networks that are already in use...) ?
>>
>> Regards,
>> Andrija
>>
>>
>> On 10 December 2013 01:04, Andrija Panic  
>>  wrote:
>>
>>
>>  Any info on this one ? Do I need to stop ALL the VMs that are using this
>> shared netowrk, in order to update it with new offering... ?
>>
>>
>> On 5 December 2013 17:10, Andrija Panic  
>>  wrote:
>>
>>
>>  I should add:I can see the "edit" button on Isolated netowrks already
>> deployed and in use buy some VMs...but have only 1 shred netowrk, and no
>> edit button for it...
>>
>>
>> On 5 December 2013 17:08, Andrija Panic  
>>  wrote:
>>
>>
>>  From 
>> thehttp://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>>
>> There should be the "edit" button on the network, but I dont see it,
>> only the "restart" and "delete" netowrk buttons...This shared network is
>> shared type, defined vlan ID, and has DNS/DHCP as the services provided by
>> Virtual Router...
>>
>> Not sure why I don't see the edit button...
>>
>>
>> On 5 December 2013 09:57, Andrija Panic  
>>  wrote:
>>
>>
>>  Thank you Sanjeev for inputs. Can you please confirm that updating
>> network is possible only from API - I can not find it anywhere in GUI ?
>> Also how should I handle VLAN assigment to this shared network - now
>> vlan 500 is assigned...I suppose when updating the network (with the new
>> networking template), that already deployed network should retain it's vlan
>> and IP ranges, right ?
>>
>> Thank you very much...
>>
>>
>> On 5 December 2013 06:15, Sanjeev Neelarapu  
>> wrote:
>>
>>
>>  Hi,
>>
>> Create another network offering with dhcp,dns and userdata service and
>> undate the shared network with these offerings. While doing the network
>> update choose not to change the network cidr.
>>
>> Thanks,
>> Sanjeev
>>
>> -Original Message-
>> From: Andrija Panic [mailto:andrija.pa...@gmail.com 
>> ]
>> Sent: Wednesday, December 04, 2013 3:31 PM
>> To: users@cloudstack.apache.org
>> Subject: Password reset feature and "User Data" service
>>
>> Hi,
>>
>> I have kind of problem and need advice please.
>>
>> I have 1 shared network for assigning public IP addresses to all VMs
>> we create - with DHCP,DNS, and Virtual Router, as the services that are
>> enabled in this networking tempalte.
>>
>>
>> Now I want to enable "password management/reset" features, but I got
>> error messages "user data" service is not enabled for my network id=212.
>>
>> So since modifications of Network tempalte is not possible, and the
>> modification of the already deployed Network (id=212) is not possible
>> is there a change to hack the database to include the "User Data"
>> service as the service in both the netowrk template, and for the already
>> used network (id=212)
>>
>> Any help would be really appriciated...
>>
>> Thanks,
>> --
>>
>> Andrija Panić
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>>
>>
>> --
>>
>>
>>
>> *Supernova s.r.l.*
>> Via G. Misiticoni, 3
>> 65126 - Pescara
>> ITALY
>>
>>
>> *www.netsons.com* 
>> *Do

dedicated public ip range for VPC

2013-12-12 Thread Brandon Arms
Is anyone familiar with dedicating a specific ip range to an account that needs 
a VPC setup?  when I added a new public range and associated it with the 
account, there was an isolated network automatically created under the account 
and all the public ip addresses specified were allocated correctly.  Problem 
is, the customer needs a vpc for tiering, S2S vpn etc.  When I deleted the 
automatically generated isolated network, and created a VPC, the dedicated 
public ip's were not allocated to the vpc router.  When acquiring new public ip 
addresses, some were being pulled from the system public ip range.

Brandon Arms
DSS


RE: how to add new public subnets to my cs(basic networking mode)

2013-12-12 Thread Brandon Arms
Here is the citrix answer:

Extending your IP range
If you want to extend the range. You can add another IP range by clicking on 
Add IP Range and then specify the same network & VLAN settings, except specify 
the a new IP range in the same subnet. Do not overlap the existing public IP 
range.

The issue I found is my current public ip range is limited by my current subnet 
mask.  For example, if your public range is something like this:
Gateway: 1.1.1.1
Netmask: 255.255.255.224
Vlan: 10
Startip: 1.1.1.2
endIP: 1.1.1.30

I cannot extend my range as I only have 32 addresses available per my subnet 
mask, so the citrix solution is not an option.

I assume the citrix solution is valid if you have something defined like this:
Gateway: 1.1.1.1
Netmask: 255.255.255.0
Vlan: 10
Startip: 1.1.1.2
endIP: 1.1.1.30

now you have 256 possible ip addresses per your mask, but are only allowing a 
subset of those to be assigned.

I think in my case, I would have to find where this information is kept in the 
DB, and modify my subnet mask first, and then proceed with extending via the 
citrix solution.  The other option is to just add another vlan/subnet for the 
system account to use versus trying to extend your current one.

Brandon Arms
DSS

-Original Message-
From: Steven Liang [mailto:stevenli...@yesup.com] 
Sent: Thursday, December 12, 2013 11:17 AM
To: users@cloudstack.apache.org
Subject: how to add new public subnets to my cs(basic networking mode)

Hi everyone,

Could you please tell me how to add new public subnets to my cs? Because my 
existing ips will exhausted.
Thank you.

Regards,
Steven




Re: dedicated public ip range for VPC

2013-12-12 Thread Alena Prokharchyk
Brandon, dedicated ip range feature has a limitation in the cloudStack -
it can be used only for the case when customer (account) owns only one
Isolated network. As by initial design, the newly created ip range gets
programmed automatically on the Isolated network¹s VR right after the
range is created (so the code tries to locate the only one network for the
account; if there are more than one - it would fail)

I believe there was an enhancement request filed for support dedicated ip
range for multiple isolated networks case. If you can¹t find it, please
file a new one.

-Alena.

On 12/12/13, 9:14 AM, "Brandon Arms"  wrote:

>Is anyone familiar with dedicating a specific ip range to an account that
>needs a VPC setup?  when I added a new public range and associated it
>with the account, there was an isolated network automatically created
>under the account and all the public ip addresses specified were
>allocated correctly.  Problem is, the customer needs a vpc for tiering,
>S2S vpn etc.  When I deleted the automatically generated isolated
>network, and created a VPC, the dedicated public ip's were not allocated
>to the vpc router.  When acquiring new public ip addresses, some were
>being pulled from the system public ip range.
>
>Brandon Arms
>DSS



Re: signature php

2013-12-12 Thread Salar Darwish
Thank you. I have already checked the cloudstack php client but still can
not find the problem with my script.


2013/12/12 sebgoa 

>
> On Dec 12, 2013, at 10:14 AM, Salar Darwish 
> wrote:
>
> > Hello,
> >
> > I am very new with cloudstack and trying to generate a signature to
> reqeust
> > some simpel api's with php. I use the following script but still get the
>
> you might want to check this one out:
>
>
> https://github.com/qpleple/cloudstack-php-client/blob/master/src/BaseCloudStackClient.php
>
>
>
> > error:
> >
> > unable to verify user credentials and/or request signature
> >
> > Can some one help me what is the mistake here. Thank you in advance
> >
> > $apikey =
> >
> "apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";
> >
> > $secretkey =
> >
> "IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";
> >
> > $response = "response=json";
> >
> > $urlcommand_deployvm = $apikey . "&command=listUsers" . "&" . $response;
> >
> > $hashcommand = $apikey . "&". "command=listUsers" . "&". $response;
> >
> > $query = str_replace("+", "%20", $hashcommand );
> >
> > $lower = strtolower($hashcommand);
> >
> > $hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);
> >
> > $base64encoded = base64_encode($hash);
> >
> > $signature = "signature=" . urlencode($base64encoded);
> >
> > $url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm . "&"
> .
> > $signature;
>
>


-- 
*Met vriendelijke groet,*
*Salar Darwish*


Re: how to add new public subnets to my cs(basic networking mode)

2013-12-12 Thread Steven Liang

  
  
Hi Brandon,
  
  Thank you for your updating.
  I didn't use vlan, and I've added the new ip subnet to a new pod
  of my cs. After added some vms, there is no vms assign new ips. I
  need to configure vrouter manually?
  Thank you.
  
  Steven
  
  
  

  On 12/12/2013 12:27 PM, Brandon Arms wrote:


  Here is the citrix answer:

Extending your IP range
If you want to extend the range. You can add another IP range by clicking on Add IP Range and then specify the same network & VLAN settings, except specify the a new IP range in the same subnet. Do not overlap the existing public IP range.

The issue I found is my current public ip range is limited by my current subnet mask.  For example, if your public range is something like this:
Gateway: 1.1.1.1
Netmask: 255.255.255.224
Vlan: 10
Startip: 1.1.1.2
endIP: 1.1.1.30

I cannot extend my range as I only have 32 addresses available per my subnet mask, so the citrix solution is not an option.

I assume the citrix solution is valid if you have something defined like this:
Gateway: 1.1.1.1
Netmask: 255.255.255.0
Vlan: 10
Startip: 1.1.1.2
endIP: 1.1.1.30

now you have 256 possible ip addresses per your mask, but are only allowing a subset of those to be assigned.

I think in my case, I would have to find where this information is kept in the DB, and modify my subnet mask first, and then proceed with extending via the citrix solution.  The other option is to just add another vlan/subnet for the system account to use versus trying to extend your current one.

Brandon Arms
DSS

-Original Message-
From: Steven Liang [mailto:stevenli...@yesup.com] 
Sent: Thursday, December 12, 2013 11:17 AM
To: users@cloudstack.apache.org
Subject: how to add new public subnets to my cs(basic networking mode)

Hi everyone,

Could you please tell me how to add new public subnets to my cs? Because my existing ips will exhausted.
Thank you.

Regards,
Steven






-- 
  Steven Liang
Linux System Admin
Phone: 1.416.499.8009 ext. 2865
Cell Phone: 1.647.718.5292
Email: stevenli...@yesup.com
www.yesup.com | account.yesup.com
  
  
  



Re: signature php

2013-12-12 Thread Ian Service
Hey Salar,

The keys need to be in alphabetical order for you to calculate the correct
signature, (which you have in your example: [apiKey, command, response] but
you don't have a function to handle it)

apiKey has an upper case K in my code, maybe that's it?

- Ian


On Thu, Dec 12, 2013 at 2:18 PM, Salar Darwish wrote:

> Thank you. I have already checked the cloudstack php client but still can
> not find the problem with my script.
>
>
> 2013/12/12 sebgoa 
>
> >
> > On Dec 12, 2013, at 10:14 AM, Salar Darwish 
> > wrote:
> >
> > > Hello,
> > >
> > > I am very new with cloudstack and trying to generate a signature to
> > reqeust
> > > some simpel api's with php. I use the following script but still get
> the
> >
> > you might want to check this one out:
> >
> >
> >
> https://github.com/qpleple/cloudstack-php-client/blob/master/src/BaseCloudStackClient.php
> >
> >
> >
> > > error:
> > >
> > > unable to verify user credentials and/or request signature
> > >
> > > Can some one help me what is the mistake here. Thank you in advance
> > >
> > > $apikey =
> > >
> >
> "apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";
> > >
> > > $secretkey =
> > >
> >
> "IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";
> > >
> > > $response = "response=json";
> > >
> > > $urlcommand_deployvm = $apikey . "&command=listUsers" . "&" .
> $response;
> > >
> > > $hashcommand = $apikey . "&". "command=listUsers" . "&". $response;
> > >
> > > $query = str_replace("+", "%20", $hashcommand );
> > >
> > > $lower = strtolower($hashcommand);
> > >
> > > $hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);
> > >
> > > $base64encoded = base64_encode($hash);
> > >
> > > $signature = "signature=" . urlencode($base64encoded);
> > >
> > > $url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm .
> "&"
> > .
> > > $signature;
> >
> >
>
>
> --
> *Met vriendelijke groet,*
> *Salar Darwish*
>


RE: signature php

2013-12-12 Thread Santhosh Edukulla
Salar,

Few notes:

1. You created query variable as below, but you have not used it thereafter, i 
believe strtolower should take your query variable instead of hashcommand?

$query = str_replace("+", "%20", $hashcommand );
lower = strtolower($hashcommand);

2. I hope hash_hmac provides you the raw digest not the hex digest, i could see 
two true flags for this function below, what does second to last is doing? You 
should get the raw digest unlike the hexdigest. I believe you are using TRUE 
for that.

3. Also, $urlcommand_deployvm, make sure that strings "apiKey","command", 
"response" are sorted and then concatenated with their corresponding values 
like "key1=value1&key2=value2&..", So sort your keys first and form the string 
with their values. The data  changes when it is going as $lower to hash_hmac.

4. Before concatenating the signature to your url, make sure to strip for any 
new lines or carriage returns.

5. Last, make sure to quote your "values" for above mentioned step3. Some thing 
like below.  The below code is working for us but in python.

hashStr = "&".join(
["=".join(
[str.lower(r[0]),
 str.lower(
 urllib.quote_plus(str(r[1]))
 ).replace("+", "%20")]
) for r in params]
)
signature = base64.encodestring(hmac.new(
self.securityKey, hashStr, hashlib.sha1).digest()).strip()

Let me know.


Thanks!
Santhosh


From: Salar Darwish [salardarw...@gmail.com]
Sent: Thursday, December 12, 2013 2:18 PM
To: users@cloudstack.apache.org 
Subject: Re: signature php

Thank you. I have already checked the cloudstack php client but still can
not find the problem with my script.


2013/12/12 sebgoa 

>
> On Dec 12, 2013, at 10:14 AM, Salar Darwish 
> wrote:
>
> > Hello,
> >
> > I am very new with cloudstack and trying to generate a signature to
> reqeust
> > some simpel api's with php. I use the following script but still get the
>
> you might want to check this one out:
>
>
> https://github.com/qpleple/cloudstack-php-client/blob/master/src/BaseCloudStackClient.php
>
>
>
> > error:
> >
> > unable to verify user credentials and/or request signature
> >
> > Can some one help me what is the mistake here. Thank you in advance
> >
> > $apikey =
> >
> "apikey=BN_HAbfozXjgmwUFIFLtJ7wMkhxoN7Wn2kU0_0gtGed1wu7rZDw3yHbc4QjRN-PjJRkgY1EsCWYMBlwcf0k99Q";
> >
> > $secretkey =
> >
> "IUobE620Jg3CCxNA_amoaWeoMjXh5GNU0zjhYfXjZGbq9JxOsnQlutF5VjDF3-fZ2715JEceteNqnN6bN3woqw";
> >
> > $response = "response=json";
> >
> > $urlcommand_deployvm = $apikey . "&command=listUsers" . "&" . $response;
> >
> > $hashcommand = $apikey . "&". "command=listUsers" . "&". $response;
> >
> > $query = str_replace("+", "%20", $hashcommand );
> >
> > $lower = strtolower($hashcommand);
> >
> > $hash = hash_hmac("SHA1", $lower, $secretkey . true, TRUE);
> >
> > $base64encoded = base64_encode($hash);
> >
> > $signature = "signature=" . urlencode($base64encoded);
> >
> > $url = "http://localhost:8080/client/api?"; . $urlcommand_deployvm . "&"
> .
> > $signature;
>
>


--
*Met vriendelijke groet,*
*Salar Darwish*

Console Proxy Certificate Chain

2013-12-12 Thread Billy Ramsay
All,

I am attempting to install a custom certificate for our console proxy VMs,
as we have setup our own DNS responder using the RHIP source. The
uploadCustomCertificate API command is not documented very well, and I'm
having issues getting the certificate to install correctly. If I am not
mistaken, a cert that requires an intermediate CA cannot be installed from
the web interface, and must be done using the API. However, when using
CloudMonkey, I cannot seem to get the certificate (and it's chain) uploaded
properly.

I am using the instructions here:
http://www.chipchilders.com/blog/2013/1/2/undocumented-feature-using-certifi
cate-chains-in-cloudstack.html

However, I am using CloudMonkey and not the old Python wrapper.

The root and intermediate CA certs seem to upload without issue, but when I
view the "keystore" table in the CS database, the certs are formatted wrong
(the "\n"s did not get converted to new lines).

Also, the actual certificate will not upload, and the error I receive is
that the certificate failed validation. The certificate and key work fine
when I install them via the web interface (although there is not
intermediate CA installed, obviously).

What am I doing wrong?

Version info:

CloudStack 4.1.1
CloudMonkey 5.0.0




Re: Password reset feature and "User Data" service

2013-12-12 Thread Andrija Panic
Well, just tried tio update shared network with new network offering, but
it seems CS 4.2 does not allow shared networks to be upgraded...only
isolated ones...

Here is the output, for those interested...disapointed...how am I going to
expand service offering for the network... (add User Data service, beside
the dhcp and dns...)

> update network networkofferingid=640d8802-04ec-4a8c-9c4f-857f723e35bd
id=c8eaf8d8-758e-4e93-aa64-732728452ae6

.Async job ca39ae91-7e3b-4e6e-9d34-f1eafe79b9fa failed
Error 530, NetworkOffering and domain suffix upgrade can be perfomed for
Isolated networks only
accountid = d436cde0-dd7a-49e1-83e0-d4c7069433d1
cmd = org.apache.cloudstack.api.command.user.network.UpdateNetworkCmd
created = 2013-12-12T23:22:01+0100
jobid = ca39ae91-7e3b-4e6e-9d34-f1eafe79b9fa
jobprocstatus = 0
jobresult:
errorcode = 530
errortext = NetworkOffering and domain suffix upgrade can be perfomed for
Isolated networks only
jobresultcode = 530
jobresulttype = object
jobstatus = 2
userid = 4cfa7ab2-f4ae-4728-a906-85d368700fee


On 12 December 2013 17:45, Andrija Panic  wrote:

> Well, I prefer to do it via CloudMonkey, not using API that much,,,:
>
> Will the folowing do the job:
>
> cloudmonkey update network id=xxxIdOfNetworkToBeUpdatedxxx
> networkofferingid=xxxNewNetworkOfferingIDxxx
>
> What I'm asking - do I need to define any other parametres for update
> beside the "NetworkOfferingID" (I want to keep CIDR as sugested by Sanjeev)
> ?
>
> Thanks for you help
>
>
> On 12 December 2013 16:53, Domenico De Monte wrote:
>
>>  I do not see your specific case but, in my case, i notice many bugs in
>> this release so: yes, i think it's one of UI bugs.
>>
>>
>> Regards
>>
>>
>> Il 12/12/2013 16:50, Andrija Panic ha scritto:
>>
>> No I have not, you think this is the UI bug ?
>>
>> Sent from Google Nexus 4
>> On Dec 12, 2013 4:49 PM, "Domenico De Monte" 
>> wrote:
>>
>>>  Have you tried by api ?
>>>
>>>
>>> Regards
>>>  Il 12/12/2013 16:46, Andrija Panic ha scritto:
>>>
>>> Anyone?, I'm desperate...lot of production VMs running, can't really
>>> experiment by stopping all of them... ?
>>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>>>  says I only need to stop VMs, if decide to use external device
>>> instead of
>>> CS VR (which is NOT the case with me).
>>>
>>> So, why don't I see the edit button on the shared network? (I DO see Edit
>>> button for isolated networks that are already in use...) ?
>>>
>>> Regards,
>>> Andrija
>>>
>>>
>>> On 10 December 2013 01:04, Andrija Panic  
>>>  wrote:
>>>
>>>
>>>  Any info on this one ? Do I need to stop ALL the VMs that are using this
>>> shared netowrk, in order to update it with new offering... ?
>>>
>>>
>>> On 5 December 2013 17:10, Andrija Panic  
>>>  wrote:
>>>
>>>
>>>  I should add:I can see the "edit" button on Isolated netowrks already
>>> deployed and in use buy some VMs...but have only 1 shred netowrk, and no
>>> edit button for it...
>>>
>>>
>>> On 5 December 2013 17:08, Andrija Panic  
>>>  wrote:
>>>
>>>
>>>  From 
>>> thehttp://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>>>
>>> There should be the "edit" button on the network, but I dont see it,
>>> only the "restart" and "delete" netowrk buttons...This shared network is
>>> shared type, defined vlan ID, and has DNS/DHCP as the services provided by
>>> Virtual Router...
>>>
>>> Not sure why I don't see the edit button...
>>>
>>>
>>> On 5 December 2013 09:57, Andrija Panic  
>>>  wrote:
>>>
>>>
>>>  Thank you Sanjeev for inputs. Can you please confirm that updating
>>> network is possible only from API - I can not find it anywhere in GUI ?
>>> Also how should I handle VLAN assigment to this shared network - now
>>> vlan 500 is assigned...I suppose when updating the network (with the new
>>> networking template), that already deployed network should retain it's vlan
>>> and IP ranges, right ?
>>>
>>> Thank you very much...
>>>
>>>
>>> On 5 December 2013 06:15, Sanjeev Neelarapu  
>>> wrote:
>>>
>>>
>>>  Hi,
>>>
>>> Create another network offering with dhcp,dns and userdata service and
>>> undate the shared network with these offerings. While doing the network
>>> update choose not to change the network cidr.
>>>
>>> Thanks,
>>> Sanjeev
>>>
>>> -Original Message-
>>> From: Andrija Panic [mailto:andrija.pa...@gmail.com 
>>> ]
>>> Sent: Wednesday, December 04, 2013 3:31 PM
>>> To: users@cloudstack.apache.org
>>> Subject: Password reset feature and "User Data" service
>>>
>>> Hi,
>>>
>>> I have kind of problem and need advice please.
>>>
>>> I have 1 shared network for assigning public IP addresses to all VMs
>>> we create - with DHCP,DNS, and Virtual Router, as the services that are
>>> enabled in this networking tempalte.
>>>
>>>
>>> Now I want to enable "password management/reset" features, but I got
>>> 

Re: Console Proxy Certificate Chain

2013-12-12 Thread Chiradeep Vittal
It would appear to be a Cloudmonkey issue then. If you are skilled in
Python, you could try and fix it there. If you just want to get stuff to
work, you could hack it in the DB.

On 12/12/13 2:20 PM, "Billy Ramsay"  wrote:

>All,
>
>I am attempting to install a custom certificate for our console proxy VMs,
>as we have setup our own DNS responder using the RHIP source. The
>uploadCustomCertificate API command is not documented very well, and I'm
>having issues getting the certificate to install correctly. If I am not
>mistaken, a cert that requires an intermediate CA cannot be installed from
>the web interface, and must be done using the API. However, when using
>CloudMonkey, I cannot seem to get the certificate (and it's chain)
>uploaded
>properly.
>
>I am using the instructions here:
>http://www.chipchilders.com/blog/2013/1/2/undocumented-feature-using-certi
>fi
>cate-chains-in-cloudstack.html
>
>However, I am using CloudMonkey and not the old Python wrapper.
>
>The root and intermediate CA certs seem to upload without issue, but when
>I
>view the "keystore" table in the CS database, the certs are formatted
>wrong
>(the "\n"s did not get converted to new lines).
>
>Also, the actual certificate will not upload, and the error I receive is
>that the certificate failed validation. The certificate and key work fine
>when I install them via the web interface (although there is not
>intermediate CA installed, obviously).
>
>What am I doing wrong?
>
>Version info:
>
>CloudStack 4.1.1
>CloudMonkey 5.0.0
>
>



When official Cloudstack 4.2.1 will be published?

2013-12-12 Thread Netsons > Domenico "DoM" De Monte
Hello all,
On cs website there is announce published on 25 november about new cs available 
version: 4.2.1 

It said that download of latest official release 4.2.1 is possible from main 
website.

https://cwiki.apache.org/confluence/display/CLOUDSTACK/4.2.1+Release+Announcement

It's not. 

Why do not you correct this information? I ask you this because everyday i 
check this webpage hoping to read news about.

There is a new official date for latest bugfix version 4.2.1 release?


Waiting for your reply

Best regards

RE: dedicated public ip range for VPC

2013-12-12 Thread Likitha Shetty
Brandon,

In 4.2 release this feature was enhanced to support VPC setups too.
Refer - 
https://cwiki.apache.org/confluence/display/CLOUDSTACK/FS-+Dedicate+Public+IP+Addresses+per+tenant
 for the Functional spec.

Thanks,
Likitha

>-Original Message-
>From: Alena Prokharchyk [mailto:alena.prokharc...@citrix.com]
>Sent: Thursday, December 12, 2013 11:41 PM
>To: users@cloudstack.apache.org; ba...@dsscorp.com
>Subject: Re: dedicated public ip range for VPC
>
>Brandon, dedicated ip range feature has a limitation in the cloudStack - it 
>can be
>used only for the case when customer (account) owns only one Isolated network.
>As by initial design, the newly created ip range gets programmed automatically
>on the Isolated network¹s VR right after the range is created (so the code 
>tries to
>locate the only one network for the account; if there are more than one - it
>would fail)
>
>I believe there was an enhancement request filed for support dedicated ip range
>for multiple isolated networks case. If you can¹t find it, please file a new 
>one.
>
>-Alena.
>
>On 12/12/13, 9:14 AM, "Brandon Arms"  wrote:
>
>>Is anyone familiar with dedicating a specific ip range to an account
>>that needs a VPC setup?  when I added a new public range and associated
>>it with the account, there was an isolated network automatically
>>created under the account and all the public ip addresses specified
>>were allocated correctly.  Problem is, the customer needs a vpc for
>>tiering, S2S vpn etc.  When I deleted the automatically generated
>>isolated network, and created a VPC, the dedicated public ip's were not
>>allocated to the vpc router.  When acquiring new public ip addresses,
>>some were being pulled from the system public ip range.
>>
>>Brandon Arms
>>DSS



Re: When official Cloudstack 4.2.1 will be published?

2013-12-12 Thread BJO ERN
At 4.2.0 it took 1-2 weeks after the announcement to actually have a
release available to download.
I would expect this here too (QA/Build window I guess), but this time there
was no update on the main page. I don't this is the official announcement
and would just wait or compile it yourself like I did last week. Works
pretty good so far.

Bjoern



On Thu, Dec 12, 2013 at 8:11 PM, Netsons > Domenico "DoM" De Monte <
d.demo...@netsons.com> wrote:

> Hello all,
> On cs website there is announce published on 25 november about new cs
> available version: 4.2.1
>
> It said that download of latest official release 4.2.1 is possible from
> main website.
>
>
> https://cwiki.apache.org/confluence/display/CLOUDSTACK/4.2.1+Release+Announcement
>
> It's not.
>
> Why do not you correct this information? I ask you this because everyday i
> check this webpage hoping to read news about.
>
> There is a new official date for latest bugfix version 4.2.1 release?
>
>
> Waiting for your reply
>
> Best regards


Re: Can't launch instance on local storage from ISO

2013-12-12 Thread BJO ERN
It appears it can't find a suitable storage for the root disk on host id 5
or 6
How do your system offering look like (storage tags?) and how much local
storage is available ?

No suitable pools found for volume: Vol[40|vm=33|ROOT] under cluster: 1




On Mon, Dec 9, 2013 at 1:42 AM, Nux!  wrote:

> Hi,
>
> I'm trying to launch an instance from a FreeBSD ISO on local primary
> storage and it fails all the time. It works fine if I launch it with shared
> primary storage.
> The logs seem to hint to capacity issues, but this is hardly the case,
> there is plenty of room on both my hypervisors..
> (more logs here http://tmp.nux.ro/jkR-management-server.log )
>
> 2013-12-09 09:31:49,520 DEBUG [allocator.impl.FirstFitAllocator]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]
> FirstFitRoutingAllocator) Host Allocator returning 2 suitable hosts
> 2013-12-09 09:31:49,522 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Checking suitable pools for volume (Id, Type): (40,ROOT)
> 2013-12-09 09:31:49,522 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) We
> need to allocate new storagepool for this volume
> 2013-12-09 09:31:49,522 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Calling StoragePoolAllocators to find suitable pools
> 2013-12-09 09:31:49,523 DEBUG [storage.allocator.LocalStoragePoolAllocator]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> LocalStoragePoolAllocator trying to find storage pool to fit the vm
> 2013-12-09 09:31:49,526 DEBUG [storage.allocator.LocalStoragePoolAllocator]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> LocalStoragePoolAllocator returning 0 suitable storage pools
> 2013-12-09 09:31:49,526 DEBUG [storage.allocator.
> ClusterScopeStoragePoolAllocator] (Job-Executor-1:job-96 = [
> 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) ClusterScopeStoragePoolAllocator
> looking for storage pool
> 2013-12-09 09:31:49,526 DEBUG [storage.allocator.ZoneWideStoragePoolAllocator]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> ZoneWideStoragePoolAllocator to find storage pool
> 2013-12-09 09:31:49,526 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) No
> suitable pools found for volume: Vol[40|vm=33|ROOT] under cluster: 1
> 2013-12-09 09:31:49,526 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) No
> suitable pools found
> 2013-12-09 09:31:49,526 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) No
> suitable storagePools found under this Cluster: 1
> 2013-12-09 09:31:49,532 DEBUG [cloud.deploy.DeploymentPlanningManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) Could
> not find suitable Deployment Destination for this VM under any clusters,
> returning.
> 2013-12-09 09:31:49,532 DEBUG [cloud.deploy.FirstFitPlanner]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Searching all possible resources under this Zone: 1
> 2013-12-09 09:31:49,533 DEBUG [cloud.deploy.FirstFitPlanner]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Listing clusters in order of aggregate capacity, that have (atleast one
> host with) enough CPU and RAM capacity under this Zone: 1
> 2013-12-09 09:31:49,535 DEBUG [cloud.deploy.FirstFitPlanner]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Removing from the clusterId list these clusters from avoid set: [1]
> 2013-12-09 09:31:49,536 DEBUG [cloud.deploy.FirstFitPlanner]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) No
> clusters found after removing disabled clusters and clusters in avoid list,
> returning.
> 2013-12-09 09:31:49,568 DEBUG [cloud.vm.UserVmManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
> Destroying vm VM[User|fbsdtestlocal] as it failed to create on Host with
> Id:null
> 2013-12-09 09:31:49,580 DEBUG [cloud.capacity.CapacityManagerImpl]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) VM
> state transitted from :Stopped to Error with event:
> OperationFailedToErrorvm's original host id: null new host id: null host id
> before state transition: null
> 2013-12-09 09:31:49,595 WARN  [apache.cloudstack.alerts]
> (Job-Executor-1:job-96 = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ])
>  alertType:: 8 // dataCenterId:: 1 // podId:: null // clusterId:: null //
> message:: Failed to deploy Vm with Id: 33, on Host with Id: null
> 2013-12-09 09:31:49,622 INFO  [user.vm.DeployVMCmd] (Job-Executor-1:job-96
> = [ 9051a50a-53ff-4752-b079-5ba48a03e0ef ]) com.cloud.exception.
> InsufficientServerCapacityE