Re: [one-users] Ruby oca - change templates

2011-11-01 Thread Robert Parrott
Hi Paulo,

One thing that we've done is to use "onetemplate" to store a template
" template", i.e. a template that has fields in the context that are
placeholder tokens. Then we've wrapped the deploy command line with a
script that will pull the contents of the template, modify it in
place, and then feed it into the onevm create command. If you set
"EDITOR=cat" in your shell and then do a "onetemplate update", the
contents of the template will be written to stdout. A few well placed
"sed" commands can customize that template dynamically for your needs
(for example we specify a public key to add, and a local user account
to create based on the currently login name).

Rob


On Mon, Oct 31, 2011 at 11:41 AM, Paulo A L Rego  wrote:
> Hi,
> is it possible to change the virtual machine's template while the vm is in
> pending state?
>
> We can see the template by using vm.template_str and the xml using
> vm.to_xml.
> Can we update the template or the xml before deploying?
> I would like to update the name and/or include other fields at template.
> Thanks a lot.
> Paulo Rego
> ___
> Users mailing list
> Users@lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] EC2 urls

2011-10-28 Thread Robert Parrott
Hi Folks,

I have a question about EC2 url formats with the econe-server.

I'd like to map queries to the econe service from apache to
localhost:4567, using a URL of the form

  https://my-opennebula-host/ec2/  --> http://localhost:4567/

This way the endpoints for the services would be on one port (443).

But I can't seem to make any headway with that. Is this possible using
econe-server?

Thanks,
Rob


-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] Configurable location for $ONE_LOCATION/var/one.db ?

2011-10-26 Thread Robert Parrott
Hi,

We got stung with this issue as well. Our short term approach was to
create an iscsi mount (i.e. block storage) and put everything in var/
there, and migrate to MySQL when we have a window of downtime.

As far as I can tell there's no way in ONE to specify that the DB
location should be separate from the other contents of /var/lib/one or
$ONE_LOCATION/var, which is why we used a different protocol. I
consider this a defect, though I haven't filed a ticket on it.

Rob


On Wed, Oct 26, 2011 at 10:01 AM, Steffen Neumann  wrote:
> Hi,
>
> I have to move one.db (which is currently living on an NFS volume,
> which is dangerous according to the docs[1]) to a local filesystem
> on the head node.
>
> Where do I specify the path to one.db ? The documentation [2]
> does not mention further arguments in oned.conf DB section
> DB = [ backend = "sqlite" ].
>
> The only reference to a variable DB location I found was
> DB: sqlite:///var/one/oneacct.db in $ONE_LOCATION/etc/acctd.conf
> but nothing for one.db.
>
> Do I need to hack the source or switch to MySQL ?
>
> Serving $ONE_LOCATION from a central storage/NAS might be a common
> scenario, so this could be a fairly important issue.
>
> Yours,
> Steffen
>
> [1] http://opennebula.org/documentation:rel3.0:sfs
> [2] http://opennebula.org/documentation:archives:rel2.2:oned_conf
>
> --
> IPB Halle                    AG Massenspektrometrie & Bioinformatik
> Dr. Steffen Neumann          http://www.IPB-Halle.DE
> Weinberg 3                   http://msbi.bic-gh.de
> 06120 Halle                  Tel. +49 (0) 345 5582 - 1470
>                                  +49 (0) 345 5582 - 0
> sneumann(at)IPB-Halle.DE     Fax. +49 (0) 345 5582 - 1409
>
>
> ___
> Users mailing list
> Users@lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] groups and images/templates

2011-09-21 Thread Robert Parrott
This seems a sensible approach to me. It's reminiscent of the unix
permission categories "me", "group" and "everyone".

2011/9/21 Carlos Martín Sánchez :
> Hi all,
>
> We are considering a new simple approach on this use-case, and we'd like to
> hear your thoughts:
>
> Resources could have two flags to let other users list/use them:
> - shared: users in the resource's group.
> - public: all users
>
> This would make it easier to share resources with everybody (there is no
> need to manage ACLs), and users could list "shared" objects.
>
> Regards.
> --
> Carlos Martín, MSc
> Project Major Contributor
> OpenNebula - The Open Source Toolkit for Cloud Computing
> www.OpenNebula.org | cmar...@opennebula.org
>
>
> 2011/8/29 Robert Parrott 
>>
>> Hi Carlos,
>>
>> The workaround you describe will get us going, and we can "enumerate"
>> our temapltes and resources as needed for now.
>>
>> The multiple groups idea is most likely the _right_ approach, but for
>> the time being perhaps also could be added a "public" flag to listing,
>> which lists all objects which the user is entitled to see (in fact, at
>> first blush it seems that this is the correct default setting).
>>
>> Rob
>>
>> 2011/8/29 Carlos Martín Sánchez :
>> > Hi Robert,
>> >
>> > You are right about the meaning of "public", its scope is the resource's
>> > group.
>> > Using ACLs, you can create a group (let's say "shared"), and allow
>> > everybody
>> > to use and instantiate IMAGE and TEMPLATES in that group.
>> >
>> > $ onegroup create shared
>> > ID: 100
>> > ACL_ID: 2
>> > ACL_ID: 3
>> >
>> > $ oneacl create "* IMAGE+TEMPLATE/@100 INFO+USE+INSTANTIATE"
>> > ID: 4
>> >
>> > $ oneacl list
>> >    ID USER RES_VHNIUTG   RID OPE_CDUMIPpTW
>> >     0   @1 V-NI-T- * C-p--
>> >     1   @1 -H- * --U--
>> >     2 @100 V-NI-T- * C-p--
>> >     3 @100 -H- * --U--
>> >     4    * ---I-T-  @100 --U-I--T-
>> >
>> > That will provide the scenario you described.
>> > However, there's no straight-forward way for regular users to list the
>> > resources in the "shared" group, as they can only list resources with
>> > the
>> > 'all', 'mine' or 'group' flag.
>> >
>> > You can grant users the right to list all resources (INFO_POOL) if
>> > privacy
>> > is not a concern... or you could create some other way to let users know
>> > the
>> > list of resources in the "shared" group, for instance creating a new
>> > Sunstone plug-in [1]
>> >
>> >
>> > Maybe we could use this thread to discuss how to integrate better this
>> > use-case in future versions.
>> > We already have a request for multiple groups [2], that's one of the
>> > ways to
>> > address this issue.
>> >
>> > Regards,
>> > Carlos.
>> >
>> > [1] http://opennebula.org/documentation:rel3.0:sunstone_plugin_reference
>> > [2] http://dev.opennebula.org/issues/761
>> >
>> > --
>> > Carlos Martín, MSc
>> > Project Major Contributor
>> > OpenNebula - The Open Source Toolkit for Cloud Computing
>> > www.OpenNebula.org | cmar...@opennebula.org
>> >
>> >
>> >
>> > On Wed, Aug 24, 2011 at 10:40 PM, Robert Parrott
>> > 
>> > wrote:
>> >> Hi Folks,
>> >>
>> >> Is there some way to make images or templates completely public?
>> >>
>> >> Currently, it looks like making an image or template "public" means
>> >> that anyone within your group can see and use that image or template.
>> >> It would be nice to also have the functionality where members of any
>> >> group can make use of a set of public images and templates as a
>> >> starting point for customizing their own VMs (i.e. "vanilla CentOS 6"
>> >> or Ubuntu 10.04 LTS").
>> >>
>> >> Thanks,
>> >> Rob
>> >>
>> >>
>> >> --
>> >> Robert E. Parrott, Ph.D. (Phys. '06)
>> >> Director, Academic Computing
>> >> Harvard University Sch. of Eng. and App. Sci.
>> >> Maxwell-Dworkin  211,
>> >> 33 Oxford St.
>> >> Cambridge, MA 02138
>> >> (617)-496-1520
>> >> ___
>> >> Users mailing list
>> >> Users@lists.opennebula.org
>> >> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>> >>
>> >
>> >
>>
>>
>>
>> --
>> Robert E. Parrott, Ph.D. (Phys. '06)
>> Director, Academic Computing
>> Harvard University Sch. of Eng. and App. Sci.
>> Maxwell-Dworkin  211,
>> 33 Oxford St.
>> Cambridge, MA 02138
>> (617)-496-1520
>
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] IMAGE_REPOSITORY_PATH and OpenNebula 3

2011-09-15 Thread Robert Parrott
Hi All,

With ONE 2.2, we used the "IMAGE_REPOSITORY_PATH" config value to
point to a separate store for image files that was outside of the
$ONE_LOCATION/var/ directory.

It appears that with the new ONE_IMAGE MAD, this config value is gone,
so we can't now add new images into the system as we had before. Right
now we are using symlinks to fix this, but that's not a great
solution.

What is the appropriate upgrade in ONE 3 to match this functionality from ONE 2?

Thanks,
Rob



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] groups and images/templates

2011-08-29 Thread Robert Parrott
Hi Carlos,

The workaround you describe will get us going, and we can "enumerate"
our temapltes and resources as needed for now.

The multiple groups idea is most likely the _right_ approach, but for
the time being perhaps also could be added a "public" flag to listing,
which lists all objects which the user is entitled to see (in fact, at
first blush it seems that this is the correct default setting).

Rob

2011/8/29 Carlos Martín Sánchez :
> Hi Robert,
>
> You are right about the meaning of "public", its scope is the resource's
> group.
> Using ACLs, you can create a group (let's say "shared"), and allow everybody
> to use and instantiate IMAGE and TEMPLATES in that group.
>
> $ onegroup create shared
> ID: 100
> ACL_ID: 2
> ACL_ID: 3
>
> $ oneacl create "* IMAGE+TEMPLATE/@100 INFO+USE+INSTANTIATE"
> ID: 4
>
> $ oneacl list
>    ID USER RES_VHNIUTG   RID OPE_CDUMIPpTW
>     0   @1 V-NI-T- * C-p--
>     1   @1 -H- * --U--
>     2 @100 V-NI-T- * C-p--
>     3 @100 -H- * --U--
>     4    * ---I-T-  @100 --U-I--T-
>
> That will provide the scenario you described.
> However, there's no straight-forward way for regular users to list the
> resources in the "shared" group, as they can only list resources with the
> 'all', 'mine' or 'group' flag.
>
> You can grant users the right to list all resources (INFO_POOL) if privacy
> is not a concern... or you could create some other way to let users know the
> list of resources in the "shared" group, for instance creating a new
> Sunstone plug-in [1]
>
>
> Maybe we could use this thread to discuss how to integrate better this
> use-case in future versions.
> We already have a request for multiple groups [2], that's one of the ways to
> address this issue.
>
> Regards,
> Carlos.
>
> [1] http://opennebula.org/documentation:rel3.0:sunstone_plugin_reference
> [2] http://dev.opennebula.org/issues/761
>
> --
> Carlos Martín, MSc
> Project Major Contributor
> OpenNebula - The Open Source Toolkit for Cloud Computing
> www.OpenNebula.org | cmar...@opennebula.org
>
>
>
> On Wed, Aug 24, 2011 at 10:40 PM, Robert Parrott 
> wrote:
>> Hi Folks,
>>
>> Is there some way to make images or templates completely public?
>>
>> Currently, it looks like making an image or template "public" means
>> that anyone within your group can see and use that image or template.
>> It would be nice to also have the functionality where members of any
>> group can make use of a set of public images and templates as a
>> starting point for customizing their own VMs (i.e. "vanilla CentOS 6"
>> or Ubuntu 10.04 LTS").
>>
>> Thanks,
>> Rob
>>
>>
>> --
>> Robert E. Parrott, Ph.D. (Phys. '06)
>> Director, Academic Computing
>> Harvard University Sch. of Eng. and App. Sci.
>> Maxwell-Dworkin  211,
>> 33 Oxford St.
>> Cambridge, MA 02138
>> (617)-496-1520
>> ___
>> Users mailing list
>> Users@lists.opennebula.org
>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>
>
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] potential bug in oneauth

2011-08-25 Thread Robert Parrott
Hi Folks,

when I run the oneauth command from the latest 3.0 beta pull, I get
the following backtrace:

-bash-3.2$ oneauth help
/virt/home/one3/opennebula-2.9.xx/bin/oneauth:53: undefined method
`name_to_id_desc' for OpenNebulaHelper:Module (NoMethodError)
from 
/virt/home/one3/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:77:in
`instance_eval'
from 
/virt/home/one3/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:77:in
`initialize'
from /virt/home/one3/opennebula-2.9.xx/bin/oneauth:45:in `new'
from /virt/home/one3/opennebula-2.9.xx/bin/oneauth:45

It appears that on line 55 of oneauth, the method "name_to_id_desc"
should be "rname_to_id_desc".

Is this correct? Actually, is oneauth used anymore for ONE 3?

Thanks,
Rob


-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] groups and images/templates

2011-08-24 Thread Robert Parrott
Hi Folks,

Is there some way to make images or templates completely public?

Currently, it looks like making an image or template "public" means
that anyone within your group can see and use that image or template.
It would be nice to also have the functionality where members of any
group can make use of a set of public images and templates as a
starting point for customizing their own VMs (i.e. "vanilla CentOS 6"
or Ubuntu 10.04 LTS").

Thanks,
Rob


-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] warning: peer certificate won't be verified in this SSL session

2011-08-23 Thread Robert Parrott
We get this error when using ONE clients remotely over SSL with a
self-signed or non-standard CA.

Is there a way/flag or addition to the config that will alleviate this
error? I can guess that many users would want to be able to encrypt
transport to the server, but not mess with the overhead of
establishing the trust relationship needed to make this go away.

I tried the suggestion here:

  http://www.5dollarwhitebox.org/drupal/node/64

but didn't make headway on fixing the issue.

Thanks,
Rob


-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] Unintended stacktrace on oneuser command

2011-08-23 Thread Robert Parrott
Hi  Folks,

I'm seeing a stacktrace on the "oneuser" command when (1) the invoking
user does not have oneadmin privileges and (2) the command invoked is
"show" and the desired user is called by username and not id.

I.e. I'm seeing the command

  $ oneuser show parrott

throw a stacktrace like this.

  /software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/one_helper.rb:308:in
`get_pool': undefined method `rname' for
# (NoMethodError)
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/one_helper.rb:176:in
`to_id'
from /software/linux/x86_64/opennebula-2.9.xx/bin/oneuser:72
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:362:in
`call'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:362:in
`check_args!'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:352:in
`each'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:352:in
`check_args!'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:330:in
`collect!'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:330:in
`check_args!'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:170:in
`run'
from 
/software/linux/x86_64/opennebula-2.9.xx/lib/ruby/cli/command_parser.rb:79:in
`initialize'
from /software/linux/x86_64/opennebula-2.9.xx/bin/oneuser:33:in `new'
from /software/linux/x86_64/opennebula-2.9.xx/bin/oneuser:33

If instead I use the user id to query, it works fine.

  $ oneuser show 8

I expect that this behavior is unintended?

Thanks,
Rob

-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] Disk image type not propagated by saveas

2011-08-22 Thread Robert Parrott
Hi Tino,

I've discovered both of this points, so have a workaround:

(1) default disk type "qcow2"
(2) modify template for any raw disk images

However, I think I would still consider this a defect in ONE.  The
disk type is vital metadata for using the disk image, and needs to be
propagated along with location and other data from the running VM
instance to to the image manager when the "saveas" command is issued.
Otherwise the "DRIVER" metadata is missing from the image template,
and there's no information about how to use the image; one would have
to guess at the image type without prior knowledge ( as I did).

Thanks,
Rob


On Wed, Aug 17, 2011 at 7:09 AM, Tino Vazquez  wrote:
> Dear Rob,
>
> The "raw" disk type attribute is being pulled from the default, which
> is set in /etc/one/vmm_exec/vmm_exec_kvm.conf  (in OpenNebula 3.0
> Beta1, in OpenNebula 2.2 is /etc/one/vmm_kvm/vmm_kvm.conf IIRC).
>
> Which version of OpenNebula are you using? In 3.0, you can update the
> image template to add the type parameter, using "oneimage update".
>
> Hope it helps,
>
> -Tino
>
> --
> Constantino Vázquez Blanco, MSc
> OpenNebula Major Contributor
> www.OpenNebula.org | @tinova79
>
>
>
> On Sat, Aug 13, 2011 at 12:36 AM, Robert Parrott
>  wrote:
>> Hi Folks,
>>
>> After fixing an older issue with the "onevm saveas" command, I'm
>> seeing the following behavior.
>>
>> If I do a "onevm saveas" on a running VM with a qcow2 disk image, and
>> then shutdown the VM, I see that it successfully shutdowns and then
>> copies over the VM image.
>>
>> However, I can't start VMs from these images.  The root cause appears
>> to be that the driver is propagated to the new image; i.e. the disk
>> tempalte for the new image doesn't contain a "DRIVER=qcow2" line. The
>> resulting libvirt deployment file has "type='raw'" for the disk entry,
>> and not the needed "type='qcow2'".
>>
>> So I expect this is a bug, and a bit of a showstopper for us. Where
>> should I look to fix this?
>>
>> Thanks!
>> Rob
>>
>>
>>
>> --
>> Robert E. Parrott, Ph.D. (Phys. '06)
>> Director, Academic Computing
>> Harvard University Sch. of Eng. and App. Sci.
>> Maxwell-Dworkin  211,
>> 33 Oxford St.
>> Cambridge, MA 02138
>> (617)-496-1520
>> ___
>> Users mailing list
>> Users@lists.opennebula.org
>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


[one-users] Disk image type not propagated by saveas

2011-08-12 Thread Robert Parrott
Hi Folks,

After fixing an older issue with the "onevm saveas" command, I'm
seeing the following behavior.

If I do a "onevm saveas" on a running VM with a qcow2 disk image, and
then shutdown the VM, I see that it successfully shutdowns and then
copies over the VM image.

However, I can't start VMs from these images.  The root cause appears
to be that the driver is propagated to the new image; i.e. the disk
tempalte for the new image doesn't contain a "DRIVER=qcow2" line. The
resulting libvirt deployment file has "type='raw'" for the disk entry,
and not the needed "type='qcow2'".

So I expect this is a bug, and a bit of a showstopper for us. Where
should I look to fix this?

Thanks!
Rob



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] How config Windows vm template?

2011-08-12 Thread Robert Parrott
We  would certainly be interested in hearing about your experiences with this!

Thanks,
Rob


2011/8/11 Carlos Martín Sánchez :
> Hi André,
>
> Looks like we don't have many users virtualizing windows machines.
> Maybe this kind of questions can be better helped in a windows support
> list...
>
> Since you took the time to create and share the contextualization scripts,
> if you come up with a working procedure and want to contribute a guide or
> how-to, we'd be glad to have it in the community wiki [1].
>
> Regards.
>
> [1] http://opennebula.org/documentation:community:index
> --
> Carlos Martín, MSc
> Project Major Contributor
> OpenNebula - The Open Source Toolkit for Cloud Computing
> www.OpenNebula.org | cmar...@opennebula.org
>
>
> 2011/8/5 André Monteiro 
>>
>>  Hello,
>>
>> I've been working in a windows script to contextualize VMs.
>> By your experience, what's the best way to run the script automatically
>> when creating a new instance? I can create it manually as a CD-ROM and run
>> the windows7.one with the drive attached, but is there an automatic way?
>>
>> ### Windows context configuring script ###
>> ### Created by andremonte...@ua.pt and tsbati...@ua.pt ###
>>
>> [string]$computerName = "$env:computername"
>> [string]$ConnectionString = "WinNT://$computerName"
>> [string]$ipaddress = ""
>> function getContext($file) {
>>  $context = @{}
>>  switch -regex -file $file {
>>   '(.+)="(.+)"' {
>>    $name,$value = $matches[1..2]
>>    $context[$name] = $value
>>   }
>>  }
>>  return $context
>> }
>> function addLocalUser($context) {
>>     # Create new user
>>  $username =  $context["username"]
>>  $ADSI = [adsi]$ConnectionString
>>  $user = $ADSI.Create("user",$userName)
>>  $user.setPassword($context["user_password"])
>>  $user.SetInfo()
>>
>>     # Add user to local Administrators
>>     $groups = "Administrators", "Administradores"
>>
>>     foreach ($grp in $groups) {
>>     if([ADSI]::Exists("WinNT://$computerName/$grp,group")) {
>>   $group = [ADSI] "WinNT://$computerName/$grp,group"
>>    $group.Add("WinNT://$computerName/$username")
>>   }
>>  }
>> }
>> function getIp($mac) {
>>     $octet = $mac.Split(":")
>>     [String] $ip = ""
>>     $ip += [convert]::toint32($octet[2],16)
>>     $ip += "."+[convert]::toint32($octet[3],16)
>>     $ip += "."+[convert]::toint32($octet[4],16)
>>     $ip += "."+[convert]::toint32($octet[5],16)
>>     $ipaddress = $ip
>>     return $ip
>> }
>> function getGateway($mac) {
>>     $octet = $mac.Split(":")
>>     [String] $ip = ""
>>     $ip += [convert]::toint32($octet[2],16)
>>     $ip += "."+[convert]::toint32($octet[3],16)
>>     $ip += "."+[convert]::toint32($octet[4],16)
>>     $ip += ".1"
>>     return $ip
>> }
>> function configureNetwork($context) {
>>     $Nics = Get-WMIObject Win32_NetworkAdapterConfiguration | where
>> {$_.IPEnabled -eq "TRUE" -and ($_.MACAddress)}
>>     foreach ($nic in $Nics) {
>>     [String]$mac = $nic.MACAddress
>>     [String]$ip = getIp($mac)
>>     [String]$gw = getGateway($mac)
>>     $nic.ReleaseDHCPLease()
>>     $nic.EnableStatic($ip , "255.255.255.0")
>>     $nic.SetGateways($gw)
>>     $nic.SetDNSServerSearchOrder($gw)
>>     $nic.SetDynamicDNSRegistration("FALSE")
>>     }
>> }
>> function renameComputer($context) {
>>     $ComputerInfo = Get-WmiObject -Class Win32_ComputerSystem
>>     $ComputerInfo.rename($context["HOSTNAME"]+$ipaddress.Split(".")[3])
>> }
>> function enableRemoteDesktop()
>> {
>>     #Get RDP parameters
>>     #(Get-WmiObject -Class "Win32_TerminalServiceSetting" -Namespace
>> root\cimv2\terminalservices).AllowTsConnections
>>     #Set RDP state
>>     #(Get-WmiObject -Class "Win32_TerminalServiceSetting" -Namespace
>> root\cimv2\terminalservices).SetAllowTsConnections(1)
>>     #Get RDP Required Authentication
>>     #(Get-WmiObject -class "Win32_TSGeneralSetting" -Namespace
>> root\cimv2\terminalservices -Filter
>> "TerminalName='RDP-tcp'").UserAuthenticationRequired
>>     #Set RDP Required Authentication
>>     #(Get-WmiObject -class "Win32_TSGeneralSetting" -Namespace
>> root\cimv2\terminalservices -Filter
>> "TerminalName='RDP-tcp'").SetUserAuthenticationRequired(1)
>>     $Terminal = (Get-WmiObject -Class "Win32_TerminalServiceSetting"
>> -Namespace root\cimv2\terminalservices).SetAllowTsConnections(1)
>>     return $Terminal
>> }
>> # Create folder Context if unexistant
>> if( -not(Test-Path "c:\context\")) {
>>  New-Item "c:\context\" -type directory
>> }
>> # Execute the script
>> if( -not(Test-Path "c:\context\contextualized") -and(Test-Path
>> "D:\context.sh")) {
>>     $context = @{}
>>     $context = getContext('D:\context.sh')
>>     Set-ExecutionPolicy unrestricted -force # not needed if already done
>> once on the VM
>>     addLocalUser($context)
>>     configureNetwork($context)
>>     renameComputer($context)
>>     enableRemoteDesktop()
>>     echo "contextualized" |Out-File ("c:\context\contex

[one-users] Image mgmt on ONE 3 beta : issues

2011-08-10 Thread Robert Parrott
Hi All,

I'm working with ONE 3 beta, and am having issues with image mgmt. In
one case, trying to delete or add an introduced image doesn't work,
and in another case, using the "onevm saveas" command breaks. I'm
seeing this in both the 2.9.80 pre-release and the latest git pull of
the master branch.

In both cases, it appears as if helper scripts that are supposed to be
in the directory

   $ONE_LOCATION/var/remotes/image/fs

named "mv" or "rm" (etc.) are not actually there; in fact, the entire
$ONE_LOCATION/var/remotes/image directory is missing. I expect that
something in the new IMAGE_MAD setup -- in oned.conf -- is the cause.
either a missing configuration or a bug. My IMAGE_MAD stanza is


  IMAGE_MAD = [ executable = "one_image", arguments  = "fs -t 15" ]

and the one_image scripts and everything are stock. Also, we are using
shared NFS filesystem across the board. In looking at the one_image.rb
code, I see where scripts from the $ONE_LOCATION/var/remotes/image/fs
are invoked, I just don't understand how they get populated.

Any help in resolving this would be appreciated.  A sample log snippet
of a failed insert and a failed delete is below.

Thanks,
Rob


-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520


Failed Create
--
Wed Aug 10 22:30:12 2011 [ReM][D]: ImageAllocate method invoked
Wed Aug 10 22:30:12 2011 [ImM][I]: Copying
/virt/home/oneadmin/disk-images/basic-centos6.qcow2 to repository for
image 23
Wed Aug 10 22:30:12 2011 [ImG][D]: Message received: LOG I 23 Command
execution fail:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/cp
/virt/home/oneadmin/disk-images/basic-centos6.qcow2 23

Wed Aug 10 22:30:12 2011 [ImM][I]: Command execution fail:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/cp
/virt/home/oneadmin/disk-images/basic-centos6.qcow2 23Wed Aug 10
22:30:12 2011 [ImG][D]: Message received: LOG I 23 sh:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/cp: No such
file or directory

Wed Aug 10 22:30:12 2011 [ImM][I]: sh:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/cp: No such
file or directory
Wed Aug 10 22:30:12 2011 [ImG][D]: Message received: LOG I 23 ExitCode: 127

Wed Aug 10 22:30:12 2011 [ImM][I]: ExitCode: 127
Wed Aug 10 22:30:12 2011 [ImG][D]: Message received: CP FAILURE 23 -
Wed Aug 10 22:30:12 2011 [ImM][E]: Error copying image in the repository

Failed Delete
--
Wed Aug 10 22:13:40 2011 [ReM][D]: ImageDelete method invoked
Wed Aug 10 22:13:40 2011 [ImG][D]: Message received: LOG I 22 Command
execution fail:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/rm - 22

Wed Aug 10 22:13:40 2011 [ImM][I]: Command execution fail:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/rm - 22
Wed Aug 10 22:13:40 2011 [ImG][D]: Message received: LOG I 22 sh:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/rm: No such
file or directory

Wed Aug 10 22:13:40 2011 [ImM][I]: sh:
/virt/home/one3/opennebula-2.9.xx/var/remotes/image/fs/rm: No such
file or directory
Wed Aug 10 22:13:40 2011 [ImG][D]: Message received: LOG I 22 ExitCode: 127

Wed Aug 10 22:13:40 2011 [ImM][I]: ExitCode: 127
Wed Aug 10 22:13:40 2011 [ImG][D]: Message received: RM FAILURE 22 -

Wed Aug 10 22:13:40 2011 [ImM][E]: Error removing image from
repository. Remove file -  to completely delete image.
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] Problem with login, in OpenNebula - /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in `gem_original_require': no such file to load

2011-05-04 Thread Robert Parrott
Anders,

You need the ONE_AUTH file in place so that the current user can
authenticate, and hence have permission to create the new ONE user.

The ONE_AUTH file needs to be created by you manually; it will not be
created by ONE.

On Wed, May 4, 2011 at 10:46 AM, Anders Branderud
 wrote:
> Hey again,
>
> Update:
> The first paragraphs solved by closing the terminal and after that logging
> in as oneadmin again.
>
> However this doesn't work for me.:
>
> "Users can be easily added to the system like this:
>
> $ oneuser create helen mypass"
>
> When I execute that command the user is added in the user
> table that is showed when typing the command
> 'oneuser list'.
>
> Why doesn't the above line ['oneuser create...'] create the
>
> file /home/helen/.one/one_auth
> and inserting the username and password? As it seems that it
> should according to this guide:
> http://opennebula.org/documentation:rel2.2:cg
>
>
> Thanks!
>
> --Kind Regards, Anders Branderud
>
> [Personal blog] bloganders.blogspot.com  : Logical reasons - based on
> scientific premises - for the existence of a Creator and that He hasn't left
> His sapient creatures without an Instruction Manual - Torah ['books of
> Moses'] - to ascertain, and aspire to, His purpose.
>
> [Company] Anders Branderud IT Solutions - www.abitsolutions.org
>
> 2011/5/4 Anders Branderud 
>>
>> Hello again!
>>
>> Thanks for the help!
>>
>> Some more questions [for more details of what I have done previously see
>> my previous e-mail below this post]:
>>
>> 1. Why isn't this working?
>> oneadmin@ubuntu:/$ oneuser create helen mypass
>>
>> This prints out in the terminal:
>> /usr/lib/one/ruby/OpenNebula.rb:93:in `initialize': ONE_AUTH file not
>> present (RuntimeError)
>>     from /usr/lib/one/ruby/client_utilities.rb:239:in `new'
>>     from /usr/lib/one/ruby/client_utilities.rb:239:in `get_one_client'
>>     from /usr/bin/oneuser:166
>>
>> Neither the commands 'onevm list' nor 'oneuser list' is working.
>> What happened? The commands worked before.
>>
>> Before that I did this:
>> oneadmin@ubuntu:/$ export ONE_AUTH="/home/anders/.one/one_auth"
>> oneadmin@ubuntu:/$ cat $ONE_AUTH
>> cat: /home/anders/.one/one_auth: File or directory doesn't exist.
>>
>> I have created a user called 'anders', so why didn't that command work?
>> According to this guide, this is what should be done:
>> http://opennebula.org/documentation:rel2.2:cg
>>
>> Thanks!
>>
>>
>> Anders Branderud
>>
>> 2011/5/3 Robert Parrott 
>>>
>>> Try
>>>
>>> > gem install sequel
>>>
>>> On Tue, May 3, 2011 at 4:13 PM, Anders Branderud
>>>  wrote:
>>> > Hello!
>>> > I am having problems with login in OpenNebula.
>>> >
>>> > This is what I have done.
>>> > 1.Install Ubuntu 10.04.
>>> > 2.Install OpenNebula through express installation script. The option
>>> > with
>>> > SSH.
>>> > 3. Install that which is necessary to run SunStone.
>>> >
>>> > While being logged in as oneadmin:
>>> > 4.Execute this command 'create user anders pass' in the terminal
>>> > 5. Check that anders is added to the user table. It was added.
>>> > 5. When I do 'oneauth login anders' I get this error:
>>> >
>>> > /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in
>>> > `gem_original_require':
>>> > no such file to load -- sequel (LoadError)
>>> >     from /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in `require'
>>> >     from /usr/bin/oneauth:37
>>> >
>>> > What should I do to solve this?
>>> >
>>> > Thanks!
>>> >
>>> > Kind Regards, Anders Branderud
>>> >
>>> > [Personal blog] www.proofexistencegod.com  : Logical reasons - based on
>>> > scientific premises - for the existence of a SuperIntelligent and
>>> > Orderly
>>> > Creator and that He hasn't left His sapient creatures without an
>>> > Instruction
>>> > Manual - Torah ['books of Moses'] - to ascertain, and aspire to, His
>>> > purpose.
>>> >
>>> > [Company] Anders Branderud IT Solutions - www.abitsolutions.org
>>> >
>>> > --
>>> > Kind Regards, Anders Branderud
>>&

Re: [one-users] Problem with login, in OpenNebula - /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in `gem_original_require': no such file to load

2011-05-03 Thread Robert Parrott
Try

> gem install sequel

On Tue, May 3, 2011 at 4:13 PM, Anders Branderud
 wrote:
> Hello!
> I am having problems with login in OpenNebula.
>
> This is what I have done.
> 1.Install Ubuntu 10.04.
> 2.Install OpenNebula through express installation script. The option with
> SSH.
> 3. Install that which is necessary to run SunStone.
>
> While being logged in as oneadmin:
> 4.Execute this command 'create user anders pass' in the terminal
> 5. Check that anders is added to the user table. It was added.
> 5. When I do 'oneauth login anders' I get this error:
>
> /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in `gem_original_require':
> no such file to load -- sequel (LoadError)
>     from /usr/lib/ruby/1.8/rubygems/custom_require.rb:31:in `require'
>     from /usr/bin/oneauth:37
>
> What should I do to solve this?
>
> Thanks!
>
> Kind Regards, Anders Branderud
>
> [Personal blog] www.proofexistencegod.com  : Logical reasons - based on
> scientific premises - for the existence of a SuperIntelligent and Orderly
> Creator and that He hasn't left His sapient creatures without an Instruction
> Manual - Torah ['books of Moses'] - to ascertain, and aspire to, His
> purpose.
>
> [Company] Anders Branderud IT Solutions - www.abitsolutions.org
>
> --
> Kind Regards, Anders Branderud
>
> [Personal blog] bloganders.blogspot.com  : Logical reasons - based on
> scientific premises - for the existence of a Creator and that He hasn't left
> His sapient creatures without an Instruction Manual - Torah ['books of
> Moses'] - to ascertain, and aspire to, His purpose.
>
> [Company] Anders Branderud IT Solutions - www.abitsolutions.org
>
> ___
> Users mailing list
> Users@lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic and Research Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] sunstone auth problem

2011-04-14 Thread Robert Parrott
Hi Daniel et.al.,

nokigiri was installed, as per the installation documentation:

[root ~]# ls -ld /usr/lib/ruby/gems/1.8/gems/noko*
drwxr-xr-x 4 root root 4096 Apr  8 14:07
/usr/lib/ruby/gems/1.8/gems/nokogiri-1.3.1

Is there somehing that needs to be done in order to ensure that it it
used instead of the default REXML?

Rob


On Thu, Apr 14, 2011 at 5:07 AM, Daniel Molina  wrote:
> I think the problem is the ruby version, are you using the default
> REXML gem? if so, would you mind to try installing the nokogiri gem
> (and restart both one and sunstone). If this gem is installed
> OpenNebula will use it instead of REXML.
>
> $ gem install nokogiri.
>
> Hope this helps
>
> On 14 April 2011 00:08, Robert Parrott  wrote:
>> Hi Folks,
>>
>> A little more investigation, and I've confirmed that the issue is with
>> the sunstone code or with some sort of XML parsing issues,
>>
>> I can call the "to_xml" method on the user_pool object (again in
>> SunstoneServer.authorize() method of file SunstoneServer.rb), and I
>> see the proper XML output, the same as if I execute "oneuser list -x"
>> on the command line. So the data is there in sunstone.
>>
>> However, the query on the XML returns "nil" when in fact the user is
>> there. I.e. in the sunstone source referred to above, the line
>>
>>  user_pass = user_pool["USER[NAME=\"#{user}\"]/PASSWORD"]
>>
>> returns "nil" whether or not the data is correct and present. So it
>> seems that the XPath query, or the XML query library is broken.
>>
>> Here's an example of a session, with tons of debugging thrown in:
>>
>> user = testuser
>> sha1_pass = 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
>> user_pool.info = nil
>> user_pass = nil
>> user_pool = #
>> UserPool methods =
>> mapmethodsinstance_evalany?to_setsortdupmininstance_variablesinclude?instance_of?to_yaml_propertiesextenddclonepretty_inspecteql?namefind_alleachpretty_print_cycleto_jsonhashidsingleton_methodseach_elementinjecttaintsort_byinstance_variable_getfrozen?has_elements?pretty_printmaxkind_of?methodselectto_adisplayto_xmltypeinitialize_xmlprotected_methodsto_strpartitionpretty_print_inspectgrepinstance_variable_settextis_a?respond_to?to_srejectattrobject_idclassprivate_methods==tainted?__id__===member?to_hashuntaintnil?template_strfindeach_with_indextaguriinspectsendcollectall?pretty_print_instance_variablesinfo=~clonetaguri=retrieve_elementsentriespublic_methods__send__freezeequal?template_like_strdetectfactoryzip[]to_yamlto_yaml_style
>> user_pool as XML = 
>>  
>>    0
>>    oneadmin
>>    5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
>>    1
>>  
>>  
>>    1
>>    testuser
>>    5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
>>    1
>>  
>> 
>> USER object static string =
>> 0oneadmin5baa61e4c9b93f3f0682250b6cf8331b7ee68fd811testuser5baa61e4c9b93f3f0682250b6cf8331b7ee68fd81
>> USER/NAME  = oneadmintestuser
>> USER/PASSWORD  =
>> 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd85baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
>> USER/ID = 01
>> USER[NAME="testuser"] = nil
>>
>> Assuming that the query is correct, I guess there's an issue in a
>> parser library. Further input is greatly appreciated.
>>
>> Rob
>>
>>
>>
>>
>>
>> On Wed, Apr 13, 2011 at 2:21 PM, Robert Parrott
>>  wrote:
>>> I've added some debugging to the sunstone, and see the following behavior.
>>>
>>> 1) In the build-session method of the sunstone-server.rb, the username
>>> and password are properly passwd into the server, and the SHA1 hash
>>> calculated is what is expected.
>>>
>>> 2) In the SunstoneServer.authorize() method in the file
>>> SunstoneServer.rb, the username and  sha1 hash are passed into the
>>> method properly, but the query to the UserPool object,
>>>
>>>   user_pass = user_pool["USER[NAME=\"#{user}\"]/PASSWORD"]
>>>
>>> returns "nil."
>>>
>>> Thus it is the communication with the oned where the problem lies.
>>>
>>> 3) In the oned.log file, I see that the method UserPoolInfo method is
>>> executed as soon as there is a login attempt from sunstone:
>>>
>>> ==> /var/log/one/oned.log <==
>>> Wed Apr 13 14:11:06 2011 [ReM][D]: UserPoolInfo method invoked
>>>
>>>
>>>
>>> I've wiped the installation and reinstalled afresh, but with the same
>>> error. The system is a CentOS 5.5 installation, ruby v1.8.5.
>&

Re: [one-users] sunstone auth problem

2011-04-13 Thread Robert Parrott
Hi Folks,

A little more investigation, and I've confirmed that the issue is with
the sunstone code or with some sort of XML parsing issues,

I can call the "to_xml" method on the user_pool object (again in
SunstoneServer.authorize() method of file SunstoneServer.rb), and I
see the proper XML output, the same as if I execute "oneuser list -x"
on the command line. So the data is there in sunstone.

However, the query on the XML returns "nil" when in fact the user is
there. I.e. in the sunstone source referred to above, the line

  user_pass = user_pool["USER[NAME=\"#{user}\"]/PASSWORD"]

returns "nil" whether or not the data is correct and present. So it
seems that the XPath query, or the XML query library is broken.

Here's an example of a session, with tons of debugging thrown in:

user = testuser
sha1_pass = 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
user_pool.info = nil
user_pass = nil
user_pool = #
UserPool methods =
mapmethodsinstance_evalany?to_setsortdupmininstance_variablesinclude?instance_of?to_yaml_propertiesextenddclonepretty_inspecteql?namefind_alleachpretty_print_cycleto_jsonhashidsingleton_methodseach_elementinjecttaintsort_byinstance_variable_getfrozen?has_elements?pretty_printmaxkind_of?methodselectto_adisplayto_xmltypeinitialize_xmlprotected_methodsto_strpartitionpretty_print_inspectgrepinstance_variable_settextis_a?respond_to?to_srejectattrobject_idclassprivate_methods==tainted?__id__===member?to_hashuntaintnil?template_strfindeach_with_indextaguriinspectsendcollectall?pretty_print_instance_variablesinfo=~clonetaguri=retrieve_elementsentriespublic_methods__send__freezeequal?template_like_strdetectfactoryzip[]to_yamlto_yaml_style
user_pool as XML = 
  
0
oneadmin
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
1
  
  
1
testuser
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
1
  

USER object static string =
0oneadmin5baa61e4c9b93f3f0682250b6cf8331b7ee68fd811testuser5baa61e4c9b93f3f0682250b6cf8331b7ee68fd81
USER/NAME  = oneadmintestuser
USER/PASSWORD  =
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd85baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
USER/ID = 01
USER[NAME="testuser"] = nil

Assuming that the query is correct, I guess there's an issue in a
parser library. Further input is greatly appreciated.

Rob





On Wed, Apr 13, 2011 at 2:21 PM, Robert Parrott
 wrote:
> I've added some debugging to the sunstone, and see the following behavior.
>
> 1) In the build-session method of the sunstone-server.rb, the username
> and password are properly passwd into the server, and the SHA1 hash
> calculated is what is expected.
>
> 2) In the SunstoneServer.authorize() method in the file
> SunstoneServer.rb, the username and  sha1 hash are passed into the
> method properly, but the query to the UserPool object,
>
>   user_pass = user_pool["USER[NAME=\"#{user}\"]/PASSWORD"]
>
> returns "nil."
>
> Thus it is the communication with the oned where the problem lies.
>
> 3) In the oned.log file, I see that the method UserPoolInfo method is
> executed as soon as there is a login attempt from sunstone:
>
> ==> /var/log/one/oned.log <==
> Wed Apr 13 14:11:06 2011 [ReM][D]: UserPoolInfo method invoked
>
>
>
> I've wiped the installation and reinstalled afresh, but with the same
> error. The system is a CentOS 5.5 installation, ruby v1.8.5.
>
>
> Thanks,
> rob
>



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic and Research Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] sunstone auth problem

2011-04-13 Thread Robert Parrott
I've added some debugging to the sunstone, and see the following behavior.

1) In the build-session method of the sunstone-server.rb, the username
and password are properly passwd into the server, and the SHA1 hash
calculated is what is expected.

2) In the SunstoneServer.authorize() method in the file
SunstoneServer.rb, the username and  sha1 hash are passed into the
method properly, but the query to the UserPool object,

   user_pass = user_pool["USER[NAME=\"#{user}\"]/PASSWORD"]

returns "nil."

Thus it is the communication with the oned where the problem lies.

3) In the oned.log file, I see that the method UserPoolInfo method is
executed as soon as there is a login attempt from sunstone:

==> /var/log/one/oned.log <==
Wed Apr 13 14:11:06 2011 [ReM][D]: UserPoolInfo method invoked



I've wiped the installation and reinstalled afresh, but with the same
error. The system is a CentOS 5.5 installation, ruby v1.8.5.


Thanks,
rob
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org


Re: [one-users] sunstone auth problem

2011-04-13 Thread Robert Parrott
Sure, here it is:

[oneadmin ~]$ oneuser list -x

  
0
oneadmin
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
1
  
  
1
testuser
5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8
1
  




[oneadmin ~]$ cat /var/log/one/sunstone.log
/usr/lib/ruby/gems/1.8/gems/rack-1.2.0/lib/rack/server.rb:228:
warning: parenthesize argument(s) for future version
/usr/lib/one/sunstone/models/OpenNebulaJSON.rb:35: warning:
parenthesize argument(s) for future version
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /login HTTP/1.1" 200 1524 0.0020
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /login HTTP/1.1" 200 1524 0.0680
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /js/opennebula.js
HTTP/1.1" 304 - 0.0040
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /js/opennebula.js
HTTP/1.1" 304 - 0.0094
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /js/login.js HTTP/1.1" 304 - 0.0021
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /js/login.js HTTP/1.1" 304 - 0.0041
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /css/login.css HTTP/1.1"
304 - 0.0020
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /css/login.css HTTP/1.1"
304 - 0.0039
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET
/vendor/jQuery/jquery-1.4.4.min.js HTTP/1.1" 304 - 0.0020
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET
/vendor/jQuery/jquery-1.4.4.min.js HTTP/1.1" 304 - 0.0740
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /images/login.png
HTTP/1.1" 304 - 0.
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /images/login.png
HTTP/1.1" 304 - 0.0107
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET
/images/opennebula-sunstone-big.png HTTP/1.1" 304 - 0.0019
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET
/images/opennebula-sunstone-big.png HTTP/1.1" 304 - 0.0060
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /images/panel.png
HTTP/1.1" 304 - 0.0020
10.243.18.28 - - [13/Apr/2011 13:45:03] "GET /images/panel.png
HTTP/1.1" 304 - 0.0040
10.243.18.28 - - [13/Apr/2011 13:45:13] "POST /login HTTP/1.1" 401 - 0.0240
10.243.18.28 - - [13/Apr/2011 13:45:13] "POST /login HTTP/1.1" 401 - 0.0280
10.243.18.28 - - [13/Apr/2011 13:45:29] "POST /login HTTP/1.1" 401 - 0.0160
10.243.18.28 - - [13/Apr/2011 13:45:29] "POST /login HTTP/1.1" 401 - 0.0180


On Wed, Apr 13, 2011 at 10:29 AM, Daniel Molina  wrote:
> Would you mind to send us the output of oneuser list -x and the
> sunstone.log file inside the ONE var directory.
>
> On 13 April 2011 16:16, Robert Parrott  wrote:
>> Both sunserver and oned are running as the oneadmin user, and the command
>>
>>> oneuser list
>>
>> works and lists the users. The sha1 hash matches that of the hashed
>> password in the sunstone server code.
>>
>> So it seems like it's on the the oned end of things.
>>
>> On Wed, Apr 13, 2011 at 4:03 AM, Daniel Molina  
>> wrote:
>>> Hi,
>>>
>>> Did you start the service as oneadmin?
>>> if you run oneuser list, are all the users listed with their passowrds?
>>>
>>> Hope this helps.
>>>
>>> On 13 April 2011 05:44, Robert Parrott  wrote:
>>>> Hi,
>>>>
>>>> Trying to test out OpenNebula with sunstone, and am unable to
>>>> authorize through sunstone. A little debugging shows that calling the
>>>> UserPool method for the user returns an empty password hash.
>>>>
>>>> I see in the logs that oned reports that a method is executed:
>>>>
>>>>   Tue Apr 12 23:41:25 2011 [ReM][D]: UserPoolInfo method invoked
>>>>
>>>> but the call returns "nil" in the sunstone code.
>>>>
>>>> I can otherwise authenticate from the command ,ine using the typical
>>>> ~/.one/one_auth file.
>>>>
>>>> Any thoughts about what to look for to resolve this?
>>>>
>>>>
>>>> Thanks,
>>>> rob
>>>>
>>>>
>>>>
>>>> --
>>>> Robert E. Parrott, Ph.D. (Phys. '06)
>>>> Director, Academic and Research Computing
>>>> Harvard University Sch. of Eng. and App. Sci.
>>>> Maxwell-Dworkin  211,
>>>> 33 Oxford St.
>>>> Cambridge, MA 02138
>>>> (617)-496-1520
>>>> ___
>>>> Users mailing list
>>>> Users@lists.opennebula.org
>>>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>>>
>>>
>>>
>>>
>>> --
>>> Daniel Molina, Cloud Technology Engineer/Researcher
>>> Major Contributor
>&

[one-users] sunstone auth problem

2011-04-12 Thread Robert Parrott
Hi,

Trying to test out OpenNebula with sunstone, and am unable to
authorize through sunstone. A little debugging shows that calling the
UserPool method for the user returns an empty password hash.

I see in the logs that oned reports that a method is executed:

   Tue Apr 12 23:41:25 2011 [ReM][D]: UserPoolInfo method invoked

but the call returns "nil" in the sunstone code.

I can otherwise authenticate from the command ,ine using the typical
~/.one/one_auth file.

Any thoughts about what to look for to resolve this?


Thanks,
rob



-- 
Robert E. Parrott, Ph.D. (Phys. '06)
Director, Academic and Research Computing
Harvard University Sch. of Eng. and App. Sci.
Maxwell-Dworkin  211,
33 Oxford St.
Cambridge, MA 02138
(617)-496-1520
___
Users mailing list
Users@lists.opennebula.org
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org