Re: [Users] debug engine error
What do you need? development build? production build? Why don't you use the nightly builds at [1]? [1] http://resources.ovirt.org/releases/ - Original Message - From: bigclouds bigclo...@163.com To: users@ovirt.org Sent: Friday, April 12, 2013 4:14:25 AM Subject: [Users] debug engine error i think Building oVirt engine is too old. who could give a more detailed docoment, begin build from source code. 2013-04-11 17:38:49,580 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from file /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,581 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,587 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property AdminPassword will be used encrypted value 2013-04-11 17:38:49,606 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from f ile /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,611 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,615 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property LocalAdminPassword will be used encrypted value 2013-04-11 17:38:50,123 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from file /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:50,124 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:50,136 ERROR [o rg.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property TruststorePass will be used encrypted value ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Ipa server inside ovirt itself. ..
Hello, I have a test environment where I am short of hw. My engine is based on fedora 18 and I would like to test freeipa on centos 6. What are the drawbacks of creating a vm that is also one authentication domain for ovirt itself (apart the obvious ones)? Can i set it so that is the first to start? Can i set a subset of VMs to start only if this one is up and is giving ipa service (for example through a test connect command? ) Thanks Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Ipa server inside ovirt itself. ..
Hi, I don't see big issues, as you can always log into oVirt as admin@internal and start/stop/reset/... your IPA-vm. If your other vms use IPA for authentication (e.g. for service SSH) you can configure sssd for caching credentials if your IPA server is unavailable. ipa-client-install is doing it automatically, btw. Regards, René On Fri, 2013-04-12 at 09:20 +0200, Gianluca Cecchi wrote: Hello, I have a test environment where I am short of hw. My engine is based on fedora 18 and I would like to test freeipa on centos 6. What are the drawbacks of creating a vm that is also one authentication domain for ovirt itself (apart the obvious ones)? Can i set it so that is the first to start? Can i set a subset of VMs to start only if this one is up and is giving ipa service (for example through a test connect command? ) Thanks Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] [Spice-devel] 3.2 final and status of spice console in ie
Hey Everyone! I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is only using admin@internalmailto:admin@internal for testing (correct me if I´m wrong Juanjo), so I added a UserRole to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex, as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called ConsoleOwner that only have Login Permissions and RemoteLogin and added that role to our engine´s System Permissions on a directory group as broad as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:) A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs Effective Permissions, so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions should have granted the necessary abilities in the system, without me having to first add that as a big system permission to have them granted? Bug, or intended? Thank you so much Juanjo, for posting the versions you are currently using that proved that it should work, and that it had to be something else that prevented us from using it (which it was). Thank you! Best Regards Karli Sjöberg tor 2013-04-11 klockan 16:42 +0200 skrev Juan Jose: Hello again Karli, In this mail thread itself, David give me some indication about how I could to debug my spice connection in the client looking at spicex.log or installing debug-helper.exe. I try to search spicex.log and I tried to install debug-helper.exe. Searching this debug application I found this thread in u...@ovirt.orgmailto:u...@ovirt.org historical mail list: http://lists.ovirt.org/pipermail/users/2013-January/011466.html And as you see in the Itamar Heim response to Dennis Böck, the host has to be accessible and resolvable and to have spice ports open to the client. I didn't have my host, or node as you want name it, machine configured in the client hosts file. I had spice ports opened, I only tried to configure node hostname in the client host file and voilà, it works. This is all my history. Of course, I have also the engine machine configure in the client hosts file. I have this configuration because this both machines aren't configure in my corporative DNS. Again, I hope that it was useful. Juanjo. On Thu, Apr 11, 2013 at 1:21 PM, Karli Sjöberg karli.sjob...@slu.semailto:karli.sjob...@slu.se wrote: tor 2013-04-11 klockan 13:12 +0200 skrev Juan Jose: Hello Karli, No problem, the output of rpm query is: [root@ovirt-engine ~]# rpm -qa | grep ovirt ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch ovirt-engine-restapi-3.1.0-2.fc17.noarch ovirt-engine-backend-3.1.0-2.fc17.noarch ovirt-engine-config-3.1.0-2.fc17.noarch ovirt-release-fedora-4-2.noarch ovirt-engine-sdk-3.1.0.4-1.fc17.noarch ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch ovirt-engine-genericapi-3.1.0-2.fc17.noarch ovirt-engine-tools-common-3.1.0-2.fc17.noarch ovirt-engine-dbscripts-3.1.0-2.fc17.noarch ovirt-engine-userportal-3.1.0-2.fc17.noarch What the heck, 3.1.0-2?! Then why the doodoo doesn´t it work for us on 3.1.0-4?! Have you turned off SSL or something? I´m wondering what could be different on your system compared to ours... ovirt-engine-notification-service-3.1.0-2.fc17.noarch ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch ovirt-engine-webadmin-portal-3.1.0-2.fc17.noarch ovirt-engine-setup-3.1.0-2.fc17.noarch ovirt-engine-3.1.0-2.fc17.noarch I hope this help you to test your system. If you need some other information I will be happy to help. Yeah, how did you reach the conslusion that you needed to edit your host-file for it to start working? Did you follow any debugging instructions previously mentioned, and if you did, please explain how step by step so I can test and try to debug our systems as well? Juanjo. On Thu, Apr 11, 2013 at 6:55 AM, Karli Sjöberg karli.sjob...@slu.semailto:karli.sjob...@slu.se wrote: ons 2013-04-10 klockan 17:22 +0200 skrev Juan Jose: Yes, User portal works fine at the moment. I want to install spice-guest-tools to improve the windows VM integration in client machine. After that I will try to add a server user validation. Great to hear that! Although the topic is 3.2 final status..., I would like the output of rpm -qa | grep ovirt from your engine. I´m stuck at 3.1.0-4, since it is still impossible to upgrade. But as soon as that´s fixed I´ll be able to try and confirm this as well. /Karli Many thanks, Juanjo. On Wed, Apr 10, 2013 at 6:46 AM, Karli Sjöberg
[Users] oVirt 3.2.1 - virt-v2v import problem
Hi, I have problem with virt-v2v tool. I'm trying to import XEN image. On oVirt 3.0 the import works well. On oVirt 3.2.1 there is an error: virt-v2v -i libvirtxml -o rhev -os localhost:/var/ovirt/export api.xml arch-dev.img: 100% [==]D 0h02m53s Please enter your authentication name: vdsm@rhevh Please enter your password: could not connect to libvirt (URI = NULL): authentication failed: authentication failed [code=45 domain=7] at /usr/share/perl5/vendor_perl/Sys/VirtConvert/GuestfsHandle.pm line 96. It looks like after image upload, virt-v2v ties to connect to libvirtd. The vdsm@rhevh login with shibboleth password doesn't work. The oVirt is installed on Fedora 18. Engine and vdsmd runs on the same host. Is there any difference between authentication to libvirt on oVirt 3.0 and oVirt 3.2? Could I ask you for help with this problem? Best regards, Piotr ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] debug engine error
i will try the night build. what i want to do is create a debug environment from scratch. i need to modify UI and know the logic corresponding to each the UI operation. is there any different between night build and lastest git code? thanks At 2013-04-12 14:58:37,Alon Bar-Lev alo...@redhat.com wrote: What do you need? development build? production build? Why don't you use the nightly builds at [1]? [1] http://resources.ovirt.org/releases/ - Original Message - From: bigclouds bigclo...@163.com To: users@ovirt.org Sent: Friday, April 12, 2013 4:14:25 AM Subject: [Users] debug engine error i think Building oVirt engine is too old. who could give a more detailed docoment, begin build from source code. 2013-04-11 17:38:49,580 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from file /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,581 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,587 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property AdminPassword will be used encrypted value 2013-04-11 17:38:49,606 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from f ile /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,611 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:49,615 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property LocalAdminPassword will be used encrypted value 2013-04-11 17:38:50,123 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Can't load keystore from file /etc/pki/ovirt-engine/ca/.keystore. IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:50,124 ERROR [org.ovirt.engine.core.utils.crypt.EncryptionUtils] (MSC service thread 1-2) Failed to decrypt java.io.IOException: DerInputStream.getLength(): lengthTag=109, too big. 2013-04-11 17:38:50,136 ERROR [o rg.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-2) Failed to decrypt value for property TruststorePass will be used encrypted value ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] [Spice-devel] 3.2 final and status of spice console in ie
On 04/12/2013 11:27 AM, Karli Sjöberg wrote: Hey Everyone! I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is only using admin@internal mailto:admin@internal for testing (correct me if I´m wrong Juanjo), so I added a UserRole to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex, as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called ConsoleOwner that only have Login Permissions and RemoteLogin and added that role to our engine´s System Permissions on a directory group as broad as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:) A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs Effective Permissions, so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions should have granted the necessary abilities in the system, without me having to first add that as a big system permission to have them granted? Bug, or intended? Thank you so much Juanjo, for posting the versions you are currently using that proved that it should work, and that it had to be something else that prevented us from using it (which it was). Thank you! can you please clarify again which permission you granted to a user on the VM which didn't work before you added to the user the console permission? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.2.1 - virt-v2v import problem
On 12-4-2013 12:34, Piotr Szubiakowski wrote: Please enter your authentication name: vdsm@rhevh Please enter your password: could not connect to libvirt (URI = NULL): authentication failed: authentication failed [code=45 domain=7] at /usr/share/perl5/vendor_perl/Sys/VirtConvert/GuestfsHandle.pm line 96. It looks like after image upload, virt-v2v ties to connect to libvirtd. The vdsm@rhevh login with shibboleth password doesn't work. The oVirt is installed on Fedora 18. Engine and vdsmd runs on the same host. Is there any difference between authentication to libvirt on oVirt 3.0 and oVirt 3.2? Could I ask you for help with this problem? Try vdsm@ovirt with the same password. Joop ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] [Spice-devel] 3.2 final and status of spice console in ie
Hello Karli, You are wellcome, yes, at the moment we are testing but our idea is to connect engine to a user validation system. I will try to do it using Samba4 system and all needed pieces. Thanks, Juanjo. On Fri, Apr 12, 2013 at 1:41 PM, Itamar Heim ih...@redhat.com wrote: On 04/12/2013 11:27 AM, Karli Sjöberg wrote: Hey Everyone! I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is only using admin@internal mailto:admin@internal for testing (correct me if I´m wrong Juanjo), so I added a UserRole to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex, as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called ConsoleOwner that only have Login Permissions and RemoteLogin and added that role to our engine´s System Permissions on a directory group as broad as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:) A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs Effective Permissions, so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions should have granted the necessary abilities in the system, without me having to first add that as a big system permission to have them granted? Bug, or intended? Thank you so much Juanjo, for posting the versions you are currently using that proved that it should work, and that it had to be something else that prevented us from using it (which it was). Thank you! can you please clarify again which permission you granted to a user on the VM which didn't work before you added to the user the console permission? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.2.1 - virt-v2v import problem
Please enter your authentication name: vdsm@rhevh Please enter your password: could not connect to libvirt (URI = NULL): authentication failed: authentication failed [code=45 domain=7] at /usr/share/perl5/vendor_perl/Sys/VirtConvert/GuestfsHandle.pm line 96. It looks like after image upload, virt-v2v ties to connect to libvirtd. The vdsm@rhevh login with shibboleth password doesn't work. The oVirt is installed on Fedora 18. Engine and vdsmd runs on the same host. Is there any difference between authentication to libvirt on oVirt 3.0 and oVirt 3.2? Could I ask you for help with this problem? Try vdsm@ovirt with the same password. The vdsm@ovirt login works! Many thanks Joop :-) However after successful authentication virt-v2v tool throws error: virt-v2v -i libvirtxml -o rhev -os localhost:/var/ovirt/export api.xml arch-dev.img: 100% [==]D 0h02m51s Please enter your authentication name: vdsm@ovirt Please enter your password: 'iface' parameter is not supported by the libvirt attach-method at /usr/share/perl5/vendor_perl/Sys/VirtConvert/GuestfsHandle.pm line 96. Any idea? Regards, Piotr ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] iSCSI storage domain - expand disk
Hi, Is there any possible way, how to expand iSCSI disk on engine 3.2.1? Simple scene: I have already created iSCSI disk with 100GB and I can use it as master storage, but now I expand this this via physical storage management to 150GB. OK engine now detected that disk has capacity 150GB but the usable disk space is still only 100GB. I think that issue is with partition on this disk. It is possible to do? What file system is used for iSCSI disk? Thanks Martin This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. __ www.accenture.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] [Spice-devel] 3.2 final and status of spice console in ie
fre 2013-04-12 klockan 14:41 +0300 skrev Itamar Heim: On 04/12/2013 11:27 AM, Karli Sjöberg wrote: Hey Everyone! I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is only using admin@internal mailto:admin@internal for testing (correct me if I´m wrong Juanjo), so I added a UserRole to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex, as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called ConsoleOwner that only have Login Permissions and RemoteLogin and added that role to our engine´s System Permissions on a directory group as broad as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:) A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs Effective Permissions, so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions should have granted the necessary abilities in the system, without me having to first add that as a big system permission to have them granted? Bug, or intended? Thank you so much Juanjo, for posting the versions you are currently using that proved that it should work, and that it had to be something else that prevented us from using it (which it was). Thank you! can you please clarify again which permission you granted to a user on the VM which didn't work before you added to the user the console permission? I´m not really sure if I understood your question completely, so I´ll explain again: 1) Only adding directory user/group with UserRole permission to a VM or Pool = Fail; Couldn´t connect to graphics server. 2) First adding a very broad directory group with ConsoleOwner[1] permission to the inherited System Permissions, and then add directory user/group with UserRole to a VM or Pool = Success! [1] ConsoleOwner is a User Role I created that only needed to permit Login Permissions and Remote Log In. We haz VDI now, Powered by oVirt;) -- Med Vänliga Hälsningar --- Karli Sjöberg Swedish University of Agricultural Sciences Box 7079 (Visiting Address Kronåsvägen 8) S-750 07 Uppsala, Sweden Phone: +46-(0)18-67 15 66 karli.sjob...@slu.semailto:karli.sjob...@adm.slu.se ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] How to import KVM machines into oVirt iSCSI
Hi, How can I install virtio-win and libguestfs-winsupport , it looks like a RHEV package not a ovirt package. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
