Re: [ovirt-users] How to mapping LDAP users in AAA
Sun Java Access System Manager
在 14-10-14 下午1:52, Yair Zaslavsky 写道:
- Original Message -
From: lofyer lof...@gmail.com
To: users users@ovirt.org
Sent: Tuesday, October 14, 2014 5:10:56 AM
Subject: [ovirt-users] How to mapping LDAP users in AAA
I've got a LDAP server without kerberos and I am trying to intergrate
its users to oVirt-3.5 with AAA.
==
Which ldap server is that, what vendor?
/etc/ovirt-engine/aaa/example.properties:
include = openldap.properties
vars.user = cn=directory manager
vars.password = mypassword
vars.server = example.com
#pool.default.ssl.startTLS = false
#pool.default.ssl.truststore.file = /etc/ldap_tls/ca_cert.pem
#pool.default.ssl.truststore.password = admin
pool.default.serverset.single.server = ${global:vars.server}
pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
==
This is my basic ldap infomation:
ou=Groups
|
+ cn=UserGroup1
|
+ cn=UserGroup2
ou=UserGroup1
|
+ cn=user1
|
+ cn=user2
ou=UserGroup2
|
+ cn=user3
|
+ cn=user4
==
Now I can see example.com in web portal but I cannot list users in UG1
or UG2.
I find that I could map DN, ID NAME, DISPLAY in the config file. What
should I add in the config file then?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to mapping LDAP users in AAA
- Original Message -
From: lofyer lof...@gmail.com
To: users users@ovirt.org
Sent: Tuesday, October 14, 2014 5:10:56 AM
Subject: [ovirt-users] How to mapping LDAP users in AAA
I've got a LDAP server without kerberos and I am trying to intergrate
its users to oVirt-3.5 with AAA.
==
/etc/ovirt-engine/aaa/example.properties:
You need to create two extensions, one for authentication and another for
authorization at /etc/ovirt-engine/extensions.d/ see[1], both should refer to
your example.properties.
But I see you created these based on bellow.
[1]
http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l17
include = openldap.properties
vars.user = cn=directory manager
are you sure this ^ is the full dn of the user?
vars.password = mypassword
vars.server = example.com
#pool.default.ssl.startTLS = false
#pool.default.ssl.truststore.file = /etc/ldap_tls/ca_cert.pem
#pool.default.ssl.truststore.password = admin
pool.default.serverset.single.server = ${global:vars.server}
pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
==
This is my basic ldap infomation:
ou=Groups
|
+ cn=UserGroup1
|
+ cn=UserGroup2
ou=UserGroup1
|
+ cn=user1
|
+ cn=user2
ou=UserGroup2
|
+ cn=user3
|
+ cn=user4
==
Now I can see example.com in web portal but I cannot list users in UG1
or UG2.
in admin portal?
I find that I could map DN, ID NAME, DISPLAY in the config file. What
should I add in the config file then?
you do not need to touch these...
1. which version of ovirt-engine do you use?
2. which version of ovirt-engine-extension-aaa-ldap do you use?
what is your root dse?
$ ldapsearch -H ldap://example.com -b '' -x -D 'cn=directory manager' -w
mypassword -s BASE
seek namingContexts it should contain first entry a suffix for all objects.
if you try to search users within Users add tab within webadmin and find
nothing and rootdse is ok please modify
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in and set:
file-handler name=SERVER --- find this
level name=FINEST/ --- modify this
logger category=org.ovirt.engineextensions.aaa.ldap --- add this
level name=FINEST/ --- add this
/logger --- add this
logger category=com.arjuna --- find this
stop engine
remove /var/log/ovirt-engine/engine.log
start engine
try to search
send me engine.log
Regards,
Alon
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to mapping LDAP users in AAA
- Original Message -
From: lofyer lof...@gmail.com
To: Yair Zaslavsky yzasl...@redhat.com
Cc: users users@ovirt.org
Sent: Tuesday, October 14, 2014 9:29:57 AM
Subject: Re: [ovirt-users] How to mapping LDAP users in AAA
Sun Java Access System Manager
this is not openldap... why do you use openldap profile?
please attach full export of this ldap server, output of:
rootdse:
$ ldapsearch -H ldap://example.com -b '' -x -D 'cn=directory manager' -w
mypassword -s BASE
entities:
$ ldapsearch -o ldif-wrap=no -E pr=100/noprompt -H ldap://example.com -x -D
'cn=directory manager' -w mypassword -b NAMING_CONTEXT
在 14-10-14 下午1:52, Yair Zaslavsky 写道:
- Original Message -
From: lofyer lof...@gmail.com
To: users users@ovirt.org
Sent: Tuesday, October 14, 2014 5:10:56 AM
Subject: [ovirt-users] How to mapping LDAP users in AAA
I've got a LDAP server without kerberos and I am trying to intergrate
its users to oVirt-3.5 with AAA.
==
Which ldap server is that, what vendor?
/etc/ovirt-engine/aaa/example.properties:
include = openldap.properties
vars.user = cn=directory manager
vars.password = mypassword
vars.server = example.com
#pool.default.ssl.startTLS = false
#pool.default.ssl.truststore.file = /etc/ldap_tls/ca_cert.pem
#pool.default.ssl.truststore.password = admin
pool.default.serverset.single.server = ${global:vars.server}
pool.default.auth.simple.bindDN = ${global:vars.user}
pool.default.auth.simple.password = ${global:vars.password}
==
This is my basic ldap infomation:
ou=Groups
|
+ cn=UserGroup1
|
+ cn=UserGroup2
ou=UserGroup1
|
+ cn=user1
|
+ cn=user2
ou=UserGroup2
|
+ cn=user3
|
+ cn=user4
==
Now I can see example.com in web portal but I cannot list users in UG1
or UG2.
I find that I could map DN, ID NAME, DISPLAY in the config file. What
should I add in the config file then?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] How to mapping LDAP users in AAA
Yes, I do add authz and authn in /etc/ovirt-engine/extension.d/ like this == /etc/ovirt-engine/extensions.d/authn-sdju.edu.cn.properties: ovirt.engine.extension.name = authn-sdju.edu.cn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = sdju.edu.cn ovirt.engine.aaa.authn.authz.plugin = authz-sdju.edu.cn config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties == /etc/ovirt-engine/extensions.d/authz-sdju.edu.cn.properties: ovirt.engine.extension.name = authz-sdju.edu.cn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties == And here's my log: ldapsearch -H ldap://ids.sdju.edu.cn -b '' -D 'cn=directory manager' -w mypassword -s BASE # extended LDIF # # LDAPv3 # base with scope baseObject # filter: (objectclass=*) # requesting: ALL # # dn: objectClass: top namingContexts: dc=sdju,dc=edu,dc=cn namingContexts: o=NetscapeRoot supportedExtension: 2.16.840.1.113730.3.5.7 supportedExtension: 2.16.840.1.113730.3.5.8 supportedExtension: 2.16.840.1.113730.3.5.3 supportedExtension: 2.16.840.1.113730.3.5.5 supportedExtension: 2.16.840.1.113730.3.5.6 supportedExtension: 2.16.840.1.113730.3.5.4 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.1 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.2 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.3 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.4 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.5 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.6 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.7 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.8 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.9 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.11 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.12 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.13 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.14 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.15 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.16 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.17 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.18 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.19 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.21 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.22 supportedExtension: 1.3.6.1.4.1.4203.1.11.3 supportedControl: 2.16.840.1.113730.3.4.2 supportedControl: 2.16.840.1.113730.3.4.3 supportedControl: 2.16.840.1.113730.3.4.4 supportedControl: 2.16.840.1.113730.3.4.5 supportedControl: 1.2.840.113556.1.4.473 supportedControl: 2.16.840.1.113730.3.4.9 supportedControl: 2.16.840.1.113730.3.4.16 supportedControl: 2.16.840.1.113730.3.4.15 supportedControl: 2.16.840.1.113730.3.4.17 supportedControl: 2.16.840.1.113730.3.4.19 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.2 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.6 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.8 supportedControl: 2.16.840.1.113730.3.4.14 supportedControl: 1.3.6.1.4.1.1466.29539.12 supportedControl: 2.16.840.1.113730.3.4.12 supportedControl: 2.16.840.1.113730.3.4.18 supportedControl: 2.16.840.1.113730.3.4.13 supportedSASLMechanisms: EXTERNAL supportedSASLMechanisms: DIGEST-MD5 supportedLDAPVersion: 2 supportedLDAPVersion: 3 vendorName: Sun Microsystems, Inc. vendorVersion: Sun Java(TM) System Directory Server/5.2_Patch_4 dataversion: 020121212071504020121212071504 netscapemdsuffix: cn=ldap://dc=ids1,dc=sdju,dc=edu,dc=cn:389 # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 == ldapsearch -E pr=100/noprompt -H ldap://ids.sdju.edu.cn -x -D 'cn=directory manager' -w mypassword -b ou=JZG,dc=sdju,dc=edu,dc=cn # extended LDIF # # LDAPv3 # base ou=JZG,dc=sdju,dc=edu,dc=cn with scope subtree # filter: (objectclass=*) # requesting: ALL # with pagedResults control: size=100 # # JZG, sdju.edu.cn dn: ou=JZG,dc=sdju,dc=edu,dc=cn ou: JZG objectClass: organizationalUnit objectClass: iplanet-am-managed-people-container objectClass: top # 30419, JZG, sdju.edu.cn dn: uid=30419,ou=JZG,dc=sdju,dc=edu,dc=cn eduPersonCardID: X219631030057X uid: 30419 ... ... ... userPassword:: e1NTSEF9OUNWcXMxbnA0YjFsU0NzZDNqODRIOTVBQ1VQTlR1cEI0UmNnSEE9PQ= = # search result search: 2 result: 0 Success # numResponses: 1251 # numEntries: 1250 在 14-10-14 下午3:18, Alon Bar-Lev 写道: - Original Message - From: lofyer lof...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: users users@ovirt.org Sent: Tuesday, October 14, 2014 9:29:57 AM
Re: [ovirt-users] How to mapping LDAP users in AAA
Hi, In order to help and create a profile for this variant I need the full output of: $ ldapsearch -E pr=100/noprompt -o ldif-wrap=no -H ldap://ids.sdju.edu.cn -x -D 'cn=directory manager' -w mypassword -b 'dc=sdju,dc=edu,dc=cn' Please do not paste but paste. You can send me privately. Regards, Alon - Original Message - From: lofyer lof...@gmail.com To: Alon Bar-Lev alo...@redhat.com Cc: Yair Zaslavsky yzasl...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 12:22:03 PM Subject: Re: [ovirt-users] How to mapping LDAP users in AAA Yes, I do add authz and authn in /etc/ovirt-engine/extension.d/ like this == /etc/ovirt-engine/extensions.d/authn-sdju.edu.cn.properties: ovirt.engine.extension.name = authn-sdju.edu.cn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthnExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn ovirt.engine.aaa.authn.profile.name = sdju.edu.cn ovirt.engine.aaa.authn.authz.plugin = authz-sdju.edu.cn config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties == /etc/ovirt-engine/extensions.d/authz-sdju.edu.cn.properties: ovirt.engine.extension.name = authz-sdju.edu.cn ovirt.engine.extension.bindings.method = jbossmodule ovirt.engine.extension.binding.jbossmodule.module = org.ovirt.engine-extensions.aaa.ldap ovirt.engine.extension.binding.jbossmodule.class = org.ovirt.engineextensions.aaa.ldap.AuthzExtension ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties == And here's my log: ldapsearch -H ldap://ids.sdju.edu.cn -b '' -D 'cn=directory manager' -w mypassword -s BASE # extended LDIF # # LDAPv3 # base with scope baseObject # filter: (objectclass=*) # requesting: ALL # # dn: objectClass: top namingContexts: dc=sdju,dc=edu,dc=cn namingContexts: o=NetscapeRoot supportedExtension: 2.16.840.1.113730.3.5.7 supportedExtension: 2.16.840.1.113730.3.5.8 supportedExtension: 2.16.840.1.113730.3.5.3 supportedExtension: 2.16.840.1.113730.3.5.5 supportedExtension: 2.16.840.1.113730.3.5.6 supportedExtension: 2.16.840.1.113730.3.5.4 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.1 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.2 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.3 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.4 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.5 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.6 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.7 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.8 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.9 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.11 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.12 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.13 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.14 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.15 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.16 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.17 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.18 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.19 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.21 supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.22 supportedExtension: 1.3.6.1.4.1.4203.1.11.3 supportedControl: 2.16.840.1.113730.3.4.2 supportedControl: 2.16.840.1.113730.3.4.3 supportedControl: 2.16.840.1.113730.3.4.4 supportedControl: 2.16.840.1.113730.3.4.5 supportedControl: 1.2.840.113556.1.4.473 supportedControl: 2.16.840.1.113730.3.4.9 supportedControl: 2.16.840.1.113730.3.4.16 supportedControl: 2.16.840.1.113730.3.4.15 supportedControl: 2.16.840.1.113730.3.4.17 supportedControl: 2.16.840.1.113730.3.4.19 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.2 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.6 supportedControl: 1.3.6.1.4.1.42.2.27.9.5.8 supportedControl: 2.16.840.1.113730.3.4.14 supportedControl: 1.3.6.1.4.1.1466.29539.12 supportedControl: 2.16.840.1.113730.3.4.12 supportedControl: 2.16.840.1.113730.3.4.18 supportedControl: 2.16.840.1.113730.3.4.13 supportedSASLMechanisms: EXTERNAL supportedSASLMechanisms: DIGEST-MD5 supportedLDAPVersion: 2 supportedLDAPVersion: 3 vendorName: Sun Microsystems, Inc. vendorVersion: Sun Java(TM) System Directory Server/5.2_Patch_4 dataversion: 020121212071504020121212071504 netscapemdsuffix: cn=ldap://dc=ids1,dc=sdju,dc=edu,dc=cn:389 # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 == ldapsearch -E pr=100/noprompt -H ldap://ids.sdju.edu.cn -x -D 'cn=directory manager' -w mypassword -b ou=JZG,dc=sdju,dc=edu,dc=cn # extended LDIF # # LDAPv3 # base ou=JZG,dc=sdju,dc=edu,dc=cn with scope subtree # filter: (objectclass=*) # requesting: ALL # with pagedResults
[ovirt-users] Spice on Ovirt 3.4.4 Windows 2012 Guests
Hi We are currently running Ovirt 3.3.5 in production, currently our Windows Guests are using spice for the console. I have noticed that in our test environment running 3.4.4 that this option cannot be selected for Windows 2012 guests. Does anyone know what will happen to the console on VMs running windows 2012 if we upgrade to 3.4.4 on our production environment ? Will it simply not work resulting in us having to power down the affected VMs or will the existing VMs carry on working with the spice console setting ? Thanks *Gary Lloyd* -- IT Services Keele University --- ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Spice on Ovirt 3.4.4 Windows 2012 Guests
Hi Gary, I can't tell you what happens on upgrade but in order to be able to choose Spice consoles for win8/win2012 guests, drop this file to /etc/ovirt-engine/osinfo.conf.d: cat /etc/ovirt-engine/osinfo.conf.d/99-spice_for_win8_and_win2012.properties EOF os.windows_8.devices.display.protocols.value = qxl/qxl,vnc/cirrus os.windows_8x64.devices.display.protocols.value = qxl/qxl,vnc/cirrus os.windows_2012x64.devices.display.protocols.value = qxl/qxl,vnc/cirrus EOF and restart the engine. You won't be able to use qxl driver (and by extension multi-monitor and continuous resolution change) but the features provided by spice-vdagent should continue to work for you. Regards, David On Út, 2014-10-14 at 11:07 +0100, Gary Lloyd wrote: Hi We are currently running Ovirt 3.3.5 in production, currently our Windows Guests are using spice for the console. I have noticed that in our test environment running 3.4.4 that this option cannot be selected for Windows 2012 guests. Does anyone know what will happen to the console on VMs running windows 2012 if we upgrade to 3.4.4 on our production environment ? Will it simply not work resulting in us having to power down the affected VMs or will the existing VMs carry on working with the spice console setting ? Thanks Gary Lloyd -- IT Services Keele University --- ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] async vm start (python)
Hi everybody, I'm trying to start a VM (using python sdk) asynchronously, but I obtain synchronous behaviour. The engine is RHEV-M version 3.4.1-0.31.el6ev. Here a snippet of code: - myvm = api.vms.get(name=VMNAME) retval = myvm.start(params.Action(async=True)) print ParseHelper.toXml(retval) - and this is what I get (retval): - action asynctrue/async vm href=/api/vms/5aa66e96-5fdd-4562-9c7d-ae6f88e6805d id=5aa66e96-5fdd-4562-9c7d-ae6f88e6805d [...cut..] /vm job href=/api/jobs/5c2326c7-f25c-432f-8848-c94e80dd173b id=5c2326c7-f25c-432f-8848-c94e80dd173b/ status statecomplete/state /status /action - status of task is always complete and the operation take some time, few seconds to some tens of seconds (sync behaviour). Any ideas? Thanks in advance, Giulio ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Enabling GlusterFS in production
Hi friends! I have just upgraded from 3.2 to 3.4 and it was very nice. Everything ok! Now I want to enable Gluster Service to my cluster in production. I think follow this steps: * Install manually vdsm-gluster * Restart supervdsm and vdsmd * Enable Gluster Service in my Cluster. Could it cause any problem or downtime? Thanks. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] ovirt presentation template -- google docs format?
Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt presentation template -- google docs format?
Here you go! (And for everyone else!) BKP - Original Message - From: Greg Sheremeta gsher...@redhat.com To: Dave Neary dne...@redhat.com, Brian Proffitt bprof...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 4:06:49 PM Subject: ovirt presentation template -- google docs format? Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com -- Brian Proffitt Community Liaison oVirt Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt presentation template -- google docs format?
Thanks. I added it to http://www.ovirt.org/Templates - Original Message - From: Brian Proffitt bprof...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Dave Neary dne...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 10:20:37 AM Subject: Re: ovirt presentation template -- google docs format? Here you go! (And for everyone else!) BKP - Original Message - From: Greg Sheremeta gsher...@redhat.com To: Dave Neary dne...@redhat.com, Brian Proffitt bprof...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 4:06:49 PM Subject: ovirt presentation template -- google docs format? Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com -- Brian Proffitt Community Liaison oVirt Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] async vm start (python)
On 10/14/2014 01:04 PM, Giulio Casella wrote: Hi everybody, I'm trying to start a VM (using python sdk) asynchronously, but I obtain synchronous behaviour. The engine is RHEV-M version 3.4.1-0.31.el6ev. Here a snippet of code: - myvm = api.vms.get(name=VMNAME) retval = myvm.start(params.Action(async=True)) print ParseHelper.toXml(retval) - and this is what I get (retval): - action asynctrue/async vm href=/api/vms/5aa66e96-5fdd-4562-9c7d-ae6f88e6805d id=5aa66e96-5fdd-4562-9c7d-ae6f88e6805d [...cut..] /vm job href=/api/jobs/5c2326c7-f25c-432f-8848-c94e80dd173b id=5c2326c7-f25c-432f-8848-c94e80dd173b/ status statecomplete/state /status /action - status of task is always complete and the operation take some time, few seconds to some tens of seconds (sync behaviour). Any ideas? Thanks in advance, Giulio The async parameter that you are passing to the REST API is only a hint. It means that *if* the action performed by the backend has associated async tasks then the REST API will not wait for them to finish. In this particular case, the action performed by the backend doesn't have async tasks, so the parameter is just ignored. -- Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta 3ºD, 28016 Madrid, Spain Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] oVirt status in EL7
Hi, What status of support EL7 in oVirt? I mean as host OS. -- -Igor Gnatenko ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt presentation template -- google docs format?
I also updated the wikipedia page with this higher-res logo. The old one looked bad. - Original Message - From: Greg Sheremeta gsher...@redhat.com To: Brian Proffitt bprof...@redhat.com Cc: Dave Neary dne...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 10:34:29 AM Subject: Re: ovirt presentation template -- google docs format? Thanks. I added it to http://www.ovirt.org/Templates - Original Message - From: Brian Proffitt bprof...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Dave Neary dne...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 10:20:37 AM Subject: Re: ovirt presentation template -- google docs format? Here you go! (And for everyone else!) BKP - Original Message - From: Greg Sheremeta gsher...@redhat.com To: Dave Neary dne...@redhat.com, Brian Proffitt bprof...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 4:06:49 PM Subject: ovirt presentation template -- google docs format? Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com -- Brian Proffitt Community Liaison oVirt Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt status in EL7
Waiting on 3.5 release I believe (like myself :)) - Original Message - From: Igor Gnatenko ignatenkobr...@fedoraproject.org To: users@ovirt.org Sent: Tuesday, 14 October, 2014 4:33:50 PM Subject: [ovirt-users] oVirt status in EL7 Hi, What status of support EL7 in oVirt? I mean as host OS. -- -Igor Gnatenko ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] html slideshow (was: Re: ovirt presentation template -- google docs format?)
I prepared a presentation about separate engine/dwh/reports hosts using slidy [1] and pandoc [2] to convert markdown to an html slideshow and am trying preparing an ovirt template for that. Any opinions about that? Client side web developers are welcome to help and/or take over... You can see the current presentation (unstyled) at [3]. Note that the content is also not uptodate, stay tuned. [1] http://www.w3.org/Talks/Tools/Slidy2/ [2] http://johnmacfarlane.net/pandoc/ [3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation Best, -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt status in EL7
Il 14/ott/2014 18:08 Phil Daws ux...@splatnix.net ha scritto: Waiting on 3.5 release I believe (like myself :)) - Original Message - From: Igor Gnatenko ignatenkobr...@fedoraproject.org To: users@ovirt.org Sent: Tuesday, 14 October, 2014 4:33:50 PM Subject: [ovirt-users] oVirt status in EL7 Hi, What status of support EL7 in oVirt? I mean as host OS. Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in the same cluster? Supposing to have 3.5rc4? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] html slideshow
On 10/14/2014 06:48 PM, Yedidyah Bar David wrote: I prepared a presentation about separate engine/dwh/reports hosts using slidy [1] and pandoc [2] to convert markdown to an html slideshow and am trying preparing an ovirt template for that. Any opinions about that? Client side web developers are welcome to help and/or take over... You can see the current presentation (unstyled) at [3]. Note that the content is also not uptodate, stay tuned. [1] http://www.w3.org/Talks/Tools/Slidy2/ [2] [3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation Best, And I thought I was having trouble with LibreOffice Presenter (Powerpoint) ;- I hope you can make it work, sorry I don't have the knowledge to help you out! Met vriendelijke groet, With kind regards, Jorick Astrego Netbulae Virtualization Experts Tel: 053 20 30 270 i...@netbulae.euStaalsteden 4-3A KvK 08198180 Fax: 053 20 30 271 www.netbulae.eu 7547 TA Enschede BTW NL821234584B01 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Vlans and subnets
Hello all, I've created a self-hosted ovirt engine with two node, but on the last steps the engine-setup could not attach the node to the default cluster. I think it was because I have different services on different vlans. I have vlan100 for glusterfs and vlan101 for vdsm hosts with different subnets. Also, I have an another connection (eth1) with different subnet for internet acces and this is the default route. I would like to separate ovirt services, networks and glusterfs to different vlans/subnets by security reasons. But I don't know what services need to be on same vlan/subnets. My questions/goals - which services need to connect to another ? - Is hosted engine's vm need to be on same network with gluster ? - Is hosted engine's vm need to be on same network with vdsm hosts? - I want to separate ovirt/gluster networks from ovirt VM-s/public internet access - I don't want to extra traffic on router Does anyone experience with this way? Thanks in advance Tibor ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt status in EL7
On 10/14/2014 07:50 PM, Gianluca Cecchi wrote: Il 14/ott/2014 18:08 Phil Daws ux...@splatnix.net mailto:ux...@splatnix.net ha scritto: Waiting on 3.5 release I believe (like myself :)) - Original Message - From: Igor Gnatenko ignatenkobr...@fedoraproject.org mailto:ignatenkobr...@fedoraproject.org To: users@ovirt.org mailto:users@ovirt.org Sent: Tuesday, 14 October, 2014 4:33:50 PM Subject: [ovirt-users] oVirt status in EL7 Hi, What status of support EL7 in oVirt? I mean as host OS. Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in the same cluster? Supposing to have 3.5rc4? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users yes, but live migration may/would work only one way to 7.0, so only as a migration path probably. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt status in EL7
Hey all, I dont know if it is supported but I am using a CentOS 7 hypervisor with oVirt 3.4.4. This gave me the ability to use live snapshots. The only trouble I have had is remembering not to live migrate from the 7 hypervisor to the 6.5. Sent from my iPhone, while driving! On Oct 14, 2014, at 1:56 PM, Itamar Heim ih...@redhat.com wrote: On 10/14/2014 07:50 PM, Gianluca Cecchi wrote: Il 14/ott/2014 18:08 Phil Daws ux...@splatnix.net mailto:ux...@splatnix.net ha scritto: Waiting on 3.5 release I believe (like myself :)) - Original Message - From: Igor Gnatenko ignatenkobr...@fedoraproject.org mailto:ignatenkobr...@fedoraproject.org To: users@ovirt.org mailto:users@ovirt.org Sent: Tuesday, 14 October, 2014 4:33:50 PM Subject: [ovirt-users] oVirt status in EL7 Hi, What status of support EL7 in oVirt? I mean as host OS. Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in the same cluster? Supposing to have 3.5rc4? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users yes, but live migration may/would work only one way to 7.0, so only as a migration path probably. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for Women
Sorry for the late response -- I am also mentoring two people at the moment. I am registered on the OPW page and on our wiki page. Any interested candidates (specifically in UX or ovirt.js work), feel free to reach out! I hear I'm a great teacher ;) Greg - Original Message - From: Brian Proffitt bprof...@redhat.com To: Tomas Jelinek tjeli...@redhat.com Cc: users users@ovirt.org, de...@ovirt.org Sent: Thursday, October 2, 2014 7:53:53 AM Subject: Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for Women Just one: notifying the coordinator so I know you're in! :) Thank you very much for doing all of this. I will be more proactive in the future at checking the page first! BKP - Original Message - From: Tomas Jelinek tjeli...@redhat.com To: Brian Proffitt bprof...@redhat.com Cc: users users@ovirt.org, de...@ovirt.org Sent: Thursday, October 2, 2014 7:45:14 AM Subject: Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for Women Hi Brian, what do you mean by no responses? I have: - sent an intro mail to opw-l...@gnome.org - registered here as mentor: https://opw.gnome.org/?q=program_homeprg=3 - it is waiting for approval now - filled myself here: http://www.ovirt.org/Outreach_Program_for_Women Did I miss some step? Thanx, Tomas - Original Message - From: Brian Proffitt bprof...@redhat.com To: users users@ovirt.org, de...@ovirt.org Sent: Wednesday, October 1, 2014 9:46:16 PM Subject: [ovirt-users] [Request for Mentors] oVirt Outreach Program for Women All: Since my Sept. 19 request for mentors for the GNOME OPW project[1], I have had no responses from anyone to lend an effort on mentoring potential applicants. The application process has been opened and I know we have had at least one potential candidate[2] interested, and I would hate to turn people away because we did not have mentor(s) to assist them. The application deadline for OPW is Oct. 22, but because potential applicants are required to get involved with the community before they formally apply, it is very important we have some mentors in place as soon as possible. oVirt has an excellent community in place, and here's another chance to show that off! Peace, Brian [1] http://lists.ovirt.org/pipermail/devel/2014-September/008829.html [2] http://lists.ovirt.org/pipermail/devel/2014-September/008896.html -- Brian Proffitt Community Liaison oVirt Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Brian Proffitt Community Liaison oVirt Open Source and Standards, Red Hat - http://community.redhat.com Phone: +1 574 383 9BKP IRC: bkp @ OFTC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] html slideshow (was: Re: ovirt presentation template -- google docs format?)
- Original Message - From: Yedidyah Bar David d...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Brian Proffitt bprof...@redhat.com, Dave Neary dne...@redhat.com, users users@ovirt.org Sent: Tuesday, October 14, 2014 12:48:55 PM Subject: html slideshow (was: Re: [ovirt-users] ovirt presentation template -- google docs format?) I prepared a presentation about separate engine/dwh/reports hosts using slidy [1] and pandoc [2] to convert markdown to an html slideshow and am trying preparing an ovirt template for that. Any opinions about that? Client side web developers are welcome to help and/or take over... You can see the current presentation (unstyled) at [3]. Note that the content is also not uptodate, stay tuned. [1] http://www.w3.org/Talks/Tools/Slidy2/ [2] http://johnmacfarlane.net/pandoc/ [3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation Best, -- Didi My opinion: the more template formats, the better -- as long as they all look the same. I, however, prefer point-and-click over markdown / latex / etc. Greg ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] oVirt status in EL7
Sent from my iPhone, while driving! I hope at least through voice assistant or while in the middle of a desert ;-) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ISO_DOMAIN as iscsi storage type
On 10/13/2014 11:23 AM, ml ml wrote: Hello List, i am very unhappy with NFS for my ISO_DOMAIN domain. Can i simply remove my ISO_DOMAIN via NFS and add a ISO_DOMAIN via isci? My Setup: http://oi60.tinypic.com/2cmu7nm.jpg I once ran into a pitfall where i was not able to add a ISO DOMAIN anymore, so i would rather ask in advance if i can remove the ISO_DOMAIN and simply add it again via iscsi. Do i need to take care of anything here? Thanks, Mario ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users I'm pretty sure we don't support iscsi for iso domain. we want to make iso a simple posix path, not a storage domain ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Packet loss
Evening all, I'm having major issues with a self hosted setup (oVirt 3.4.4 CentOS 6.5) on Hetzner, with 2 subnets allocated to the server. Routing to and from the additional IP ranges is working as expected, and I can allocate any of the IPs to a virtual interface on the host and get connectivity, so from what I can tell the network routing side of things is correct. However, when I move any of the allocated IPs to any of the guests, I get 1 ICMP response before complete packet loss. This happens at all times, even with iptables completely unloaded and an Accept policy thoughout. The structure is just a basic bridge called ovirtmgmt that all interfaces are bound to. Guests that are affected can communicate with other guests on either of the two subnets, and also with the host, so the bridge is up and running, but when it comes to any traffic trying to egress by the default route, it comes to a halt. In addition, all the hosts have unique MACs, dmesg shows that the appropriate vnets are entering forwarding states and STP is disabled on the bridge. And just to confuse matters, one guest is working just fine - yet when the settings are replicated to any other host the new host still fails to work. Even if I put the working IP onto another guest, it fails to transfer any data. All I get is constant who-has requests on the host bridge whilst the guest looks for the next-hop. Has anyone experienced this before? Where's next on the list of places to look?! Regards Kyle -- Kyle Gordon - 2M1DIQ Web: http://lodge.glasgownet.com Jabber/Email/SIP: k...@lodge.glasgownet.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Vlans and subnets
Hi Demeter, This is an issue others have stumbled onto before, so it probably needs to be fixed; it's sort of a chicken-and-egg problem. For the time being, I think the workaround is to set up your storage network manually on the host as vlan101 (in an oVirt-compatible manner) before running engine-setup. In engine-setup you would then name the vlan102 device for the management network (which is used to communicate with hosts). Setting up the storage network in an oVirt-compatible manner can be performed by pre-installing vdsm (i.e. yum install vdsm) yourself on your first host, then run something like: vdsClient -s 0 addNetwork bridge=storageNetworkName vlan=101 nic=eth0 \ BOOTPROTO=dhcp I hope I got it approximately right, can't commit that it's accurate :) I've also added specific answers to your questions below, please let us know if this does the trick or if you require more assistance. On 14/10/14 19:58, Demeter Tibor wrote: Hello all, I've created a self-hosted ovirt engine with two node, but on the last steps the engine-setup could not attach the node to the default cluster. I think it was because I have different services on different vlans. I have vlan100 for glusterfs and vlan101 for vdsm hosts with different subnets. Also, I have an another connection (eth1) with different subnet for internet acces and this is the default route. I would like to separate ovirt services, networks and glusterfs to different vlans/subnets by security reasons. But I don't know what services need to be on same vlan/subnets. My questions/goals - which services need to connect to another ? Could you be more specific? The management network is used to communicate between the engine and the hosts, the storage network is only used by the hosts (and not the engine) as far as I know. - Is hosted engine's vm need to be on same network with gluster ? To my understanding no, see above point. - Is hosted engine's vm need to be on same network with vdsm hosts? Yes, see above point :) - I want to separate ovirt/gluster networks from ovirt VM-s/public internet access Not sure how much separation you're looking to get, but shouldn't be a problem. For example, You can put the additional (public) networks on different VLANs and make sure to tag/untag packets as they enter/leave your oVirt deployment. Keep in mind to also configure the additional networks on the hosts and VMs. - I don't want to extra traffic on router Not sure about your topology, but if your hosts are on the same broadcast domain then there's no reason why this traffic will put unnecessary load on your router. Does anyone experience with this way? Thanks in advance Tibor ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt presentation template -- google docs format?
Speaking of which, may I hijack this thread in order to ask why we don't have a slideshow template that looks like a slideshow template? With non-white background, colors in general, some graphics/patterns, thought-out bullet design, etc.? This template just doesn't look like it means business. Not business as in the money-making way, business as in talking about a serious project with a serious brand. But maybe that's just me... On 14/10/14 16:06, Greg Sheremeta wrote: Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt presentation template -- google docs format?
- Original Message - From: Lior Vernia lver...@redhat.com To: Greg Sheremeta gsher...@redhat.com Cc: Dave Neary dne...@redhat.com, users users@ovirt.org Sent: Wednesday, October 15, 2014 2:51:16 AM Subject: Re: [ovirt-users] ovirt presentation template -- google docs format? Speaking of which, may I hijack this thread in order to ask why we don't have a slideshow template that looks like a slideshow template? With non-white background, colors in general, some graphics/patterns, thought-out bullet design, etc.? +1 here, you're more UI oriented person than I am , Lior , but now that you raised it, it suddenly popped into me as well - I would also like to see some improvement in that area. Thanks for the initiative! Yair This template just doesn't look like it means business. Not business as in the money-making way, business as in talking about a serious project with a serious brand. But maybe that's just me... On 14/10/14 16:06, Greg Sheremeta wrote: Anyone have a Google Docs format of this? [1] Alternatively, I can make one if someone can find me that logo. I can't find a high-res logo anywhere. [1] http://www.ovirt.org/File:OVirt-Template.odp Thanks, Greg Greg Sheremeta Red Hat, Inc. Sr. Software Engineer, RHEV Cell: 919-807-1086 gsher...@redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
