date:20160324


Den 25 mars 2016 12:10 fm skrev Karli Sjöberg :
>
>
> Den 24 mars 2016 11:26 em skrev Ondra Machacek :
> >
> > On 03/24/2016 11:14 PM, Karli Sjöberg wrote:
> > >
> > > Den 24 mars 2016 7:26 em skrev Ondra Machacek :
> > >  >
> > >  > On 03/24/2016 06:16 PM, Karli Sjöberg wrote:
> > >  > > Hi!
> > >  > >
> > >  > >
> > >  > > Starting new thread instead of jacking someone else´s.
> > >  > >
> > >  > >
> > >  > > Managed to migrate from old 'engine-manage-domains' auth to
> > > aaa-ldap using:
> > >  > >
> > >  > > #| ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert
> > >  > > /tmp/ca.crt --apply
> > >  > > |
> > >  > >
> > >  > >
> > >  > > All OK, no errors, but cannot log in:
> > >  > >
> > >  > > # ovirt-engine-extensions-tool aaa login-user 
> > > --profile=baz.foo.bar-new
> > >  > > --user-name=user:
> > >  >
> > >  > If you want to login with user with different upn suffix, then just
> > >  > append that suffix
> > >  >
> > >  > $ ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
> > >  > --user-name=u...@foo.bar
> > >
> > > OK, some progress, that works!
> > >
> > >  >
> > >  > If you have more suffixes and want to have some as default you can use
> > >  > following approach:
> > >  >
> > >  > 1) install ovirt-engine-extension-aaa-misc
> > >  >
> > >  > 2) create new mapping extension like this:
> > >  > /etc/ovirt-engine/extensions.d/mapping-suffix.properties
> > >  >
> > >  > ovirt.engine.extension.name = mapping-suffix
> > >  > ovirt.engine.extension.bindings.method = jbossmodule
> > >  > ovirt.engine.extension.binding.jbossmodule.module =
> > >  > org.ovirt.engine-extensions.aaa.misc
> > >  > ovirt.engine.extension.binding.jbossmodule.class =
> > >  > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
> > >  > ovirt.engine.extension.provides =
> > >  > org.ovirt.engine.api.extensions.aaa.Mapping
> > >  > config.mapUser.type = regex
> > >  > config.mapUser.pattern = ^(?[^@]*)$
> > >
> > > Is that supposed to really say '' or should it be changed to a
> > > real user name? Either way, it doesn't work, I tried it all.
> >
> > '?' is just a named group in that regex so you can later use it in
> > 'config.mapUser.replacement'  option. It should take everything until
> > first '@'.
> >
> > >
> > >  > config.mapUser.replacement = ${user}@foo.bar
> > >  > config.mapUser.mustMatch = false
> > >  >
> > >  > 3) select a mapping plugin in authn configuration:
> > >  >
> > >  > ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix
> > >  >
> > >  > With above configuration in use, your user 'user' witll be mapped to
> > >  > user 'u...@foo.bar'
> > >  > and users 'u...@anotherdomain.foo.bar' will remain
> > >  > 'u...@anotherdomain.foo.bar'.
> > >
> > > This however does not, it doesn't replace the suffix as it's supposed
> > > to. I tried with many different types of the 'mapUser.pattern' but it
> > > simply won't change it, even if I type in '= ^u...@baz.foo.bar$', the
> > > error is the same:(
> >
> > Hmm, hard to say what's wrong, try to run:
> > $ ovirt-engine-extensions-tool --log-level=FINEST aaa login-user
> > --profile=baz.foo.bar-new --user-name=user
> >
> > and search for a mapping part in log.
>
> Wow what a mouthfull:) Can you make anything out of it?
>
> https://dropoff.slu.se/index.php/s/EMe2NPmOfsWCNTv/download
>
> /K

Just noticed after logging in to webadmin as "u...@foo.bar" (which worked btw, 
so good there) that the "User Name" in Users main tab looks really odd:
u...@foo.bar@baz.foo.bar-new-authz

/K

>
> >
> > >
> > > /K
> > >
> > >  >
> > >  > >
> > >  > > API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS
> > >  > >
> > >  > >
> > >  > > but:
> > >  > >
> > >  > > API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
> > >  > > principal='u...@baz.foo.bar'
> > >  > > SEVERE  Cannot resolve principal 'u...@baz.foo.bar'
> > >  > >
> > >  > >
> > >  > > So it fails.
> > >  > >
> > >  > >
> > >  > > # ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b
> > >  > > DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" 
> > > userPrincipalName |
> > >  > > grep 'userPrincipalName:'
> > >  > >
> > >  > > userPrincipalName: u...@foo.bar
> > >  > >
> > >  > >
> > >  > > |How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when
> > >  > > userPrincipalName ends only on '@foo.bar'?
> > >  > >
> > >  > > /K
> > >  > > |
> > >  > >
> > >  > >
> > >  > >
> > >  > >
> > >  > > ___
> > >  > > Users mailing list
> > >  > > Users@ovirt.org
> > >  > > http://lists.ovirt.org/mailman/listinfo/users
> > >  > >
> > >
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 3.6 AAA LDAP cannot not log in when end of UPN is different from domain base


Den 24 mars 2016 11:26 em skrev Ondra Machacek :
>
> On 03/24/2016 11:14 PM, Karli Sjöberg wrote:
> >
> > Den 24 mars 2016 7:26 em skrev Ondra Machacek :
> >  >
> >  > On 03/24/2016 06:16 PM, Karli Sjöberg wrote:
> >  > > Hi!
> >  > >
> >  > >
> >  > > Starting new thread instead of jacking someone else´s.
> >  > >
> >  > >
> >  > > Managed to migrate from old 'engine-manage-domains' auth to
> > aaa-ldap using:
> >  > >
> >  > > #| ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert
> >  > > /tmp/ca.crt --apply
> >  > > |
> >  > >
> >  > >
> >  > > All OK, no errors, but cannot log in:
> >  > >
> >  > > # ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
> >  > > --user-name=user:
> >  >
> >  > If you want to login with user with different upn suffix, then just
> >  > append that suffix
> >  >
> >  > $ ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
> >  > --user-name=u...@foo.bar
> >
> > OK, some progress, that works!
> >
> >  >
> >  > If you have more suffixes and want to have some as default you can use
> >  > following approach:
> >  >
> >  > 1) install ovirt-engine-extension-aaa-misc
> >  >
> >  > 2) create new mapping extension like this:
> >  > /etc/ovirt-engine/extensions.d/mapping-suffix.properties
> >  >
> >  > ovirt.engine.extension.name = mapping-suffix
> >  > ovirt.engine.extension.bindings.method = jbossmodule
> >  > ovirt.engine.extension.binding.jbossmodule.module =
> >  > org.ovirt.engine-extensions.aaa.misc
> >  > ovirt.engine.extension.binding.jbossmodule.class =
> >  > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
> >  > ovirt.engine.extension.provides =
> >  > org.ovirt.engine.api.extensions.aaa.Mapping
> >  > config.mapUser.type = regex
> >  > config.mapUser.pattern = ^(?[^@]*)$
> >
> > Is that supposed to really say '' or should it be changed to a
> > real user name? Either way, it doesn't work, I tried it all.
>
> '?' is just a named group in that regex so you can later use it in
> 'config.mapUser.replacement'  option. It should take everything until
> first '@'.
>
> >
> >  > config.mapUser.replacement = ${user}@foo.bar
> >  > config.mapUser.mustMatch = false
> >  >
> >  > 3) select a mapping plugin in authn configuration:
> >  >
> >  > ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix
> >  >
> >  > With above configuration in use, your user 'user' witll be mapped to
> >  > user 'u...@foo.bar'
> >  > and users 'u...@anotherdomain.foo.bar' will remain
> >  > 'u...@anotherdomain.foo.bar'.
> >
> > This however does not, it doesn't replace the suffix as it's supposed
> > to. I tried with many different types of the 'mapUser.pattern' but it
> > simply won't change it, even if I type in '= ^u...@baz.foo.bar$', the
> > error is the same:(
>
> Hmm, hard to say what's wrong, try to run:
> $ ovirt-engine-extensions-tool --log-level=FINEST aaa login-user
> --profile=baz.foo.bar-new --user-name=user
>
> and search for a mapping part in log.

Wow what a mouthfull:) Can you make anything out of it?

https://dropoff.slu.se/index.php/s/EMe2NPmOfsWCNTv/download

/K

>
> >
> > /K
> >
> >  >
> >  > >
> >  > > API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS
> >  > >
> >  > >
> >  > > but:
> >  > >
> >  > > API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
> >  > > principal='u...@baz.foo.bar'
> >  > > SEVERE  Cannot resolve principal 'u...@baz.foo.bar'
> >  > >
> >  > >
> >  > > So it fails.
> >  > >
> >  > >
> >  > > # ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b
> >  > > DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" userPrincipalName |
> >  > > grep 'userPrincipalName:'
> >  > >
> >  > > userPrincipalName: u...@foo.bar
> >  > >
> >  > >
> >  > > |How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when
> >  > > userPrincipalName ends only on '@foo.bar'?
> >  > >
> >  > > /K
> >  > > |
> >  > >
> >  > >
> >  > >
> >  > >
> >  > > ___
> >  > > Users mailing list
> >  > > Users@ovirt.org
> >  > > http://lists.ovirt.org/mailman/listinfo/users
> >  > >
> >
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 3.6 AAA LDAP cannot not log in when end of UPN is different from domain base


On 03/24/2016 11:14 PM, Karli Sjöberg wrote:


Den 24 mars 2016 7:26 em skrev Ondra Machacek :
 >
 > On 03/24/2016 06:16 PM, Karli Sjöberg wrote:
 > > Hi!
 > >
 > >
 > > Starting new thread instead of jacking someone else´s.
 > >
 > >
 > > Managed to migrate from old 'engine-manage-domains' auth to
aaa-ldap using:
 > >
 > > #| ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert
 > > /tmp/ca.crt --apply
 > > |
 > >
 > >
 > > All OK, no errors, but cannot log in:
 > >
 > > # ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
 > > --user-name=user:
 >
 > If you want to login with user with different upn suffix, then just
 > append that suffix
 >
 > $ ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
 > --user-name=u...@foo.bar

OK, some progress, that works!

 >
 > If you have more suffixes and want to have some as default you can use
 > following approach:
 >
 > 1) install ovirt-engine-extension-aaa-misc
 >
 > 2) create new mapping extension like this:
 > /etc/ovirt-engine/extensions.d/mapping-suffix.properties
 >
 > ovirt.engine.extension.name = mapping-suffix
 > ovirt.engine.extension.bindings.method = jbossmodule
 > ovirt.engine.extension.binding.jbossmodule.module =
 > org.ovirt.engine-extensions.aaa.misc
 > ovirt.engine.extension.binding.jbossmodule.class =
 > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
 > ovirt.engine.extension.provides =
 > org.ovirt.engine.api.extensions.aaa.Mapping
 > config.mapUser.type = regex
 > config.mapUser.pattern = ^(?[^@]*)$

Is that supposed to really say '' or should it be changed to a
real user name? Either way, it doesn't work, I tried it all.


'?' is just a named group in that regex so you can later use it in
'config.mapUser.replacement'  option. It should take everything until 
first '@'.




 > config.mapUser.replacement = ${user}@foo.bar
 > config.mapUser.mustMatch = false
 >
 > 3) select a mapping plugin in authn configuration:
 >
 > ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix
 >
 > With above configuration in use, your user 'user' witll be mapped to
 > user 'u...@foo.bar'
 > and users 'u...@anotherdomain.foo.bar' will remain
 > 'u...@anotherdomain.foo.bar'.

This however does not, it doesn't replace the suffix as it's supposed
to. I tried with many different types of the 'mapUser.pattern' but it
simply won't change it, even if I type in '= ^u...@baz.foo.bar$', the
error is the same:(


Hmm, hard to say what's wrong, try to run:
$ ovirt-engine-extensions-tool --log-level=FINEST aaa login-user 
--profile=baz.foo.bar-new --user-name=user


and search for a mapping part in log.



/K

 >
 > >
 > > API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS
 > >
 > >
 > > but:
 > >
 > > API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
 > > principal='u...@baz.foo.bar'
 > > SEVERE  Cannot resolve principal 'u...@baz.foo.bar'
 > >
 > >
 > > So it fails.
 > >
 > >
 > > # ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b
 > > DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" userPrincipalName |
 > > grep 'userPrincipalName:'
 > >
 > > userPrincipalName: u...@foo.bar
 > >
 > >
 > > |How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when
 > > userPrincipalName ends only on '@foo.bar'?
 > >
 > > /K
 > > |
 > >
 > >
 > >
 > >
 > > ___
 > > Users mailing list
 > > Users@ovirt.org
 > > http://lists.ovirt.org/mailman/listinfo/users
 > >


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 3.6 AAA LDAP cannot not log in when end of UPN is different from domain base


Den 24 mars 2016 7:26 em skrev Ondra Machacek :
>
> On 03/24/2016 06:16 PM, Karli Sjöberg wrote:
> > Hi!
> >
> >
> > Starting new thread instead of jacking someone else´s.
> >
> >
> > Managed to migrate from old 'engine-manage-domains' auth to aaa-ldap using:
> >
> > #| ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert
> > /tmp/ca.crt --apply
> > |
> >
> >
> > All OK, no errors, but cannot log in:
> >
> > # ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
> > --user-name=user:
>
> If you want to login with user with different upn suffix, then just
> append that suffix
>
> $ ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
> --user-name=u...@foo.bar

OK, some progress, that works!

>
> If you have more suffixes and want to have some as default you can use
> following approach:
>
> 1) install ovirt-engine-extension-aaa-misc
>
> 2) create new mapping extension like this:
> /etc/ovirt-engine/extensions.d/mapping-suffix.properties
>
> ovirt.engine.extension.name = mapping-suffix
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module =
> org.ovirt.engine-extensions.aaa.misc
> ovirt.engine.extension.binding.jbossmodule.class =
> org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
> ovirt.engine.extension.provides =
> org.ovirt.engine.api.extensions.aaa.Mapping
> config.mapUser.type = regex
> config.mapUser.pattern = ^(?[^@]*)$

Is that supposed to really say '' or should it be changed to a real user 
name? Either way, it doesn't work, I tried it all.

> config.mapUser.replacement = ${user}@foo.bar
> config.mapUser.mustMatch = false
>
> 3) select a mapping plugin in authn configuration:
>
> ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix
>
> With above configuration in use, your user 'user' witll be mapped to
> user 'u...@foo.bar'
> and users 'u...@anotherdomain.foo.bar' will remain
> 'u...@anotherdomain.foo.bar'.

This however does not, it doesn't replace the suffix as it's supposed to. I 
tried with many different types of the 'mapUser.pattern' but it simply won't 
change it, even if I type in '= ^u...@baz.foo.bar$', the error is the same:(

/K

>
> >
> > API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS
> >
> >
> > but:
> >
> > API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
> > principal='u...@baz.foo.bar'
> > SEVERE  Cannot resolve principal 'u...@baz.foo.bar'
> >
> >
> > So it fails.
> >
> >
> > # ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b
> > DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" userPrincipalName |
> > grep 'userPrincipalName:'
> >
> > userPrincipalName: u...@foo.bar
> >
> >
> > |How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when
> > userPrincipalName ends only on '@foo.bar'?
> >
> > /K
> > |
> >
> >
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM get stuck randomly

2016-03-24 Thread Christophe TREFOIS

Hi Nir,

I restarted the VM now so I can't provide more info until the next time.

I could try strace -p  -f &> strace.log next time it hangs.

Could you just point me on how to obtain a dump with gdb?
Do I have to do anything special in order to catch the required contents?

For the idle vs stuck in a loop, I guess the VM has 4 children qemu threads, 
and one of them was at 100%.

Thank you for your help,

--
Christophe

> -Original Message-
> From: Nir Soffer [mailto:nsof...@redhat.com]
> Sent: jeudi 24 mars 2016 20:17
> To: Christophe TREFOIS ; Kevin Wolf
> ; Francesco Romani 
> Cc: users ; lcsb-sysadmins 
> Subject: Re: [ovirt-users] VM get stuck randomly
> 
> On Thu, Mar 24, 2016 at 7:51 PM, Christophe TREFOIS
>  wrote:
> > Hi Nir,
> >
> > And the second one is down now too. see some comments below.
> >
> >> On 13 Mar 2016, at 12:51, Nir Soffer  wrote:
> >>
> >> On Sun, Mar 13, 2016 at 9:46 AM, Christophe TREFOIS
> >>  wrote:
> >>> Dear all,
> >>>
> >>> I have a problem since couple of weeks, where randomly 1 VM (not
> always the same) becomes completely unresponsive.
> >>> We find this out because our Icinga server complains that host is down.
> >>>
> >>> Upon inspection, we find we can’t open a console to the VM, nor can we
> login.
> >>>
> >>> In oVirt engine, the VM looks like “up”. The only weird thing is that RAM
> usage shows 0% and CPU usage shows 100% or 75% depending on number of
> cores.
> >>> The only way to recover is to force shutdown the VM via 2-times
> shutdown from the engine.
> >>>
> >>> Could you please help me to start debugging this?
> >>> I can provide any logs, but I’m not sure which ones, because I couldn’t
> see anything with ERROR in the vdsm logs on the host.
> >>
> >> I would inspect this vm on the host when it happens.
> >>
> >> What is vdsm cpu usage? what is the qemu process (for this vm) cpu
> usage?
> >
> > vdsm cpu usage is going up and down to 15%.
> >
> > qemu process usage for the VM was 0, except for 1 of the threads “stuck”
> at 100%, rest was idle.
> 
> 0% may be a deadlock, 100% a thread stuck in endless loop, but this is just a
> wild guess.
> 
> >
> >>
> >> strace output of this qemu process (all threads) or a core dump can
> >> help qemu developers to understand this issue.
> >
> > I attached an strace on the process for:
> >
> > qemu 15241 10.6  0.4 4742904 1934988 ? Sl   Mar23 131:41
> /usr/libexec/qemu-kvm -name test-ubuntu-uni-lu -S -machine pc-i440fx-
> rhel7.2.0,accel=kvm,usb=off -cpu SandyBridge -m
> size=4194304k,slots=16,maxmem=4294967296k -realtime mlock=off -smp
> 4,maxcpus=64,sockets=16,cores=4,threads=1 -numa node,nodeid=0,cpus=0-
> 3,mem=4096 -uuid 754871ec-0339-4a65-b490-6a766aaea537 -smbios
> type=1,manufacturer=oVirt,product=oVirt Node,version=7-
> 2.1511.el7.centos.2.10,serial=4C4C4544-0048-4610-8052-
> B4C04F575831,uuid=754871ec-0339-4a65-b490-6a766aaea537 -no-user-config
> -nodefaults -chardev
> socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-test-ubuntu-uni-
> lu/monitor.sock,server,nowait -mon
> chardev=charmonitor,id=monitor,mode=control -rtc base=2016-03-
> 23T22:06:01,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -
> no-shutdown -boot strict=on -device piix3-usb-
> uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device virtio-scsi-
> pci,id=scsi0,bus=pci.0,addr=0x4 -device virtio-serial-pci,id=virtio-
> serial0,max_ports=16,bus=pci.0,addr=0x5 -drive if=none,id=drive-ide0-1-
> 0,readonly=on,format=raw,serial= -device ide-
> cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-
> center/0002-0002-0002-0002-03d5/8253a89b-651e-4ff4-865b-
> 57adef05d383/images/9d60ae41-bf17-48b4-b0e6-29625b248718/47a6916c-
> c902-4ea3-8dfb-a3240d7d9515,if=none,id=drive-virtio-
> disk0,format=qcow2,serial=9d60ae41-bf17-48b4-b0e6-
> 29625b248718,cache=none,werror=stop,rerror=stop,aio=threads -device
> virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-
> disk0,bootindex=1 -netdev tap,fd=108,id=hostnet0,vhost=on,vhostfd=109 -
> device virtio-net-
> pci,netdev=hostnet0,id=net0,mac=00:1a:4a:e5:12:0f,bus=pci.0,addr=0x3,boo
> tindex=2 -chardev
> socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/754871ec-
> 0339-4a65-b490-6a766aaea537.com.redhat.rhevm.vdsm,server,nowait -
> device virtserialport,bus=virtio-
> serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.
> vdsm -chardev
> socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/754871ec-
> 0339-4a65-b490-6a766aaea537.org.qemu.guest_agent.0,server,nowait -
> device virtserialport,bus=virtio-
> serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_ag
> ent.0 -device usb-tablet,id=input0 -vnc 10.79.2.2:76,password -device cirrus-
> vga,id=video0,bus=pci.0,addr=0x2 -device virtio-balloon-
>

Re: [ovirt-users] Delete Failed to update OVF disks, OVF data isn't updated on those OVF stores (Data Center Default, Storage Domain hostedengine_nfs).

2016-03-24 Thread Paul Groeneweg | Pazion

I believe my problem is related to this bug
https://bugzilla.redhat.com/show_bug.cgi?id=1303316

As you can see in the screenshot the hostedengine storage is unassigned and
so both ovf_stores are OK, but not linked and therefore  can't be updated?!

So for now I guess I'll wait for update 3.6.4 and cross my fingers and
updates solves the event log error.

Op do 24 mrt. 2016 om 20:15 schreef Paul Groeneweg | Pazion :

> I checked, the OVf, but I can only remove the OVF.
>
> http://screencast.com/t/vCx0CQiXm
>
> What happens when I remove them, is it safe?
>
> I checked agent.log and do not see the errors there
>
> MainThread::INFO::2016-03-24
> 20:12:28,154::image::116::ovirt_hosted_engine_ha.lib.image.Image::(prepare_images)
> Preparing images
>
> MainThread::INFO::2016-03-24
> 20:12:28,811::hosted_engine::684::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_storage_images)
> Reloading vm.conf from the shared storage domain
>
> MainThread::INFO::2016-03-24
> 20:12:28,811::config::205::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
> Trying to get a fresher copy of vm configuration from the OVF_STORE
>
> MainThread::INFO::2016-03-24
> 20:12:28,936::ovf_store::100::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan)
> Found OVF_STORE: imgUUID:18c50ea6-4654-4525-b241-09e15acf5e99,
> volUUID:2f2ccb59-a3f3-43bf-87eb-53595af01cf5
>
> MainThread::INFO::2016-03-24
> 20:12:29,147::ovf_store::100::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan)
> Found OVF_STORE: imgUUID:6e14348b-af7a-49bc-9af2-8b703c17a53d,
> volUUID:fabdd6f4-b8d6-4ffe-889c-df86b34619ca
>
> MainThread::INFO::2016-03-24
> 20:12:29,420::ovf_store::109::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
> Extracting Engine VM OVF from the OVF_STORE
>
> MainThread::INFO::2016-03-24
> 20:12:29,580::ovf_store::116::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
> OVF_STORE volume path: /rhev/data-center/mnt/hostedstorage.pazion.nl:
> _opt_hosted-engine/88b69eba-ef4f-4dbe-ba53-20dadd424d0e/images/6e14348b-af7a-49bc-9af2-8b703c17a53d/fabdd6f4-b8d6-4ffe-889c-df86b34619ca
>
> MainThread::INFO::2016-03-24
> 20:12:29,861::config::225::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
> Found an OVF for HE VM, trying to convert
>
> MainThread::INFO::2016-03-24
> 20:12:29,865::config::230::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
> Got vm.conf from OVF_STORE
>
> MainThread::INFO::2016-03-24
> 20:12:29,997::hosted_engine::462::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(start_monitoring)
> Current state EngineUp (score: 3400)
>
>
> So leaves me wondering if I should worry about the errors in the event log.
>
>
>
> Op do 24 mrt. 2016 om 16:18 schreef Paul Groeneweg | Pazion <
> p...@pazion.nl>:
>
>>
>> These OVF stores are created on my hosted-engine storage instance. I did
>> not found any reference in the hosted-engine.conf, so you are sure they
>> can't be deleted?
>>
>> So it holds only info about the hosted-engine disk? So when detaching, do
>> I have any risk destroying my hosted-engine?
>>
>> I can just detach them in this screen: http://screencast.com/t/ymnzsNHj7e and
>> then re-attach?
>>
>> I check file permissions, but this looked good compared to the other
>> images. So really strange this eventlog.
>>
>> Regards,
>> Paul
>>
>>
>> Op do 24 mrt. 2016 om 10:01 schreef Maor Lipchuk :
>>
>>> Met vriendelijke groeten,
>>>
>>> Paul Groeneweg
>>> Pazion
>>> Webdevelopment  -  Hosting  -  Apps
>>>
>>> T +31 26 3020038
>>> M +31 614 277 577
>>> E  p...@pazion.nl
>>>
>>>  ***disclaimer***
>>> "This e-mail and any attachments thereto may contain information which
>>> is confidential and/or protected by intellectual property rights and are
>>> intended for the sole use of the recipient(s) named above. Any use of the
>>> information contained herein (including, but not limited to, total or
>>> partial reproduction, communication or distribution in any form) by persons
>>> other than the designated recipient(s) is prohibited. If you have received
>>> this e-mail in error, please notify the sender either by telephone or by
>>> e-mail and delete the material from any computer. Thank you for your
>>> cooperation."
>>>
>>> On Thu, Mar 24, 2016 at 12:12 AM, Paul Groeneweg | Pazion <
>>> p...@pazion.nl> wrote:
>>>

 After the 3.6 updates ( which didn't went without a hitch )

 I get the following errors in my event log:

 Failed to update OVF disks 18c50ea6-4654-4525-b241-09e15acf5e99, OVF
 data isn't updated on those OVF stores (Data Center Default, Storage Domain
 hostedengine_nfs).

 VDSM command failed: Could not acquire resource. Probably resource
 factory threw an exception.: ()

 http://screencast.com/t/S8cfXMsdGM

 When I check on file there is

Re: [ovirt-users] VM get stuck randomly

2016-03-24 Thread Nir Soffer

On Thu, Mar 24, 2016 at 7:51 PM, Christophe TREFOIS
 wrote:
> Hi Nir,
>
> And the second one is down now too. see some comments below.
>
>> On 13 Mar 2016, at 12:51, Nir Soffer  wrote:
>>
>> On Sun, Mar 13, 2016 at 9:46 AM, Christophe TREFOIS
>>  wrote:
>>> Dear all,
>>>
>>> I have a problem since couple of weeks, where randomly 1 VM (not always the 
>>> same) becomes completely unresponsive.
>>> We find this out because our Icinga server complains that host is down.
>>>
>>> Upon inspection, we find we can’t open a console to the VM, nor can we 
>>> login.
>>>
>>> In oVirt engine, the VM looks like “up”. The only weird thing is that RAM 
>>> usage shows 0% and CPU usage shows 100% or 75% depending on number of cores.
>>> The only way to recover is to force shutdown the VM via 2-times shutdown 
>>> from the engine.
>>>
>>> Could you please help me to start debugging this?
>>> I can provide any logs, but I’m not sure which ones, because I couldn’t see 
>>> anything with ERROR in the vdsm logs on the host.
>>
>> I would inspect this vm on the host when it happens.
>>
>> What is vdsm cpu usage? what is the qemu process (for this vm) cpu usage?
>
> vdsm cpu usage is going up and down to 15%.
>
> qemu process usage for the VM was 0, except for 1 of the threads “stuck” at 
> 100%, rest was idle.

0% may be a deadlock, 100% a thread stuck in endless loop, but this is
just a wild guess.

>
>>
>> strace output of this qemu process (all threads) or a core dump can help qemu
>> developers to understand this issue.
>
> I attached an strace on the process for:
>
> qemu 15241 10.6  0.4 4742904 1934988 ? Sl   Mar23 131:41 
> /usr/libexec/qemu-kvm -name test-ubuntu-uni-lu -S -machine 
> pc-i440fx-rhel7.2.0,accel=kvm,usb=off -cpu SandyBridge -m 
> size=4194304k,slots=16,maxmem=4294967296k -realtime mlock=off -smp 
> 4,maxcpus=64,sockets=16,cores=4,threads=1 -numa 
> node,nodeid=0,cpus=0-3,mem=4096 -uuid 754871ec-0339-4a65-b490-6a766aaea537 
> -smbios type=1,manufacturer=oVirt,product=oVirt 
> Node,version=7-2.1511.el7.centos.2.10,serial=4C4C4544-0048-4610-8052-B4C04F575831,uuid=754871ec-0339-4a65-b490-6a766aaea537
>  -no-user-config -nodefaults -chardev 
> socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-test-ubuntu-uni-lu/monitor.sock,server,nowait
>  -mon chardev=charmonitor,id=monitor,mode=control -rtc 
> base=2016-03-23T22:06:01,driftfix=slew -global 
> kvm-pit.lost_tick_policy=discard -no-hpet -no-shutdown -boot strict=on 
> -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device 
> virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x4 -device 
> virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.0,addr=0x5 -drive 
> if=none,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device 
> ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive 
> file=/rhev/data-center/0002-0002-0002-0002-03d5/8253a89b-651e-4ff4-865b-57adef05d383/images/9d60ae41-bf17-48b4-b0e6-29625b248718/47a6916c-c902-4ea3-8dfb-a3240d7d9515,if=none,id=drive-virtio-disk0,format=qcow2,serial=9d60ae41-bf17-48b4-b0e6-29625b248718,cache=none,werror=stop,rerror=stop,aio=threads
>  -device 
> virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1
>  -netdev tap,fd=108,id=hostnet0,vhost=on,vhostfd=109 -device 
> virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:e5:12:0f,bus=pci.0,addr=0x3,bootindex=2
>  -chardev 
> socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/754871ec-0339-4a65-b490-6a766aaea537.com.redhat.rhevm.vdsm,server,nowait
>  -device 
> virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm
>  -chardev 
> socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/754871ec-0339-4a65-b490-6a766aaea537.org.qemu.guest_agent.0,server,nowait
>  -device 
> virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0
>  -device usb-tablet,id=input0 -vnc 10.79.2.2:76,password -device 
> cirrus-vga,id=video0,bus=pci.0,addr=0x2 -device 
> virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 -msg timestamp=on
>
> http://paste.fedoraproject.org/344756/84131214

You connected only to one thread. I would try to use -f to see all threads,
or connect with gdb and get a backtrace of all threads.

Adding Kevin to suggest how to continue.

I think we need a qemu bug for this.

Nir

>
> This is CentOS 7.2, latest patches and latest 3.6.4 oVirt.
>
> Thank you for any help / pointers.
>
> Could it be memory ballooning?
>
> Best,
>
>>
>>>
>>> The host is running
>>>
>>> OS Version: RHEL - 7 - 1.1503.el7.centos.2.8
>>> Kernel Version: 3.10.0 - 229.14.1.el7.x86_64
>>> KVM Version:2.1.2 - 23.el7_1.8.1
>>> LIBVIRT Version:libvirt-1.2.8-16.el7_1.4
>>> VDSM Version:   vdsm-4.16.26-0.el7.centos
>>> SPICE Version:  0.12.4 - 9.el7_1.3
>>> GlusterFS Version:  glusterfs-3.7.5-1.el7
>>
>> You are running old

Re: [ovirt-users] Delete Failed to update OVF disks, OVF data isn't updated on those OVF stores (Data Center Default, Storage Domain hostedengine_nfs).

2016-03-24 Thread Paul Groeneweg | Pazion

I checked, the OVf, but I can only remove the OVF.

http://screencast.com/t/vCx0CQiXm

What happens when I remove them, is it safe?

I checked agent.log and do not see the errors there

MainThread::INFO::2016-03-24
20:12:28,154::image::116::ovirt_hosted_engine_ha.lib.image.Image::(prepare_images)
Preparing images

MainThread::INFO::2016-03-24
20:12:28,811::hosted_engine::684::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(_initialize_storage_images)
Reloading vm.conf from the shared storage domain

MainThread::INFO::2016-03-24
20:12:28,811::config::205::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
Trying to get a fresher copy of vm configuration from the OVF_STORE

MainThread::INFO::2016-03-24
20:12:28,936::ovf_store::100::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan)
Found OVF_STORE: imgUUID:18c50ea6-4654-4525-b241-09e15acf5e99,
volUUID:2f2ccb59-a3f3-43bf-87eb-53595af01cf5

MainThread::INFO::2016-03-24
20:12:29,147::ovf_store::100::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(scan)
Found OVF_STORE: imgUUID:6e14348b-af7a-49bc-9af2-8b703c17a53d,
volUUID:fabdd6f4-b8d6-4ffe-889c-df86b34619ca

MainThread::INFO::2016-03-24
20:12:29,420::ovf_store::109::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
Extracting Engine VM OVF from the OVF_STORE

MainThread::INFO::2016-03-24
20:12:29,580::ovf_store::116::ovirt_hosted_engine_ha.lib.ovf.ovf_store.OVFStore::(getEngineVMOVF)
OVF_STORE volume path: /rhev/data-center/mnt/hostedstorage.pazion.nl:
_opt_hosted-engine/88b69eba-ef4f-4dbe-ba53-20dadd424d0e/images/6e14348b-af7a-49bc-9af2-8b703c17a53d/fabdd6f4-b8d6-4ffe-889c-df86b34619ca

MainThread::INFO::2016-03-24
20:12:29,861::config::225::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
Found an OVF for HE VM, trying to convert

MainThread::INFO::2016-03-24
20:12:29,865::config::230::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine.config::(refresh_local_conf_file)
Got vm.conf from OVF_STORE

MainThread::INFO::2016-03-24
20:12:29,997::hosted_engine::462::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(start_monitoring)
Current state EngineUp (score: 3400)


So leaves me wondering if I should worry about the errors in the event log.



Op do 24 mrt. 2016 om 16:18 schreef Paul Groeneweg | Pazion :

>
> These OVF stores are created on my hosted-engine storage instance. I did
> not found any reference in the hosted-engine.conf, so you are sure they
> can't be deleted?
>
> So it holds only info about the hosted-engine disk? So when detaching, do
> I have any risk destroying my hosted-engine?
>
> I can just detach them in this screen: http://screencast.com/t/ymnzsNHj7e and
> then re-attach?
>
> I check file permissions, but this looked good compared to the other
> images. So really strange this eventlog.
>
> Regards,
> Paul
>
>
> Op do 24 mrt. 2016 om 10:01 schreef Maor Lipchuk :
>
>> Met vriendelijke groeten,
>>
>> Paul Groeneweg
>> Pazion
>> Webdevelopment  -  Hosting  -  Apps
>>
>> T +31 26 3020038
>> M +31 614 277 577
>> E  p...@pazion.nl
>>
>>  ***disclaimer***
>> "This e-mail and any attachments thereto may contain information which is
>> confidential and/or protected by intellectual property rights and are
>> intended for the sole use of the recipient(s) named above. Any use of the
>> information contained herein (including, but not limited to, total or
>> partial reproduction, communication or distribution in any form) by persons
>> other than the designated recipient(s) is prohibited. If you have received
>> this e-mail in error, please notify the sender either by telephone or by
>> e-mail and delete the material from any computer. Thank you for your
>> cooperation."
>>
>> On Thu, Mar 24, 2016 at 12:12 AM, Paul Groeneweg | Pazion > > wrote:
>>
>>>
>>> After the 3.6 updates ( which didn't went without a hitch )
>>>
>>> I get the following errors in my event log:
>>>
>>> Failed to update OVF disks 18c50ea6-4654-4525-b241-09e15acf5e99, OVF
>>> data isn't updated on those OVF stores (Data Center Default, Storage Domain
>>> hostedengine_nfs).
>>>
>>> VDSM command failed: Could not acquire resource. Probably resource
>>> factory threw an exception.: ()
>>>
>>> http://screencast.com/t/S8cfXMsdGM
>>>
>>> When I check on file there is some data, but not updated:
>>> http://screencast.com/t/hbXQFlou
>>>
>>> When I check in the web interface I see 2 OVF files listed. What are
>>> these for, can I delete them? http://screencast.com/t/ymnzsNHj7e
>>>
>>
>>> Hopefully someone knows what to do about these warnings/erros and
>>> whether I can delete the OVF files.
>>>
>>
>>> Best Regards,
>>> Paul Groeneweg
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>> Hi Paul,
>>
>> The OVF_STORE disks are disks which preserve

Re: [ovirt-users] oVirt 3.6 AAA LDAP cannot not log in when end of UPN is different from domain base


On 03/24/2016 06:16 PM, Karli Sjöberg wrote:

Hi!


Starting new thread instead of jacking someone else´s.


Managed to migrate from old 'engine-manage-domains' auth to aaa-ldap using:

#| ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert
/tmp/ca.crt --apply
|


All OK, no errors, but cannot log in:

# ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new
--user-name=user:


If you want to login with user with different upn suffix, then just 
append that suffix


$ ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new 
--user-name=u...@foo.bar


If you have more suffixes and want to have some as default you can use 
following approach:


1) install ovirt-engine-extension-aaa-misc

2) create new mapping extension like this:
/etc/ovirt-engine/extensions.d/mapping-suffix.properties

ovirt.engine.extension.name = mapping-suffix
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module = 
org.ovirt.engine-extensions.aaa.misc
ovirt.engine.extension.binding.jbossmodule.class = 
org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
ovirt.engine.extension.provides = 
org.ovirt.engine.api.extensions.aaa.Mapping

config.mapUser.type = regex
config.mapUser.pattern = ^(?[^@]*)$
config.mapUser.replacement = ${user}@foo.bar
config.mapUser.mustMatch = false

3) select a mapping plugin in authn configuration:

ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix

With above configuration in use, your user 'user' witll be mapped to 
user 'u...@foo.bar'
and users 'u...@anotherdomain.foo.bar' will remain 
'u...@anotherdomain.foo.bar'.




API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS


but:

API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
principal='u...@baz.foo.bar'
SEVERE  Cannot resolve principal 'u...@baz.foo.bar'


So it fails.


# ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b
DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" userPrincipalName |
grep 'userPrincipalName:'

userPrincipalName: u...@foo.bar


|How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when
userPrincipalName ends only on '@foo.bar'?

/K
|




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

2016-03-24 Thread Ollie Armstrong

Thanks.

Unfortunately that still gives me the same NPE in the engine.log that
I uploaded in my first email.  I think I'll report this on BZ as it
isn't working for me when it works for you.

On 24 March 2016 at 18:11, Gonzalo Rafuls  wrote:
> Apparently you can get it as well with something like
> "".
>
> Only thing to change then is between curly brackets {}.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

2016-03-24 Thread Gonzalo Rafuls

On Thu, Mar 24, 2016 at 6:59 PM, Ollie Armstrong  wrote:

> Thanks for the reply Gonza.  When you've quoted what you've used, what
> should I use for "ticket_content" in this case? Is that the literal
> string there?
>

Apparently you can get it as well with something like
"".

Only thing to change then is between curly brackets {}.


> On 24 March 2016 at 17:52, Gonzalo Rafuls  wrote:
> > I was able to get the proxy ticket with curl like this:
> >
> > # curl -k -X POST \
> > -H "Authorization: Basic YWRLKDFLKnfLfdNLDKDFnsldssL2" \
> > -H "Accept: application/xml" \
> > -H "Content-Type: application/xml" \
> > -d
> >
> "ticket_content"
> > \
> > -L
> > https://
> {engine}:443/ovirt-engine/api/vms/{vm:id}/graphicsconsoles/{graphicsconsole:id}/proxyticket
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

2016-03-24 Thread Ollie Armstrong

Thanks for the reply Gonza.  When you've quoted what you've used, what
should I use for "ticket_content" in this case? Is that the literal
string there?

On 24 March 2016 at 17:52, Gonzalo Rafuls  wrote:
> I was able to get the proxy ticket with curl like this:
>
> # curl -k -X POST \
> -H "Authorization: Basic YWRLKDFLKnfLfdNLDKDFnsldssL2" \
> -H "Accept: application/xml" \
> -H "Content-Type: application/xml" \
> -d
> "ticket_content"
> \
> -L
> https://{engine}:443/ovirt-engine/api/vms/{vm:id}/graphicsconsoles/{graphicsconsole:id}/proxyticket
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

2016-03-24 Thread Gonzalo Rafuls

Hi Ollie,

I was able to get the proxy ticket with curl like this:

# curl -k -X POST \
-H "Authorization: Basic YWRLKDFLKnfLfdNLDKDFnsldssL2" \
-H "Accept: application/xml" \
-H "Content-Type: application/xml" \
-d
"ticket_content"
\
-L https://
{engine}:443/ovirt-engine/api/vms/{vm:id}/graphicsconsoles/{graphicsconsole:id}/proxyticket

Hope this helps.

Cheers,
Gonza.-

On Thu, Mar 24, 2016 at 4:44 PM, Ollie Armstrong  wrote:

> Hi all,
>
> I'm attempting to use the REST API to get a proxy ticket as BZ1181030
> [0] has added support for, but I am unable to find _any_ documentation
> on how to use this new API call.
>
> All I've found is the git commit message in gerrit [1].  Not quite
> understanding how to interpret this, I've attempted to POST the
> following:
>
> 
>
> As well as:
>
>   ticket_content 
> 
>
> Both of these, and indeed using any other data I can think of, results
> in an NPE being logged in engine.log.  I've uploaded my engine.log [2]
> which is produced when I POST "" to the endpoint.
>
> Is anyone able to tell me how to use this endpoint?  I'm assuming I
> get the NPE because I'm not POSTing the correct data.  The overall
> goal of this is to be able to embed a NoVNC console in our own web UI,
> this is the last piece of the puzzle for me to implement this.
>
> Thanks,
> Ollie
>
> [0] https://bugzilla.redhat.com/show_bug.cgi?id=1181030
> [1] https://gerrit.ovirt.org/#/c/42412/
> [2] http://ix.io/uVP
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VM get stuck randomly

2016-03-24 Thread Christophe TREFOIS

Dear list,

An Ubuntu 14.04 got stuck again on latest 3.6.4 with all patches applied.

Do you have any advice for me now, to try and figure out what could be wrong?

Does anybody else face issues with Ubuntu 14.04 and kernel 3.13.0-79-generic ?

Thank you,

—
Christophe

Dr Christophe Trefois, Dipl.-Ing.  
Technical Specialist / Post-Doc

UNIVERSITÉ DU LUXEMBOURG

LUXEMBOURG CENTRE FOR SYSTEMS BIOMEDICINE
Campus Belval | House of Biomedicine  
6, avenue du Swing 
L-4367 Belvaux  
T: +352 46 66 44 6124 
F: +352 46 66 44 6949  
http://www.uni.lu/lcsb




This message is confidential and may contain privileged information. 
It is intended for the named recipient only. 
If you receive it in error please notify me and permanently delete the original 
message and any copies. 


  

> On 24 Mar 2016, at 10:45, Christophe TREFOIS  
> wrote:
> 
> Hi,
> 
> We finally upgraded to 3.6.3 across the whole data center and will now see if 
> this issue reappears.
> 
> The upgrade went quite smooth, first from 3.5.4 to 3.5.6 and then to 3.6.3.
> 
> Thank you,
> 
> --
> Christophe
> 
>> -Original Message-
>> From: Nir Soffer [mailto:nsof...@redhat.com]
>> Sent: dimanche 13 mars 2016 12:51
>> To: Christophe TREFOIS 
>> Cc: users 
>> Subject: Re: [ovirt-users] VM get stuck randomly
>> 
>> On Sun, Mar 13, 2016 at 9:46 AM, Christophe TREFOIS
>>  wrote:
>>> Dear all,
>>> 
>>> I have a problem since couple of weeks, where randomly 1 VM (not always
>> the same) becomes completely unresponsive.
>>> We find this out because our Icinga server complains that host is down.
>>> 
>>> Upon inspection, we find we can’t open a console to the VM, nor can we
>> login.
>>> 
>>> In oVirt engine, the VM looks like “up”. The only weird thing is that RAM
>> usage shows 0% and CPU usage shows 100% or 75% depending on number of
>> cores.
>>> The only way to recover is to force shutdown the VM via 2-times shutdown
>> from the engine.
>>> 
>>> Could you please help me to start debugging this?
>>> I can provide any logs, but I’m not sure which ones, because I couldn’t see
>> anything with ERROR in the vdsm logs on the host.
>> 
>> I would inspect this vm on the host when it happens.
>> 
>> What is vdsm cpu usage? what is the qemu process (for this vm) cpu usage?
>> 
>> strace output of this qemu process (all threads) or a core dump can help
>> qemu developers to understand this issue.
>> 
>>> 
>>> The host is running
>>> 
>>> OS Version: RHEL - 7 - 1.1503.el7.centos.2.8
>>> Kernel Version: 3.10.0 - 229.14.1.el7.x86_64
>>> KVM Version:2.1.2 - 23.el7_1.8.1
>>> LIBVIRT Version:libvirt-1.2.8-16.el7_1.4
>>> VDSM Version:   vdsm-4.16.26-0.el7.centos
>>> SPICE Version:  0.12.4 - 9.el7_1.3
>>> GlusterFS Version:  glusterfs-3.7.5-1.el7
>> 
>> You are running old versions, missing lot of fixes. Nothing specific to your
>> problem but this lower the chance to get a working system.
>> 
>> It would be nice if you can upgrade to ovirt-3.6 and report if it made any
>> change.
>> Or at lest latest ovirt-3.5.
>> 
>>> We use a locally exported gluster as storage domain (eg, storage is on the
>> same machine exposed via gluster). No replica.
>>> We run around 50 VMs on that host.
>> 
>> Why use gluster for this? Do you plan to add more gluster servers in the
>> future?
>> 
>> Nir
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] oVirt 3.6 AAA LDAP cannot not log in when end of UPN is different from domain base

Hi!


Starting new thread instead of jacking someone else´s.


Managed to migrate from old 'engine-manage-domains' auth to aaa-ldap using:

# ovirt-engine-kerbldap-migration-tool --domain baz.foo.bar --cacert 
/tmp/ca.crt --apply


All OK, no errors, but cannot log in:

# ovirt-engine-extensions-tool aaa login-user --profile=baz.foo.bar-new 
--user-name=user:

API: <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS result=SUCCESS


but:

API: -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD principal='u...@baz.foo.bar'
SEVERE  Cannot resolve principal 'u...@baz.foo.bar'


So it fails.


# ldapsearch -x -H ldap://baz.foo.bar -D u...@foo.bar -W -b 
DC=baz,DC=foo,DC=bar -s sub "(samAccountName=user)" userPrincipalName | grep 
'userPrincipalName:'

userPrincipalName: u...@foo.bar


How do you configure AAA with base 'DC=baz,DC=foo,DC=bar' when 
userPrincipalName ends only on '@foo.bar'?

/K

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Using REST API to get a proxyticket

2016-03-24 Thread Ollie Armstrong

Hi all,

I'm attempting to use the REST API to get a proxy ticket as BZ1181030
[0] has added support for, but I am unable to find _any_ documentation
on how to use this new API call.

All I've found is the git commit message in gerrit [1].  Not quite
understanding how to interpret this, I've attempted to POST the
following:



As well as:

  ticket_content  

Both of these, and indeed using any other data I can think of, results
in an NPE being logged in engine.log.  I've uploaded my engine.log [2]
which is produced when I POST "" to the endpoint.

Is anyone able to tell me how to use this endpoint?  I'm assuming I
get the NPE because I'm not POSTing the correct data.  The overall
goal of this is to be able to embed a NoVNC console in our own web UI,
this is the last piece of the puzzle for me to implement this.

Thanks,
Ollie

[0] https://bugzilla.redhat.com/show_bug.cgi?id=1181030
[1] https://gerrit.ovirt.org/#/c/42412/
[2] http://ix.io/uVP
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow

Sorry about the thread-breakage, OWA...

Från: Ondra Machacek 
Skickat: den 24 mars 2016 15:08
Till: Karli Sjöberg
Kopia: Martin Perina; Will Dennis; users
Ämne: Re: [ovirt-users] Active Directory (LDAP) user auth is slow

On 03/24/2016 03:02 PM, Karli Sjöberg wrote:
>
> Den 24 mars 2016 13:49 skrev Ondra Machacek :
>  >
>  > Hi,
>  >
>  > if you remove user, then also permissions of that user to vms will be
>  > removed.
>  > And yes, you will have to add all those permissions back to users from
>  > new profile.
>  >
>  > But, you can try migration tool[1], to migrate all users to new AAA
> profile.
>  > If you have any problem with it, you can ask.
>
> Ehm, how do you install it? (el6)

yum install -y
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases/download/ovirt-engine-kerbldap-migration-1.0.4/ovirt-engine-kerbldap-migration-1.0.4-1.el6ev.noarch.rpm

That worked, plus the migration, but can´t log in since our domain is called 
like 'baz.foo.bar' but our users´s userPrincipalName are just 'u...@foo.bar'. 
How do you configure that with aaa?

/K

>
> /K
>
>  >
>  > Ondra
>  >
>  > [1]
>  >
> https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/master/README.md
>  >
>  > On 03/24/2016 01:06 PM, Will Dennis wrote:
>  > > In the RHEV Admin Guide that Martin mentioned, it says:
>  > >
>  > > "Log in to the Administration Portal, and remove all users and
> groups related to the old profile. Users defined in the removed domain
> will no longer be able to authenticate with the Red Hat Enterprise
> Virtualization Manager. The entries for the affected users will remain
> defined in the Red Hat Enterprise Virtualization Manager until they are
> explicitly removed from the Administration Portal.”
>  > >
>  > > I have some VMs running under some AD domain users; if I remove the
> users from the system as above, will I need to remove them from the VM
> permissions, or is that cleaned up as well? And I guess I’ll need to
> manually re-add the perms back after the new directory config is in
> place? Please advise.
>  > >
>  > > Thanks,
>  > > Will
>  > >
>  > > On Mar 21, 2016, at 4:29 AM, Martin Perina
> > wrote:
>  > >
>  > >
>  > >
>  > > On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David
> > wrote:
>  > > On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis
> > wrote:
>  > >> Hi all,
>  > >>
>  > >> I have enabled Active Directory authentication for the users in
> oVirt (via engine-manage-domains command using --provider=ad) and,
> although it works, it takes about ~50 sec’s to process a login. I have
> other OSS software that utilizes AD auth, and there is no such lag when
> processing logins, so I’m guessing it’s a problem with the oVirt
> implementation… Any way to debug why the auth process is taking so long?
>  > >
>  > > This is an old, unmaintained component. You should use the new
> aaa-ldap one.
>  > > Search the list archives for "aaa-ldap" and/or read the README file
> in the
>  > > sources [1]. Best,
>  > >
>  > > [1]
> https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
>  > >
>  > > You could also take a look at RHEV 3.6 Administration Guide,
> chapter 13 Users and Roles [2]
>  > > where you can find detailed steps for common configurations.
>  > >
>  > > Martin Perina
>  > >
>  > > [2]
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html
>  > > 
>  > >
>  > >
>  > >>
>  > >> Will
>  > >> ___
>  > >> Users mailing list
>  > >> Users@ovirt.org
>  > >> http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > >
>  > >
>  > > --
>  > > Didi
>  > > ___
>  > > Users mailing list
>  > > Users@ovirt.org
>  > > http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > >
>  > > ___
>  > > Users mailing list
>  > > Users@ovirt.org
>  > > http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > ___
>  > Users mailing list
>  > Users@ovirt.org
>  > http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow

2016-03-24 Thread Will Dennis

No worries...

I only had a few VMs to re-assign, so I did it manually...

-Original Message-
From: Karli Sjöberg [mailto:karli.sjob...@slu.se] 
Sent: Thursday, March 24, 2016 11:13 AM
To: Ondra Machacek
Cc: Martin Perina; Will Dennis; users
Subject: SV: [ovirt-users] Active Directory (LDAP) user auth is slow

Sorry about the thread-breakage, OWA...

Från: Ondra Machacek 
Skickat: den 24 mars 2016 15:08
Till: Karli Sjöberg
Kopia: Martin Perina; Will Dennis; users
Ämne: Re: [ovirt-users] Active Directory (LDAP) user auth is slow

On 03/24/2016 03:02 PM, Karli Sjöberg wrote:
>
> Den 24 mars 2016 13:49 skrev Ondra Machacek :
>  >
>  > Hi,
>  >
>  > if you remove user, then also permissions of that user to vms will 
> be  > removed.
>  > And yes, you will have to add all those permissions back to users 
> from  > new profile.
>  >
>  > But, you can try migration tool[1], to migrate all users to new AAA 
> profile.
>  > If you have any problem with it, you can ask.
>
> Ehm, how do you install it? (el6)

yum install -y
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases/download/ovirt-engine-kerbldap-migration-1.0.4/ovirt-engine-kerbldap-migration-1.0.4-1.el6ev.noarch.rpm

That worked, plus the migration, but can´t log in since our domain is called 
like 'baz.foo.bar' but our users´s userPrincipalName are just 'u...@foo.bar'. 
How do you configure that with aaa?

/K

>
> /K
>
>  >
>  > Ondra
>  >
>  > [1]
>  >
> https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/
> master/README.md
>  >
>  > On 03/24/2016 01:06 PM, Will Dennis wrote:
>  > > In the RHEV Admin Guide that Martin mentioned, it says:
>  > >
>  > > "Log in to the Administration Portal, and remove all users and 
> groups related to the old profile. Users defined in the removed domain 
> will no longer be able to authenticate with the Red Hat Enterprise 
> Virtualization Manager. The entries for the affected users will remain 
> defined in the Red Hat Enterprise Virtualization Manager until they 
> are explicitly removed from the Administration Portal.”
>  > >
>  > > I have some VMs running under some AD domain users; if I remove 
> the users from the system as above, will I need to remove them from 
> the VM permissions, or is that cleaned up as well? And I guess I’ll 
> need to manually re-add the perms back after the new directory config 
> is in place? Please advise.
>  > >
>  > > Thanks,
>  > > Will
>  > >
>  > > On Mar 21, 2016, at 4:29 AM, Martin Perina 
> > wrote:
>  > >
>  > >
>  > >
>  > > On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David 
> > wrote:
>  > > On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis 
> > wrote:
>  > >> Hi all,
>  > >>
>  > >> I have enabled Active Directory authentication for the users in 
> oVirt (via engine-manage-domains command using --provider=ad) and, 
> although it works, it takes about ~50 sec’s to process a login. I have 
> other OSS software that utilizes AD auth, and there is no such lag 
> when processing logins, so I’m guessing it’s a problem with the oVirt 
> implementation… Any way to debug why the auth process is taking so long?
>  > >
>  > > This is an old, unmaintained component. You should use the new 
> aaa-ldap one.
>  > > Search the list archives for "aaa-ldap" and/or read the README 
> file in the  > > sources [1]. Best,  > >  > > [1] 
> https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;
> a=blob;f=README
>  > >
>  > > You could also take a look at RHEV 3.6 Administration Guide, 
> chapter 13 Users and Roles [2]  > > where you can find detailed steps 
> for common configurations.
>  > >
>  > > Martin Perina
>  > >
>  > > [2]
> https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtu
> alization/3.6/html/Administration_Guide/chap-Users_and_Roles.html
>  > > 
>  > >
>  > >
>  > >>
>  > >> Will
>  > >> ___
>  > >> Users mailing list
>  > >> Users@ovirt.org
>  > >> http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > >
>  > >
>  > > --
>  > > Didi
>  > > ___
>  > > Users mailing list
>  > > Users@ovirt.org
>  > > http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > >
>  > > ___
>  > > Users mailing list
>  > > Users@ovirt.org
>  > > http://lists.ovirt.org/mailman/listinfo/users
>  > >
>  > ___
>  > Users mailing list
>  > Users@ovirt.org
>  > http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Delete Failed to update OVF disks, OVF data isn't updated on those OVF stores (Data Center Default, Storage Domain hostedengine_nfs).

2016-03-24 Thread Paul Groeneweg | Pazion

These OVF stores are created on my hosted-engine storage instance. I did
not found any reference in the hosted-engine.conf, so you are sure they
can't be deleted?

So it holds only info about the hosted-engine disk? So when detaching, do I
have any risk destroying my hosted-engine?

I can just detach them in this screen: http://screencast.com/t/ymnzsNHj7e and
then re-attach?

I check file permissions, but this looked good compared to the other
images. So really strange this eventlog.

Regards,
Paul


Op do 24 mrt. 2016 om 10:01 schreef Maor Lipchuk :

> Met vriendelijke groeten,
>
> Paul Groeneweg
> Pazion
> Webdevelopment  -  Hosting  -  Apps
>
> T +31 26 3020038
> M +31 614 277 577
> E  p...@pazion.nl
>
>  ***disclaimer***
> "This e-mail and any attachments thereto may contain information which is
> confidential and/or protected by intellectual property rights and are
> intended for the sole use of the recipient(s) named above. Any use of the
> information contained herein (including, but not limited to, total or
> partial reproduction, communication or distribution in any form) by persons
> other than the designated recipient(s) is prohibited. If you have received
> this e-mail in error, please notify the sender either by telephone or by
> e-mail and delete the material from any computer. Thank you for your
> cooperation."
>
> On Thu, Mar 24, 2016 at 12:12 AM, Paul Groeneweg | Pazion 
> wrote:
>
>>
>> After the 3.6 updates ( which didn't went without a hitch )
>>
>> I get the following errors in my event log:
>>
>> Failed to update OVF disks 18c50ea6-4654-4525-b241-09e15acf5e99, OVF data
>> isn't updated on those OVF stores (Data Center Default, Storage Domain
>> hostedengine_nfs).
>>
>> VDSM command failed: Could not acquire resource. Probably resource
>> factory threw an exception.: ()
>>
>> http://screencast.com/t/S8cfXMsdGM
>>
>> When I check on file there is some data, but not updated:
>> http://screencast.com/t/hbXQFlou
>>
>> When I check in the web interface I see 2 OVF files listed. What are
>> these for, can I delete them? http://screencast.com/t/ymnzsNHj7e
>>
>
>> Hopefully someone knows what to do about these warnings/erros and whether
>> I can delete the OVF files.
>>
>
>> Best Regards,
>> Paul Groeneweg
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
> Hi Paul,
>
> The OVF_STORE disks are disks which preserve all the VMs and Templates OVF
> data and are mostly use for disaster recovery scenarios.
> Those disks can not be deleted.
> Regarding the audit log which you got, can you try to detach and attach
> the Storage once again and let me know if you still get this even log.
>
> Regards,
> Maor
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow


Den 24 mars 2016 3:06 em skrev Ondra Machacek :
>
> On 03/24/2016 03:02 PM, Karli Sjöberg wrote:
> >
> > Den 24 mars 2016 13:49 skrev Ondra Machacek :
> >  >
> >  > Hi,
> >  >
> >  > if you remove user, then also permissions of that user to vms will be
> >  > removed.
> >  > And yes, you will have to add all those permissions back to users from
> >  > new profile.
> >  >
> >  > But, you can try migration tool[1], to migrate all users to new AAA
> > profile.
> >  > If you have any problem with it, you can ask.
> >
> > Ehm, how do you install it? (el6)
>
> yum install -y
> https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases/download/ovirt-engine-kerbldap-migration-1.0.4/ovirt-engine-kerbldap-migration-1.0.4-1.el6ev.noarch.rpm

Awesome, thanks!

/K

>
> >
> > /K
> >
> >  >
> >  > Ondra
> >  >
> >  > [1]
> >  >
> > https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/master/README.md
> >  >
> >  > On 03/24/2016 01:06 PM, Will Dennis wrote:
> >  > > In the RHEV Admin Guide that Martin mentioned, it says:
> >  > >
> >  > > "Log in to the Administration Portal, and remove all users and
> > groups related to the old profile. Users defined in the removed domain
> > will no longer be able to authenticate with the Red Hat Enterprise
> > Virtualization Manager. The entries for the affected users will remain
> > defined in the Red Hat Enterprise Virtualization Manager until they are
> > explicitly removed from the Administration Portal.”
> >  > >
> >  > > I have some VMs running under some AD domain users; if I remove the
> > users from the system as above, will I need to remove them from the VM
> > permissions, or is that cleaned up as well? And I guess I’ll need to
> > manually re-add the perms back after the new directory config is in
> > place? Please advise.
> >  > >
> >  > > Thanks,
> >  > > Will
> >  > >
> >  > > On Mar 21, 2016, at 4:29 AM, Martin Perina
> > > wrote:
> >  > >
> >  > >
> >  > >
> >  > > On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David
> > > wrote:
> >  > > On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis
> > > wrote:
> >  > >> Hi all,
> >  > >>
> >  > >> I have enabled Active Directory authentication for the users in
> > oVirt (via engine-manage-domains command using --provider=ad) and,
> > although it works, it takes about ~50 sec’s to process a login. I have
> > other OSS software that utilizes AD auth, and there is no such lag when
> > processing logins, so I’m guessing it’s a problem with the oVirt
> > implementation… Any way to debug why the auth process is taking so long?
> >  > >
> >  > > This is an old, unmaintained component. You should use the new
> > aaa-ldap one.
> >  > > Search the list archives for "aaa-ldap" and/or read the README file
> > in the
> >  > > sources [1]. Best,
> >  > >
> >  > > [1]
> > https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
> >  > >
> >  > > You could also take a look at RHEV 3.6 Administration Guide,
> > chapter 13 Users and Roles [2]
> >  > > where you can find detailed steps for common configurations.
> >  > >
> >  > > Martin Perina
> >  > >
> >  > > [2]
> > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html
> >  > > 
> >  > >
> >  > >
> >  > >>
> >  > >> Will
> >  > >> ___
> >  > >> Users mailing list
> >  > >> Users@ovirt.org
> >  > >> http://lists.ovirt.org/mailman/listinfo/users
> >  > >
> >  > >
> >  > >
> >  > > --
> >  > > Didi
> >  > > ___
> >  > > Users mailing list
> >  > > Users@ovirt.org
> >  > > http://lists.ovirt.org/mailman/listinfo/users
> >  > >
> >  > >
> >  > > ___
> >  > > Users mailing list
> >  > > Users@ovirt.org
> >  > > http://lists.ovirt.org/mailman/listinfo/users
> >  > >
> >  > ___
> >  > Users mailing list
> >  > Users@ovirt.org
> >  > http://lists.ovirt.org/mailman/listinfo/users
> >
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] ovirt - unsupported GFS config ??


Hello,
I tried create stripe 2 replica 3 arbiter1 gluster volume for testing.
So , glusterFS such type from commandline was successfull, but domain 
creation looks to be unsupported. with oVirt message "Error while 
executing action AddGlusterFsStorageDomain: Storage Domain target is 
unsupported".

Cam U tell me if is it  error or really unsuported ??

exam:
gluster volume create 12HP12-S2R3A1P2 stripe 2 replica 3 arbiter 1 
1hp1:/STORAGES/P2/GFS 1hp2:/STORAGES/P2/GFS 
kvmarbiter:/STORAGES/P2-1/GFS 2hp1:/STORAGES/P2/GFS 
2hp2:/STORAGES/P2/GFS  kvmarbiter:/STORAGES/P2-2/GFS  force



RHEL 7-2.1511
vdsm - vdsm-4.17.23-1.el7
gluster - glusterfs-3.7.9-1.el7
ovirt - 3.5.6.2-1

regs.Pavel
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow


Den 24 mars 2016 13:49 skrev Ondra Machacek :
>
> Hi,
>
> if you remove user, then also permissions of that user to vms will be
> removed.
> And yes, you will have to add all those permissions back to users from
> new profile.
>
> But, you can try migration tool[1], to migrate all users to new AAA profile.
> If you have any problem with it, you can ask.

Ehm, how do you install it? (el6)

/K

>
> Ondra
>
> [1]
> https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/master/README.md
>
> On 03/24/2016 01:06 PM, Will Dennis wrote:
> > In the RHEV Admin Guide that Martin mentioned, it says:
> >
> > "Log in to the Administration Portal, and remove all users and groups 
> > related to the old profile. Users defined in the removed domain will no 
> > longer be able to authenticate with the Red Hat Enterprise Virtualization 
> > Manager. The entries for the affected users will remain defined in the Red 
> > Hat Enterprise Virtualization Manager until they are explicitly removed 
> > from the Administration Portal.”
> >
> > I have some VMs running under some AD domain users; if I remove the users 
> > from the system as above, will I need to remove them from the VM 
> > permissions, or is that cleaned up as well? And I guess I’ll need to 
> > manually re-add the perms back after the new directory config is in place? 
> > Please advise.
> >
> > Thanks,
> > Will
> >
> > On Mar 21, 2016, at 4:29 AM, Martin Perina 
> > > wrote:
> >
> >
> >
> > On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David 
> > > wrote:
> > On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis 
> > > wrote:
> >> Hi all,
> >>
> >> I have enabled Active Directory authentication for the users in oVirt (via 
> >> engine-manage-domains command using --provider=ad) and, although it works, 
> >> it takes about ~50 sec’s to process a login. I have other OSS software 
> >> that utilizes AD auth, and there is no such lag when processing logins, so 
> >> I’m guessing it’s a problem with the oVirt implementation… Any way to 
> >> debug why the auth process is taking so long?
> >
> > This is an old, unmaintained component. You should use the new aaa-ldap one.
> > Search the list archives for "aaa-ldap" and/or read the README file in the
> > sources [1]. Best,
> >
> > [1] 
> > https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
> >
> > You could also take a look at RHEV 3.6 Administration Guide, chapter 13 
> > Users and Roles [2]
> > where you can find detailed steps for common configurations.
> >
> > Martin Perina
> >
> > [2] 
> > https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html
> > 
> >
> >
> >>
> >> Will
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >
> >
> >
> > --
> > Didi
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow


On 03/24/2016 03:02 PM, Karli Sjöberg wrote:


Den 24 mars 2016 13:49 skrev Ondra Machacek :
 >
 > Hi,
 >
 > if you remove user, then also permissions of that user to vms will be
 > removed.
 > And yes, you will have to add all those permissions back to users from
 > new profile.
 >
 > But, you can try migration tool[1], to migrate all users to new AAA
profile.
 > If you have any problem with it, you can ask.

Ehm, how do you install it? (el6)


yum install -y 
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/releases/download/ovirt-engine-kerbldap-migration-1.0.4/ovirt-engine-kerbldap-migration-1.0.4-1.el6ev.noarch.rpm




/K

 >
 > Ondra
 >
 > [1]
 >
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/master/README.md
 >
 > On 03/24/2016 01:06 PM, Will Dennis wrote:
 > > In the RHEV Admin Guide that Martin mentioned, it says:
 > >
 > > "Log in to the Administration Portal, and remove all users and
groups related to the old profile. Users defined in the removed domain
will no longer be able to authenticate with the Red Hat Enterprise
Virtualization Manager. The entries for the affected users will remain
defined in the Red Hat Enterprise Virtualization Manager until they are
explicitly removed from the Administration Portal.”
 > >
 > > I have some VMs running under some AD domain users; if I remove the
users from the system as above, will I need to remove them from the VM
permissions, or is that cleaned up as well? And I guess I’ll need to
manually re-add the perms back after the new directory config is in
place? Please advise.
 > >
 > > Thanks,
 > > Will
 > >
 > > On Mar 21, 2016, at 4:29 AM, Martin Perina
> wrote:
 > >
 > >
 > >
 > > On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David
> wrote:
 > > On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis
> wrote:
 > >> Hi all,
 > >>
 > >> I have enabled Active Directory authentication for the users in
oVirt (via engine-manage-domains command using --provider=ad) and,
although it works, it takes about ~50 sec’s to process a login. I have
other OSS software that utilizes AD auth, and there is no such lag when
processing logins, so I’m guessing it’s a problem with the oVirt
implementation… Any way to debug why the auth process is taking so long?
 > >
 > > This is an old, unmaintained component. You should use the new
aaa-ldap one.
 > > Search the list archives for "aaa-ldap" and/or read the README file
in the
 > > sources [1]. Best,
 > >
 > > [1]
https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README
 > >
 > > You could also take a look at RHEV 3.6 Administration Guide,
chapter 13 Users and Roles [2]
 > > where you can find detailed steps for common configurations.
 > >
 > > Martin Perina
 > >
 > > [2]
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html
 > > 
 > >
 > >
 > >>
 > >> Will
 > >> ___
 > >> Users mailing list
 > >> Users@ovirt.org
 > >> http://lists.ovirt.org/mailman/listinfo/users
 > >
 > >
 > >
 > > --
 > > Didi
 > > ___
 > > Users mailing list
 > > Users@ovirt.org
 > > http://lists.ovirt.org/mailman/listinfo/users
 > >
 > >
 > > ___
 > > Users mailing list
 > > Users@ovirt.org
 > > http://lists.ovirt.org/mailman/listinfo/users
 > >
 > ___
 > Users mailing list
 > Users@ovirt.org
 > http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Disks Snapshot

2016-03-24 Thread Marcelo Leandro

The bug created,
https://bugzilla.redhat.com/show_bug.cgi?id=1321018

Sorry for the delay, I had trouble opening the bug in Bugzilla.

Thanks.

2016-03-14 13:40 GMT-03:00 Nir Soffer :

> On Mon, Mar 14, 2016 at 6:11 PM, Marcelo Leandro 
> wrote:
> > All the disks in the
> >
> /rhev/data-center/77e24b20-9d21-4952-a089-3c5c592b4e6d/c2dc0101-748e-4a7b-9913-47993eaa52bd/images/2f2c9196-831e-45bd-8824-ebd3325c4b1c/
> > are deleted snapshots that were not removed. The disk no contain
> snapshot.
> > In
> >
> /rhev/data-center/77e24b20-9d21-4952-a089-3c5c592b4e6d/c2dc0101-748e-4a7b-9913-47993eaa52bd/images/2f2c9196-831e-45bd-8824-ebd3325c4b1c/
> > it must have just one disk after the merge.
> >
> > Right?
>
> Yes, this seems to be a bug when doing a merge on a host which is not
> the spm.
>
> According to the log you attached (vdsm.log.5):
> - we do not deactivate the lv after the merge
> - therefore the link /dev/vgname/lvname is not deleted
> - we don't delete the link at /rhev/data-center
> - we don't delete the links at /run/vdsm/storage
>
> The links under /run/vdsm/storage and /rhev/data-center should will
> be deleted when hotunpluging this disk, or when stopping the vm.
>
> Please file a ovirt/vdsm bug for this and include the information
> from this thread.
>
> Nir
>
> >
> > Em 14/03/2016 12:41, "Marcelo Leandro"  escreveu:
> >>
> >> Are you talking about /dev/vgname/lvname link or the links under
> >> /run/vdsm/storage/domain/image/volume,
> >> or /rhev/data-center/pull/domain/image/volume?
> >>
> >> in  /rhev/data-center/pull/domain/image/volume
> >>
> >>
> >> /dev/vgname/lvname is created by udev rules when lv is activated or
> >> deactivated.
> >> To understand if this is the issue, can you show the output of:
> >>
> >> pvscan --cache
> >> return:
> >> [root@srv-qemu02 2f2c9196-831e-45bd-8824-ebd3325c4b1c]# pvscan --cache
> >> [root@srv-qemu02 2f2c9196-831e-45bd-8824-ebd3325c4b1c]#
> >>
> >>
> >> lvs vgname
> >> return:
> >>   06d35bed-445f-453b-a1b5-cf1a26e21d57
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  19.00g
> >>   0bad7a90-e6d5-4f80-9e77-276092989ec3
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao   1.00g
> >>   12e1c2eb-2e4e-4714-8358-0a8f1bf44b2f
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao 502.00g
> >>   191eb95f-2604-406b-ad90-1387cd4df7aa
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  10.00g
> >>   235da77a-8713-4bdf-bb3b-4c6478b0ffe2
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---   1.68t
> >>   289b1789-e65a-4725-95fe-7b1a59208b45
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  15.00g
> >>   2d1cd019-f547-47c9-b360-0247f5283563
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  14.00g
> >>   2e59f7f2-9e30-460e-836a-5e0d3d625059
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  27.50g
> >>   2ff7d36e-2ff9-466a-ad26-c1c67ba34dc6
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  21.00g
> >>   3d01ae03-ee4e-4fc2-aedd-6fc757f84f22
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi--- 202.00g
> >>   4626025f-53ab-487a-9f95-35ae65393f03
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao   6.00g
> >>   5dbb5762-6828-4c95-9cd1-d05896758af7
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao 100.00g
> >>   5e1461fc-c609-479d-9627-e88936fb15ed
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  11.00g
> >>   64800fa4-85c2-4567-9605-6dc8ed5fec52
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  39.00g
> >>   661293e4-26ef-4c2c-903b-442a2b7fb5c6
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  13.00g
> >>   79e4e84b-370a-4d6d-9683-197dabb591c2
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao   5.12g
> >>   7a3a6929-973e-4eec-bef0-1b99101e850d
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  20.00g
> >>   7a79ae4f-4a47-4ce2-8570-95efc7774f7b
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  80.00g
> >>   828d4c13-62c5-4d23-b0cc-e4ec88928c1f
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi--- 128.00m
> >>   871874e8-0d89-4f13-962a-3d8175194130
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  54.00g
> >>   a0a9aac2-d387-4148-a8a0-a906cfc1b513
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi--- 240.00g
> >>   aa397814-43d4-42f7-9151-fd6d9f6d0b7f
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  22.00g
> >>   b3433da9-e6b5-4ab4-9aed-47a698079a62
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  55.00g
> >>   b47f58e0-d576-49be-b8aa-f30581a0373a
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi--- 124.00g
> >>   b5174aaa-b4ed-48e2-ab60-4bd51edde175
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---   4.00g
> >>   b8027a73-2d37-4df6-a2ac-4782859b749f
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi--- 128.00m
> >>   b86ed4a4-c922-4567-98b4-bace49d258f6
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi-ao  13.00g
> >>   ba8a3a28-1dd5-4072-bcd1-f8155fade47a
> >> c2dc0101-748e-4a7b-9913-47993eaa52bd -wi---  21.00g
> >>

[ovirt-users] engine.log messages in cycle


Hello,
can anybody explain why is engine.log filled with following messages, 
even thought this is fresh installation ??
Especially START / FINISH rows in cycle, ... in cycle,  in cycle  
 - it takes a lot of space and is really needed ??


RHEL 7-2.1511
vdsm - vdsm-4.17.23-1.el7
gluster - glusterfs-3.7.9-1.el7
ovirt - 3.5.6.2-1

regs.Pavel


2016-03-24 13:39:10,758 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GetGlusterVolumeAdvancedDetailsVDSCommand] 
(DefaultQuartzScheduler_Worker-89) START, 
GetGlusterVolumeAdvancedDetailsVDSCommand(HostName = 2hp1, HostId = 
45f76a0f-9616-420a-be1d-afbed2954562), log id: 3d6b27fd
2016-03-24 13:39:13,243 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GetGlusterVolumeAdvancedDetailsVDSCommand] 
(DefaultQuartzScheduler_Worker-89) FINISH, 
GetGlusterVolumeAdvancedDetailsVDSCommand, return: 
org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeAdvancedDetails@11d55805, 
log id: 3d6b27fd
2016-03-24 13:39:13,278 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GetGlusterVolumeAdvancedDetailsVDSCommand] 
(DefaultQuartzScheduler_Worker-89) START, 
GetGlusterVolumeAdvancedDetailsVDSCommand(HostName = 2hp1, HostId = 
45f76a0f-9616-420a-be1d-afbed2954562), log id: 3ae0e479
2016-03-24 13:39:13,349 INFO 
[org.ovirt.engine.core.bll.lock.InMemoryLockManager] 
(DefaultQuartzScheduler_Worker-43) Failed to acquire lock and wait lock 
EngineLock [exclusiveLocks= key: 0001-0001-0001-0001-022e 
value: GLUSTER

, sharedLocks= ]
2016-03-24 13:39:13,444 INFO 
[org.ovirt.engine.core.bll.lock.InMemoryLockManager] 
(DefaultQuartzScheduler_Worker-43) Failed to acquire lock and wait lock 
EngineLock [exclusiveLocks= key: 0001-0001-0001-0001-022e 
value: GLUSTER

, sharedLocks= ]
2016-03-24 13:39:13,801 INFO 
[org.ovirt.engine.core.bll.lock.InMemoryLockManager] 
(DefaultQuartzScheduler_Worker-43) Failed to acquire lock and wait lock 
EngineLock [exclusiveLocks= key: 0001-0001-0001-0001-022e 
value: GLUSTER

, sharedLocks= ]
2016-03-24 13:39:14,646 INFO 
[org.ovirt.engine.core.bll.lock.InMemoryLockManager] 
(DefaultQuartzScheduler_Worker-43) Failed to acquire lock and wait lock 
EngineLock [exclusiveLocks= key: 0001-0001-0001-0001-022e 
value: GLUSTER

, sharedLocks= ]
2016-03-24 13:39:15,630 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GetGlusterVolumeAdvancedDetailsVDSCommand] 
(DefaultQuartzScheduler_Worker-89) FINISH, 
GetGlusterVolumeAdvancedDetailsVDSCommand, return: 
org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeAdvancedDetails@cab5100f, 
log id: 3ae0e479
2016-03-24 13:39:15,656 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] 
(DefaultQuartzScheduler_Worker-43) START, 
GlusterVolumesListVDSCommand(HostName = 1hp2, HostId = 
184ebfaa-51a9-43e4-a57b-9d4f03e85b47), log id: 5756f325
2016-03-24 13:39:16,105 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] 
(DefaultQuartzScheduler_Worker-43) FINISH, GlusterVolumesListVDSCommand, 
return: 
{e4121610-6128-4ecc-86d3-1429ab3b8356=org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeEntity@edd4741e, 
d3d260cd-455f-42d6-9580-d88ae6df0519=org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeEntity@84ea7412}, 
log id: 5756f325
2016-03-24 13:39:21,161 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] 
(DefaultQuartzScheduler_Worker-81) START, 
GlusterVolumesListVDSCommand(HostName = 1hp2, HostId = 
184ebfaa-51a9-43e4-a57b-9d4f03e85b47), log id: 6e2f6c69
2016-03-24 13:39:21,667 INFO 
[org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] 
(DefaultQuartzScheduler_Worker-81) FINISH, GlusterVolumesListVDSCommand, 
return: 
{e4121610-6128-4ecc-86d3-1429ab3b8356=org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeEntity@2ad03bfa, 
d3d260cd-455f-42d6-9580-d88ae6df0519=org.ovirt.engine.core.common.businessentities.gluster.GlusterVolumeEntity@6a99fa09}, 
log id: 6e2f6c69


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow

Hi,

if you remove user, then also permissions of that user to vms will be
removed.
And yes, you will have to add all those permissions back to users from
new profile.

But, you can try migration tool[1], to migrate all users to new AAA profile.
If you have any problem with it, you can ask.

Ondra

[1]
https://github.com/machacekondra/ovirt-engine-kerbldap-migration/blob/master/README.md

On 03/24/2016 01:06 PM, Will Dennis wrote:

In the RHEV Admin Guide that Martin mentioned, it says:

"Log in to the Administration Portal, and remove all users and groups related
to the old profile. Users defined in the removed domain will no longer be able to
authenticate with the Red Hat Enterprise Virtualization Manager. The entries for the
affected users will remain defined in the Red Hat Enterprise Virtualization Manager
until they are explicitly removed from the Administration Portal.”

I have some VMs running under some AD domain users; if I remove the users from
the system as above, will I need to remove them from the VM permissions, or is
that cleaned up as well? And I guess I’ll need to manually re-add the perms
back after the new directory config is in place? Please advise.

Thanks,
Will

On Mar 21, 2016, at 4:29 AM, Martin Perina
> wrote:

On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David
> wrote:
On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis
> wrote:

Hi all,

I have enabled Active Directory authentication for the users in oVirt (via
engine-manage-domains command using --provider=ad) and, although it works, it
takes about ~50 sec’s to process a login. I have other OSS software that
utilizes AD auth, and there is no such lag when processing logins, so I’m
guessing it’s a problem with the oVirt implementation… Any way to debug why the
auth process is taking so long?

This is an old, unmaintained component. You should use the new aaa-ldap one.
Search the list archives for "aaa-ldap" and/or read the README file in the
sources [1]. Best,

[1]
https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README

You could also take a look at RHEV 3.6 Administration Guide, chapter 13 Users
and Roles [2]
where you can find detailed steps for common configurations.

Martin Perina

[2]
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html

Will
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

--
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] delete storage definition


Hi Maor,

it helped, great !

thx a lot , U spare my time .
regs.Pa.

On 24.3.2016 12:21, Maor Lipchuk wrote:



On Thu, Mar 24, 2016 at 12:20 PM, p...@email.cz  
> wrote:


Hi folks,
how can I delete the last storage  definition from oVirt database
if the last  volume has been deleted from bricks commandline ( rm
-rf  < path to that volume > ) directly ?
In oVirt DB exists this storage last record and blocking create
new storage operation ( ovirt offering " delete datacenter", but
this is not the right way for me, now )
regs. Pavel

___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users


Hi Pavel,

What are your plans regarding that Data Center?
In case you want to keep that Data Center to be used with other 
storage domains you can try to add a new storage domain without 
attaching it to any Data Center and try to re-initialize the Data 
Center with this new storage domain. Once that Data Center will be 
re-initialized you can try to remove the old Storage Domain (or force 
remove it you encounter any problem)
Please let me know if this helps you or is there anything else that 
you were trying to do


Regards,
Maor


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Active Directory (LDAP) user auth is slow

2016-03-24 Thread Will Dennis

In the RHEV Admin Guide that Martin mentioned, it says:

"Log in to the Administration Portal, and remove all users and groups related 
to the old profile. Users defined in the removed domain will no longer be able 
to authenticate with the Red Hat Enterprise Virtualization Manager. The entries 
for the affected users will remain defined in the Red Hat Enterprise 
Virtualization Manager until they are explicitly removed from the 
Administration Portal.”

I have some VMs running under some AD domain users; if I remove the users from 
the system as above, will I need to remove them from the VM permissions, or is 
that cleaned up as well? And I guess I’ll need to manually re-add the perms 
back after the new directory config is in place? Please advise.

Thanks,
Will

On Mar 21, 2016, at 4:29 AM, Martin Perina 
> wrote:

On Mon, Mar 21, 2016 at 8:20 AM, Yedidyah Bar David 
> wrote:
On Mon, Mar 21, 2016 at 4:47 AM, Will Dennis 
> wrote:
> Hi all,
>
> I have enabled Active Directory authentication for the users in oVirt (via 
> engine-manage-domains command using --provider=ad) and, although it works, it 
> takes about ~50 sec’s to process a login. I have other OSS software that 
> utilizes AD auth, and there is no such lag when processing logins, so I’m 
> guessing it’s a problem with the oVirt implementation… Any way to debug why 
> the auth process is taking so long?

This is an old, unmaintained component. You should use the new aaa-ldap one.
Search the list archives for "aaa-ldap" and/or read the README file in the
sources [1]. Best,

[1] 
https://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README

You could also take a look at RHEV 3.6 Administration Guide, chapter 13 Users 
and Roles [2]
where you can find detailed steps for common configurations.

Martin Perina

[2] 
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.6/html/Administration_Guide/chap-Users_and_Roles.html

>
> Will
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

--
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Delete Failed to update OVF disks, OVF data

2016-03-24 Thread Nikolai Sednev

Hello Paul, 
Any chance you may rename the HE Storage Domain name of to hosted_storage and 
retry the auto-import of it? 
You might find the auto-import worked as described in 
https://bugzilla.redhat.com/show_bug.cgi?id=1269768 . 

Thanks in advance. 

Best regards, 
Nikolai 

Nikolai Sednev 
Senior Quality Engineer at Compute team 
Red Hat Israel 
34 Jerusalem Road, 
Ra'anana, Israel 43501 

Tel: +972 9 7692043 
Mobile: +972 52 7342734 
Email: nsed...@redhat.com 
IRC: nsednev 

- Original Message -

From: users-requ...@ovirt.org 
To: users@ovirt.org 
Sent: Thursday, March 24, 2016 12:29:37 PM 
Subject: Users Digest, Vol 54, Issue 113 

Send Users mailing list submissions to 
users@ovirt.org 

To subscribe or unsubscribe via the World Wide Web, visit 
http://lists.ovirt.org/mailman/listinfo/users 
or, via email, send a message with subject or body 'help' to 
users-requ...@ovirt.org 

You can reach the person managing the list at 
users-ow...@ovirt.org 

When replying, please edit your Subject line so it is more specific 
than "Re: Contents of Users digest..." 

Today's Topics: 

1. Re: Delete Failed to update OVF disks, OVF data isn't 
updated on those OVF stores (Data Center Default, Storage Domain 
hostedengine_nfs). (Maor Lipchuk) 
2. libvirt failed to read spice key (Fabrice Bacchella) 
3. Re: VM get stuck randomly (Christophe TREFOIS) 
4. delete storage definition (p...@email.cz) 
5. Re: [ANN] oVirt 3.6.4 Second Release Candidate is now 
available for testing (Ond?ej Svoboda) 

-- 

Message: 1 
Date: Thu, 24 Mar 2016 11:01:32 +0200 
From: Maor Lipchuk <mlipc...@redhat.com> 
To: "Paul Groeneweg | Pazion" <p...@pazion.nl> 
Cc: users@ovirt.org 
Subject: Re: [ovirt-users] Delete Failed to update OVF disks, OVF data 
isn't updated on those OVF stores (Data Center Default, Storage Domain 
hostedengine_nfs). 
Message-ID: 
<caj1jnod0rxcfeydv8jkdd2hz+stgmyfysncwyjfoqp1-gax...@mail.gmail.com> 
Content-Type: text/plain; charset="utf-8" 

On Thu, Mar 24, 2016 at 12:12 AM, Paul Groeneweg | Pazion <p...@pazion.nl> 
wrote: 

> 
> After the 3.6 updates ( which didn't went without a hitch ) 
> 
> I get the following errors in my event log: 
> 
> Failed to update OVF disks 18c50ea6-4654-4525-b241-09e15acf5e99, OVF data 
> isn't updated on those OVF stores (Data Center Default, Storage Domain 
> hostedengine_nfs). 
> 
> VDSM command failed: Could not acquire resource. Probably resource factory 
> threw an exception.: () 
> 
> http://screencast.com/t/S8cfXMsdGM 
> 
> When I check on file there is some data, but not updated: 
> http://screencast.com/t/hbXQFlou 
> 
> When I check in the web interface I see 2 OVF files listed. What are these 
> for, can I delete them? http://screencast.com/t/ymnzsNHj7e 
> 

> Hopefully someone knows what to do about these warnings/erros and whether 
> I can delete the OVF files. 
> 

> Best Regards, 
> Paul Groeneweg 
> 
> 
> ___ 
> Users mailing list 
> Users@ovirt.org 
> http://lists.ovirt.org/mailman/listinfo/users 
> 
> 
Hi Paul, 

The OVF_STORE disks are disks which preserve all the VMs and Templates OVF 
data and are mostly use for disaster recovery scenarios. 
Those disks can not be deleted. 
Regarding the audit log which you got, can you try to detach and attach the 
Storage once again and let me know if you still get this even log. 

Regards, 
Maor 
-- next part -- 
An HTML attachment was scrubbed... 
URL: 
<http://lists.ovirt.org/pipermail/users/attachments/20160324/e1109a36/attachment-0001.html>

-- 

Message: 2 
Date: Thu, 24 Mar 2016 10:02:46 +0100 
From: Fabrice Bacchella <fabrice.bacche...@orange.fr> 
To: oVirt Userlist <Users@ovirt.org> 
Subject: [ovirt-users] libvirt failed to read spice key 
Message-ID: <734deebf-8845-4d8f-bdcc-139e50d98...@orange.fr> 
Content-Type: text/plain; charset=us-ascii 

I' m running on a brand new Centos 7.2 an up to date ovirt 3.6.3.4. 

The host is new too and dedicated to ovirt. 

When I try to launch a vm, I get : 

Thread-9407::ERROR::2016-03-24 
09:16:18,301::vm::759::virt.vm::(_startUnderlyingVm) 
vmId=`a32e1043-a5a5-4e4c-8436-f7b7a4ff644c`::The vm start process failed 
Traceback (most recent call last): 
File "/usr/share/vdsm/virt/vm.py", line 703, in _startUnderlyingVm 
self._run() 
File "/usr/share/vdsm/virt/vm.py", line 1941, in _run 
self._connection.createXML(domxml, flags), 
File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 124, in 
wrapper 
ret = f(*args, **kwargs) 
File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 1313, in wrapper 
return func(inst, *args, **kwargs) 
File "/usr/lib6

Re: [ovirt-users] delete storage definition

2016-03-24 Thread Maor Lipchuk

On Thu, Mar 24, 2016 at 12:20 PM, p...@email.cz  wrote:

> Hi folks,
> how can I delete the last storage  definition from oVirt database if the
> last  volume has been deleted from bricks commandline ( rm -rf  < path to
> that volume > ) directly ?
> In oVirt DB exists this storage last record and blocking create new
> storage operation ( ovirt offering " delete datacenter", but this is not
> the right way for me, now )
> regs. Pavel
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
Hi Pavel,

What are your plans regarding that Data Center?
In case you want to keep that Data Center to be used with other storage
domains you can try to add a new storage domain without attaching it to any
Data Center and try to re-initialize the Data Center with this new storage
domain. Once that Data Center will be re-initialized you can try to remove
the old Storage Domain (or force remove it you encounter any problem)
Please let me know if this helps you or is there anything else that you
were trying to do

Regards,
Maor
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [ANN] oVirt 3.6.4 Second Release Candidate is now available for testing

2016-03-24 Thread Ondřej Svoboda


Thank you very much, Sandro!

centos-ovirt36 now works for me.

On 24.3.2016 09:00, Sandro Bonazzola wrote:



On Wed, Mar 23, 2016 at 4:22 PM, Ondřej Svoboda > wrote:


Hi Sandro,

I just ran yum -y install
http://plain.resources.ovirt.org/pub/yum-repo/ovirt-release36.rpm


on my fresh EL7 (not CentOS) system.

In /etc/yum.repos.d/ovirt-3.6-dependencies.repo, there was a
broken centos-ovirt36 source:



http://mirror.centos.org/centos/7Server/virt/x86_64/ovirt-3.6/repodata/repomd.xml:
[Errno 14] HTTP Error 404 - Not Found


Fixed pointing to 
http://mirror.centos.org/centos/7/virt/x86_64/ovirt-3.6/repodata/repomd.xml


Released a new ovirt-release36 package including the fix.




I had to disable this repo before I was even able to update my system.

[centos-ovirt36]
name=CentOS-$releasever - oVirt 3.6

baseurl=http://mirror.centos.org/centos/$releasever/virt/$basearch/ovirt-3.6/
gpgcheck=0
enabled=1
skip_if_unavailable = 1
keepcache = 0

Then I managed to install ovirt-engine all right, so I think the
above repo should simply not be enabled in ovirt-release36.rpm

.

Thanks for your reply.
Ondra

On 22.3.2016 18:28, Sandro Bonazzola wrote:

The oVirt Project is pleased to announce the availability of the
Second Release Candidate of oVirt 3.6.4 for testing, as of March
22nd, 2016

This release is available now for:
* Fedora 22
* Red Hat Enterprise Linux 6.7
* CentOS Linux 6.7 (or similar)
* Red Hat Enterprise Linux 7.2 or later
* CentOS Linux (or similar) 7.2 or later

This release supports Hypervisor Hosts running:
* Red Hat Enterprise Linux 7.2 or later
* CentOS Linux (or similar) 7.2 or later
* Fedora 22

This release is also available with experimental support for:
* Debian 8.3 Jessie

This release candidate includes the following updated packages:

  * ovirt-engine

  * ovirt-hosted-engine-ha


See the release notes [1] for installation / upgrade instructions
and a list of new features and bugs fixed.

Notes:
* A new oVirt Live ISO will be available soon [2].
* Mirrors[3] might need up to one day to synchronize.

Additional Resources:
* Read more about the oVirt 3.6.3 release
highlights:http://www.ovirt.org/release/3.6.4/
* Get more oVirt Project updates on Twitter:
https://twitter.com/ovirt
* Check out the latest project news on the oVirt blog:
http://www.ovirt.org/blog/

[1] http://www.ovirt.org/release/3.6.4/
[2] http://resources.ovirt.org/pub/ovirt-3.6-pre/iso/
[3] http://www.ovirt.org/Repository_mirrors#Current_mirrors


-- 
Sandro Bonazzola

Better technology. Faster innovation. Powered by community
collaboration.
See how it works at redhat.com 


___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users




--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] delete storage definition