Re: [ovirt-users] User portal permissions

[Michael Mortensen (MCMR)]

Hi Kristian,

As far as I’ve experienced myself, too, they would need one or more admin 
roles/permissions. The permissions can however be quite freely distributed to 
the user, and since you can create a custom role, too, it should be possible to 
stitch together a rather limited admin-role.
Regular non-admin privileges supposedly only gives access to the VM Portal and 
not actually the Administration Portal (in which you could do all of this).


All the best,
Mike


From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of 
Kristian Petersen
Sent: 1. maj 2018 17:36
To: users 
Subject: [ovirt-users] User portal permissions

I have a user that I want to be able to create VMs, create and attach disks to 
the new VM, add a network interface to the VM, and get the OS installed so it 
is ready to use.  I am completely confused on which role (or roles) this user 
would need to do that without making them an admin.  Can someone give me some 
guidance here?

--
Kristian Petersen
System Administrator
BYU Dept. of Chemistry and Biochemistry
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] problem with ovirt-container-engine

[Michael Mortensen (MCMR)]

That's a very old project - I haven't tried it myself, but I suspect that the 
project has died. Can anyone confirm?
Setting up an engine on a machine is very easy though, so if you have one 
spare, it should be straight forward.


// Mike
 

-Original Message-
From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of Ken 
Zhang-Hokkien
Sent: 23. april 2018 12:12
To: users@ovirt.org
Subject: [ovirt-users] problem with ovirt-container-engine

Hello,

I'm trying out the ovirt-engine docker image here:

https://github.com/oVirt/ovirt-container-engine

But, I keep getting errors like this:

2018-04-21 04:59:55,065 ERROR
[org.jboss.as.controller.management-operation] (Controller Boot
Thread) [] WFLYCTL0013: Operation ("add") failed - address: ([,
("subsystem" => "undertow"),,
("server" => "default-server"),,
("http-listener" => "http"),
]) - failure description: {,
"WFLYCTL0080: Failed services" => {"jboss.undertow.listener.http"
=> "org.jboss.msc.service.StartException in service
jboss.undertow.listener.http: WFLYUT0082: Could not start 'http'
listener.,
Caused by: java.net.SocketException: Protocol family unavailable"},,
"WFLYCTL0412: Required services that are not installed:" => 
["jboss.undertow.listener.http"],,
"WFLYCTL0180: Services with missing/unavailable dependencies" => undefined, 
},
2018-04-21 04:59:55,065 ERROR
[org.jboss.as.controller.management-operation] (Controller Boot
Thread) [] WFLYCTL0013: Operation ("add") failed - address: ([,
("subsystem" => "undertow"),,
("server" => "default-server"),,
("https-listener" => "https"),
]) - failure description: {,
"WFLYCTL0080: Failed services" => {"jboss.undertow.listener.https"
=> "org.jboss.msc.service.StartException in service
jboss.undertow.listener.https: WFLYUT0082: Could not start 'https'
listener.,
Caused by: java.net.SocketException: Protocol family unavailable"},,
"WFLYCTL0412: Required services that are not installed:" => 
["jboss.undertow.listener.https"],,
"WFLYCTL0180: Services with missing/unavailable dependencies" => undefined, 
},
2018-04-21 04:59:55,086 INFO  [org.jboss.as.server] (ServerService Thread Pool 
-- 25) [] WFLYSRV0010: Deployed "restapi.war"
(runtime-name : "restapi.war"),
2018-04-21 04:59:55,086 INFO  [org.jboss.as.server] (ServerService Thread Pool 
-- 25) [] WFLYSRV0010: Deployed "engine.ear" (runtime-name
: "engine.ear"),
2018-04-21 04:59:55,088 INFO  [org.jboss.as.controller] (Controller Boot 
Thread) [] WFLYCTL0183: Service status report,
WFLYCTL0186:   Services which failed to start:  service
jboss.undertow.listener.https: org.jboss.msc.service.StartException in service 
jboss.undertow.listener.https: WFLYUT0082: Could not start 'https' listener.,
  service jboss.undertow.listener.http:
org.jboss.msc.service.StartException in service
jboss.undertow.listener.http: WFLYUT0082: Could not start 'http'
listener.,
,
2018-04-21 04:59:55,157 INFO  [org.jboss.as] (Controller Boot Thread) [] 
WFLYSRV0060: Http management interface listening on 
http://127.0.0.1:8706/management,
2018-04-21 04:59:55,157 INFO  [org.jboss.as] (Controller Boot Thread) [] 
WFLYSRV0051: Admin console listening on http://127.0.0.1:8706,
2018-04-21 04:59:55,157 ERROR [org.jboss.as] (Controller Boot Thread) [] 
WFLYSRV0026: WildFly Full 10.1.0.Final (WildFly Core 2.2.0.Final) started (with 
errors) in 10417ms - Started 1366 of 1638 services (2 services failed or 
missing dependencies, 442 services are lazy, passive or on-demand),


how can i get this docker image to work? seems like it is missing something:

Caused by: java.net.SocketException: Protocol family unavailable"},,
"WFLYCTL0412: Required services that are not installed:" => 
["jboss.undertow.listener.http"],,
"WFLYCTL0180: Services with missing/unavailable dependencies" => undefined,

any help is much appreciated. thanks.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt - AD authentication Issues.

[Michael Mortensen (MCMR)]

Hi,

Re. FQDN:
The full username is a combination of the full username from your AD, e.g. 
ban-m...@banone..net, and the internal 
domain which was configured during LDAP setup, e.g. "@internal" or in this case 
"@". During the setup you were asked to put a name or something and 
here you could put whatever - it has no real effect as far as I can tell. It 
could have been "@banone" for all oVirt cared, I believe.

Re. user login:
oVirt differs between being able to log in that is being authorized and logging 
into the portals. If you make sure your user account has admin privileges, you 
should be able to log into the administration portal, too. Check the 
permissions.


// Mike



From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of G, 
Maghesh Kumar (Nokia - IN/Bangalore)
Sent: 18. april 2018 11:27
To: users@ovirt.org
Subject: [ovirt-users] oVirt - AD authentication Issues.

Hi,


Description of problem:

Not able to perform operations like Administration portal or VM Portal.

Also not sure why FQDN appears twice!...

ERROR: The user 
ban-m...@banone.nsn-rdnet.net@BANONE.nsn-rdnet.net
 is not authorized to perform login



oVirt Engine Version: Ovirt-4.2.2

Host is installed with RHEL 7.4





Actual results:

2018-04-18 14:35:51,388+05 INFO  
[org.ovirt.engine.core.bll.aaa.CreateUserSessionCommand] (default task-55) 
[27275ec2] Running command: CreateUserSessionCommand internal: false.
2018-04-18 14:35:51,412+05 ERROR 
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default 
task-55) [27275ec2] EVENT_ID: USER_VDC_LOGIN_FAILED(114), User 
ban-m...@banone.nsn-rdnet.net@BANONE.nsn-rdnet.net
 connecting from '10.136.189.117' failed to log in.
2018-04-18 14:35:51,413+05 ERROR 
[org.ovirt.engine.core.aaa.servlet.SsoPostLoginServlet] (default task-55) [] 
The user 
ban-m...@banone.nsn-rdnet.net@BANONE.nsn-rdnet.net
 is not authorized to perform login

[cid:image001.png@01D3D730.41E6E790]


Please guide us how to proceed!..

Thank you!.

Regards,
Maghesh

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] 回复：Re: Re: hosted-engine --deploy failed

[Michael Mortensen (MCMR)]

Hi,

The issue you face has been reported as a bug a few times before if I’m not 
mistaken. Try searching for the error message you see on Google.


// Mike

From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of 
dhy...@sina.com
Sent: 16. april 2018 12:31
To: Simone Tiraboschi 
Cc: users 
Subject: [ovirt-users] 回复：Re: Re: hosted-engine --deploy failed


I can visit engine by browse，and I login VM by ssh, I find some gwt error in 
server.log.


- 原始邮件 -
发件人：Simone Tiraboschi mailto:stira...@redhat.com>>
收件人：dhy...@sina.com
抄送人：users mailto:users@ovirt.org>>
主题：Re: Re: [ovirt-users] hosted-engine --deploy failed
日期：2018年04月16日 18点23分



On Mon, Apr 16, 2018 at 12:18 PM, mailto:dhy...@sina.com>> 
wrote:
Hi Simone
Thanks, I disble selinux, the issue is work, but  has other issue,
error is:

[ INFO  ] Engine is still unreachable
[ INFO  ] Engine is still not reachable, waiting...
[ INFO  ] Engine is still unreachable
[ ERROR ] Engine is still not reachable
[ ERROR ] Failed to execute stage 'Closing up': Engine is still not reachable
[ INFO  ] Stage: Clean up
[ INFO  ] Generating answer file 
'/var/lib/ovirt-hosted-engine-setup/answers/answers-20180416095044.conf'

when #hosted-engine --deploy  I setup static ip, and set ip in /etc/hosts.
VM`s ip is same with that i set.


Can you please check the status of ovirt-engine service on the engine VM?







- 原始邮件 -
发件人：Simone Tiraboschi mailto:stira...@redhat.com>>
收件人：dhy...@sina.com
抄送人：users mailto:users@ovirt.org>>
主题：Re: [ovirt-users] hosted-engine --deploy failed
日期：2018年04月16日 15点24分

2018-04-16 05:50:09,331+0800 DEBUG otopi.plugins.otopi.network.firewalld 
plugin.executeRaw:813 execute: ('/usr/bin/firewall-cmd', '--list-all-zones'), 
executable='None', cwd='None', env=None
2018-04-16 14:21:26,331+0800 DEBUG otopi.plugins.otopi.network.firewalld 
plugin.executeRaw:869 execute-result: ('/usr/bin/firewall-cmd', 
'--list-all-zones'), exception

'firewall-cmd --list-all-zones' got stuck on the engine VM; we had similar 
issue in the past to SELinux rues.
If you are deploying with a custom cloud-init ISO image with custom script 
please try disabling SELinux there just for engine-setup execution time.


As a general rule I'd suggest to move instead to the new ansible based flow 
where engine-setup is executed via ansible in a more controllable way.

On Mon, Apr 16, 2018 at 8:44 AM, mailto:dhy...@sina.com>> 
wrote:
Hi，
 when I depoy hosted engine by #hosted-engine --deploy

  |- [ INFO  ] Stage: Transaction setup
  |- [ INFO  ] Stopping engine service
  |- [ INFO  ] Stopping ovirt-fence-kdump-listener service
  |- [ INFO  ] Stopping dwh service
  |- [ INFO  ] Stopping Image I/O Proxy service
  |- [ INFO  ] Stopping vmconsole-proxy service
  |- [ INFO  ] Stopping websocket-proxy service
  |- [ INFO  ] Stage: Misc configuration
  [ ERROR ] Engine setup got stuck on the appliance
  [ ERROR ] Failed to execute stage 'Closing up': Engine setup is 
stalled on the appliance since 1800 seconds ago. Please   check its 
log on the appliance.
  [ INFO  ] Stage: Clean up
  [ INFO  ] Generating answer file 
'/var/lib/ovirt-hosted-engine-setup/answers/answers-20180416062012.conf'
  [ INFO  ] Stage: Pre-termination
  [ INFO  ] Stage: Termination
  [ ERROR ] Hosted Engine deployment failed: this system is not 
reliable, please check the issue,fix and redeploy
  Log file is located at 
/var/log/ovirt-hosted-engine-setup/ovirt-hosted-engine-setup-20180416054143-5p2ilc.log

engine-setup take a lot time in "Stage: Misc configuration", and finaly failed.

My mail attachment is hosted-engine --deploy log and VM engine-setup log.

would you give me some advise?  Thanks...




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] I broke my ovirt real good....

[Michael Mortensen (MCMR)]

Hi Stack,

Do you use FQDN? Did you perhaps hit this one 
https://www.ovirt.org/blog/2016/05/modify-ifcfg-files/ ? The discussion in this 
bug report may be of assistance in that case: 
https://bugzilla.redhat.com/show_bug.cgi?id=1252534

If you've stored the VM disks and templates and whatnot on a network share like 
NFS, you should be able to start all over and import your old (current) storage 
domains and start using your templates etc.


Best wishes
// Mike


-Original Message-
From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of 
~Stack~
Sent: 13. april 2018 00:26
To: users 
Subject: [ovirt-users] I broke my ovirt real good

Greetings,

So I did a over-confident-admin-makes-rookie-mistake. I changed a bunch of 
things all back-to-back and thus don't actually know what broke. :-D

The only two real "big" changes were:
* Upgrade from 4.2.1 to 4.2.2
* change my ovirtmgmt network

The update I followed the upgrade procedures and I thought it all went pretty 
well. Because I am moving it from a testing into what I hope will be a more 
heavily used environment, I changed my ovirtmgmt network from
192.168.100.0/24 to 192.168.101.0/24 via the web-gui.

That was a touch tricker than just a change as I had to poke the management 
engine host to be reachable on both network for a while, then it just seemed OK.

What's happening is:
* I can no longer migrate a vm from one host to the other.
* If I try to do a "reinstall" it dies.
* There is some serious network lag between my hosts on a 10Gb network.
* I've got all kinds of python2.4 failures in my vdsm and mom logs.

Those are least the biggies.

So while I was planning on moving this to a more active use case, right now - 
it is all still my play ground. I would REALLY hate to lose the VM's but 
everything else can go and be rebuilt.

Given that I've somehow really broke this system pretty good, would it be more 
advisable to blow away and rebuild it ALL or can I simply delete the hypervisor 
hosts and rebuild them?

Thoughts?

Thanks!
~Stack~


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] 回复：Re: ovirt engine HA

[Michael Mortensen (MCMR)]

Hi,

The idea with the HA self-hosted engine is that it is able to migrate to 
another host, should it be required. Therefore in order to run the engine as 
“highly available”, you will need at least two Hosted Engine Hosts in your 
setup. One, however, is enough to host the engine, but you will lose the 
ability to migrate the engine to another server, if you need to maintain the 
Hosted Engine Host.

//Mike

From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of 
dhy...@sina.com
Sent: 8. april 2018 08:47
To: Alex K ; FERNANDO FREDIANI 

Cc: users 
Subject: [ovirt-users] 回复：Re: ovirt engine HA

Hi, I hava two node, and deploy hosted-engine by #hosted-engine --deploy, I do 
not understand what should I do?

- 原始邮件 -
发件人：Alex K 
收件人：FERNANDO FREDIANI 
抄送人：users 
主题：Re: [ovirt-users] ovirt engine HA
日期：2018年04月04日 01点40分

In case you need HA for the engine you need to deploy it to other hosts also 
through the GUI.

On Tue, Apr 3, 2018 at 4:47 PM, FERNANDO FREDIANI 
mailto:fernando.fredi...@upx.com>> wrote:
Is it enough to deploy the Self-Hosted engine in just one Host of the cluster 
or is it necessary to repeat the process in each of the nodes that must be able 
to run it ?
Thanks
Fernando

2018-04-03 2:01 GMT-03:00 Vincent Royer 
mailto:vinc...@epicenergy.ca>>:
Same thing, the engine in this case is "self-hosted", as in, it runs in a VM 
hosted on the cluster that it is managing.  I am a beginner here, but from my 
understanding, each node is always checking on the health of the engine VM.  If 
the engine is missing (ie, the host running it has gone down), then another 
available, healthy host will spawn up the engine and you will regain access.

In my experience this has worked very reliably.  I have 2 hosts, both are 
"able" to run the engine VM.  If I take one host down, I am not able to load 
the engine GUI.  But if I wait a few minutes, then I regain access, and see 
that the engine is now running on the remaining healthy host.

Vincent Royer
778-825-1057

[Image removed by sender.]

SUSTAINABLE MOBILE ENERGY SOLUTIONS




On Mon, Apr 2, 2018 at 6:07 PM, mailto:dhy...@sina.com>> wrote:
what different between self-hosted engine and  hosted engine? I find a project
ovirt-hosted-engine-ha  
https://github.com/oVirt/ovirt-hosted-engine-ha
- 原始邮件 -
发件人：Vincent Royer mailto:vinc...@epicenergy.ca>>
收件人：dhy...@sina.com
抄送人：users mailto:users@ovirt.org>>
主题：Re: [ovirt-users] ovirt engine HA
日期：2018年04月03日 08点57分

If your node running self-hosted engine crashes, the hosted engine will be 
started up on another node. It just takes a few minutes for this all to happen, 
but it works reliably in my experience.



On Mon, Apr 2, 2018 at 5:42 PM, mailto:dhy...@sina.com>> wrote:
How to solute ovirt engine HA, I have a three node cluster, one of is deploy 
engine and node , others are node, if node that deplay engine and  node crash, 
How to ensure my server is up?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users