[ovirt-users] cannot remove vm.

[nicola gentile]

Hi,
I have a problem. I try to remove a pool and than I remove every vm
but one of this display the message "Cannot remove VM. Related
operation is currently in progress. Please try again later."

I try to unlock with this command

PGPASSWORD=... /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
-t all -u engine

but not working

in /var/log/ovirt-engine/engine.log

2018-03-01 17:02:47,799+01 INFO
[org.ovirt.engine.core.bll.RemoveVmCommand] (default task-33)
[0217d710-afb6-4450-9897-02748d871aa1] Failed to Acquire Lock to
object 'EngineLock:{exclusiveLocks='[d623ad44-a645-4fd0-9993-d21374e99eb5=VM]',
sharedLocks=''}'
2018-03-01 17:02:47,799+01 WARN
[org.ovirt.engine.core.bll.RemoveVmCommand] (default task-33)
[0217d710-afb6-4450-9897-02748d871aa1] Validation of action 'RemoveVm'
failed for user admin@internal-authz. Reasons:
VAR__ACTION__REMOVE,VAR__TYPE__VM,ACTION_TYPE_FAILED_OBJECT_LOCKED

please help

thanks

Nick
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Fwd: ovirt-engine-extension-aaa-ldap active directory

[nicola gentile]

I do this already.
The CA certificate that i download is fine also for ldap?

Nick

2017-10-11 14:56 GMT+02:00 Ondra Machacek <omach...@redhat.com>:
> You can download it just a temporary, for example to /tmp.
> Then aaa-setup-tool wil create jks file in /etc/ovirt-engine/aaa/ directory.
> After that you can remove the CA file and keep just jks file.
>
> On Wed, Oct 11, 2017 at 2:37 PM, nicola gentile
> <nicola.gentile...@gmail.com> wrote:
>> Yes I created by aaa-setup tool.
>> I noticed that the CA certificate was expired, than I download new
>> certificate and I run aaa-setup tool.
>>
>> is there a specific place to put the certificate file ca? I put in root home.
>>
>> Thank a lot
>>
>> Nick
>>
>> 2017-10-11 14:18 GMT+02:00 Ondra Machacek <omach...@redhat.com>:
>>> It fails on SSL handshake:
>>>  sun.security.validator.ValidatorException: No trusted certificate found
>>>
>>> How did you create 'polito.it.jks' file? By aaa-setup tool?
>>> Are use sure you've entered correct CA certificate there?
>>>
>>> On Wed, Oct 11, 2017 at 1:30 PM, nicola gentile
>>> <nicola.gentile...@gmail.com> wrote:
>>>> 2017-10-11 10:11 GMT+02:00 nicola gentile <nicola.gentile...@gmail.com>:
>>>>> Hi Martin,
>>>>> I attach aaa.log you suggest
>>>>>
>>>>> Nick
>>>>>
>>>>> 2017-10-10 20:41 GMT+02:00 Martin Perina <mper...@redhat.com>:
>>>>>> Hi,
>>>>>>
>>>>>> most probably you are affected by [1], so could you please check
>>>>>> certificates on all your AD servers?
>>>>>> You can verify using following command:
>>>>>>
>>>>>>   ovirt-engine-extensions-tool --log-level=FINEST aaa login-user
>>>>>> --user-name= --profile=
>>>>>>
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> Martin
>>>>>>
>>>>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1465463
>>>>>>
>>>>>>
>>>>>> On Tue, Oct 10, 2017 at 6:13 PM, Luca 'remix_tj' Lorenzetto
>>>>>> <lorenzetto.l...@gmail.com> wrote:
>>>>>>>
>>>>>>> On Tue, Oct 10, 2017 at 4:41 PM, nicola gentile
>>>>>>> <nicola.gentile...@gmail.com> wrote:
>>>>>>> > I run the command you suggest
>>>>>>> > ldapsearch -h domaincontroller.dom.it -b "dc=dom,dc=it" -D u...@dom.it
>>>>>>> > -W -x sAMAccountName=user_to_search userPrincipalName | grep
>>>>>>> > userPrincipalName
>>>>>>> >
>>>>>>> > This is the result:
>>>>>>> >
>>>>>>> > Enter LDAP Password:
>>>>>>> > # requesting: userPrincipalName
>>>>>>> >
>>>>>>>
>>>>>>> Supposing you're using all the right parameters in ldapsearch command,
>>>>>>> it seems that the user you were looking up is not a valid user in that
>>>>>>> directory server.
>>>>>>>
>>>>>>> Please check with someone that can access to AD and verify the status
>>>>>>> of the user with ADSI Edit.
>>>>>>>
>>>>>>> Luca
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
>>>>>>> calcoli che potrebbero essere affidati a chiunque se si usassero delle
>>>>>>> macchine"
>>>>>>> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>>>>>>>
>>>>>>> "Internet è la più grande biblioteca del mondo.
>>>>>>> Ma il problema è che i libri sono tutti sparsi sul pavimento"
>>>>>>> John Allen Paulos, Matematico (1945-vivente)
>>>>>>>
>>>>>>> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net ,
>>>>>>> <lorenzetto.l...@gmail.com>
>>>>>>> ___
>>>>>>> Users mailing list
>>>>>>> Users@ovirt.org
>>>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>>>
>>>>>>
>>>>
>>>> ___
>>>> Users mailing list
>>>> Users@ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Fwd: ovirt-engine-extension-aaa-ldap active directory

[nicola gentile]

Yes I created by aaa-setup tool.
I noticed that the CA certificate was expired, than I download new
certificate and I run aaa-setup tool.

is there a specific place to put the certificate file ca? I put in root home.

Thank a lot

Nick

2017-10-11 14:18 GMT+02:00 Ondra Machacek <omach...@redhat.com>:
> It fails on SSL handshake:
>  sun.security.validator.ValidatorException: No trusted certificate found
>
> How did you create 'polito.it.jks' file? By aaa-setup tool?
> Are use sure you've entered correct CA certificate there?
>
> On Wed, Oct 11, 2017 at 1:30 PM, nicola gentile
> <nicola.gentile...@gmail.com> wrote:
>> 2017-10-11 10:11 GMT+02:00 nicola gentile <nicola.gentile...@gmail.com>:
>>> Hi Martin,
>>> I attach aaa.log you suggest
>>>
>>> Nick
>>>
>>> 2017-10-10 20:41 GMT+02:00 Martin Perina <mper...@redhat.com>:
>>>> Hi,
>>>>
>>>> most probably you are affected by [1], so could you please check
>>>> certificates on all your AD servers?
>>>> You can verify using following command:
>>>>
>>>>   ovirt-engine-extensions-tool --log-level=FINEST aaa login-user
>>>> --user-name= --profile=
>>>>
>>>>
>>>> Thanks
>>>>
>>>> Martin
>>>>
>>>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1465463
>>>>
>>>>
>>>> On Tue, Oct 10, 2017 at 6:13 PM, Luca 'remix_tj' Lorenzetto
>>>> <lorenzetto.l...@gmail.com> wrote:
>>>>>
>>>>> On Tue, Oct 10, 2017 at 4:41 PM, nicola gentile
>>>>> <nicola.gentile...@gmail.com> wrote:
>>>>> > I run the command you suggest
>>>>> > ldapsearch -h domaincontroller.dom.it -b "dc=dom,dc=it" -D u...@dom.it
>>>>> > -W -x sAMAccountName=user_to_search userPrincipalName | grep
>>>>> > userPrincipalName
>>>>> >
>>>>> > This is the result:
>>>>> >
>>>>> > Enter LDAP Password:
>>>>> > # requesting: userPrincipalName
>>>>> >
>>>>>
>>>>> Supposing you're using all the right parameters in ldapsearch command,
>>>>> it seems that the user you were looking up is not a valid user in that
>>>>> directory server.
>>>>>
>>>>> Please check with someone that can access to AD and verify the status
>>>>> of the user with ADSI Edit.
>>>>>
>>>>> Luca
>>>>>
>>>>>
>>>>> --
>>>>> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
>>>>> calcoli che potrebbero essere affidati a chiunque se si usassero delle
>>>>> macchine"
>>>>> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>>>>>
>>>>> "Internet è la più grande biblioteca del mondo.
>>>>> Ma il problema è che i libri sono tutti sparsi sul pavimento"
>>>>> John Allen Paulos, Matematico (1945-vivente)
>>>>>
>>>>> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net ,
>>>>> <lorenzetto.l...@gmail.com>
>>>>> ___
>>>>> Users mailing list
>>>>> Users@ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt-engine-extension-aaa-ldap active directory

[nicola gentile]

yes is AD.
Nick

2017-10-10 16:41 GMT+02:00 nicola gentile <nicola.gentile...@gmail.com>:
> I run the command you suggest
> ldapsearch -h domaincontroller.dom.it -b "dc=dom,dc=it" -D u...@dom.it
> -W -x sAMAccountName=user_to_search userPrincipalName | grep
> userPrincipalName
>
> This is the result:
>
> Enter LDAP Password:
> # requesting: userPrincipalName
>
> Nick
>
> 2017-10-10 16:21 GMT+02:00 Luca 'remix_tj' Lorenzetto
> <lorenzetto.l...@gmail.com>:
>> On Tue, Oct 10, 2017 at 4:06 PM, nicola gentile
>> <nicola.gentile...@gmail.com> wrote:
>>> include = 
>>>
>>> vars.domain = dom.it
>>> vars.user = CN=myuser,OU=spuser,DC=dom,DC=it
>>> vars.password = x
>>>
>>> pool.default.auth.simple.bindDN = ${global:vars.user}
>>> pool.default.auth.simple.password = ${global:vars.password}
>>> pool.default.serverset.type = srvrecord
>>> pool.default.serverset.srvrecord.domain = ${global:vars.domain}
>>> pool.default.ssl.startTLS = true
>>> pool.default.ssl.truststore.file = ${local:_basedir}/polito.it.jks
>>> pool.default.ssl.truststore.password = changeit
>>
>> It's an AD?
>>
>> Can you check if userPrincipalName of the user you're trying to use
>> for connecting contains the login name in the format of
>> u...@domain.fqdn?
>>
>> I had issues with users that had userPrincipalName wrongly formatted.
>> You should find nicola.gent...@polito.it on that field.
>>
>> You can check in this way:
>>
>> ldapsearch -h domaincontroller.dom.it -b "dc=dom,dc=it" -D u...@dom.it
>> -W -x sAMAccountName=user_to_search userPrincipalName | grep
>> userPrincipalName
>>
>>
>> Luca
>>
>>
>>
>> --
>> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
>> calcoli che potrebbero essere affidati a chiunque se si usassero delle
>> macchine"
>> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>>
>> "Internet è la più grande biblioteca del mondo.
>> Ma il problema è che i libri sono tutti sparsi sul pavimento"
>> John Allen Paulos, Matematico (1945-vivente)
>>
>> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , 
>> <lorenzetto.l...@gmail.com>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt-engine-extension-aaa-ldap active directory

[nicola gentile]

in my /etc/ovirt-engine/aaa/polito.it.properties the DN is written correctly:

vars.user = CN=myuser,OU=spuser,DC=dom,DC=it

I don't have ldap search.

2017-10-10 15:19 GMT+02:00 Luca 'remix_tj' Lorenzetto
:
> Hello Nicola,
>
> i don't see anything strange in your setup. Can you check if DN in files
>
>  /etc/ovirt-engine/aaa/polito.it*.properties
>
> are written correctly?
>
> Can you also check with a ldapsearch if there is something strange in
> your LDAP entry? I found that some users were not logging in correctly
> due to wrong fields in the ldap object.
>
>
> Luca
>
> On Tue, Oct 10, 2017 at 3:07 PM, nicola.gentile.to
>  wrote:
>> Sorry I forgot the attachment
>>
>> Nick
>>
>>
>> Il 10/10/2017 14:50, nicola.gentile.to ha scritto:
>>>
>>> Hi,
>>> I have a problem. Suddenly from the user portal the users of AD not login
>>> and displays the error:
>>>
>>> server_error: Unexpected comma or semicolon found at the end of the DN
>>> string.
>>>
>>> Also, from Admin Portal ->Users when I try to add a user of AD I don't see
>>> the sub domain
>>>
>>> Also, I try to run ovirt-engine-extension-aaa-ldap-setup but not works.
>>> I attach the log file.
>>>
>>> please help me
>>>
>>> Thanks
>>>
>>> Nick
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> --
> "E' assurdo impiegare gli uomini di intelligenza eccellente per fare
> calcoli che potrebbero essere affidati a chiunque se si usassero delle
> macchine"
> Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)
>
> "Internet è la più grande biblioteca del mondo.
> Ma il problema è che i libri sono tutti sparsi sul pavimento"
> John Allen Paulos, Matematico (1945-vivente)
>
> Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Hardware upgrade Ovirt Engine

[nicola gentile]

Hi,
My environment consists of:
1 engine
2 host
1 storage

I must to do an hardware upgrade only for engine manager.

How do I proceed?

Best regard

Nicola
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] name of virtual machine and hostname

[nicola gentile]

Good morning,
I tried cloud-init. I installed a package cloud-init, and everything works fine.

Thank you so much for you work.

Nicola

2015-01-15 11:18 GMT+01:00 nicola.gentile.to nicola.gentile...@gmail.com:
 Il 15/01/2015 10:04, Simone Tiraboschi ha scritto:


 - Original Message -

 From: nicola gentile nicola.gentile...@gmail.com
 To: Users@ovirt.org
 Sent: Wednesday, January 14, 2015 2:33:35 PM
 Subject: Re: [ovirt-users] name of virtual machine and hostname

 Good morning,
 sorry if I reply only now.
 Let me explain better.
 Once generated the vms, the hostname of the vms are the same of the
 template, but I wish it was centos-01, centos-02, etc.
 Is it possible?

 Yes, you can use cloud-init to set some parameters for each VM including
 the hostname.
 You should install the cloud-init rpm on your VMs (it would probably
 better to do it on the template one) and than you can set the parameters for
 each VM from 'Initial run' tab under 'Advanced option'.


 Thank you so much, I will try as soon as possible.


 Thanks,
 Nicola

 2014-06-29 15:43 GMT+02:00 Moti Asayag masa...@redhat.com:


 - Original Message -

 From: Shahar Havivi shah...@redhat.com
 To: Antoni Segura Puimedon asegu...@redhat.com
 Cc: Users@ovirt.org
 Sent: Sunday, June 29, 2014 11:12:24 AM
 Subject: Re: [ovirt-users] name of virtual machine and hostname

 On 27.06.14 05:18, Antoni Segura Puimedon wrote:


 - Original Message -

 From: nicola gentile nicola.gentile...@gmail.com
 To: Users@ovirt.org
 Sent: Friday, June 27, 2014 11:16:51 AM
 Subject: [ovirt-users] name of virtual machine and hostname

 Good morning,
 I would like to ask you an information.
 After I have installed ovirt, I have created a pool of vm with name
 like centos-?? (from 1 to 20)
 and then ovirt generated 20 vm with name centos-1, centos-2, centos-3
 etc.
 etc.
 The problem is when the vm starts the hostname is not the same of the
 vm name in ovirt but is the same name of the template.
 Is it possible to make sure that the name of vm and the hostname is
 identical?

 I guess that the way to go about it would be to use the cloudinit
 integration.
 I've not tried it myself, but:
  http://www.ovirt.org/Features/Cloud-Init_Integration
 states that setting the hostname was one of the planned features when
 the
 integration was designed.

 Setting the host name via cloud-init is currently supported - you can
 set
 it
 via the Add/Edit VM via the Initial Run section or try to run-once
 the
 VM
 and look at the same initial Run section.
 Please note that if you do Edit a VM that already run ie already
 initialized
 oVirt engine will not send the cloud-init data, you will need to use
 run-once
 dialog.

 What you reported looks like a bug - the VM name should be the hostname
 and
 not the template name.

 Unless Nicola referred to the template's host name, from which the vm
 pool
 was
 created. It might be if the template wasn't sealed.

 Nicola, could you clarify what did you mean by template name which
 appears as
 the host name ?

 Thanks,
 Moti

 Care to report the bug on bugzilla?
 Thank you,
 Shahar Havivi.

 Best regard

 Nicola Gentile
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] New environment ovirt

[nicola gentile]

Hello,
I have a question.
I would like to set up a new environment with two nodes.
I would like separate che storage traffic, vm traffic and network
management traffic.
Storage is in a separate subnet.
Also the virtual machine is in a separate subnet, and I would like to
separate the management of the network too.
I think I need to add 3 network adapters on the nodes, one for each purpose.
Now I ask you, does the oVirt engine server (manager) need three
network cards too?

Thank you

Nicola
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] name of virtual machine and hostname

[nicola gentile]

Good morning,
I would like to ask you an information.
After I have installed ovirt, I have created a pool of vm with name
like centos-?? (from 1 to 20)
and then ovirt generated 20 vm with name centos-1, centos-2, centos-3 etc. etc.
The problem is when the vm starts the hostname is not the same of the
vm name in ovirt but is the same name of the template.
Is it possible to make sure that the name of vm and the hostname is identical?

Best regard

Nicola Gentile
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] update vm in a pool

[nicola gentile]

Hi,
in a pool the vm is not stateless only?
I created a pool and I assigned users to it.
I applied your solution and it works fine.
I would like to tell you that after I upgrade the server, the firewall
is always abilitated though I've disabled.
After that I must disable the firewall.

Thank you a lot for your help.

ng


2014-05-14 1:42 GMT+02:00 Itamar Heim ih...@redhat.com:
 On 05/13/2014 11:00 AM, nicola gentile wrote:

 Good morning,
 I am new user, and I would ask you an information.
 I have installed ovirt 3.4.
 I created a pool with 3 vm, too.

 I should add software to 3 vm how I must proceed?
 1) I must delete the vm from pool, and than add the software and then
 recreate the pool?
 2) or there are other solution?

 Thank you a lot.

 ng
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


 do you want to use the VMs as stateless or statefull?
 did you use the pool to assign a single vm per user from user portal, or
 just to create a bunch of similar VMs?

 3.4 has template versions, so you can create a new version of the
 template, and next time you shutdown/start the VMs, they will rebase to
 latest version of the template if pool is so defined.

 you can also install the application on the VM after you start it as an
 admin (which doesn't create the stateless snapshot by default like when a
 user starts the pool'd vm from the user portal).
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] update vm in a pool

[nicola gentile]

Good morning,
I am new user, and I would ask you an information.
I have installed ovirt 3.4.
I created a pool with 3 vm, too.

I should add software to 3 vm how I must proceed?
1) I must delete the vm from pool, and than add the software and then
recreate the pool?
2) or there are other solution?

Thank you a lot.

ng
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] unable to connect after upgrade 3.3.3 to 3.4.0

[nicola gentile]

Hello,
I'm trying oVirt allinone version 3.3.3 and after the upgrade to 3.4.0
the virtual machines do not start using spice client (linux or
windows).
I'm using centos 6.5.
The message displayed is unable to connect to server console.vv graphics.
Can someone help me?

thank you

NG
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] unable to connect after upgrade 3.3.3 to 3.4.0

[nicola gentile]

Thank you, now works!

NG

2014-03-31 16:40 GMT+02:00 Maurice James midnightst...@msn.com:
 Check your firewall settings. I have found that even though you tell the
 install script to leave the firewall alone it still configures it for you.
 You might want try stopping your firewall temporarily.

 Date: Mon, 31 Mar 2014 16:25:26 +0200
 From: nicola.gentile...@gmail.com
 To: Users@ovirt.org
 Subject: [Users] unable to connect after upgrade 3.3.3 to 3.4.0


 Hello,
 I'm trying oVirt allinone version 3.3.3 and after the upgrade to 3.4.0
 the virtual machines do not start using spice client (linux or
 windows).
 I'm using centos 6.5.
 The message displayed is unable to connect to server console.vv
 graphics.
 Can someone help me?

 thank you

 NG
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users