Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-15 Thread Eli Mesika 
On Thu, Oct 5, 2017 at 1:58 PM, Martin Perina  wrote:

>
>
> On Thu, Oct 5, 2017 at 11:38 AM, Gianluca Cecchi <
> gianluca.cec...@gmail.com> wrote:
>
>> On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina 
>> wrote:
>>
>>>
>>>
>>>
>>> ​Please take a look at man page of fence_ilo_ssh and scroll down to
>>> STDIN  PARAMETERS section. These parameters needs to be used in Options
>>> field in webadmin
>>> ​
>>>
>>
>> It seems on ovirt node the man pages are missing, probably to cut off
>> installation base.. ;-)
>>
>
> ​Unfortunately you are right, space saving :-(
> ​
>
>
>> Anyway I would check installing the ordinary rpm package on a base CentOS
>> 7 system.
>> In the mean time I have checked the STDIN  PARAMETERS section of
>> fence_ilo4 man page for a CentOS  6.7 clustersuite server I have at hand,
>> thanks. I think it should be similar
>>
>
> ​They should be more or less the same ...
> ​
>
>
>>
>>
>>
 All in all do you think it is the best agent for ilo4 based blades?

>>>
>>> ​Yes, according to our knowledge ilo4 should be used for all new HP
>>> servers (and also ilo4 agent has most of default parameters, so if you
>>> don't have some special configuration on your server you should be fine.
>>> ​
>>>
>>>
 I have made some test with fence_ilo4 but unable to get success... what
 should I enable on ilo web administration page in this case, if you think
 the agent would be better for any reason?

>>>
>>> ​If you are using admin user, then the default should be fine. If you
>>> are want to create a special user just for oVirt PM operations then
>>> following permissions needs to be assigned to user within iLO4
>>> configuration​:
>>>
>>>   Virtual power and reset
>>>   Remote Console Access
>>>   Virtual Media
>>>
>>> And you need to add following into Options for the host PM settings:
>>>
>>>   privlvl=operator
>>>
>>> ​
>>> Thanks
>>>
>>> Martin​
>>>
>>>
>> Perfect: it works.
>> Assigned the three privileges to the fenceuser user and now the
>> corresponding command line works
>>
>> # fence_ilo4 -a ilo_ip -l fenceuser -L operator -S
>> /usr/local/bin/my_fence_script.sh -o status
>> Status: ON
>> #
>>
>> And also from gui the test is ok using ilo4 type and
>> "privlvl=operator,inet4_only=1" option
>>
>
> ​Great to hear!
> ​
>
>
>>
>> BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual
>> power and reset" privilege for the dedicated user (at least to get the
>> status of the blade)
>>
>
​That's right, but engine will fail to restart the server in case it is not
responding if not all 3 are set ​

>
> ​Thanks for info!
>
> Martin
> ​
>
>
>>
>> Thanks again,
>> Gianluca
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Martin Perina 
On Thu, Oct 5, 2017 at 11:38 AM, Gianluca Cecchi 
wrote:

> On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina  wrote:
>
>>
>>
>>
>> ​Please take a look at man page of fence_ilo_ssh and scroll down to
>> STDIN  PARAMETERS section. These parameters needs to be used in Options
>> field in webadmin
>> ​
>>
>
> It seems on ovirt node the man pages are missing, probably to cut off
> installation base.. ;-)
>

​Unfortunately you are right, space saving :-(
​


> Anyway I would check installing the ordinary rpm package on a base CentOS
> 7 system.
> In the mean time I have checked the STDIN  PARAMETERS section of
> fence_ilo4 man page for a CentOS  6.7 clustersuite server I have at hand,
> thanks. I think it should be similar
>

​They should be more or less the same ...
​


>
>
>
>>> All in all do you think it is the best agent for ilo4 based blades?
>>>
>>
>> ​Yes, according to our knowledge ilo4 should be used for all new HP
>> servers (and also ilo4 agent has most of default parameters, so if you
>> don't have some special configuration on your server you should be fine.
>> ​
>>
>>
>>> I have made some test with fence_ilo4 but unable to get success... what
>>> should I enable on ilo web administration page in this case, if you think
>>> the agent would be better for any reason?
>>>
>>
>> ​If you are using admin user, then the default should be fine. If you are
>> want to create a special user just for oVirt PM operations then following
>> permissions needs to be assigned to user within iLO4 configuration​:
>>
>>   Virtual power and reset
>>   Remote Console Access
>>   Virtual Media
>>
>> And you need to add following into Options for the host PM settings:
>>
>>   privlvl=operator
>>
>> ​
>> Thanks
>>
>> Martin​
>>
>>
> Perfect: it works.
> Assigned the three privileges to the fenceuser user and now the
> corresponding command line works
>
> # fence_ilo4 -a ilo_ip -l fenceuser -L operator -S 
> /usr/local/bin/my_fence_script.sh
> -o status
> Status: ON
> #
>
> And also from gui the test is ok using ilo4 type and
> "privlvl=operator,inet4_only=1" option
>

​Great to hear!
​


>
> BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual
> power and reset" privilege for the dedicated user (at least to get the
> status of the blade)
>

​Thanks for info!

Martin
​


>
> Thanks again,
> Gianluca
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Gianluca Cecchi 
On Thu, Oct 5, 2017 at 11:04 AM, Martin Perina  wrote:

>
>
>
> ​Please take a look at man page of fence_ilo_ssh and scroll down to STDIN
> PARAMETERS section. These parameters needs to be used in Options field in
> webadmin
> ​
>

It seems on ovirt node the man pages are missing, probably to cut off
installation base.. ;-)
Anyway I would check installing the ordinary rpm package on a base CentOS 7
system.
In the mean time I have checked the STDIN  PARAMETERS section of fence_ilo4
man page for a CentOS  6.7 clustersuite server I have at hand, thanks. I
think it should be similar



>> All in all do you think it is the best agent for ilo4 based blades?
>>
>
> ​Yes, according to our knowledge ilo4 should be used for all new HP
> servers (and also ilo4 agent has most of default parameters, so if you
> don't have some special configuration on your server you should be fine.
> ​
>
>
>> I have made some test with fence_ilo4 but unable to get success... what
>> should I enable on ilo web administration page in this case, if you think
>> the agent would be better for any reason?
>>
>
> ​If you are using admin user, then the default should be fine. If you are
> want to create a special user just for oVirt PM operations then following
> permissions needs to be assigned to user within iLO4 configuration​:
>
>   Virtual power and reset
>   Remote Console Access
>   Virtual Media
>
> And you need to add following into Options for the host PM settings:
>
>   privlvl=operator
>
> ​
> Thanks
>
> Martin​
>
>
Perfect: it works.
Assigned the three privileges to the fenceuser user and now the
corresponding command line works

# fence_ilo4 -a ilo_ip -l fenceuser -L operator -S
/usr/local/bin/my_fence_script.sh -o status
Status: ON
#

And also from gui the test is ok using ilo4 type and
"privlvl=operator,inet4_only=1" option

BTW: for the fence_ilo_ssh agent it is enough to have only the "Virtual
power and reset" privilege for the dedicated user (at least to get the
status of the blade)

Thanks again,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Martin Perina 
On Thu, Oct 5, 2017 at 9:53 AM, Gianluca Cecchi 
wrote:

> Hello,
> on 4.1.6 I'm configuring fencing on HP blades Gen9.
> It seems I'm able to use ilo_ssh as agent and that I have only to set 22
> as the port and ssh=1 in options
>
> Question: why ssh=1??? the agent is named ilo_ssh shouldn't be
> obvious???
> The same form command line I MUST set -x even if I use fence_ilo_ssh
> command
>
> Nevertheless, this way I get successful test
>
> Sometimes I don't get the same result if I run from shell eg:
>
> fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh
> -x -o status
>
> I get sometimes:
> Unable to connect/login to fencing device
>
> I think it could be some sort of delay timeout.
> In fence_ilo_ssh I see these kinds of timeouts in help
>
>--power-timeout=[seconds]  Test X seconds for status change after
> ON/OFF
>--shell-timeout=[seconds]  Wait X seconds for cmd prompt after
> issuing command
>--login-timeout=[seconds]  Wait X seconds for cmd prompt after login
>--power-wait=[seconds] Wait X seconds after issuing ON/OFF
>--delay=[seconds]  Wait X seconds before fencing is started
>
> How do they map with gui settings options in case I would use some of them?
>

​Please take a look at man page of fence_ilo_ssh and scroll down to STDIN
PARAMETERS section. These parameters needs to be used in Options field in
webadmin
​


>
> Also, how do I map the command line option
>
> -4, --inet4-only
>
> Perhaps inet4_only=1 ?
>

​Correct
​


>
> I see that
>
> ssh=1,inet4_only=1
> works
>
> but also
> ssh=1,inet4_only=1,foo=1
> works
>

​Yes, we just pass the parameters to fence agent and if it don't complain
about unknown parameter, we have no way how to present that to a user.​



> So it is not a reliable test to verify syntax...
>
> All in all do you think it is the best agent for ilo4 based blades?
>

​Yes, according to our knowledge ilo4 should be used for all new HP servers
(and also ilo4 agent has most of default parameters, so if you don't have
some special configuration on your server you should be fine.
​


> I have made some test with fence_ilo4 but unable to get success... what
> should I enable on ilo web administration page in this case, if you think
> the agent would be better for any reason?
>

​If you are using admin user, then the default should be fine. If you are
want to create a special user just for oVirt PM operations then following
permissions needs to be assigned to user within iLO4 configuration​:

  Virtual power and reset
  Remote Console Access
  Virtual Media

And you need to add following into Options for the host PM settings:

  privlvl=operator

​
Thanks

Martin​



>
> Thanks,
> Gianluca
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Gianluca Cecchi 
On Thu, Oct 5, 2017 at 10:15 AM, Fabrice Bacchella <
fabrice.bacche...@orange.fr> wrote:

> I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to
> ilo4 and everything works fine.
>
> Nothing special on the ilo side, just up to date firmware.
>
>
Also these blades are BL460c Gen9

I'm not the admin of fw of blades, but I can see that the blades have
version 2.53 for firmware and version 1.0.9 for their power mgmt controller.
And the enclosures have fw with version 4.60
Did you create a special user for the iLO fencing of the servers (in my
case fenceuser)? If so, which kind of privileges did you assign to this
user?

I also see that the IPMI settings seem ok:
IPMI/DCMI over LAN Access is enabled
IPMI/DCMI over LAN Port is the default 623 one

but

fence_ilo4 -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -o
status
Failed: Unable to obtain correct plug status or plug is not available

Even if I try -4 and/or -P and/or -L operator and/or -A password
I get the same error
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Luca 'remix_tj' Lorenzetto 
Same here. I'm only ensuring ilo4 is up to date and ovirtmgmt network
can reach ilo network.

On Thu, Oct 5, 2017 at 10:15 AM, Fabrice Bacchella
 wrote:
> I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 
> and everything works fine.
>
> Nothing special on the ilo side, just up to date firmware.
>
>> Le 5 oct. 2017 à 09:53, Gianluca Cecchi  a écrit :
>>
>> Hello,
>> on 4.1.6 I'm configuring fencing on HP blades Gen9.
>> It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as 
>> the port and ssh=1 in options
>>
>> Question: why ssh=1??? the agent is named ilo_ssh shouldn't be obvious???
>> The same form command line I MUST set -x even if I use fence_ilo_ssh command
>>
>> Nevertheless, this way I get successful test
>>
>> Sometimes I don't get the same result if I run from shell eg:
>>
>> fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x 
>> -o status
>>
>> I get sometimes:
>> Unable to connect/login to fencing device
>>
>> I think it could be some sort of delay timeout.
>> In fence_ilo_ssh I see these kinds of timeouts in help
>>
>>--power-timeout=[seconds]  Test X seconds for status change after 
>> ON/OFF
>>--shell-timeout=[seconds]  Wait X seconds for cmd prompt after 
>> issuing command
>>--login-timeout=[seconds]  Wait X seconds for cmd prompt after login
>>--power-wait=[seconds] Wait X seconds after issuing ON/OFF
>>--delay=[seconds]  Wait X seconds before fencing is started
>>
>> How do they map with gui settings options in case I would use some of them?
>>
>> Also, how do I map the command line option
>>
>> -4, --inet4-only
>>
>> Perhaps inet4_only=1 ?
>>
>> I see that
>>
>> ssh=1,inet4_only=1
>> works
>>
>> but also
>> ssh=1,inet4_only=1,foo=1
>> works
>>
>> So it is not a reliable test to verify syntax...
>>
>> All in all do you think it is the best agent for ilo4 based blades?
>> I have made some test with fence_ilo4 but unable to get success... what 
>> should I enable on ilo web administration page in this case, if you think 
>> the agent would be better for any reason?
>>
>> Thanks,
>> Gianluca
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users



-- 
"E' assurdo impiegare gli uomini di intelligenza eccellente per fare
calcoli che potrebbero essere affidati a chiunque se si usassero delle
macchine"
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Fabrice Bacchella 
I have HP blades too (ProLiant BL460c Gen9). I have set the fencing to ilo4 and 
everything works fine.

Nothing special on the ilo side, just up to date firmware.

> Le 5 oct. 2017 à 09:53, Gianluca Cecchi  a écrit :
> 
> Hello,
> on 4.1.6 I'm configuring fencing on HP blades Gen9.
> It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as 
> the port and ssh=1 in options 
> 
> Question: why ssh=1??? the agent is named ilo_ssh shouldn't be obvious???
> The same form command line I MUST set -x even if I use fence_ilo_ssh command
> 
> Nevertheless, this way I get successful test
> 
> Sometimes I don't get the same result if I run from shell eg:
> 
> fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh -x 
> -o status 
> 
> I get sometimes:
> Unable to connect/login to fencing device
> 
> I think it could be some sort of delay timeout.
> In fence_ilo_ssh I see these kinds of timeouts in help
> 
>--power-timeout=[seconds]  Test X seconds for status change after 
> ON/OFF
>--shell-timeout=[seconds]  Wait X seconds for cmd prompt after issuing 
> command
>--login-timeout=[seconds]  Wait X seconds for cmd prompt after login
>--power-wait=[seconds] Wait X seconds after issuing ON/OFF
>--delay=[seconds]  Wait X seconds before fencing is started
> 
> How do they map with gui settings options in case I would use some of them?
> 
> Also, how do I map the command line option
> 
> -4, --inet4-only
> 
> Perhaps inet4_only=1 ?
> 
> I see that 
> 
> ssh=1,inet4_only=1 
> works
> 
> but also
> ssh=1,inet4_only=1,foo=1
> works
> 
> So it is not a reliable test to verify syntax...
> 
> All in all do you think it is the best agent for ilo4 based blades?
> I have made some test with fence_ilo4 but unable to get success... what 
> should I enable on ilo web administration page in this case, if you think the 
> agent would be better for any reason?
> 
> Thanks,
> Gianluca
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Configuring ilo4 on hp blade gen 9

2017-10-05 Thread Gianluca Cecchi 
Hello,
on 4.1.6 I'm configuring fencing on HP blades Gen9.
It seems I'm able to use ilo_ssh as agent and that I have only to set 22 as
the port and ssh=1 in options

Question: why ssh=1??? the agent is named ilo_ssh shouldn't be
obvious???
The same form command line I MUST set -x even if I use fence_ilo_ssh command

Nevertheless, this way I get successful test

Sometimes I don't get the same result if I run from shell eg:

fence_ilo_ssh -a ilo_ip -l fenceuser -S /usr/local/bin/my_fence_script.sh
-x -o status

I get sometimes:
Unable to connect/login to fencing device

I think it could be some sort of delay timeout.
In fence_ilo_ssh I see these kinds of timeouts in help

   --power-timeout=[seconds]  Test X seconds for status change after
ON/OFF
   --shell-timeout=[seconds]  Wait X seconds for cmd prompt after
issuing command
   --login-timeout=[seconds]  Wait X seconds for cmd prompt after login
   --power-wait=[seconds] Wait X seconds after issuing ON/OFF
   --delay=[seconds]  Wait X seconds before fencing is started

How do they map with gui settings options in case I would use some of them?

Also, how do I map the command line option

-4, --inet4-only

Perhaps inet4_only=1 ?

I see that

ssh=1,inet4_only=1
works

but also
ssh=1,inet4_only=1,foo=1
works

So it is not a reliable test to verify syntax...

All in all do you think it is the best agent for ilo4 based blades?
I have made some test with fence_ilo4 but unable to get success... what
should I enable on ilo web administration page in this case, if you think
the agent would be better for any reason?

Thanks,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users