Re: AD LDAP authentication failing post CS 4.2.1 to CS 4.3 upgrade

2014-04-09 Thread Antonio Packery
Are there mandatory attributes that need to exist for the ldap.bind.principal account .e.g. email addy etc? On 04/10/2014 08:19 AM, Ian Duffy wrote: Sorry about the delay on replying. My new $dayJob restricts gmail/gapps access. I am not using LDAPS at the moment. I have tested it in 4.3 and co

unable to deploy instance

2014-04-09 Thread dimas yoga pratama
Hi all, I am trying to build build cloudstack 4.2 using my laptop by following this guideand, everything went smooth. But when I tried to create an instance I've got this following error : WARN [apache.cloudstack.aler

Re: AD LDAP authentication failing post CS 4.2.1 to CS 4.3 upgrade

2014-04-09 Thread Ian Duffy
Sorry about the delay on replying. My new $dayJob restricts gmail/gapps access. I am not using LDAPS at the moment. I have tested it in 4.3 and confirmed that it worked some time ago though..

Re: Cloudstack 4.3 instances can't access outside world

2014-04-09 Thread Erik Weber
Can you ping the VR? Log on to the VR, and get the iptables rules. How do they look? Erik Weber 10. apr. 2014 00:21 skrev "motty cruz" følgende: > I did add egress rules, reboot network but no sucess, so I removed that > rules and nothing. > > I am lost. > > > On Wed, Apr 9, 2014 at 9:08 AM, Eri

Re: KVM Cluster Xen cluster unable to build vms on kvm

2014-04-09 Thread Ivan Rodriguez
In addition to my previous email, we configured a new management server only with KVM and its working no major dramas, do we need a separate primary storage/secondary storage/ console vm and storage vm per hypervisor ? Thanks On Thu, Apr 10, 2014 at 11:33 AM, Ivan Rodriguez wrote: > > Dear Cl

KVM Cluster Xen cluster unable to build vms on kvm

2014-04-09 Thread Ivan Rodriguez
Dear Cloudstack Users, We are having a problem with our cloudstack 4.3, we can't provision vms on kvm hypervisor, our configuration has 1 Xen cluster which is working fine and 1 KVM cluster which is not working, cloudstack can see the kvm hosts and as far as the status goes they are online. We tr

Re: Cloudstack 4.3 instances can't access outside world

2014-04-09 Thread motty cruz
I did add egress rules, reboot network but no sucess, so I removed that rules and nothing. I am lost. On Wed, Apr 9, 2014 at 9:08 AM, Erik Weber wrote: > Did you remove the egress rule again? If not, try that. > > Erik > 9. apr. 2014 15:49 skrev "motty cruz" følgende: > > > yes I try adding t

Re: Waiting some more to make sure there's no activity on VM

2014-04-09 Thread Jonathan Gowar
On Wed, 2014-04-09 at 17:46 +0100, Jonathan Gowar wrote: > * all guests have stopped > * ha guest is STILL trying to start > * hv-1 is attempting to connect > * hv-2 alerting > * virtual router running > * ssvm + proxy running It was the HA guest holding the cluster to ransom. The only way to dea

Re: [ACS 4.3] Autoscale Button hidden ?

2014-04-09 Thread benoit lair
@Rajesh, sorry for the late, i'm a bit overworked these last weeks @Nguyen, cool, this will be a very huge feature. Regards, Benoit 2014-04-09 22:50 GMT+02:00 Nguyen Anh Tu : > On Wed, Apr 9, 2014 at 11:50 PM, benoit lair > wrote: > > > > > I saw this problem with Nguyen Anh Tu who said me th

Re: [ACS 4.3] Autoscale Button hidden ?

2014-04-09 Thread Nguyen Anh Tu
On Wed, Apr 9, 2014 at 11:50 PM, benoit lair wrote: > > I saw this problem with Nguyen Anh Tu who said me that this feature was not > present in 4.3 (also in 4.4 master branch). > Kurushi, This feature will be on 4.4 release. Thanks, --Tuna

Re: Routing from VPC Private Gateway to Internet (4.2.1)

2014-04-09 Thread Xerex Bueno
The private gateway is used to allow the termination of MPLS/Metro-E connections, or some other type of routed network connection into the customer VPC. Using it for internet access could be accomplished but is messy and may have little benefit. On 4/9/14, 11:55 AM, "Sanjeev Neelarapu" wrote: >

Cloudstack 4.2 - how to turn debugging off

2014-04-09 Thread motty cruz
hello all, can someone point me to instructions on how to turn off debugging on cloudstack-management? Thanks,

RE: [ACS 4.3] Autoscale Button hidden ?

2014-04-09 Thread Rajesh Battala
Thanks for the update. -Original Message- From: benoit lair [mailto:kurushi4...@gmail.com] Sent: Wednesday, April 9, 2014 10:21 PM To: users@cloudstack.apache.org Subject: Re: [ACS 4.3] Autoscale Button hidden ? Hello Rajesh, I think i had my response, i was trying to use autoscale with

Re: Error in terminal:No package cloud-client availble

2014-04-09 Thread Ekta Agrawal
these are the logs available in my "/var/log/cloud" location. In setup management log there is same kind of failure everytime. DEBUG:root:execute:hostname --fqdn DEBUG:root:execute:mkdir /var/log/cloud-management/ *DEBUG:root:Failed to execute:mkdir: cannot create directory `/var/log/cloud-

Re: VM management Shut down alone

2014-04-09 Thread Anoop Mohan
grep -i -E 'exception|unable|fail|invalid|leak|warn|error' /var/log/cloudstack/management/management-server.log you will find the error in Cloud-management log On Tue, Apr 8, 2014 at 3:28 PM, clement mutz wrote: > > > Hi everybody, > > > > I installed a virtual machine centos with this tutoria

Re: Unable to Start System VM

2014-04-09 Thread Anoop Mohan
Have you seeded the system VM's for xen server? On Tue, Apr 8, 2014 at 7:31 PM, Diego Spinola Castro < spinolacas...@gmail.com> wrote: > I just updated my Xenservers to 6.2 and i can't start my vrouters. > As far as i could debug CS is starting system vms with Debian 5.0 template: > > Management

Re: Routing from VPC Private Gateway to Internet (4.2.1)

2014-04-09 Thread Sanjeev Neelarapu
Giving internet access is not the private gateway use case On Apr 8, 2014 6:43 PM, Simon Murphy wrote: It will not let me add a CIDR of 0.0.0.0/0 as it overlaps with the internal VPC range. When adding a specific address (8.8.8.8/32) an error is thrown. I would have thought that routing from pri

Re: [ACS 4.3] Autoscale Button hidden ?

2014-04-09 Thread benoit lair
Hello Rajesh, I think i had my response, i was trying to use autoscale without netscaler, this feature does not exist at this time in 4.3 With 4.2 i discovered the autoscale wizard but with the netscaler service enabled onto my network. Now with the 4.3, netscaler has to be activated at the servic

Re: Waiting some more to make sure there's no activity on VM

2014-04-09 Thread Jonathan Gowar
On Wed, 2014-04-09 at 16:19 +0100, Jonathan Gowar wrote: > The HA instance has not yet come back online, I'll wait to see what > happens with this. I left this for another hour, still nothing. I had left 1 of 2 hypervisor machines switched off during the testing, and then the remaining host went

Re: systevm shows running but its not

2014-04-09 Thread Timothy Ehlers
Thanks i was afraid of that. Alright On Wed, Apr 9, 2014 at 11:27 AM, Geoff Higginbottom < geoff.higginbot...@shapeblue.com> wrote: > Tim, > > Locate the record for the ssvm in the Database table 'vm_instance' and > change the 'state' column to 'Stopped' > > After a short delay the system should

RE: systevm shows running but its not

2014-04-09 Thread Geoff Higginbottom
Tim, Locate the record for the ssvm in the Database table 'vm_instance' and change the 'state' column to 'Stopped' After a short delay the system should automatically try to restart it. Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...

systevm shows running but its not

2014-04-09 Thread Timothy Ehlers
I have checked all 40 cloudstack machines the system vm is indeed not running but cloudstack insist that is is. I cannot stop it/destroy it either. Has anybody experienced this with the 4.0.2 line? I cant really upgrade right now either. -- Tim Ehlers

Re: Cloudstack 4.3 instances can't access outside world

2014-04-09 Thread Erik Weber
Did you remove the egress rule again? If not, try that. Erik 9. apr. 2014 15:49 skrev "motty cruz" følgende: > yes I try adding the rule, restart network and router but no success! > > > On Tue, Apr 8, 2014 at 11:16 PM, Erik Weber wrote: > > > Try adding an egress rule, and removing it again. >

How to Mitigate OpenSSL HeartBleed Vulnerability in Apache CloudStack

2014-04-09 Thread Geoff Higginbottom
All, I've added to the original blog on the openssl issue including more detailed instructions for VMWare etc, you can find it here http://shapeblue.com/cloudstack/how-to-mitigate-openssl-heartbleed-vulnerability-in-apache-cloudstack Regards Geoff Higginbottom CTO / Cloud Architect [Descripti

RE: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Geoff Higginbottom
Hi Anoop. I'll admit I'm a little confused. My root/admin account is not in AD so used local CloudStack authentication, and I change it in CloudStack. All my user accounts are in AD, so I change the password in AD, not in CloudStack. If you had a user in AD which mapped to your admin account,

Re: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Anoop Mohan
thanks Geoff I have local admin password changed from the DB. Now If I change the LDAP user password in AD, not able to login with the update password :( On Wed, Apr 9, 2014 at 4:15 PM, Geoff Higginbottom < geoff.higginbot...@shapeblue.com> wrote: > You can reset the local password for the root

Re: Waiting some more to make sure there's no activity on VM

2014-04-09 Thread Jonathan Gowar
On Wed, 2014-04-09 at 14:15 +0100, Jonathan Gowar wrote: > My 2nd test took the same 3 minutes to register. All non HA instances > went down, and the HA enabled instance attempted to migrate. The SSVM > had to migrate first, and then the virtual router, but it hasn't and > again more flooding the

RE: 4.3.0 Unknown API command: addVmwareDc

2014-04-09 Thread Michael Phillips
No I build from source and added the noredist options... > From: daan.hoogl...@gmail.com > Date: Wed, 9 Apr 2014 08:43:21 -0600 > Subject: Re: 4.3.0 Unknown API command: addVmwareDc > To: users@cloudstack.apache.org > > the rpms linked from the download site should be noredist. Did you use those?

Re: Swift as Secondary Storage

2014-04-09 Thread Min Chen
Sanjeev did swift as secondary storage in 4.2, maybe he can shed some light on this. Thanks -min Sent from my iPhone > On Apr 9, 2014, at 8:37 AM, "benoit lair" wrote: > > Hello Pierre, > > That's what i'm trying to, but no success. > > I can't find anything about this in the docs. > > I'v

Re: 4.3.0 Unknown API command: addVmwareDc

2014-04-09 Thread Daan Hoogland
the rpms linked from the download site should be noredist. Did you use those? On Mon, Apr 7, 2014 at 11:50 PM, Michael Phillips wrote: > Are their any community builds out there that already include noredist code? > >> From: mphilli7...@hotmail.com >> To: users@cloudstack.apache.org >> Subject: 4

Re: Swift as Secondary Storage

2014-04-09 Thread benoit lair
Hello Pierre, That's what i'm trying to, but no success. I can't find anything about this in the docs. I've already defined my zone, pod, cluster, server, primary storage, swift secondary storage, defined my secondary nfs staging store, but no way to have the templates available onto the seconda

RE: interactions Cloudstack Vmware

2014-04-09 Thread Geoff Higginbottom
This should help you out https://cwiki.apache.org/confluence/display/CLOUDSTACK/Ports+used+by+CloudStack Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Mohamed Ali Saidi [mailto:saidi.mo

interactions Cloudstack Vmware

2014-04-09 Thread Mohamed Ali Saidi
Hello, I'm searching in the internet for interaction issues (Ports, protocol ,... ) between cloudstack and vmware (vcenter,..) but i can't find any helpful docs. Can any one help me to understand interactions or send me some architecture docs explaining interactions. Best Regards,

Re: Cloudstack 4.3 instances can't access outside world

2014-04-09 Thread motty cruz
yes I try adding the rule, restart network and router but no success! On Tue, Apr 8, 2014 at 11:16 PM, Erik Weber wrote: > Try adding an egress rule, and removing it again. > > We experience the same, but has so far believed it was because we changed > the default rule from deny to allow after

Re: Waiting some more to make sure there's no activity on VM

2014-04-09 Thread Jonathan Gowar
I'm now testing DR by pulling the power on hypervisors. My first test took 3 minutes for CS to register, and for the UI to update. None of the VMs on that host had HA enabled, so also went down. When I powered the host up, CS registered the change, but the VMs remained down, I can imagine this is

coalesce vhd files faster

2014-04-09 Thread Ian Service
I have a chain of VHD's that's 6 deep, when I run vhd-util -n the next one in the chain grows to be coalesced copy of both, then I repeat that process with the next one in the chain. It's working, but extremely slowly, even on an SSD for the scratch disk. Is there a faster way to coalesce the w

Re: OpenSSL Flaw

2014-04-09 Thread Antonio Packery
Here is the CloudStack press release, How to Mitigate OpenSSL HeartBleed Vulnerability in Apache CloudStack Wed Apr 09 2014 07:52:17 GMT+0200 (SAST) Earlier this week, a security vulnerability was disclosed in OpenSSL, one of the software libraries that Apache CloudStack uses to encrypt data sen

Re: Waiting some more to make sure there's no activity on VM

2014-04-09 Thread Jonathan Gowar
On Tue, 2014-04-08 at 20:22 +, Geoff Higginbottom wrote: > If these were new VMs on a new guest network it's possible that the VR took a > long time to start (poor secondary storage performance) so the VMs timed out. They were new VMs, but not on a new guest network, there was 1 VM already on

RE: OpenSSL Flaw

2014-04-09 Thread Geoff Higginbottom
Len, It's an OS issue rather than a CloudStack issue. If you have recently deployed a Management Server based on CentOS 6.5 then you may have the affected version of openssl installed. You can check by running # openssl version If you have versions 1.0.1 through to 1.0.1f (inclusive) you are

RE: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Geoff Higginbottom
You can reset the local password for the root account using the API but not the GUI when LDAP is enabled You will need to List Users http://cloudstack.apache.org/docs/api/apidocs-4.3/root_admin/listUsers.html To get the User ID, and then Update User http://cloudstack.apache.org/docs/api/apid

OpenSSL Flaw

2014-04-09 Thread Len Bellemore
Hi Guys, Does anyone know which version of ACS are affected by the Hearbleed OpenSSL flaw? - http://heartbleed.com/ Thanks Len IMPORTANT NOTICE. This electronic message contains information from Control Circle Ltd, which may be privileged or confidential. The i

Re: AD LDAP authentication failing post CS 4.2.1 to CS 4.3 upgrade

2014-04-09 Thread Antonio Packery
Hi Ian, Are you using ldaps? On 04/08/2014 08:03 AM, Ian Duffy wrote: > Can you please confirm your global ldap settings? Screen shot of them here: http://imgur.com/adnlmSS > Are you able to ‎import ldap users from AD? Yes. http://imgur.com/df29OOm On 7 April 2014 20:44, Antonio Packery

Re: 4.3 on ubuntu

2014-04-09 Thread Erik Weber
On Wed, Apr 9, 2014 at 10:40 AM, Michael Phillips wrote: > Having a tough time getting 4.3 working on ubuntu 12.0.4 > I get everything installed but the mgmt server bombs out immediately with > the following error: > INFO: > validateJarFile(/usr/share/cloudstack-management/webapps/client/WEB-INF/l

4.3 on ubuntu

2014-04-09 Thread Michael Phillips
Having a tough time getting 4.3 working on ubuntu 12.0.4 I get everything installed but the mgmt server bombs out immediately with the following error: INFO: validateJarFile(/usr/share/cloudstack-management/webapps/client/WEB-INF/lib/servlet-api-2.5-20081211.jar) - jar not loaded. See Servlet Sp

Re: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Anoop Mohan
Root Admin ( Super USer ) On Wed, Apr 9, 2014 at 1:49 PM, Geoff Higginbottom < geoff.higginbot...@shapeblue.com> wrote: > Are you trying to reset the password as a user (own password) or as Root > Admin (other users password) > > Regards > > Geoff Higginbottom > > D: +44 20 3603 0542 | S: +44 20

RE: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Geoff Higginbottom
Are you trying to reset the password as a user (own password) or as Root Admin (other users password) Regards Geoff Higginbottom D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581 geoff.higginbot...@shapeblue.com -Original Message- From: Anoop Mohan [mailto:linux.an...@gmail

Re: Admin Password not able to change after Integrating with LDAP CS4.3

2014-04-09 Thread Anoop Mohan
But this is local account not LDAP account On Wed, Apr 9, 2014 at 11:08 AM, Geoff Higginbottom < geoff.higginbot...@shapeblue.com> wrote: > Anoop, > > This is by design, LDAP is the authoritative authentication source so you > need to change the password there, CloudStack can only query LDAP, no