RE: Building saml plugin

2018-03-01 Thread Pallavi Dumbre
Hi Rohit, I tried to build ACS master branch by following steps given in https://cwiki.apache.org/confluence/display/CLOUDSTACK/SAML+2.0+Plugin#SAML2.0Plugin-Introduction But still hitting same exception. PFA exception trace. Also keystore table entries seems fine. PFA database entries for keyst

Re: Cloudstack 4.11 fails to add KVM host

2018-03-01 Thread Daznis
Hello, That's when I shutdown the agent and started from scratch . On Wed, Feb 28, 2018 at 11:08 PM, Rohit Yadav wrote: > Hi Daznis, > > > I see the agent decided to kill itself: > > 2018-02-28 03:56:34,183 INFO [cloud.agent.Agent] (AgentShutdownThread:null) > (logid:) Stopping the agent: Reas

Re: Cloudstack 4.11 fails to add KVM host

2018-03-01 Thread Daznis
Hello, I just finished rebuilding the management server and node and I'm getting the same error. I now have full setup and agent/management server logs if you need the for further investigation. What other things might you need to resolve this issue? On Thu, Mar 1, 2018 at 10:46 AM, Daznis wro

Re: Question: Domain filed on the SSL upload form

2018-03-01 Thread Andrija Panic
anyone ? On 27 February 2018 at 14:32, Andrija Panic wrote: > Hi all, > > I got confused about the domain fields/API parameter that is used when > uploading new SSL, to be used on CPVM and SSVM copy process (this is > domain_suffix in cloud.keystore table) > > Due to some automation, I came acro

Re: Question: Domain filed on the SSL upload form

2018-03-01 Thread Rafael Weingärtner
Looking at the code, I see that the "domainSuffix" is not validated against the certificate commons name. That is why everything works for you. The "domainSuffix" is only used for logical stuff inside ACS. The global parameter is only used to generate the URL to access the SSVM/console proxy, whic

Re: Question: Domain filed on the SSL upload form

2018-03-01 Thread Andrija Panic
Thanks Rafael, that seems reasonable. Excellent ! Thx a lot. On 1 March 2018 at 14:58, Rafael Weingärtner wrote: > Looking at the code, I see that the "domainSuffix" is not validated against > the certificate commons name. That is why everything works for you. The > "domainSuffix" is only used

Re: Cloudstack 4.11 fails to add KVM host

2018-03-01 Thread Rohit Yadav
Hi Daznis. Yes, please share the agent and management server logs for starters. It will depends after we can have an initial look. You may also want to share your ping.timeout and ping.interval settings, and also if both management server and kvm host's time are synced (check ntps, run them). Pl

Re: Building saml plugin

2018-03-01 Thread Rohit Yadav
Okay Pallavi, let me find some time next week (no promises) to setup an IdP environment and see if there is any genuine regression. Rafael, Marco - have you guys had any chance testing SAML stuff with 4.11, or if you have seen such errors before? Thanks. - Rohit

Re: Building saml plugin

2018-03-01 Thread Rafael Weingärtner
No. I found no problems. I have seen this thread before, and there is something I do not understand. Pallavi is talking about building the plugin, but the plug-in is already there. You only need to configure it after the ACS installation. The last time I used this plugin with ACS 4.9.2.0. On Thu,

Re: Building saml plugin

2018-03-01 Thread Rajani Karuturi
Rafael, Did you use it with self signed certificates? ~Rajani Sent from phone. On 1 Mar 2018 8:17 pm, "Rafael Weingärtner" wrote: > No. I found no problems. > > I have seen this thread before, and there is something I do not understand. > Pallavi is talking about building the plugin, but the p

Re: Building saml plugin

2018-03-01 Thread Rafael Weingärtner
At first yes (during validation), but when the system went to production we changed to a valid certificated. On Thu, Mar 1, 2018 at 12:17 PM, Rajani Karuturi wrote: > Rafael, > Did you use it with self signed certificates? > > ~Rajani > > Sent from phone. > > On 1 Mar 2018 8:17 pm, "Rafael Weing

RE: Fields are blank while creating guest network

2018-03-01 Thread Paul Angus
Hi Victor, I haven't heard of this as a bug before, can you point me to where that is. I've just tried it in a new build, and zone was there for me. Is your zone enabled? Can you put your management server logs in pastebin (or similar) so that we can have a look. Kind regards, Paul Angus p

RE: HA-enabled VM not starting or migrating to another host if current host goes down

2018-03-01 Thread Sean Lair
Yea, we had the exact same problem. VM HA is broken in 4.9 - at least under KVM We use this Pull Request in our environment to fix it. https://github.com/apache/cloudstack/pull/2474 However, as stated in the PR, enable libvirt (edit /etc/libvirt/qemu.conf and change and comment: lock_manager =

Re: HA-enabled VM not starting or migrating to another host if current host goes down

2018-03-01 Thread Parth Patel
Hi Sean, Thank you for the reply. I was already testing Cloudstack and now tried the same with 4.11. It works as it should in Cloudstack 4.11. However, I think that pull request should work and will test it out with remaining 3 machines with Cloudstack 4.9. Regards, Parth Patel On Fri, 2 Mar 201