[ovirt-users] Re: Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-15 Thread aleksey . maksimov
Hi Simone. When can we expect a new version of the engine-backup with built-in cleaning helper? 05.10.2016, 13:52, "Simone Tiraboschi" : > On Wed, Oct 5, 2016 at 12:40 PM, wrote: >> Ouch. It is beyond my understanding. >> >> Thus, it appears that described in the RHV4 guide >>

[ovirt-users] RE > Multiple export domains limit?

2019-05-14 Thread aleksey . maksimov
Hello oVirt guru`s! http://lists.ovirt.org/pipermail/users/2015-November/036056.html Is there a progress on this issue? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- IMPORTANT! This message has been scanned

[ovirt-users] Re: Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-14 Thread aleksey . maksimov
Simone, thank you for your work. We will wait for the updates. 06.10.2016, 09:55, "Simone Tiraboschi" : > On Thu, Oct 6, 2016 at 7:32 AM, wrote: >> Hi Simone. >> When can we expect a new version of the engine-backup with built-in cleaning >> helper? > > That bug is targeted to 4.1

[ovirt-users] Re: Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-14 Thread aleksey . maksimov
Well. Then, in the case of conditions: 1) the vm is not available anymore due to storage corruption 2) an empty shared storage is available 3) engine backup exists 4) all VMs still running on the hosts in the cluster The recovery plan will be like this (as I understand it): 1) On all the

[ovirt-users] Re: Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-14 Thread aleksey . maksimov
Ouch. It is beyond my understanding. Thus, it appears that described in the RHV4 guide (https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/single/self-hosted-engine-guide/#sect-Restoring_SHE_bkup) recovery procedure in fact incomplete?

[ovirt-users] Slow first opening web portal when the ovirt-engine.service is restarted

2019-05-14 Thread aleksey . maksimov
Hello oVirt guru`s ! oVirt Engine Version: 4.0.4.4-1.el7.centos After restarting the ovirt-engine.service, the web login page is available after a few seconds. That's good. But when trying the first login, the portal web page open for 2-3 minutes All subsequent logins are fast. The question

[ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-14 Thread aleksey . maksimov
Hello oVirt guru`s! My Hosted Engine VM located on a dedicated LUN FC Storage. I do daily data backups (on NFS share) with the command: /usr/bin/engine-backup --mode=backup --scope=all --file=$BcpFileName.xz --log=$BcpFileName.log --archive-compressor=xz --files-compressor=None However, I

[ovirt-users] Re: Correct recovery procedure of the oVirt Hosted Engine 4.0

2019-05-14 Thread aleksey . maksimov
Weird. The RHV4 guides not contain the information that we need to clean the database from old storage domain before running the command engine-setup.What specific actions do we need?Eventually I want to get a full recovery plan at the moment for oVirt 4.0. 05.10.2016, 12:07, "Simone Tiraboschi" : 

[ovirt-users] Re: Slow first opening web portal when the ovirt-engine.service is restarted

2019-05-14 Thread aleksey . maksimov
Any thoughts on this? I found the systemd service example for a warm start: https://github.com/geertj/ravstack/blob/master/share/ovirt-warmup.service This is a good solution? 03.10.2016, 09:35, "aleksey.maksi...@it-kb.ru" : > Hello oVirt guru`s ! > > oVirt Engine Version: 4.0.4.4-1.el7.centos

[ovirt-users] Re: Slow first opening web portal when the ovirt-engine.service is restarted

2019-05-14 Thread aleksey . maksimov
Thank you, Sandro 03.10.2016, 15:48, "Sandro Bonazzola" : >> But now the question arises, in what cases can be a helpful >> ovirt-warmup.service >> (https://github.com/geertj/ravstack/blob/master/share/ovirt-warmup.service) ? > > No idea, I guess ravstack developer wanted to ensure

[ovirt-users] Re: Slow first opening web portal when the ovirt-engine.service is restarted

2019-05-14 Thread aleksey . maksimov
Wow. I have installed and enabled the service on Hosted Engine VM: # yum -y install haveged # service haveged start # systemctl enable haveged.service # service haveged status Redirecting to /bin/systemctl status  haveged.service ● haveged.service - Entropy Daemon based on the HAVEGE algorithm   

[ovirt-users] Re: oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2019-05-14 Thread aleksey . maksimov
Yes. Of course. Here are my configs. = # cat /etc/ovirt-engine/aaa/ovirt-sso.conf RewriteEngine on RewriteCond %{LA-U:REMOTE_USER} ^(.*)$ RewriteRule ^(.*)$ - [L,NS,P,E=REMOTE_USER:%1]

[ovirt-users] Re: oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2019-05-14 Thread aleksey . maksimov
 Hello, Martin Before I wrote: Kerberos authentication FOR WINDOWS WEB SERVERS working successfully from Internet Explorer & Forefox.Kerberos authentication NOT working with oVirt Web-Portals. I expect that the users opening the oVirt web portal in the browser did not enter a password, and used

[ovirt-users] Re: oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2019-05-14 Thread aleksey . maksimov
Up 30.09.2016, 18:55, "aleksey.maksi...@it-kb.ru" : > Any other ideas? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- IMPORTANT! This message has been scanned for viruses and phishing links. However, it is your

[ovirt-users] Re: oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2019-05-14 Thread aleksey . maksimov
Martin, thanks for the help. It works. 03.10.2016, 15:01, "Martin Perina" : > ​Ahh, this is the issue. Above configuration is valid for oVirt 3.x, but in > 4.0 we have quite new OAuth base SSO, so you need to use following > configuration: > >

[ovirt-users] Re: oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2019-05-14 Thread aleksey . maksimov
 > network.negotiate-auth.delegation-uris = .ad.holding.com > network.negotiate-auth.trusted-uris = .ad.holding.com Yes. Configured The URL https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api in IE and Firefox opens without problems and without password prompts But when opening links from

[ovirt-users] Re: oVirt HE 4.2.6 - Cannot upload a QCOW2 disk image via oVirt Administration Portal

2018-10-15 Thread Aleksey Maksimov
Hello, Nir Thank you, we will wait for the release of version 4.2.7. And special thanks for the workaround. PS: I was able to load the disk image after I converted it to RAW format ___ Users mailing list -- users@ovirt.org To unsubscribe send an email

[ovirt-users] oVirt HE 4.2.6 - Cannot upload a QCOW2 disk image via oVirt Administration Portal

2018-10-13 Thread Aleksey Maksimov
Hello, oVirt Team I have oVirt Hosted Engine 4.2.6.4-1.el7 I cannot upload a QCOW2 disk image via oVirt Administration Portal (Storage\Disks\Upload). "Test Connection" in upload disk dialog works but the upload is changed to "Paused by System" after upload ~8GB from 30GB disk

[ovirt-users] Re: oVirt 4.2.5 : VM snapshot creation does not work : command HSMGetAllTasksStatusesVDS failed: Could not acquire resource

2018-08-17 Thread Aleksey Maksimov
Hello Nir Many thanks for your help. The problem is solved. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct:

[ovirt-users] Re: oVirt node 4.2.x - custom multipath.conf and external storage availability

2018-08-13 Thread Aleksey Maksimov
Hello Roberto I solved a similar problem by adding an additional line "# VDSM PRIVATE" to the beginning of the file /etc/multipath.conf For example, the beginning of the file looks like this: # VDSM REVISION 1.3 # VDSM PRIVATE … This prevents configuration overwriting.

[ovirt-users] oVirt 4.2.5 : VM snapshot creation does not work : command HSMGetAllTasksStatusesVDS failed: Could not acquire resource

2018-08-13 Thread Aleksey Maksimov
Hello We use oVirt 4.2.5.2-1.el7 (Hosted engine / 4 hosts in cluster / about twenty virtual machines) Virtual machine disks are located on the Data Domain from FC SAN. Snapshots of all virtual machines are created normally. But for one virtual machine, we can not create a snapshot. When we try

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-14 Thread aleksey . maksimov
Derek, thank you for participating. In the end, I completed the task (OVA imported). The root of the problem is that I tried to use the import with thin provision. But there is a known issue https://bugzilla.redhat.com/show_bug.cgi?id=1382404 Workaround: Import VM from OVA as preallocated It's

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-13 Thread aleksey . maksimov
No. The problem is not solved. I still can not import OVA in oVirt. And the problem is not a lack of disk space. 13.12.2016, 18:58, "Derek Atkins" : > Hi, > > aleksey.maksi...@it-kb.ru writes: > >>  # LIBGUESTFS_BACKEND=direct virt-v2v -v -x -i ova >>  

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-13 Thread aleksey . maksimov
Engine - oVirt Engine Version: 4.0.5.5-1.el7.centos (CentOS 7.2)All Hosts:OS Version:RHEL - 7 - 2.1511.el7.centos.2.10OS Description:CentOS Linux 7 (Core)Kernel Version:3.10.0 - 327.36.3.el7.x86_64KVM Version:2.3.0 - 31.el7.16.1LIBVIRT Version:libvirt-2.0.0-10.el7_3.2VDSM

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-13 Thread aleksey . maksimov
1. No. This is an unacceptable option for me2. No. This is my first experience3. Versions where? On Engine or on Host ?4. Yes.  13.12.2016, 13:03, "Shahar Havivi" :Thanks you,Several questions:1. did you try to import the disk target as preallocate?2. did you try to import

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
Log attached 13.12.2016, 10:04, "Shahar Havivi" :Please attach the log and will see what the error is. On Tue, Dec 13, 2016 at 9:01 AM, wrote:Preallocated ?I'm trying to import image of virtual appliance "HP 3PAR Virtual Service Processor"This

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
Preallocated ?I'm trying to import image of virtual appliance "HP 3PAR Virtual Service Processor"This virtual machine has drive 256GB. But really, this is a 40GB disk never grows. I don't want to waste that much disk space. There is no other way ? 13.12.2016, 09:53, "Shahar Havivi"

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
 All my Data-Domains - FC SAN. Not ISCSI.  13.12.2016, 09:41, "Shahar Havivi" :What is the type of the target storage domain that you try to import to?(nfs or iscsi)if its iscsi try to change it to preallocate instead of thin-provision,also please attach the engine log if you

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
# LIBGUESTFS_BACKEND=direct virt-v2v -v -x -i ova /tmp/rhel_Vsp-4.4.0.GA-53.ova -of raw -o null fsync /dev/sda guestfsd: main_loop: proc 282 (internal_autosync) took 0.01 seconds libguestfs: trace: internal_autosync = 0 libguestfs: sending SIGTERM to process 3338 libguestfs: trace: shutdown

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
-bash: annotate-output: command not found 12.12.2016, 21:26, "Derek Atkins" : > Hi, > > What happened when you ran the virt-v2v command I suggested? > > -derek > > On Mon, December 12, 2016 12:32 pm, aleksey.maksi...@it-kb.ru wrote: >>  I mount 5TB nfs-share to my host and tried

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
I mount 5TB nfs-share to my host and tried to import OVA from this mount-point. Exact same error. Do the import process attempts to use 256G inside the Engine virtual machine ??? 12.12.2016, 18:01, "aleksey.maksi...@it-kb.ru" : > 1.2G is real OVA image size. > 256G is

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
1.2G is real OVA image size. 256G is virtual disk size. Could this be a problem? But before I start the import, in the settings I choose "Thin provision" (see the attached screenshot) 12.12.2016, 17:47, "aleksey.maksi...@it-kb.ru" : > Hi Derek > > # df -H /tmp/ > >

Re: [ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
Hi Derek # df -H /tmp/ Filesystem Size Used Avail Use% Mounted on /dev/cciss/c0d0p2 53G 5.7G 45G 12% / But my OVA file size - 1.2G 12.12.2016, 17:26, "Derek Atkins" : > Hi, > > Did you perhaps run out of disk space in /tmp? I'm not sure where the >

[ovirt-users] How can I import VMWare OVA file to oVirt 4.0?

2016-12-12 Thread aleksey . maksimov
Hello oVirt guru`s! In the process of importing from OVA file (from /tmp/rhel_Vsp-4.4.0.GA-53.ova in one of hosts) VM first appears in the web console, then disappears. In the oVirt Engine log: ... 2016-12-12 16:55:20,209 INFO 

Re: [ovirt-users] How to notify cluster nodes after "engine-config --set IPTablesConfigSiteCustom..." ?

2016-11-24 Thread aleksey . maksimov
Thank you Didi. The proposed method works. I described my experience here: https://blog.it-kb.ru/2016/11/24/extension-of-iptables-add-custom-rules-on-the-ovirt-4-0-hosts/ 23.11.2016, 16:12, "Yedidyah Bar David" : > On Wed, Nov 23, 2016 at 1:54 PM,

Re: [ovirt-users] How to notify cluster nodes after "engine-config --set IPTablesConfigSiteCustom..." ?

2016-11-23 Thread aleksey . maksimov
"As I wrote there, you can also do this manually" How? 23.11.2016, 14:23, "Yedidyah Bar David" : > On Wed, Nov 23, 2016 at 12:51 PM, wrote: >>  Hi Didi! >> >>  https://www.mail-archive.com/users@ovirt.org/msg37193.html >> >>  "Move to maintenance and

Re: [ovirt-users] How to notify cluster nodes after "engine-config --set IPTablesConfigSiteCustom..." ?

2016-11-23 Thread aleksey . maksimov
Hi Didi! https://www.mail-archive.com/users@ovirt.org/msg37193.html "Move to maintenance and reinstall" to add the iptables rules ? Are you serious? There is no other way (without reinstalling the hosts) ? 23.11.2016, 13:07, "Yedidyah Bar David" : > On Wed, Nov 23, 2016 at

Re: [ovirt-users] How to notify cluster nodes after "engine-config --set IPTablesConfigSiteCustom..." ?

2016-11-23 Thread aleksey . maksimov
Hmm. I just rebooted the host, but the iptables rules have not been updated :( On Engine server my custom iptables rules are visible: # engine-config --get IPTablesConfigSiteCustom IPTablesConfigSiteCustom: -A INPUT -p tcp --dport 2301 -j ACCEPT -m comment --comment 'HPE System Management

[ovirt-users] oVirt 4.0 Reporting

2016-10-29 Thread aleksey . maksimov
Hello oVirt guru`s! In the first half of 2016 was the following information: http://lists.ovirt.org/pipermail/users/2016-June/040549.html Are there any news about the built-in oVirt 4.0 reporting mechanism? Is there any chance that we will see reports in the oVirt web console?

Re: [ovirt-users] Active Directory domain authorization in oVirt Hosted Engine guest OS

2016-10-20 Thread aleksey . maksimov
Thank You for the advice, Karli Problem solved here: https://lists.fedorahosted.org/archives/list/sssd-us...@lists.fedorahosted.org/thread/NDBFLJ774A2TUWC65CHRQ5XVL3DGVMQR/ Again sorry for offtopic 19.10.2016, 15:23, "Karli Sjöberg" : > On Wed, 2016-10-19 at 13:48 +0300,

[ovirt-users] Active Directory domain authorization in oVirt Hosted Engine guest OS

2016-10-19 Thread aleksey . maksimov
Hello oVirt guru`s! I'm sorry for possible offtopic, but I do not know where to seek help. I want to set up Active Directory domain authorization in oVirt Hosted Engine guest OS. For this I use SSSD as described here:

[ovirt-users] RE > Multiple export domains limit?

2016-10-07 Thread aleksey . maksimov
Hello oVirt guru`s! http://lists.ovirt.org/pipermail/users/2015-November/036056.html Is there a progress on this issue? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-06 Thread aleksey . maksimov
Simone, thank you for your work. We will wait for the updates. 06.10.2016, 09:55, "Simone Tiraboschi" : > On Thu, Oct 6, 2016 at 7:32 AM, wrote: >> Hi Simone. >> When can we expect a new version of the engine-backup with built-in cleaning >>

Re: [ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-05 Thread aleksey . maksimov
Hi Simone. When can we expect a new version of the engine-backup with built-in cleaning helper? 05.10.2016, 13:52, "Simone Tiraboschi" : > On Wed, Oct 5, 2016 at 12:40 PM, wrote: >> Ouch. It is beyond my understanding. >> >> Thus, it appears that

Re: [ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-05 Thread aleksey . maksimov
Ouch. It is beyond my understanding. Thus, it appears that described in the RHV4 guide (https://access.redhat.com/documentation/en/red-hat-virtualization/4.0/single/self-hosted-engine-guide/#sect-Restoring_SHE_bkup) recovery procedure in fact incomplete?

Re: [ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-05 Thread aleksey . maksimov
Weird. The RHV4 guides not contain the information that we need to clean the database from old storage domain before running the command engine-setup.What specific actions do we need?Eventually I want to get a full recovery plan at the moment for oVirt 4.0. 05.10.2016, 12:07, "Simone Tiraboschi"

Re: [ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-05 Thread aleksey . maksimov
Well. Then, in the case of conditions: 1) the vm is not available anymore due to storage corruption 2) an empty shared storage is available 3) engine backup exists 4) all VMs still running on the hosts in the cluster The recovery plan will be like this (as I understand it): 1) On all the

[ovirt-users] Correct recovery procedure of the oVirt Hosted Engine 4.0

2016-10-05 Thread aleksey . maksimov
Hello oVirt guru`s! My Hosted Engine VM located on a dedicated LUN FC Storage. I do daily data backups (on NFS share) with the command: /usr/bin/engine-backup --mode=backup --scope=all --file=$BcpFileName.xz --log=$BcpFileName.log --archive-compressor=xz --files-compressor=None However, I

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-10-04 Thread aleksey . maksimov
Martin, thanks for the help. It works. 03.10.2016, 15:01, "Martin Perina" : > ​Ahh, this is the issue. Above configuration is valid for oVirt 3.x, but in > 4.0 we have quite new OAuth base SSO, so you need to use following > configuration: > >

Re: [ovirt-users] Slow first opening web portal when the ovirt-engine.service is restarted

2016-10-03 Thread aleksey . maksimov
Thank you, Sandro 03.10.2016, 15:48, "Sandro Bonazzola" : >> But now the question arises, in what cases can be a helpful >> ovirt-warmup.service >> (https://github.com/geertj/ravstack/blob/master/share/ovirt-warmup.service) ? > > No idea, I guess ravstack developer wanted

Re: [ovirt-users] Slow first opening web portal when the ovirt-engine.service is restarted

2016-10-03 Thread aleksey . maksimov
Wow. I have installed and enabled the service on Hosted Engine VM: # yum -y install haveged # service haveged start # systemctl enable haveged.service # service haveged status Redirecting to /bin/systemctl status  haveged.service ● haveged.service - Entropy Daemon based on the HAVEGE algorithm   

Re: [ovirt-users] Slow first opening web portal when the ovirt-engine.service is restarted

2016-10-03 Thread aleksey . maksimov
Any thoughts on this? I found the systemd service example for a warm start: https://github.com/geertj/ravstack/blob/master/share/ovirt-warmup.service This is a good solution? 03.10.2016, 09:35, "aleksey.maksi...@it-kb.ru" : > Hello oVirt guru`s ! > > oVirt Engine

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-10-03 Thread aleksey . maksimov
Yes. Of course. Here are my configs. = # cat /etc/ovirt-engine/aaa/ovirt-sso.conf RewriteEngine on RewriteCond %{LA-U:REMOTE_USER} ^(.*)$ RewriteRule ^(.*)$ - [L,NS,P,E=REMOTE_USER:%1]

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-10-03 Thread aleksey . maksimov
 > network.negotiate-auth.delegation-uris = .ad.holding.com > network.negotiate-auth.trusted-uris = .ad.holding.com Yes. Configured The URL https://kom-ad01-ovirt1.ad.holding.com/ovirt-engine/api in IE and Firefox opens without problems and without password prompts But when opening links from

[ovirt-users] Slow first opening web portal when the ovirt-engine.service is restarted

2016-10-03 Thread aleksey . maksimov
Hello oVirt guru`s ! oVirt Engine Version: 4.0.4.4-1.el7.centos After restarting the ovirt-engine.service, the web login page is available after a few seconds. That's good. But when trying the first login, the portal web page open for 2-3 minutes All subsequent logins are fast. The question

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-10-03 Thread aleksey . maksimov
 Hello, Martin Before I wrote: Kerberos authentication FOR WINDOWS WEB SERVERS working successfully from Internet Explorer & Forefox.Kerberos authentication NOT working with oVirt Web-Portals. I expect that the users opening the oVirt web portal in the browser did not enter a password, and used

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-10-02 Thread aleksey . maksimov
Up 30.09.2016, 18:55, "aleksey.maksi...@it-kb.ru" : > Any other ideas? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-09-30 Thread aleksey . maksimov
Any other ideas? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-09-30 Thread aleksey . maksimov
# kinit aleksey Password for alek...@ad.holding.com: *** # klist Ticket cache: KEYRING:persistent:0:krb_ccache_9W86VN9 Default principal: alek...@ad.holding.com Valid starting Expires Service principal 09/30/2016 16:50:32 10/01/2016 02:50:32

Re: [ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-09-30 Thread aleksey . maksimov
# kinit -V -k -t /etc/httpd/s-oVirt-Krb.keytab HTTP/kom-ad01-ovirt1.ad.holding.com Using existing cache: persistent:0:0 Using principal: HTTP/kom-ad01-ovirt1.ad.holding@ad.holding.com Using keytab: /etc/httpd/s-oVirt-Krb.keytab Authenticated to Kerberos v5 # klist Ticket cache:

[ovirt-users] oVirt 4.0.4 and Active Directory Kerberos SSO for Administration/User Portal. Troubleshooting

2016-09-30 Thread aleksey . maksimov
Hello oVirt guru`s! I set up oVirt integration with Active Directory LDAP according to the manual:

Re: [ovirt-users] ovirt-engine-extension-aaa-ldap-setup > [ ERROR ] Invalid CA certificate: unknown error (_ssl.c:2988)

2016-09-28 Thread aleksey . maksimov
Yes. You're right. Thank you. > "Please select method to obtain PEM encoded CA certificate" > > File means the PEM file not the jks file. The jks is created by > aaa-ldap-setup. ___ Users mailing list Users@ovirt.org

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-28 Thread aleksey . maksimov
Robert, you're right. Thanks for clarifying. 28.09.2016, 15:10, "Robert Story" : > On Tue, 27 Sep 2016 13:22:29 -0400 (EDT) Michal wrote: > MS> > On 27 Sep 2016, at 19:12, aleksey.maksi...@it-kb.ru wrote: > MS> > > MS> > I'm afraid that in the future OS time may get out of

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
Thank you 27.09.2016, 20:38, "Michal Skrivanek" : > kvmclock is the most accurate clock in Linux guests. Once you hit a bug we > can take a look at something, but until then I do not see a reason to modify > anything ___ Users

[ovirt-users] ovirt-engine-extension-aaa-ldap-setup > [ ERROR ] Invalid CA certificate: unknown error (_ssl.c:2988)

2016-09-27 Thread aleksey . maksimov
Hello oVirt guru's! I want to configure MS Active Directory authentication for oVirt web UI. I configured an External LDAP Provider in accordance with the instructions: Link #1)

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
No. At the moment I have no sync-time errors. I'm just asking hypothetically 27.09.2016, 20:22, "Michal Skrivanek" : >>  On 27 Sep 2016, at 19:12, aleksey.maksi...@it-kb.ru wrote: >> >>  I'm afraid that in the future OS time may get out of sync because of >> kvm-clock >>  

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
I'm afraid that in the future OS time may get out of sync because of kvm-clock And as a result Kerberos may stop working I hope I explained clearly 27.09.2016, 19:59, "Michal Skrivanek" : >>  On 27 Sep 2016, at 18:57, aleksey.maksi...@it-kb.ru wrote: >> >>  Michal, please,

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
Michal, please, read my first message. I have 3 times wrote that the NTP client works for me. The question is not that. The question is how to disable kvm-clock for a virtual machine? Do I have to do it at all? If you want, how to do it correctly? My hypervisors OS - CentOS 7.2 27.09.2016,

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
Yaniv, I do not understand how to do it. You can tell steps how to do it? 27.09.2016, 18:53, "Yaniv Dary" : > You can do that from the edit VM dialog. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
I think that the NTP-client (chrony) in guest OS may conflict with the kvm-clock (vm guest OS time sync from vm-host). Do I need to turn off kvm-clock in virtual machine properties? And how to do it? What is not clear in my question? 27.09.2016, 18:24, "aleksey.maksi...@it-kb.ru"

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
I wrote that I had set up the NTP client. The question is not that.. 27.09.2016, 17:56, "Yaniv Dary" : > Why not use ntp? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-27 Thread aleksey . maksimov
No ideas? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Scheduling policy for oVirt cluster "vm_evenly_distributed"

2016-09-27 Thread aleksey . maksimov
Hi Artem. Today I updated oVirt to version 4.0.4.Now balancing "vm_evenly_distributed" works fine.Thank you for participating. 27.09.2016, 10:36, "Artyom Lukianov" :Can you please show the screenshot from the clusters->edit cluster-> scheduling policy and also specify what

Re: [ovirt-users] Scheduling policy for oVirt cluster "vm_evenly_distributed"

2016-09-27 Thread aleksey . maksimov
These parameters can be seen in the screenshot in my first message 27.09.2016, 09:51, "Artyom Lukianov" : > Please provide all policy parameters(HighVmCount, SpmVmGrace and > MigrationThreshold) ___ Users mailing list

Re: [ovirt-users] How can I to add RAM to Hosted Engine VM?

2016-09-26 Thread aleksey . maksimov
ds, >>> Logan >>> >>> - On Sep 24, 2016, at 11:50 AM, Logan Kuhn log...@wolfram.com wrote: >>> >>> | I believe you can do it by editing this file: >>> | /var/run/ovirt-hosted-engine-ha/vm.conf and then restarting the vm >>> | >>>

[ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-26 Thread aleksey . maksimov
Hello oVirt guru`s! I want to configure Kerberos authentication (via MS Active Directory) for the oVirt portal. So I need to properly configure the time synchronization for my Hosted Engine VM. I set up chronyd service in a HE VM for time synchronization from Active Directory domain

[ovirt-users] Scheduling policy for oVirt cluster "vm_evenly_distributed"

2016-09-26 Thread aleksey . maksimov
Hello oVirt guru`s! oVirt Engine Version: 4.0.3-1.el7.centos I test load balancing (Scheduling policy for oVirt cluster) I created a copy of the policy "vm_evenly_distributed" (see My_vm_evenly_distributed.png) The policy specified limit 2 VMs on the host. I have a 4 host in oVirt cluster. On

Re: [ovirt-users] How can I to add RAM to Hosted Engine VM?

2016-09-25 Thread aleksey . maksimov
the vm> |> | Regards,> | Logan> |> | - On Sep 24, 2016, at 10:13 AM, aleksey maksimov aleksey.maksi...@it-kb.ru> | wrote:> |> || Hello oVirt guru`s !> ||> || How can I to add RAM to Hosted Engine VM?> || Solution from "Fix: The recovery flow is:..." in>

Re: [ovirt-users] How can I to add RAM to Hosted Engine VM?

2016-09-24 Thread aleksey . maksimov
gards, > Logan > > - On Sep 24, 2016, at 11:50 AM, Logan Kuhn log...@wolfram.com wrote: > > | I believe you can do it by editing this file: > | /var/run/ovirt-hosted-engine-ha/vm.conf and then restarting the vm > | > | Regards, > | Logan > | > | - On Sep 2

Re: [ovirt-users] DeprecationWarning: vdscli uses xmlrpc. since ovirt 3.6 xmlrpc is deprecated, please use vdsm.jsonrpcvdscli

2016-09-18 Thread aleksey . maksimov
https://bugzilla.redhat.com/show_bug.cgi?id=1377069 18.09.2016, 10:09, "Roy Golan" : > On 18 September 2016 at 09:48, wrote: >> Thanks Roy >> >> But if I'm going to redirect the output of the hosted-engine command to >> /dev/null, I can not identify

Re: [ovirt-users] DeprecationWarning: vdscli uses xmlrpc. since ovirt 3.6 xmlrpc is deprecated, please use vdsm.jsonrpcvdscli

2016-09-18 Thread aleksey . maksimov
Thanks Roy But if I'm going to redirect the output of the hosted-engine command to /dev/null, I can not identify the possible problem of the command :( It may be possible exclude DeprecationWarning from the code in next version 4.0.4 :) ? 18.09.2016, 09:27, "Roy Golan" : >

[ovirt-users] DeprecationWarning: vdscli uses xmlrpc. since ovirt 3.6 xmlrpc is deprecated, please use vdsm.jsonrpcvdscli

2016-09-17 Thread aleksey . maksimov
Hello oVirt guru`s ! Every time I call the commands: * hosted-engine --set-maintenance --mode=global * hosted-engine --set-maintenance --mode=none The message appears: /usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py:15: DeprecationWarning: vdscli uses xmlrpc.

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-16 Thread aleksey . maksimov
"your VM would be killed uncleanly." This is not a good idea, I think 16.09.2016, 17:14, "Michal Skrivanek" : >>  On 16 Sep 2016, at 16:02, aleksey.maksi...@it-kb.ru wrote: >> >>  So, colleagues. >>  I again tested the Fencing and now I think that my host-server

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-16 Thread aleksey . maksimov
Тested. If I run 'shutdown -h now' on host with running HA VM (not HostedEngine VM)... in oVirt web-console appears event: Sep 16, 2016 5:13:18 PM VM KOM-AD01-PBX02 is down. Exit message: User shut down from within the guest HA VM is turned off and will not start on another host. This

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-16 Thread aleksey . maksimov
So, colleagues. I again tested the Fencing and now I think that my host-server power-button (physically or through ILO) sends a KILL-command to the host OS (and as a result to VM) This journald log in my guest OS when I press the power-button on the host: ... Sep 16 16:19:27 KOM-AD01-PBX02

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-16 Thread aleksey . maksimov
Hi Simone.Exactly.Now I'll put the journald on the guest and try to understand how the guest off. 16.09.2016, 16:25, "Simone Tiraboschi" :  On Fri, Sep 16, 2016 at 3:13 PM, Michal Skrivanek wrote: On 16 Sep 2016, at 15:05, Gianluca Cecchi

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-16 Thread aleksey . maksimov
There are more ideas? 15.09.2016, 14:40, "aleksey.maksi...@it-kb.ru" : > Martin, I physically turned off the server through the iLO2. See screenshots. > I did not touch Virtual Machine (KOM-AD01-PBX02) at the same time. > The virtual machine has been turned on at the

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-15 Thread aleksey . maksimov
Martin, I physically turned off the server through the iLO2. See screenshots. I did not touch Virtual Machine (KOM-AD01-PBX02) at the same time. The virtual machine has been turned on at the time when the host shut down. 15.09.2016, 14:27, "Martin Perina" : > Hi, > > I found

Re: [ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-15 Thread aleksey . maksimov
Hi Martin.I have a stupid question. Use Watchdog device mandatory to automatically start a virtual machine in host Fencing process? 15.09.2016, 13:43, "Martin Perina" :Hi, could you please share whole engine.log? Thanks Martin Perina  On Thu, Sep 15, 2016 at 12:01 PM,

[ovirt-users] oVirt 4.0.3 (Hosted Engine) - High Availability VM not restart after auto-fencing of host.

2016-09-15 Thread aleksey . maksimov
Hello oVirt guru`s ! I have oVirt Hosted Engine 4.0.3-1.el7.centos on two CentOS 7.2 hosts (HP ProLiant DL 360 G5) connected to shared FC SAN Storage. 1. I configured Power Management for the Hosts (successfully added Fencing Agent for iLO2 from my hosts) 2. I created new VM (KOM-AD01-PBX02)

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-14 Thread aleksey . maksimov
 Problem solved.The cause of the problem was really in the fact that there was no global proxy settings in yum.confThank you all! 14.09.2016, 13:24, "aleksey.maksi...@it-kb.ru" :Hmm..I'll try.How can I call the forced update checking process for oVirt, as well as it

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-14 Thread aleksey . maksimov
Hmm..I'll try.How can I call the forced update checking process for oVirt, as well as it happens every night ? 14.09.2016, 13:05, "Gianluca Cecchi" :On Wed, Sep 14, 2016 at 10:40 AM, wrote:Yesterday I installed the all updates to hosts and

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-14 Thread aleksey . maksimov
Yesterday I installed the all updates to hosts and Hosted Engine (and now I have oVirt Engine Version: 4.0.3-1.el7.centos) But the problem still persists. ==>>> Is this happening consistently or randomly? Consistently. every night. ==>>> Do you have any proxy server defined? Yes. I add to end

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-13 Thread aleksey . maksimov
IPv6 disabled in my ifcfg files # cat /etc/sysconfig/network-scripts/ifcfg-ovirtmgmt | grep IPV6 IPV6INIT=no And running the command "yum update" manually operates successfully.  13.09.2016, 22:25, "Gianluca Cecchi" :On Tue, Sep 13, 2016 at 10:59 AM,

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-13 Thread aleksey . maksimov
Hi oVirt guru`s! # getent ahosts mirrorlist.centos.org 216.176.179.218 STREAM mirrorlist.centos.org216.176.179.218 DGRAM216.176.179.218 RAW67.219.148.138  STREAM67.219.148.138  DGRAM67.219.148.138  RAW85.236.43.108   STREAM85.236.43.108   DGRAM85.236.43.108   RAW212.69.166.138 

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-13 Thread aleksey . maksimov
nslookup resolves names on the engine and hosts without ipv6 address: # nslookup mirrorlist.centos.org Server: 10.1.0.10 Address:10.1.0.10#53 Non-authoritative answer: Name: mirrorlist.centos.org Address: 67.219.148.138 Name: mirrorlist.centos.org Address: 85.236.43.108

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-12 Thread aleksey . maksimov
Yesterday I changed the settings the host to: net.ipv6.conf.all.disable_ipv6 = 1net.ipv6.conf.default.disable_ipv6 = 1 I deleted the last two lines in /etc/sysctl.conf and rebooted host. Tonight - problem repeated: 2016-09-13 01:11:13 ERROR otopi.context context._executeMethod:151 Failed to

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-12 Thread aleksey . maksimov
My /etc/sysctl.conf is: net.ipv6.conf.all.disable_ipv6 = 1net.ipv6.conf.default.disable_ipv6 = 1net.ipv6.conf.lo.disable_ipv6 = 0net.ipv6.conf.ovirtmgmt.disable_ipv6 = 0 Last two lines was added for http://lists.ovirt.org/pipermail/users/2016-July/041443.html My configuration file is bad ??  

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-12 Thread aleksey . maksimov
Ok. I found log-file /var/log/ovirt-engine/host-deploy/ovirt-host-mgmt-20160912020013-kom-ad01-vm31.holding.com-null.log with this: ... 2016-09-12 02:00:13 ERROR otopi.plugins.otopi.packagers.yumpackager yumpackager.error:85 Yum Cannot queue package iproute: Cannot find a valid baseurl for

Re: [ovirt-users] Failed to check for available updates on host * with message 'Command returned failure code 1 during SSH session 'root@*

2016-09-12 Thread aleksey . maksimov
Excuse me. I do not understand. What I should do? The directory /var/log/ovirt-engine/host-deploy many different log files 12.09.2016, 14:59, "Yedidyah Bar David" : > On Mon, Sep 12, 2016 at 11:17 AM, wrote: >>  # yum install iproute >> >>  Loaded

  1   2   >