Re: [Users] Build RPM packages vdm from source code
On Wed, Apr 11, 2012 at 03:25:05PM +0400, ?? wrote: I build vdsm version with commands: git clone git://gerrit.ovirt.org/vdsm ./autogen.sh --system ./configure make clean make rpm make rpm Command make rpm ( and make check) return error: make[3]: Entering directory `/root/rpmbuild/BUILD/vdsm-4.9.6/tests' ../tests/run_tests.sh main.py miscTests.py resourceManagerTests.py processPoolTests.py fileUtilTests.py guestIFTests.py Traceback (most recent call last): File ../tests/testrunner.py, line 192, in module hackVdsmModule() File ../tests/testrunner.py, line 187, in hackVdsmModule import utils File /root/rpmbuild/BUILD/vdsm-4.9.6/vdsm/utils.py, line 40, in module import ethtool ImportError: No module named ethtool Do you have it installed? A recent patch by Ewoud makes a check for this during ./configure , after I get a question sorted out about it, I'd like to take it in. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) === 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) Also, I see connection refused but i am not sure on which address/port is it trying to connect and failing. Do I need to start some service or something. I tried disabling my firewall.. but that doesn't help too. I tried using the VNC console option too but when I select VNC the console option itself gets disabled. All the above I tried on a fedora box with firefox 11 + spice-xpi . I also gave a try with windows IE9 . That also doesnt work. (In IE even after clicking console.. I dont see any activity happening.) -- Regards, Rahul did you install the host from engine, with 'configure iptables' ? is iptables enabled on the host? is the host ip resolveable from client? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
On 04/11/2012 07:49 AM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) === 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) Also, I see connection refused but i am not sure on which address/port is it trying to connect and failing. Do I need to start some service or something. I tried disabling my firewall.. but that doesn't help too. I tried using the VNC console option too but when I select VNC the console option itself gets disabled. All the above I tried on a fedora box with firefox 11 + spice-xpi . I also gave a try with windows IE9 . That also doesnt work. (In IE even after clicking console.. I dont see any activity happening.) Have you tried to run, like this from the shell? SPICEC_LOG_LEVEL=0 firefox Can you please share your ovirt/spice packages versions? I read your previous email and all report looks like: https://bugzilla.redhat.com/show_bug.cgi?id=805552 -- Cheers Douglas ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com wrote: On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) ==**==** ==**= 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::**MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) ==**==** ==**== Also, I see connection refused but i am not sure on which address/port is it trying to connect and failing. Do I need to start some service or something. I tried disabling my firewall.. but that doesn't help too. I tried using the VNC console option too but when I select VNC the console option itself gets disabled. All the above I tried on a fedora box with firefox 11 + spice-xpi . I also gave a try with windows IE9 . That also doesnt work. (In IE even after clicking console.. I dont see any activity happening.) -- Regards, Rahul ==**== did you install the host from engine, with 'configure iptables' ? is iptables enabled on the host? is the host ip resolveable from client? -- Regards, Rahul ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). when you added the host to engine, which ip address/hostname did you use? On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) ==__==__==____= 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) ==__==__==____== Also, I see connection refused but i am not sure on which address/port is it trying to connect and failing. Do I need to start some service or something. I tried disabling my firewall.. but that doesn't help too. I tried using the VNC console option too but when I select VNC the console option itself gets disabled. All the above I tried on a fedora box with firefox 11 + spice-xpi . I also gave a try with windows IE9 . That also doesnt work. (In IE even after clicking console.. I dont see any activity happening.) -- Regards, Rahul ==== did you install the host from engine, with 'configure iptables' ? is iptables enabled on the host? is the host ip resolveable from client? -- Regards, Rahul ==__== -- Regards, Rahul ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
Hi Itamar, My browser with the spice-xpi is running on the same server running the management engine. So I can you ping that private IP address from the client I am trying to connect with spice. On Wed, Apr 11, 2012 at 6:34 PM, Itamar Heim ih...@redhat.com wrote: On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). when you added the host to engine, which ip address/hostname did you use? On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) ==**==** ==__==__==**____= 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::**MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) ==**==** ==__==__==**____== Also, I see connection refused but i am not sure on which address/port is it trying to connect and failing. Do I need to start some service or something. I tried disabling my firewall.. but that doesn't help too. I tried using the VNC console option too but when I select VNC the console option itself gets disabled. All the above I tried on a fedora box with firefox 11 + spice-xpi . I also gave a try with windows IE9 . That also doesnt work. (In IE even after clicking console.. I dont see any activity happening.) -- Regards, Rahul ==** == did you install the host from engine, with 'configure iptables' ? is iptables enabled on the host? is the host ip resolveable from client? -- Regards, Rahul
Re: [Users] Console not coming up .
cc-ing spice-devel to help with this. client has communication to host, which has iptables stopped. error from client seems to be: 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) On 04/11/2012 04:15 PM, Rahul Upadhyaya wrote: Hi Itamar, My browser with the spice-xpi is running on the same server running the management engine. So I can you ping that private IP address from the client I am trying to connect with spice. On Wed, Apr 11, 2012 at 6:34 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). when you added the host to engine, which ip address/hostname did you use? On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) ==__==__==__==__==______= 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::__MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller: Creating a controller connection /tmp/spicec-DtxtfS/spice-xpi 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client
Re: [Users] Console not coming up .
hi Itamar,Spice-devel team, Adding some more info to the issue. I also checked on my host using vdsClient -s 0 list | grep displayPort that there were 6 ports open and listening for my 6 running Vms (5900,5901) [also verified by trying to telnet to that port from my machine containing the engine]. + tried suggestion on this bug report https://bugzilla.redhat.com/show_bug.cgi?id=805552 . That did not help my case. On Wed, Apr 11, 2012 at 6:57 PM, Itamar Heim ih...@redhat.com wrote: cc-ing spice-devel to help with this. client has communication to host, which has iptables stopped. error from client seems to be: 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) On 04/11/2012 04:15 PM, Rahul Upadhyaya wrote: Hi Itamar, My browser with the spice-xpi is running on the same server running the management engine. So I can you ping that private IP address from the client I am trying to connect with spice. On Wed, Apr 11, 2012 at 6:34 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). when you added the host to engine, which ip address/hostname did you use? On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 02:49 PM, Rahul Upadhyaya wrote: Hi Itamar and others, In reference to the problem that I had posted yesterday you (Itamar) had asked for the spice log on my machine. I have attached the spice log that gets generated each time when I start the console (gets generated under ~/.spicec/spicec.log.) ==**__** ==__==__==__==**______**= 1334120373 INFO [1984:1984] Application::main: starting 0.10.1 1334120373 INFO [1984:1984] Application::main: command line: spicec --controller 1334120373 INFO [1984:1984] init_key_map: using evdev mapping 1334120373 INFO [1984:1984] MultyMonScreen::__**MultyMonScreen: platform_win: 73400321 1334120373 INFO [1984:1984] GUI::GUI: 1334120374 INFO [1984:1984] ForeignMenu::ForeignMenu: Creating a foreign menu connection /tmp/SpiceForeignMenu-1984.uds 1334120374 INFO [1984:1984] Controller::Controller:
Re: [Users] Testing LDAP support.
On Tue, 2012-04-10 at 10:55 +0300, Itamar Heim wrote:
On 04/10/2012 04:51 AM, Sharad Mishra wrote:
On Mon, 2012-04-09 at 12:38 -0700, Sharad Mishra wrote:
On Mon, 2012-04-09 at 14:10 -0400, Oved Ourfalli wrote:
When a call is made to construct InitialDirContext with following
settings -
{java.naming.provider.url=ldap://ldapserver.ibm.com:389,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
java.naming.security.principal=uid=1234567,c=us,ou=ldapserver,o=ibm.com,
java.naming.security.authentication=DIGEST-MD5 GSSAPI,
java.naming.security.credentials=password,
java.naming.referral=follow,
java.naming.ldap.attributes.binary=objectGUID}
How do I configure the ovirt test setup on my workstation to use LDAP
for authentication? I looked around webadmin GUI but could not find it.
-Sharad
Can you also attach the jboss log and engine log? (assuming you are
testing it in the ovirt-engine environment).
They can be helpful, as it might be related to some class loading issue
or something similar, and the log might shed light on that.
I think its my setup that is the issue here. I am unable to run
ldapsearch CLI with DIGEST-MD5 protocol. I am not sure how to setup/use
secret key with sasl. I am running my queries against a production ldap
server on which I have user access. I tried to look around on internet
but did not get a good hit.
have you tried the kebreros based authentication with it?
I see it is supposed to have it:
http://publib.boulder.ibm.com/infocenter/lnxinfo/v3r0m0/index.jsp?topic=%2Fliaai%2Fkerberos%2Fliaaikerberos1.htm
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
Hi Itamar, I tried a few more things... I monitored the port traffic using netstat between ovirt-engine(also running browser+spice) and the host(ovirt-node) and I noticed that there is no new connections being made apart from the regular ssh connections when I attempt to start the console. So I think the spice client is unable to get the host IP Address to initiate a connection. Is there a way we can check what IP/hostname spice is using to connect to the host. On Wed, Apr 11, 2012 at 7:17 PM, Itamar Heim ih...@redhat.com wrote: On 04/11/2012 04:41 PM, Rahul Upadhyaya wrote: hi Itamar,Spice-devel team, Adding some more info to the issue. I also checked on my host using vdsClient -s 0 list | grep displayPort that there were 6 ports open and listening for my 6 running Vms (5900,5901) [also verified by trying to telnet to that port from my machine containing the engine]. + tried suggestion on this bug report https://bugzilla.redhat.com/**show_bug.cgi?id=805552https://bugzilla.redhat.com/show_bug.cgi?id=805552. That did not help my case. just to rule this out, can you please check if it tries to connect to port 5900 or 65535? thanks On Wed, Apr 11, 2012 at 6:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: cc-ing spice-devel to help with this. client has communication to host, which has iptables stopped. error from client seems to be: 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) On 04/11/2012 04:15 PM, Rahul Upadhyaya wrote: Hi Itamar, My browser with the spice-xpi is running on the same server running the management engine. So I can you ping that private IP address from the client I am trying to connect with spice. On Wed, Apr 11, 2012 at 6:34 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are fine, its only the console that is giving me problems. Host IP is resolvable. The fedora machine that I tried it actually the localhost (same VM - my ovirt engine is on a VM) where my ovirt-engine resides. As a measure to check if firewall is creating some problems, I stopped the iptables too (I dont think this should be the problem). when you added the host to engine, which ip address/hostname did you use? On Wed, Apr 11, 2012 at 5:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com
Re: [Users] Testing LDAP support.
- Original Message -
From: Sharad Mishra snmis...@linux.vnet.ibm.com
To: Itamar Heim ih...@redhat.com
Cc: Oved Ourfalli ov...@redhat.com, users@ovirt.org
Sent: Wednesday, April 11, 2012 4:53:37 PM
Subject: Re: [Users] Testing LDAP support.
On Tue, 2012-04-10 at 10:55 +0300, Itamar Heim wrote:
On 04/10/2012 04:51 AM, Sharad Mishra wrote:
On Mon, 2012-04-09 at 12:38 -0700, Sharad Mishra wrote:
On Mon, 2012-04-09 at 14:10 -0400, Oved Ourfalli wrote:
When a call is made to construct InitialDirContext with
following
settings -
{java.naming.provider.url=ldap://ldapserver.ibm.com:389,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
java.naming.security.principal=uid=1234567,c=us,ou=ldapserver,o=ibm.com,
java.naming.security.authentication=DIGEST-MD5 GSSAPI,
java.naming.security.credentials=password,
java.naming.referral=follow,
java.naming.ldap.attributes.binary=objectGUID}
How do I configure the ovirt test setup on my workstation to use LDAP
for authentication? I looked around webadmin GUI but could not find
it.
-Sharad
If you are working with an installed oVirt environment, you can use
engine-manage-domains utility in order to add/remove/edit domains.
It will create the krb5.conf file, update database entries, add permissions for
the user you use, and etc.
If, however, you are in a development environment, then currently it is not
easy to run this utility, as it requires some configuration files and jars that
are there when you install the engine, but not there in a development
environment.
So, in that case you'll need to run the following (change the domain name, user
name and user guid):
update vdc_options set option_value = 'your domain' where option_name =
'DomainName';
update vdc_options set option_value = 'your domain:your user@your domain'
where option_name= 'AdUserName';
update vdc_options set option_value = 'your domain:user guid' where
option_name='AdUserId';
update vdc_options set option_value = 'your domain:your password' where
option_name='AdUserPassword';
insert into permissions
(id,role_id,ad_element_id,object_id,object_type_id) values
('choose a random guid','----0001','user
guid','aaa0----123456789aaa',1);
Also, you'll have to create a krb5.conf file, and place it in
$JBOSS_HOME/standalone/configuration
An example for the contents of this file:
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = no
default_tkt_enctypes = arcfour-hmac-md5
udp_preference_limit = 1
[realms]
EXAMPLE.COM = {
kdc = my_host.example.com.:88
}
[domain_realm]
example.com = EXAMPLE.COM
Note that you need to have the following records for your LDAP server, defined
in the DNS:
* LDAP SRV record
* Kerberos SRV record
* PTR record
(You can use dnsmasq if you wish to create those records by yourself - if you
need help with this let me know).
Oved
Can you also attach the jboss log and engine log? (assuming you
are testing it in the ovirt-engine environment).
They can be helpful, as it might be related to some class
loading issue or something similar, and the log might shed
light on that.
I think its my setup that is the issue here. I am unable to run
ldapsearch CLI with DIGEST-MD5 protocol. I am not sure how to
setup/use
secret key with sasl. I am running my queries against a
production ldap
server on which I have user access. I tried to look around on
internet
but did not get a good hit.
have you tried the kebreros based authentication with it?
I see it is supposed to have it:
http://publib.boulder.ibm.com/infocenter/lnxinfo/v3r0m0/index.jsp?topic=%2Fliaai%2Fkerberos%2Fliaaikerberos1.htm
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Console not coming up .
On 04/11/2012 05:13 PM, Rahul Upadhyaya wrote: Hi Itamar, I tried a few more things... I monitored the port traffic using netstat between ovirt-engine(also running browser+spice) and the host(ovirt-node) and I noticed that there is no new connections being made apart from the regular ssh connections when I attempt to start the console. So I think the spice client is unable to get the host IP Address to initiate a connection. Is there a way we can check what IP/hostname spice is using to connect to the host. Id expect it to appear in the spice log. spice folks? can you try opening the console directly without the browser? say, via the ovirt shell console command? On Wed, Apr 11, 2012 at 7:17 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 04:41 PM, Rahul Upadhyaya wrote: hi Itamar,Spice-devel team, Adding some more info to the issue. I also checked on my host using vdsClient -s 0 list | grep displayPort that there were 6 ports open and listening for my 6 running Vms (5900,5901) [also verified by trying to telnet to that port from my machine containing the engine]. + tried suggestion on this bug report https://bugzilla.redhat.com/__show_bug.cgi?id=805552 https://bugzilla.redhat.com/show_bug.cgi?id=805552 . That did not help my case. just to rule this out, can you please check if it tries to connect to port 5900 or 65535? thanks On Wed, Apr 11, 2012 at 6:57 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: cc-ing spice-devel to help with this. client has communication to host, which has iptables stopped. error from client seems to be: 1334120376 INFO [1984:1986] RedPeer::connect_to_peer: Connect failed: Connection refused (111) 1334120376 WARN [1984:1986] RedChannel::run: failed to connect: Connection refused (111) 1334120376 INFO [1984:1984] main: Spice client terminated (exitcode = 3) On 04/11/2012 04:15 PM, Rahul Upadhyaya wrote: Hi Itamar, My browser with the spice-xpi is running on the same server running the management engine. So I can you ping that private IP address from the client I am trying to connect with spice. On Wed, Apr 11, 2012 at 6:34 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 04:00 PM, Rahul Upadhyaya wrote: Hi Itamar, The Host that I have added is a Private IP machine (10.10.x.x) . it does not have a FQDN. I am able to ping and ssh from my management (ovirt-engine node) to the host (Fedora16+VDSM) Iptables is also stopped for the host. Is there some specific port that SPICE requires to connect ? From the engine I am able to create Vms and do other operations on them, its only that the console is not connecting. question is can you ping that private IP address from the client you are trying to connect with spice from (spice opens from client to host running the VM) On Wed, Apr 11, 2012 at 6:19 PM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 04/11/2012 03:48 PM, Rahul Upadhyaya wrote: Hi Itamar, During the installation of the ovirt-engine I have followed the steps as mentioned on your website/wiki. All other functionality are
Re: [Users] [Spice-devel] Console not coming up .
On Wed, 11 Apr 2012 19:43:20 +0530 Rahul Upadhyaya rak...@gmail.com wrote: regular ssh connections when I attempt to start the console. So I think the spice client is unable to get the host IP Address to initiate a connection. Is there a way we can check what IP/hostname spice is using to connect to the host. AFAIK the address which you see in a browser address bar. Regards, Nerijus ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Testing LDAP support.
On Wed, 2012-04-11 at 10:18 -0400, Oved Ourfalli wrote:
- Original Message -
From: Sharad Mishra snmis...@linux.vnet.ibm.com
To: Itamar Heim ih...@redhat.com
Cc: Oved Ourfalli ov...@redhat.com, users@ovirt.org
Sent: Wednesday, April 11, 2012 4:53:37 PM
Subject: Re: [Users] Testing LDAP support.
On Tue, 2012-04-10 at 10:55 +0300, Itamar Heim wrote:
On 04/10/2012 04:51 AM, Sharad Mishra wrote:
On Mon, 2012-04-09 at 12:38 -0700, Sharad Mishra wrote:
On Mon, 2012-04-09 at 14:10 -0400, Oved Ourfalli wrote:
When a call is made to construct InitialDirContext with
following
settings -
{java.naming.provider.url=ldap://ldapserver.ibm.com:389,
java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory,
java.naming.security.principal=uid=1234567,c=us,ou=ldapserver,o=ibm.com,
java.naming.security.authentication=DIGEST-MD5 GSSAPI,
java.naming.security.credentials=password,
java.naming.referral=follow,
java.naming.ldap.attributes.binary=objectGUID}
How do I configure the ovirt test setup on my workstation to use LDAP
for authentication? I looked around webadmin GUI but could not find
it.
-Sharad
If you are working with an installed oVirt environment, you can use
engine-manage-domains utility in order to add/remove/edit domains.
It will create the krb5.conf file, update database entries, add permissions
for the user you use, and etc.
I was able to move around some jar files and config files to finally be
able to run engine-manage-domains to add new domains. First I ran
#./engine-manage-domains -action=list
Manage Domains completed successfully
I did not get any domain, which makes sense since I only have default
setup. then I tried
#./engine-manage-domains -action=add -domain=bluepages.ibm.com
-user=snmis...@us.ibm.com -passwordFile=/tmp/.pwd
where /tmp/.pwd has my ldap password.
I got the following error -
Error: Authentication Failed. Please verify the fully qualified domain
name that is used for authentication is correct.. Problematic domain is:
bluepages.ibm.com Failure while applying Kerberos configuration.
Details: Authentication Failed. Please verify the fully qualified domain
name that is used for authentication is correct.
I also tried -domain=bluepages.ibm.com:389
-Sharad
If, however, you are in a development environment, then currently it is not
easy to run this utility, as it requires some configuration files and jars
that are there when you install the engine, but not there in a development
environment.
So, in that case you'll need to run the following (change the domain name,
user name and user guid):
update vdc_options set option_value = 'your domain' where option_name =
'DomainName';
update vdc_options set option_value = 'your domain:your user@your
domain' where option_name= 'AdUserName';
update vdc_options set option_value = 'your domain:user guid' where
option_name='AdUserId';
update vdc_options set option_value = 'your domain:your password' where
option_name='AdUserPassword';
insert into permissions
(id,role_id,ad_element_id,object_id,object_type_id) values
('choose a random guid','----0001','user
guid','aaa0----123456789aaa',1);
Also, you'll have to create a krb5.conf file, and place it in
$JBOSS_HOME/standalone/configuration
An example for the contents of this file:
[libdefaults]
default_realm = EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = false
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = no
default_tkt_enctypes = arcfour-hmac-md5
udp_preference_limit = 1
[realms]
EXAMPLE.COM = {
kdc = my_host.example.com.:88
}
[domain_realm]
example.com = EXAMPLE.COM
Note that you need to have the following records for your LDAP server,
defined in the DNS:
* LDAP SRV record
* Kerberos SRV record
* PTR record
(You can use dnsmasq if you wish to create those records by yourself - if
you need help with this let me know).
Oved
Can you also attach the jboss log and engine log? (assuming you
are testing it in the ovirt-engine environment).
They can be helpful, as it might be related to some class
loading issue or something similar, and the log might shed
light on that.
I think its my setup that is the issue here. I am unable to run
ldapsearch CLI with DIGEST-MD5 protocol. I am not sure how to
setup/use
secret key with sasl. I am running my queries against a
production ldap
server on which I have user access. I tried to look around on
internet
but did not get a good hit.
have you tried the kebreros based authentication with it?
I see it is supposed to have it:
http://publib.boulder.ibm.com/infocenter/lnxinfo/v3r0m0/index.jsp?topic=%2Fliaai%2Fkerberos%2Fliaaikerberos1.htm
[Users] AUTO: William E Johnson is out of the office (returning 04/16/2012)
I am out of the office until 04/16/2012. I will be out of the office until Monday, April 16, 2012. I will be checking my e-mail periodically. I will not be on Sametime and will be traveling on Thursday, April 12. If you need SWG EP Cloud help please use the TRAC tickets created for your Early Program. If this request pertains to something outside of your normal Early Program requests please contact Irfan Ozair (ioz...@us.ibm.com) or the SWG EP Cloud Help Desk at sepcl...@us.ibm.com. Please cc me on all communications. If you or your customers experience Aventail issues please e-mail me directly and I will forward the e-mail to Aventail support. Thank You, Bill Johnson wejoh...@us.ibm.com Note: This is an automated response to your message Users Digest, Vol 7, Issue 39 sent on 4/11/12 17:26:42. This is the only notification you will receive while this person is away.___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
