Re: [Users] engine Failed to decrypt Data error

2013-01-29 Thread Eli Mesika


- Original Message -
 From: Alon Bar-Lev alo...@redhat.com
 To: Eli Mesika emes...@redhat.com
 Cc: users users@ovirt.org, Dead Horse deadhorseconsult...@gmail.com
 Sent: Monday, January 28, 2013 11:20:30 PM
 Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
 - Original Message -
  From: Eli Mesika emes...@redhat.com
  To: Dead Horse deadhorseconsult...@gmail.com
  Cc: users users@ovirt.org, Alon Bar-Lev alo...@redhat.com
  Sent: Monday, January 28, 2013 11:16:16 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
  
  
  
  - Original Message -
   From: Dead Horse deadhorseconsult...@gmail.com
   To: Alon Bar-Lev alo...@redhat.com
   Cc: users users@ovirt.org, Eli Mesika emes...@redhat.com
   Sent: Monday, January 28, 2013 11:04:53 PM
   Subject: Re: [Users] engine Failed to decrypt Data error
   
   
   psql -U engine -d engine -c select * from vdc_options where
   option_name in ('LocalAdminPassword', 'AdminPassword');
   option_id | option_name |
   
   option_value
   
   | version
   ---++---
   
   
   
   ---+-
   127 | LocalAdminPassword |
   KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
   OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
   Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
   X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
   hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
   general
   7 | AdminPassword |
   AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
   VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
   O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
   40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
   qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
   general
   (2 rows)
  
  Too long , supported values for encryption should be  127
  characters
 
 Why too long? it should be 2048 RSA key.
 And it is exactly 256 decoded.
OK
Didn't you say that practically it should be  256 ?
 
  
  
   
   
   
   
   On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev  alo...@redhat.com
   
   wrote:
   
   
   
   - Original Message -
From: Dead Horse  deadhorseconsult...@gmail.com 
To: Alon Bar-Lev  alo...@redhat.com 
Cc: users  users@ovirt.org , Eli Mesika 
emes...@redhat.com

   
Sent: Monday, January 28, 2013 10:35:34 PM
Subject: Re: [Users] engine Failed to decrypt Data error



   
was in the middle of a fresh engine setup which did not exhibit
the
symptom. However after running: engine-config -s
AdminPassword=interactive and restarting the engine service on
the
clean setup the error message now shows up.

- DHC



   
   OK, at least it is related to the admin password.
   
   Please send me the output of:
   
   psql -U engine -d engine -c select * from vdc_options where
   option_name in ('LocalAdminPassword', 'AdminPassword');
   
   
   Thanks!
   

On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev 
alo...@redhat.com

wrote:





- Original Message -
 From: Dead Horse  deadhorseconsult...@gmail.com 
 To: Alon Bar-Lev  alo...@redhat.com 
 Cc: users  users@ovirt.org , Eli Mesika 
 emes...@redhat.com
  

 Sent: Monday, January 28, 2013 9:46:53 PM
 Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
 

 Current running engine build -- commit:
 61c11aecc40e755d08b6c34c6fe1c0a07fa94de8
 
 ran engine upgrade against the built rpms from that commit.
 
 
 Thus I applied it as an upgrade against prior running build
 --
 commit:
 1eb895355239bbcb7a7ceda172405f0b68f18f35

[Please use plain text mails in lists.]


Can you please patch EncryptionUtils.decrypt() with the
following,
so
I can see what source is? source is encrypted blob, should not
be
a
problem to send it.

if (!StringHelper.isNullOrEmpty(source.trim())) {
KeyStore store = EncryptionUtils.getKeyStore(keyFile, passwd,
certType);
Key key = store.getKey(alias, passwd.toCharArray());
+ log.info (DEBUG001  + source);
   
   
result = decrypt(source, key);


}


 
 
 
 On Mon, Jan 28, 2013 at 1:28 PM, Alon Bar-Lev 
 alo...@redhat.com
 
 wrote:
 
 
 How do you installed the engine? you built?
 Which exact version?
 
 
 

Re: [Users] Cannot run VM. Low disk space on relevant Storage Domain

2013-01-29 Thread Rocky
Hi,

I think you mean Engine-config in oVirt? Just so other people with the
same question goes in the right direction here.

Thanks anyway, you helped me up on the track.

Regards //Ricky


On 2013-01-27 15:31, Dafna Ron wrote:
 you can set the limit of low disk space using rhevm-config

 FreeSpaceCriticalLowInGB: Critical low disk space alert threshold (in
 GB) (Value Type: Integer)
 FreeSpaceLow: Limit of % free disk-space below which it is considered
 low (Value Type: Integer)*
 *
 run rhevm-config --help for more info on how to use the command.

 and note that you need to restart ovirt-engine service after change.


 On 01/27/2013 11:39 AM, Ricky Schneberger wrote:
 Hi,

 I have put up a test environment with oVirt 3.1 and found out (because
 of limited storage) that when trying to run a vm i got Error while
 executing action: Cannot run VM. Low disk space on relevant Storage Domain.

 Disk space on the storage domain is 322GB free (9% of total).

 Can I change these limits? How are they calculated? By percentage?
 I dont use quotas anywhere.

 Regards

 //Ricky


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] engine Failed to decrypt Data error

2013-01-29 Thread Eli Mesika


- Original Message -
 From: Alon Bar-Lev alo...@redhat.com
 To: Eli Mesika emes...@redhat.com
 Cc: users users@ovirt.org, Dead Horse deadhorseconsult...@gmail.com
 Sent: Tuesday, January 29, 2013 10:40:59 AM
 Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
 - Original Message -
  From: Eli Mesika emes...@redhat.com
  To: Alon Bar-Lev alo...@redhat.com
  Cc: users users@ovirt.org, Dead Horse
  deadhorseconsult...@gmail.com
  Sent: Tuesday, January 29, 2013 10:33:04 AM
  Subject: Re: [Users] engine Failed to decrypt Data error
  
  
  
  - Original Message -
   From: Alon Bar-Lev alo...@redhat.com
   To: Eli Mesika emes...@redhat.com
   Cc: users users@ovirt.org, Dead Horse
   deadhorseconsult...@gmail.com
   Sent: Monday, January 28, 2013 11:20:30 PM
   Subject: Re: [Users] engine Failed to decrypt Data error
   
   
   
   - Original Message -
From: Eli Mesika emes...@redhat.com
To: Dead Horse deadhorseconsult...@gmail.com
Cc: users users@ovirt.org, Alon Bar-Lev
alo...@redhat.com
Sent: Monday, January 28, 2013 11:16:16 PM
Subject: Re: [Users] engine Failed to decrypt Data error



- Original Message -
 From: Dead Horse deadhorseconsult...@gmail.com
 To: Alon Bar-Lev alo...@redhat.com
 Cc: users users@ovirt.org, Eli Mesika
 emes...@redhat.com
 Sent: Monday, January 28, 2013 11:04:53 PM
 Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 psql -U engine -d engine -c select * from vdc_options where
 option_name in ('LocalAdminPassword', 'AdminPassword');
 option_id | option_name |
 
 option_value
 
 | version
 ---++---
 
 
 
 ---+-
 127 | LocalAdminPassword |
 KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
 OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
 Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
 X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
 hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
 general
 7 | AdminPassword |
 AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
 VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
 O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
 40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
 qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
 general
 (2 rows)

Too long , supported values for encryption should be  127
characters
   
   Why too long? it should be 2048 RSA key.
   And it is exactly 256 decoded.
  OK
  Didn't you say that practically it should be  256 ?
 
 The encrypted blob is exactly 256 (keysize/8).
 The plain text within that blob is at same length.
 The PKCS#5 padding that we should use (or should have used) takes at
 lease one byte from suffix, hence the 256, but this applies to the
 plain text.
 From the exception we see that the java crypto provider complains we
 provide a block 256 and key size of 2048, so there is something
 wrong with the buffer we pass as it must be =256 bytes.

That raises the chance of bug in the EncryptionUtils code , can you take a look 
?

 
   


 
 
 
 
 On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev 
 alo...@redhat.com
 
 wrote:
 
 
 
 - Original Message -
  From: Dead Horse  deadhorseconsult...@gmail.com 
  To: Alon Bar-Lev  alo...@redhat.com 
  Cc: users  users@ovirt.org , Eli Mesika 
  emes...@redhat.com
  
 
  Sent: Monday, January 28, 2013 10:35:34 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
  
  
  
 
  was in the middle of a fresh engine setup which did not
  exhibit
  the
  symptom. However after running: engine-config -s
  AdminPassword=interactive and restarting the engine
  service
  on
  the
  clean setup the error message now shows up.
  
  - DHC
  
  
  
 
 OK, at least it is related to the admin password.
 
 Please send me the output of:
 
 psql -U engine -d engine -c select * from vdc_options where
 option_name in ('LocalAdminPassword', 'AdminPassword');
 
 
 Thanks!
 
  
  On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev 
  alo...@redhat.com
  
  wrote:
  
  
  
  
  
  - Original Message -
   

Re: [Users] oVirt 3.2 Release delayed

2013-01-29 Thread Gianluca Cecchi
On Tue, Jan 29, 2013 at 12:56 AM, Mike Burns wrote:



 Sorry for the delay in my response. I was travelling last week and am just
 catching up now.

 We'll be delaying the Test Day to Thursday this week.  An official
 announcement will be coming soon for both the Test Day and the Beta.

 Thanks

 Mike

No problem, Mike
One question: is it supposed to work making an update from a nightly
past days to this beta?
For example from 3.2.0-1.20130123.git2ad65d0 based f18 rpm packages to beta.
Or are January nightly packages already ahead in respect with it?

Thanks,
Gianluca
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] ovirt / spice client /connection

2013-01-29 Thread Alex Leonhardt
Hi,

is it possible to change the key combination from Shift + F12 to CTRL+ALT
to release the cursor/mouse ?

Alex


-- 

| RHCE | Senior Systems Engineer | www.vcore.co | www.vsearchcloud.com |
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] engine Failed to decrypt Data error

2013-01-29 Thread Juan Hernandez

On 01/29/2013 10:00 AM, Eli Mesika wrote:



- Original Message -

From: Alon Bar-Lev alo...@redhat.com
To: Eli Mesika emes...@redhat.com
Cc: users users@ovirt.org, Dead Horse deadhorseconsult...@gmail.com
Sent: Tuesday, January 29, 2013 10:40:59 AM
Subject: Re: [Users] engine Failed to decrypt Data error



- Original Message -

From: Eli Mesika emes...@redhat.com
To: Alon Bar-Lev alo...@redhat.com
Cc: users users@ovirt.org, Dead Horse
deadhorseconsult...@gmail.com
Sent: Tuesday, January 29, 2013 10:33:04 AM
Subject: Re: [Users] engine Failed to decrypt Data error



- Original Message -

From: Alon Bar-Lev alo...@redhat.com
To: Eli Mesika emes...@redhat.com
Cc: users users@ovirt.org, Dead Horse
deadhorseconsult...@gmail.com
Sent: Monday, January 28, 2013 11:20:30 PM
Subject: Re: [Users] engine Failed to decrypt Data error



- Original Message -

From: Eli Mesika emes...@redhat.com
To: Dead Horse deadhorseconsult...@gmail.com
Cc: users users@ovirt.org, Alon Bar-Lev
alo...@redhat.com
Sent: Monday, January 28, 2013 11:16:16 PM
Subject: Re: [Users] engine Failed to decrypt Data error



- Original Message -

From: Dead Horse deadhorseconsult...@gmail.com
To: Alon Bar-Lev alo...@redhat.com
Cc: users users@ovirt.org, Eli Mesika
emes...@redhat.com
Sent: Monday, January 28, 2013 11:04:53 PM
Subject: Re: [Users] engine Failed to decrypt Data error


psql -U engine -d engine -c select * from vdc_options where
option_name in ('LocalAdminPassword', 'AdminPassword');
option_id | option_name |

option_value

| version
---++---



---+-
127 | LocalAdminPassword |
KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
general
7 | AdminPassword |
AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
general
(2 rows)


Too long , supported values for encryption should be  127
characters


Why too long? it should be 2048 RSA key.
And it is exactly 256 decoded.

OK
Didn't you say that practically it should be  256 ?


The encrypted blob is exactly 256 (keysize/8).
The plain text within that blob is at same length.
The PKCS#5 padding that we should use (or should have used) takes at
lease one byte from suffix, hence the 256, but this applies to the
plain text.
 From the exception we see that the java crypto provider complains we
provide a block 256 and key size of 2048, so there is something
wrong with the buffer we pass as it must be =256 bytes.


That raises the chance of bug in the EncryptionUtils code , can you take a look 
?


As the exceptions are coming from several different threads that are 
running in parallel I would look for a concurrency problem. In 
particular I would check the Encoding class. It seems to me that it 
uses the Base64.decode(...) method from multiple threads in an unsafe way.
















On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev 
alo...@redhat.com



wrote:



- Original Message -

From: Dead Horse  deadhorseconsult...@gmail.com 
To: Alon Bar-Lev  alo...@redhat.com 
Cc: users  users@ovirt.org , Eli Mesika 
emes...@redhat.com





Sent: Monday, January 28, 2013 10:35:34 PM
Subject: Re: [Users] engine Failed to decrypt Data error






was in the middle of a fresh engine setup which did not
exhibit
the
symptom. However after running: engine-config -s
AdminPassword=interactive and restarting the engine
service
on
the
clean setup the error message now shows up.

- DHC





OK, at least it is related to the admin password.

Please send me the output of:

psql -U engine -d engine -c select * from vdc_options where
option_name in ('LocalAdminPassword', 'AdminPassword');


Thanks!



On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev 
alo...@redhat.com



wrote:





- Original Message -

From: Dead Horse  deadhorseconsult...@gmail.com 
To: Alon Bar-Lev  alo...@redhat.com 
Cc: users  users@ovirt.org , Eli Mesika 
emes...@redhat.com





Sent: Monday, January 28, 2013 9:46:53 PM
Subject: Re: [Users] engine Failed to decrypt Data error







Current running engine build -- commit:

Re: [Users] oVirt 3.2 Test Day

2013-01-29 Thread Dave Neary

Hi Shu,

From my understanding: The 3.2 engine should work fine on F17. To use 
an F17 host as a node, however, you would have to back-port a more 
recent version of libvirt to that which is available on F17.


To those who know: would that be difficult at all? Perhaps we could 
enable that by providing the relevant RPM on the site?


Thanks,
Dave.

On 01/29/2013 02:54 AM, Shu Ming wrote:

A quick questions: Doesn't oVirt 3.2 support FC17? I can only find the
directory for FC18FC19 in the oVirt release repositories.

Mike Burns:

The test day for oVirt 3.2 will be held on Thursday January 31. For
information of the Test Day, please follow:

http://www.ovirt.org/Testing/OvirtTestDay

Thanks

Mike
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users






--
Dave Neary - Community Action and Impact
Open Source and Standards, Red Hat - http://community.redhat.com
Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt 3.2 Test Day

2013-01-29 Thread jvandewege

On 29-1-2013 11:59, Dave Neary wrote:

Hi Shu,

From my understanding: The 3.2 engine should work fine on F17. To use 
an F17 host as a node, however, you would have to back-port a more 
recent version of libvirt to that which is available on F17.


To those who know: would that be difficult at all? Perhaps we could 
enable that by providing the relevant RPM on the site?


I don't know but I used the danken repo for that when I used F17 as 
hosts. I have now switched to F18 and the version of libvirt in the 
standard repos is new enough.


Joop
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] oVirt 3.2 Release delayed

2013-01-29 Thread Mike Burns

On 01/29/2013 04:03 AM, Gianluca Cecchi wrote:

On Tue, Jan 29, 2013 at 12:56 AM, Mike Burns wrote:





Sorry for the delay in my response. I was travelling last week and am just
catching up now.

We'll be delaying the Test Day to Thursday this week.  An official
announcement will be coming soon for both the Test Day and the Beta.

Thanks

Mike


No problem, Mike
One question: is it supposed to work making an update from a nightly
past days to this beta?
For example from 3.2.0-1.20130123.git2ad65d0 based f18 rpm packages to beta.
Or are January nightly packages already ahead in respect with it?


Nightly may be ahead, but they could include things that are not being 
shipped in 3.2.  When we move to beta, we branch the git repo and only 
include changes that are deemed blockers for release.


Mike



Thanks,
Gianluca



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] ovirt / spice client /connection

2013-01-29 Thread Andrew Cathrow

- Original Message - 

 From: Alex Leonhardt alex.t...@gmail.com
 To: oVirt Mailing List users@ovirt.org
 Sent: Tuesday, January 29, 2013 4:07:13 AM
 Subject: [Users] ovirt / spice client /connection

 Hi,

 is it possible to change the key combination from Shift + F12 to
 CTRL+ALT to release the cursor/mouse ?

Use the engine-config utility to change the value for SpiceReleaseCursorKeys 
the default is shift+f12 but it can be easily modified.
Aic



 Alex

 --

 | RHCE | Senior Systems Engineer | www.vcore.co |
 | www.vsearchcloud.com |

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] engine Failed to decrypt Data error

2013-01-29 Thread Alon Bar-Lev


- Original Message -
 From: Juan Hernandez jhern...@redhat.com
 To: Eli Mesika emes...@redhat.com
 Cc: Alon Bar-Lev alo...@redhat.com, users users@ovirt.org
 Sent: Tuesday, January 29, 2013 12:03:05 PM
 Subject: Re: [Users] engine Failed to decrypt Data error
 
 On 01/29/2013 10:00 AM, Eli Mesika wrote:
 
 
  - Original Message -
  From: Alon Bar-Lev alo...@redhat.com
  To: Eli Mesika emes...@redhat.com
  Cc: users users@ovirt.org, Dead Horse
  deadhorseconsult...@gmail.com
  Sent: Tuesday, January 29, 2013 10:40:59 AM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
  - Original Message -
  From: Eli Mesika emes...@redhat.com
  To: Alon Bar-Lev alo...@redhat.com
  Cc: users users@ovirt.org, Dead Horse
  deadhorseconsult...@gmail.com
  Sent: Tuesday, January 29, 2013 10:33:04 AM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
  - Original Message -
  From: Alon Bar-Lev alo...@redhat.com
  To: Eli Mesika emes...@redhat.com
  Cc: users users@ovirt.org, Dead Horse
  deadhorseconsult...@gmail.com
  Sent: Monday, January 28, 2013 11:20:30 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
  - Original Message -
  From: Eli Mesika emes...@redhat.com
  To: Dead Horse deadhorseconsult...@gmail.com
  Cc: users users@ovirt.org, Alon Bar-Lev
  alo...@redhat.com
  Sent: Monday, January 28, 2013 11:16:16 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
  - Original Message -
  From: Dead Horse deadhorseconsult...@gmail.com
  To: Alon Bar-Lev alo...@redhat.com
  Cc: users users@ovirt.org, Eli Mesika
  emes...@redhat.com
  Sent: Monday, January 28, 2013 11:04:53 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
  psql -U engine -d engine -c select * from vdc_options where
  option_name in ('LocalAdminPassword', 'AdminPassword');
  option_id | option_name |
 
  option_value
 
  | version
  ---++---
  
  
  
  ---+-
  127 | LocalAdminPassword |
  KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
  OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
  Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
  X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
  hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
  general
  7 | AdminPassword |
  AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
  VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
  O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
  40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
  qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
  general
  (2 rows)
 
  Too long , supported values for encryption should be  127
  characters
 
  Why too long? it should be 2048 RSA key.
  And it is exactly 256 decoded.
  OK
  Didn't you say that practically it should be  256 ?
 
  The encrypted blob is exactly 256 (keysize/8).
  The plain text within that blob is at same length.
  The PKCS#5 padding that we should use (or should have used) takes
  at
  lease one byte from suffix, hence the 256, but this applies to
  the
  plain text.
   From the exception we see that the java crypto provider complains
   we
  provide a block 256 and key size of 2048, so there is something
  wrong with the buffer we pass as it must be =256 bytes.
 
  That raises the chance of bug in the EncryptionUtils code , can you
  take a look ?
 
 As the exceptions are coming from several different threads that are
 running in parallel I would look for a concurrency problem. In
 particular I would check the Encoding class. It seems to me that it
 uses the Base64.decode(...) method from multiple threads in an
 unsafe way.

Right, we should really need to remove the legacy code.

http://gerrit.ovirt.org/11495
http://gerrit.ovirt.org/11496
http://gerrit.ovirt.org/11497
http://gerrit.ovirt.org/11498

 
 
 
 
 
 
 
 
 
 
  On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev 
  alo...@redhat.com
 
  wrote:
 
 
 
  - Original Message -
  From: Dead Horse  deadhorseconsult...@gmail.com 
  To: Alon Bar-Lev  alo...@redhat.com 
  Cc: users  users@ovirt.org , Eli Mesika 
  emes...@redhat.com
 
 
  Sent: Monday, January 28, 2013 10:35:34 PM
  Subject: Re: [Users] engine Failed to decrypt Data error
 
 
 
 
  was in the middle of a fresh engine setup which did not
  exhibit
  the
  symptom. However after running: engine-config -s
  AdminPassword=interactive and restarting the engine
  service
  on
  the
  clean setup the error 

[Users] node iso installer drops into dracut with Supermicro Virtual CD drive

2013-01-29 Thread Jorick Astrego

Hi,

I'm still having the same problems booting from a virtual CD problems 
with the latest node iso 
(ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso).


The node boots into the installer and then drops into a dracut shell:

dracut-initqueue[488]: Warning: Could not boot.
dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does 
not exist

dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist

dracut:/# blkid
/dev/sr0: UUID=2013-01-28-01-35-21-00 LABEL=ovirt-node-iso 
TYPE=iso9660 PTTYPE=dos


I'll use foreman to deploy it for now but it's making casual testing a 
bit harder.


--
Kind Regards,

Jorick Astrego

Netbulae B.V.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive

2013-01-29 Thread Jorick Astrego

On 01/29/2013 03:31 PM, Alexandre Santos wrote:

Hi,
You should alter your grub command line. This is a bug on Fedora.
Instead of /dev/mapper/live-rw, it should be /dev/sr0, for instance...
Alex


2013/1/29 Jorick Astrego jor...@netbulae.eu:

Hi,

I'm still having the same problems booting from a virtual CD problems with
the latest node iso
(ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso).

The node boots into the installer and then drops into a dracut shell:

dracut-initqueue[488]: Warning: Could not boot.
dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does not
exist
dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist

dracut:/# blkid
/dev/sr0: UUID=2013-01-28-01-35-21-00 LABEL=ovirt-node-iso
TYPE=iso9660 PTTYPE=dos

I'll use foreman to deploy it for now but it's making casual testing a bit
harder.

--
Kind Regards,

Jorick Astrego

Netbulae B.V.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Hi,

Ok I can do that, but how do I do that on boot? I could modify the iso 
but I don't have the normal grub bootscreen so I can edit it.


I tried replacing the CDLABEL parameter in the kernel arguments but this 
gets me nowhere.


You state it's a bug on Fedora, but from a user perspective that doesn't 
matter it just doesn't work properly. And this hasn't worked for 
nearly a year now.


An installer where you have to manually enter parameters on boot in a 
limited time window (a couple of seconds otherwise you have reboot 
again) doesn't make us admins happy.



--
Kind regards,

Jorick Astrego

Netbulae B.V.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive

2013-01-29 Thread Alexandre Santos
I'm also hoping that these issues get solved in the future

2013/1/29 Jorick Astrego jor...@netbulae.eu:
 On 01/29/2013 03:31 PM, Alexandre Santos wrote:

 Hi,
 You should alter your grub command line. This is a bug on Fedora.
 Instead of /dev/mapper/live-rw, it should be /dev/sr0, for instance...
 Alex


 2013/1/29 Jorick Astrego jor...@netbulae.eu:

 Hi,

 I'm still having the same problems booting from a virtual CD problems
 with
 the latest node iso
 (ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso).

 The node boots into the installer and then drops into a dracut shell:

 dracut-initqueue[488]: Warning: Could not boot.
 dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does
 not
 exist
 dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist

 dracut:/# blkid
 /dev/sr0: UUID=2013-01-28-01-35-21-00 LABEL=ovirt-node-iso
 TYPE=iso9660 PTTYPE=dos

 I'll use foreman to deploy it for now but it's making casual testing a
 bit
 harder.

 --
 Kind Regards,

 Jorick Astrego

 Netbulae B.V.


 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users

 Hi,

 Ok I can do that, but how do I do that on boot? I could modify the iso but I
 don't have the normal grub bootscreen so I can edit it.

 I tried replacing the CDLABEL parameter in the kernel arguments but this
 gets me nowhere.

 You state it's a bug on Fedora, but from a user perspective that doesn't
 matter it just doesn't work properly. And this hasn't worked for nearly
 a year now.

 An installer where you have to manually enter parameters on boot in a
 limited time window (a couple of seconds otherwise you have reboot again)
 doesn't make us admins happy.


 --
 Kind regards,

 Jorick Astrego

 Netbulae B.V.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive

2013-01-29 Thread Koch (ovido)


On Tue, 2013-01-29 at 18:22 +0100, Jorick Astrego wrote:
 On 01/29/2013 03:31 PM, Alexandre Santos wrote:

 Hi,
 
 Ok I can do that, but how do I do that on boot? I could modify the iso 
 but I don't have the normal grub bootscreen so I can edit it.
 
 I tried replacing the CDLABEL parameter in the kernel arguments but this 
 gets me nowhere.
 
 You state it's a bug on Fedora, but from a user perspective that doesn't 
 matter it just doesn't work properly. And this hasn't worked for 
 nearly a year now.
 
 An installer where you have to manually enter parameters on boot in a 
 limited time window (a couple of seconds otherwise you have reboot 
 again) doesn't make us admins happy.
 
 

Hi,

You can change boot options using the following steps:
1. Boot from CD
2. Press Tab when you see Start Ovirt Node
3. Change root=live:CDLABEL=ovirt-node-iso to root=live:/dev/sr0



Regards,
René





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[Users] Engine upgrade failure broken in master

2013-01-29 Thread Dead Horse
Commit: 72a51f5e21f38bf259a460948670eac92e97ca24
Breaks engine upgrades:

2013-01-29 12:40:52::ERROR::engine-upgrade::1177::root:: Traceback (most
recent call last):
  File /usr/bin/engine-upgrade, line 1170, in module
main(options)
  File /usr/bin/engine-upgrade, line 1071, in main
if zombieTasksFound():
  File /usr/bin/engine-upgrade, line 766, in zombieTasksFound
msg=Can't get zombie async tasks,
  File /usr/share/ovirt-engine/scripts/common_utils.py, line 459, in
execCmd
env=env,
  File /usr/lib64/python2.7/subprocess.py, line 679, in __init__
errread, errwrite)
  File /usr/lib64/python2.7/subprocess.py, line 1249, in _execute_child
raise child_exception
OSError: [Errno 8] Exec format error

Upgrade was attempted on engine built from commit:
61c11aecc40e755d08b6c34c6fe1c0a07fa94de8

Building from commit: 82bdc46dfdb46b000f67f0cd4e51fc39665bf13b and
upgrading works as expected.

- DHC
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] ovirt / spice client /connection

2013-01-29 Thread Alex Leonhardt

fab, thanks i'll try that


On 01/29/2013 12:24 PM, Andrew Cathrow wrote:

- Original Message -


From: Alex Leonhardtalex.t...@gmail.com
To: oVirt Mailing Listusers@ovirt.org
Sent: Tuesday, January 29, 2013 4:07:13 AM
Subject: [Users] ovirt / spice client /connection
Hi,
is it possible to change the key combination from Shift + F12 to
CTRL+ALT to release the cursor/mouse ?

Use the engine-config utility to change the value for SpiceReleaseCursorKeys the default 
is shift+f12 but it can be easily modified.
Aic




Alex
--
| RHCE | Senior Systems Engineer | www.vcore.co |
| www.vsearchcloud.com |
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Engine upgrade failure broken in master

2013-01-29 Thread Yair Zaslavsky
Looks like the following commits around the async task clearner introduced 
between the two commits you specified - 

e16f21c1a42d418cfb7528b7819d97e576d715f3 
9393178a693cddc8756cf3b21198faa43407ff5d 

Looks like the one that handles the extra character fixes this. 

- Original Message -

 From: Dead Horse deadhorseconsult...@gmail.com
 To: users@ovirt.org users@ovirt.org
 Sent: Tuesday, January 29, 2013 10:19:31 PM
 Subject: [Users] Engine upgrade failure broken in master

 Commit: 72a51f5e21f38bf259a460948670eac92e97ca24
 Breaks engine upgrades:

 2013-01-29 12:40:52::ERROR::engine-upgrade::1177::root:: Traceback
 (most recent call last):
 File /usr/bin/engine-upgrade, line 1170, in module
 main(options)
 File /usr/bin/engine-upgrade, line 1071, in main
 if zombieTasksFound():
 File /usr/bin/engine-upgrade, line 766, in zombieTasksFound
 msg=Can't get zombie async tasks,
 File /usr/share/ovirt-engine/scripts/common_utils.py, line 459, in
 execCmd
 env=env,
 File /usr/lib64/python2.7/subprocess.py, line 679, in __init__
 errread, errwrite)
 File /usr/lib64/python2.7/subprocess.py, line 1249, in
 _execute_child
 raise child_exception
 OSError: [Errno 8] Exec format error

 Upgrade was attempted on engine built from commit:
 61c11aecc40e755d08b6c34c6fe1c0a07fa94de8

 Building from commit: 82bdc46dfdb46b000f67f0cd4e51fc39665bf13b and
 upgrading works as expected.

 - DHC

 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users