[ovirt-users] usb and serial port redirection

2014-05-07 Thread Demeter Tibor
Hi, 

Can I redirect the vm host's usb and serial ports to the guests? 
It is very important me, because we need to virtualize a physical host that use 
hardware tokens (usb hw key). 
I didn't find any option for this. 

Thanks in advance 

Best regards, 

Tibor 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] user portal permissions

2014-05-07 Thread Oved Ourfalli
Hi Jeff

Roles determine two things:
1. What the user can see
2. What the user can do

It is important to know on who is the user, what is the role (UserRole? as you 
also mentioned SuperUser?) and on what object(s) was the role granted on.
Assuming it is UserRole, on a specific user, then:
If on a VM, then the user can see/operate on this VM.
If on a Cluster, then the user can see/operate on all the VMs in this cluster.
If on a DC, then the user can see/operate on all the VMs in clusters that are 
part of this DC.
If on System, then the user can see/operate on all the VMs in the system.

So the hierarchy is System--DC--Cluster--VM.
I hope this clarifies you question.

Regards,
Oved


- Original Message -
 From: Jeff Clay jeffc...@gmail.com
 To: users@ovirt.org
 Sent: Monday, May 5, 2014 10:31:53 PM
 Subject: [ovirt-users] user portal permissions
 
 For some reason, when logged in as a user with a modifed copy role of
 UserRole (only has login permssion and VM - Basic Operations - Remote Log
 In permission) the user can see all of the VM's and has the ability to open
 a console, start, shutdown or suspend any of the VM's. I have verified that
 all of the VM's only show the SuperUser role in their permissions. I went
 through all of the roles and verified that the user is only a member of the
 Copy_of_UserRole. The only thing I can think of is that the user is
 inheriting permissions from something, but I can't find what it is or where.
 Any suggestions?
 
 Thanks.
 
 ___
 Users mailing list
 Users@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/users
 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] user portal permissions

2014-05-07 Thread Jeff Clay
Thanks, that clarifies quite a bit. The permissions are being applied to
System for the regular UserRole, but I don't see where to define what
objects the roles are assigned to.


On Wed, May 7, 2014 at 2:28 AM, Oved Ourfalli ov...@redhat.com wrote:

 Hi Jeff

 Roles determine two things:
 1. What the user can see
 2. What the user can do

 It is important to know on who is the user, what is the role (UserRole? as
 you also mentioned SuperUser?) and on what object(s) was the role granted
 on.
 Assuming it is UserRole, on a specific user, then:
 If on a VM, then the user can see/operate on this VM.
 If on a Cluster, then the user can see/operate on all the VMs in this
 cluster.
 If on a DC, then the user can see/operate on all the VMs in clusters that
 are part of this DC.
 If on System, then the user can see/operate on all the VMs in the system.

 So the hierarchy is System--DC--Cluster--VM.
 I hope this clarifies you question.

 Regards,
 Oved


 - Original Message -
  From: Jeff Clay jeffc...@gmail.com
  To: users@ovirt.org
  Sent: Monday, May 5, 2014 10:31:53 PM
  Subject: [ovirt-users] user portal permissions
 
  For some reason, when logged in as a user with a modifed copy role of
  UserRole (only has login permssion and VM - Basic Operations - Remote
 Log
  In permission) the user can see all of the VM's and has the ability to
 open
  a console, start, shutdown or suspend any of the VM's. I have verified
 that
  all of the VM's only show the SuperUser role in their permissions. I went
  through all of the roles and verified that the user is only a member of
 the
  Copy_of_UserRole. The only thing I can think of is that the user is
  inheriting permissions from something, but I can't find what it is or
 where.
  Any suggestions?
 
  Thanks.
 
  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users
 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] user portal permissions

2014-05-07 Thread Jeff Clay
I figured it out. I was using Configure - System Permissions to add my
users and assign them to roles. Removing the users from there and adding
them under the Permissions tab on the actual object did what I wanted it to.


On Wed, May 7, 2014 at 10:14 AM, Jeff Clay jeffc...@gmail.com wrote:

 Thanks, that clarifies quite a bit. The permissions are being applied to
 System for the regular UserRole, but I don't see where to define what
 objects the roles are assigned to.


 On Wed, May 7, 2014 at 2:28 AM, Oved Ourfalli ov...@redhat.com wrote:

 Hi Jeff

 Roles determine two things:
 1. What the user can see
 2. What the user can do

 It is important to know on who is the user, what is the role (UserRole?
 as you also mentioned SuperUser?) and on what object(s) was the role
 granted on.
 Assuming it is UserRole, on a specific user, then:
 If on a VM, then the user can see/operate on this VM.
 If on a Cluster, then the user can see/operate on all the VMs in this
 cluster.
 If on a DC, then the user can see/operate on all the VMs in clusters that
 are part of this DC.
 If on System, then the user can see/operate on all the VMs in the system.

 So the hierarchy is System--DC--Cluster--VM.
 I hope this clarifies you question.

 Regards,
 Oved


 - Original Message -
  From: Jeff Clay jeffc...@gmail.com
  To: users@ovirt.org
  Sent: Monday, May 5, 2014 10:31:53 PM
  Subject: [ovirt-users] user portal permissions
 
  For some reason, when logged in as a user with a modifed copy role of
  UserRole (only has login permssion and VM - Basic Operations - Remote
 Log
  In permission) the user can see all of the VM's and has the ability to
 open
  a console, start, shutdown or suspend any of the VM's. I have verified
 that
  all of the VM's only show the SuperUser role in their permissions. I
 went
  through all of the roles and verified that the user is only a member of
 the
  Copy_of_UserRole. The only thing I can think of is that the user is
  inheriting permissions from something, but I can't find what it is or
 where.
  Any suggestions?
 
  Thanks.
 
  ___
  Users mailing list
  Users@ovirt.org
  http://lists.ovirt.org/mailman/listinfo/users
 



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] user portal and pool views

2014-05-07 Thread Jeff Clay
Is there a way to get the user portal to show the pool tag or pool name and
assign an unused vm from within the pool instead of showing all vm's in the
pool for them to choose from?

Thanks
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Question about power user and public template

2014-05-07 Thread plysan
Hi Tomas,

Sorry for the late response :P


2014-04-17 21:02 GMT+08:00 Tomas Jelinek tjeli...@redhat.com:



 - Original Message -
  From: plysan ply...@gmail.com
  To: Tomas Jelinek tjeli...@redhat.com
  Cc: Users@ovirt.org List users@ovirt.org
  Sent: Wednesday, April 16, 2014 8:15:43 PM
  Subject: Re: [ovirt-users] Question about power user and public template
 
  2014-04-14 15:18 GMT+08:00 Tomas Jelinek tjeli...@redhat.com:
 
  
  
   - Original Message -
From: plysan ply...@gmail.com
To: users@ovirt.org
Sent: Sunday, April 13, 2014 3:52:55 AM
Subject: [ovirt-users] Question about power user and public template
   
Hi,
   
Currently I have run into a problem about permissions when creating
 vm
   from
template.
   
Say if non admin user A in power user portal want to create vm from
   template
C created by non admin user B, I found out that A need to have both
 power
user role and userbasedtemplatevm role to make it work. If i only
 assign
userbasedtemplatevm to C, A can only view the template in power user
   portal
but not able to create vm from it.
  
   I'd say the problem is that the template has some disks and as a
   UserTemplateBasedVm only you are
   not allowed to Access Image Storage Domains?
  
  Thanks for pointing that out, I really didn't think the disk has
  permissions too :)
 
  Because PowerUserRole has more permissions than UserTemplateBasedVm, so I
  think assigning PowerUserRole is enough to see the template in power user
  portal.  Based on this thought, I did the following two experiment:
 
  1. I assigned PowerUserRole to user A in Configure - System Permissions,
  but after that I still cannot see template C in power user portal.
  The above role assignment result in user A having PowerUserRole inherited
  from System Permission, and based on [1], user A should have
 PowerUserRole
  on template C, right ?

 yes, you should be able to verify this in the webadmin-template main
 tab-permissions subtab

 
  2. Now based on 1 if I explicitly add PowerUserRole to user A on template
  C, I can see template C and create vms from it.

 but it should already be there. And also, since you have created the
 template as public everyone should have the
 UserTemplateBasedVm on it. You could verify this on the same subtab.

I think my experiment above is not clear enough, so I made another one, and
found the following behavior:
1. If user has only PowerUser role which is inherited from system on a
template, he cannot see the template on userportal. And base on this if
UserTemplateBasedVm role is added to the user, the user can see it in
userportal now.
2. If user has only PowerUser role assigned independently (not inherited
from system) on a template, he can see the template in userportal.

IIUC, PowerUser role inherited from system should have the same behavior
with PowerUser role assigned independently.

Ideas ?

---
Thanks
plysan


 
  For my understanding, the above two role assignment should have the same
  result.
 
  Any ideas?

 so, if you have a template on which everyone has UserTemplateBasedVm
 and a user with PowerUserRole and you can not see it in the userportal,
 it should be a bug. But for me it seems working on current upstream code...

 
  [1]:
  http://lists.ovirt.org/pipermail/engine-devel/2012-December/003229.html
 
 
   For details about specific roles and what can be done by which role you
   can have a look at:
   webadmin - Configure in top right corner - Roles side tab -
 pick a
   specific role - Edit button
  
   
So is this the expected behavior? I don't quite understand what
userbasedtemplatevm is used for.  I noticed that making template C
 public
have the effect of assign userbasedtemplatevm to everyone, but that
 seems
not enough to let everyone use it.
   
My engine version is 3.3.4.
   
Any ideas? thanks for any help!
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
   
  
 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] oVirt Weekly Meeting Minutes -- 2014-05-05

2014-05-07 Thread Doron Fediuck
Minutes:http://ovirt.org/meetings/ovirt/2014/ovirt.2014-05-07-14.01.html
Minutes (text): http://ovirt.org/meetings/ovirt/2014/ovirt.2014-05-07-14.01.txt
Log:
http://ovirt.org/meetings/ovirt/2014/ovirt.2014-05-07-14.01.log.html

=
#ovirt: oVirt Weekly Sync
=


Meeting started by doron at 14:01:34 UTC. The full logs are available at
http://ovirt.org/meetings/ovirt/2014/ovirt.2014-05-07-14.01.log.html .



Meeting summary
---
* Agenda and roll Call  (doron, 14:01:36)
  * infra update  (doron, 14:01:37)
  * 3.4.z updates  (doron, 14:01:39)
  * 3.5 status  (doron, 14:01:40)
  * conferences and workshops  (doron, 14:01:42)
  * other topics  (doron, 14:01:43)

* infra update  (doron, 14:02:04)
  * most of the rpm jobs have been migrated to run per-patch. Several
slaves added to support the new load.  (doron, 14:05:18)
  * jobs are now capapable of running per branch and GERRIT_REFSPEC .
(doron, 14:06:21)

* 3.4.z updates  (doron, 14:08:45)
  * 3.4.1 GA expected tomorrow.  (doron, 14:11:30)
  * 3.4.2 planning TBD. Draft is: RC in 3 weeks, GA in 1 month.  (doron,
14:14:01)

* 3.5 status  (doron, 14:15:03)
  * ACTION: : sbonazzo to end an email to de...@ovirt.org with 3.4.2
timeline and tracker  (doron, 14:16:27)

* conferences and workshops  (doron, 15:16:31)
  * Rene Koch will be presenting another workshop in Vienna this
weekend. bkp gave a talk at the CentOS dojo on Monday night. Light
attendance, but lots of VMware people who were eager to hear more.
(doron, 15:17:20)
  * bkp is giving three talks this week at FISL 15 in Porto Alegre,
Brazil.  (doron, 15:18:03)

* other topics  (doron, 15:19:28)

Meeting ended at 15:44:16 UTC.




Action Items

* : sbonazzo to end an email to de...@ovirt.org with 3.4.2 timeline and
  tracker




Action Items, by person
---
* sbonazzo
  * : sbonazzo to end an email to de...@ovirt.org with 3.4.2 timeline
and tracker
* **UNASSIGNED**
  * (none)




People Present (lines said)
---
* doron (113)
* itamar (80)
* sbonazzo (31)
* danken (31)
* mskrivanek (24)
* ybronhei (14)
* fabiand (12)
* lvernia (10)
* apuimedo (10)
* dcaro (5)
* amureini (5)
* awels (3)
* fromani (3)
* ovirtbot (2)
* ecohen (1)
* jb_netapp (1)
* gshereme (1)
* rbarry (1)




Generated by `MeetBot`_ 0.1.4

.. _`MeetBot`: http://wiki.debian.org/MeetBot
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] problem in pulling zanata property files

2014-05-07 Thread plysan
Hi Einav,


2014-05-07 6:31 GMT+08:00 Einav Cohen eco...@redhat.com:

 Hi plysan, apologies for the late response (was OOO without
 internet connectivity last week).

 what we can do (maybe that's what you meant - not sure) is to make
 sure that when we auto-generate the 'on the fly' English .properties
 files (as part of the process of pushing the English strings), they
 are generated already in the proper naming and location, just so the
 matching zh-CN files will eventually be created with the similar
 (proper) naming and location once pulled from Zanata.

Yes, this is what i meant.


 this will result in changed documents' names and paths in Zanata, i.e.
 Zanata will actually identify these newly-named-and-located documents
 as 'new' documents, rather than 'updated' docuemnts, so this process
 is a little bit risky (existing translations may be lost) so we must
 do it carefully, therefore it may take a while to complete (I need to
 consult the Zanata people in order to find out what is the best way
 to address this issue).

It's really good to hear you can try to improve this.

Really appreciated :)

---
Thanks,
plysan


 
 Thanks,
 Einav

 - Original Message -
  From: plysan ply...@gmail.com
  To: Einav Cohen eco...@redhat.com
  Cc: Users@ovirt.org List users@ovirt.org
  Sent: Friday, April 25, 2014 12:35:48 AM
  Subject: Re: [ovirt-users] problem in pulling zanata property files
 
  Hi Einav,
 
  Thanks for your reply.
 
  This is very helpful. But I think we could fake these 'on the fly'
 English
  .properties files and just use them for zanata push operation. So we
 don't
  have to rename these files every time we pull them.
 
  What do you think ?
 
  ---
  Thanks,
  plysan
 
 
 
  2014-04-25 2:59 GMT+08:00 Einav Cohen  eco...@redhat.com  :
 
 
  Hi plysan,
 
  the 9 documents with the strange name/location [1] are properties
  files that do not have matching English .properties files in the
  oVirt-engine code repo (as opposed to LocalizedEnums_zh_CN.properties
  and messages_zh_CN.properties that do have matching English .properties
  files in the ovirt-engine code repo [2]).
 
  The matching English strings for the documents in [1] reside in the
  ovirt-engine code repo within GWT Constants/Message interface Java
  files, rather than English .properties files.
  Zanata cannot receive GWT Constants/Message interface Java files as
  input. So the process of pushing the English strings to Zanata for
  translation includes a GWT-compilation-based auto-generation of 'on
  the fly' English .properties files with similar strange naming/location
  (those English .properties files are not pushed into the ovirt-engine
  code repo), which consequently leads to the strange naming/location of
  the zh-CN files as well.
 
  the names/locations of the files in [1] should actually be [3]. so
  if you want the translations that you are pulling from Zanata to
  be named correctly and reside in the correct location in your local
  ovirt-engine code directory, simply run [4] after doing the pull
  from Zanata.
 
  
  Thanks,
  Einav
 
 
  [1]
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.common.CommonApplicationConstants_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.common.CommonApplicationMessages_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.uicompat.SpiceRedKeys_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.uicompat.UIConstants_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.uicompat.UIMessages_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.userportal.ApplicationConstants_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.userportal.ApplicationMessages_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.webadmin.ApplicationConstants_zh_CN.properties
 
 frontend/webadmin/modules/webadmin/src/main/resources/org/ovirt/engine/ui/frontend/org.ovirt.engine.ui.webadmin.ApplicationMessages_zh_CN.properties
 
  [2]
 
 frontend/webadmin/modules/uicompat/src/main/resources/org/ovirt/engine/ui/uicompat/LocalizedEnums.properties
  packaging/branding/ovirt.brand/messages.properties
 
  [3]
 
 frontend/webadmin/modules/gwt-common/src/main/resources/org/ovirt/engine/ui/common/CommonApplicationConstants_zh_CN.properties
 
 frontend/webadmin/modules/gwt-common/src/main/resources/org/ovirt/engine/ui/common/CommonApplicationMessages_zh_CN.properties
 
 

Re: [ovirt-users] Ceph

2014-05-07 Thread Alek Paunov

On 01.05.2014 10:07, Jiri Moskovcak wrote:

When I read [1] I got curious how much demand for supporting Ceph we can
expect in the near future. So if use it or plan to use it please let us
know.


We are committed to deploy exactly Ceph (RBD) for several deployments in 
Bulgaria. [Because, in our humble opinion, Fedora/oVirt/Ceph is the 
optimal stack for the mass case corporate class datacenters today.]


Our pilot project (for a datacenter in a state university) do not have 
strict deadlines, but we hope to be online before the end of 2014.


We will try to contribute back as much as possible - as early adopters 
feedback or VDSM patches, where we are able to debug and workaround the 
issues.


Kind Regards,
Alek

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] How to install spice-xpi-2.8 on ubuntu12.04?

2014-05-07 Thread Zhong Qiang
*when i complie spice-xpi-2.8 on ubuntu12.04 with firefox29,i receive this
error:*

root@user:~/src/spice-xpi-2.8# make
make  all-recursive
make[1]: Entering directory `/root/src/spice-xpi-2.8'
Making all in SpiceXPI
make[2]: Entering directory `/root/src/spice-xpi-2.8/SpiceXPI'
Making all in src
make[3]: Entering directory `/root/src/spice-xpi-2.8/SpiceXPI/src'
Making all in plugin
make[4]: Entering directory `/root/src/spice-xpi-2.8/SpiceXPI/src/plugin'
  GENnsISpicec.xpt
make  all-am
make[5]: Entering directory `/root/src/spice-xpi-2.8/SpiceXPI/src/plugin'
  CXXlibnsISpicec_la-controller.lo
controller.cpp: In destructor 'SpiceController::~SpiceController()':
controller.cpp:73:5: warning: format not a string literal and no format
arguments [-Wformat-security]
  CXXlibnsISpicec_la-np_entry.lo
  CXXlibnsISpicec_la-npn_gate.lo
  CXXlibnsISpicec_la-npp_gate.lo
  CXXlibnsISpicec_la-nsScriptablePeer.lo
In file included from nsScriptablePeer.cpp:54:0:
/root/src/xulrunner-sdk/include/nsError.h:186:14: error: expected
constructor, destructor, or type conversion before '(' token
/root/src/xulrunner-sdk/include/nsError.h:188:14: error: expected
constructor, destructor, or type conversion before '(' token
make[5]: *** [libnsISpicec_la-nsScriptablePeer.lo] Error 1
make[5]: Leaving directory `/root/src/spice-xpi-2.8/SpiceXPI/src/plugin'
make[4]: *** [all] Error 2
make[4]: Leaving directory `/root/src/spice-xpi-2.8/SpiceXPI/src/plugin'
make[3]: *** [all-recursive] Error 1
make[3]: Leaving directory `/root/src/spice-xpi-2.8/SpiceXPI/src'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/root/src/spice-xpi-2.8/SpiceXPI'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/root/src/spice-xpi-2.8'
make: *** [all] Error 2
#
*Any help is greatly appreciated. Thank you*
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users