[ovirt-users] Can't install Ovirt from cockpit - ERROR: cannot retrieve iSCSI luns

[Patrick Lomakin]

Latest version of Ovirt - 4.4.3
Hi everyboby. I have tryed to install hosted engine from ovirt cockpit, but 
when select iSCSI target I give the same error - Error: Cannot retrieve iSCSI 
LUNs. After that I have installed hosted engine from console with command - 
"hosted-engine --deploy" and than installed successfully. From console was able 
 to retrieve iSCSI luns and select one there. Who can try to deploy ovirt from 
cockpit?
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BZWZNMREXMU3HU4AX3IGWZGW5YLHCK7Q/

[ovirt-users] Re: oVirt 4.3 DWH with Grafana

[Michal Gutowski]

Hi Marko,

I've tested this myself as I like playing with various Grafana use-cases and 
following steps allow you to set up Grafana Monitoring for your oVirt 4.3 
environment and re-use all Grafana Dashboards from latest oVirt 4.4 on a 
previous release.

1. Allowing Grafana to connect to oVirt DWH database (Data Warehouse)

Login to the oVirt engine 4.3 and create a user "grafana" with password 
"grafana" that will get a read-only access to the ovirt_engine_history database 
and will be able to use public schema

# su - postgres -c 'scl enable rh-postgresql10 bash'
# psql -U postgres -c "CREATE ROLE grafana WITH LOGIN ENCRYPTED PASSWORD 
'grafana';" -d ovirt_engine_history
# psql -U postgres -c "GRANT CONNECT ON DATABASE ovirt_engine_history TO 
grafana;"
# psql -U postgres -c "GRANT USAGE ON SCHEMA public TO grafana;" 
ovirt_engine_history

Generate the rest of the permissions that will be granted to the newly created 
user and save them to a file:

# psql -U postgres -c "SELECT 'GRANT SELECT ON ' || relname || ' TO grafana;' 
FROM pg_class JOIN pg_namespace ON pg_namespace.oid = pg_class.relnamespace 
WHERE nspname = 'public' AND relkind IN ('r', 'v');" --pset=tuples_only=on  
ovirt_engine_history > grant.sql

Use the file you created in the previous step to grant permissions to the newly 
created user:
# psql -U postgres -f grant.sql ovirt_engine_history

Remove the file you used to grant permissions:
# rm grant.sql

Exit the postgres user shell by pressing Ctrl+d

Add the following lines for the newly created user to 
/var/opt/rh/rh-postgresql10/lib/pgsql/data/pg_hba.conf preceding the line 
beginning local all all

hostovirt_engine_history grafana 0.0.0.0/0   md5
hostovirt_engine_history grafana ::0/0   md5

Reload postgres service
# systemctl reload rh-postgresql10-postgresql

2. Installing Grafana

You can install Grafana directly on the oVirt Engine machine (this is how it's 
done in oVirt 4.4) or on a separate machine. Following steps shows how you can 
install Grafana on a Oracle Linux 7 server. Note: Oracle provides Grafana in 
the OLCNE yum repository - you only need to install the repository definition 
package to pickup Grafana and it's dependencies.

# yum install oraclelinux-release-el7
# yum install oracle-olcne-release-el7
# yum-config-manager --enable ol7_optional_latest ol7_olcne11
# yum install grafana
# systemctl enable --now grafana-server

3. Adding oVirt DWH database as Data Source in Grafana

Login to Grafana (default port 3000) and navigate to Configuration -> 
DataSources and click on Add Data Source button.

Select PostgreSQL source and use the following settings (adjust the Host IP 
address to match your oVirt Engine IP but do not change the Name):
Name: oVirt DWH
Host: your-engine-ip-address:5432
user: grafana
pass: grafana
SSL mode: disable

4. Importing Dashboards from oVirt 4.4

Download Grafana Dashboards from oVirt 4.4 repository: 
https://github.com/oVirt/ovirt-dwh/tree/master/packaging/conf/grafana-dashboards

You can now import them in Grafana by navigating to Create -> Import and 
clicking on Upload .json file or by simply pasting JSON content.

I've tested this on my OLVM/oVirt 4.3 and works perfectly well.

Have fun!
Michal

Michał Gutowski
Principal Solutions Engineer, EMEA 
+48 665 222 979

Oracle Open Cloud Infrastructure Software - Linux & Virtualization

> On 24 Nov 2020, at 11:53, Vrgotic, Marko  wrote:
> 
> Dear oVirt folks,
>  
> Thank you all for suggestions.
>  
> I will give it a go and see how far I get.
>  
> -
> kind regards/met vriendelijke groeten
>  
> Marko Vrgotic
> Sr. System Engineer @ System Administration
> 
> ActiveVideo
> 
> o: +31 (35) 6774131
> m: +31 (65) 5734174
> e: m.vrgo...@activevideo.com 
> w: www.activevideo.com 
> 
>  
> ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ 
> Hilversum, The Netherlands. The information contained in this message may be 
> legally privileged and confidential. It is intended to be read only by the 
> individual or entity to whom it is addressed or by their designee. If the 
> reader of this message is not the intended recipient, you are on notice that 
> any distribution of this message, in any form, is strictly prohibited.  If 
> you have received this message in error, please immediately notify the sender 
> and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete 
> or destroy any copy of this message.
>  
>  
>  
> From: Yedidyah Bar David mailto:d...@redhat.com>>
> Date: Sunday, 22 November 2020 at 08:39
> To: "Vrgotic, Marko"  >
> Cc: "users@ovirt.org "  >
> Subject: Re: [ovirt-users] oVirt 4.3 DWH with Grafana
>  
> ***CAUTION: This email originated from 

[ovirt-users] Re: Ovirt 4 2 NIC's

[Dominik Holler]

https://www.ovirt.org/documentation/administration_guide/#Designate_a_Specific_Traffic_Type
documents how to use a display network.

A possible flow could be like this:
1. Create a new logical network, use a VLAN if you do not have a free NIC
on every host
2. Attach the new logical network and attach it in
Compute > Hosts > hostname > Network Interfaces > Setup Host Networks
to a free NIC (or an already used one if the network has a VLAN) for every
host.
This new network attachment should have an IP address.
3. Ensure that your network infrastructure allows the communication of your
users into the display network.
4. Assign the role "Display Network" in
Compute > Clusters > ClusterName > Logical Networks > Manage Networks
to the new network.




> El vie, 20 de nov. de 2020 a la(s) 06:01, Dominik Holler (
> dhol...@redhat.com) escribió:
>
>>
>>
>> On Wed, Nov 18, 2020 at 7:30 PM Facundo Badaracco 
>> wrote:
>>
>>> Hi everyone!
>>>
>>> Hope someone can help me with this..
>>>
>>> I have 3 servers with centos 8 and ovirt 4 installed. Each server has 2
>>> nic.
>>> Server A = HE (HA)
>>> Nic1= 192.169.2.24 Nic2=no ip
>>> Server B = HE (HA)
>>> Nic1= 192.169.2.25 Nic2=no ip
>>> Server C = simply host.
>>> Nic1= 192.169.2.26 Nic2=no ip
>>>
>>> How can i configure the second NIC in each server in order to use it for
>>> clients connect to the vms?. I want one nic for management, the other for
>>> connections.
>>>
>>
>>
>> If the clients want to access network services provided by the VMs,
>> you could create an additional logical network in oVirt, and attach it in
>> Compute > Hosts > hostname > Network Interfaces > Setup Host Networks
>> to Nic2  for every host. This new network attachment should have no IP
>> address.
>> After that, you could reference this new logical network in your VMs
>> virtual NICs.
>> If possible, I would recommend using a VLAN to provide isolation to the
>> management network.
>>
>> If the clients connect via SPICE or VNC, you would require a
>> dedicated display network.
>>
>>
>>
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/PL7WFXC4UZBUZ45HMZQ7QSRFSMQXRA4A/
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QYT45I33KFX4NTNPPYHK7Z57MG5SQ6LQ/

[ovirt-users] Re: Ovirt 4.4.3 Hyper-converged Deployment with GlusterFS

[Angus Clarke]

Hi

Sorry if this goes against convention here, maybe best practises have moved on, 
but I always create a partition on a disk before using it.

...
multipath -F
parted /dev/sdb mklabel gpt
parted /dev/sdb  mkpart primary 0% 100%
parted /dev/sdb set 1 lvm on
pvcreate /dev/sdb1

It's good practise to get into, especially when a disk is moved from one OS to 
another so as to avoid data loss.

Regards
Angus


From: rcpol...@gmail.com 
Sent: 24 November 2020 15:29
To: users@ovirt.org 
Subject: [ovirt-users] Re: Ovirt 4.4.3 Hyper-converged Deployment with GlusterFS

Figured it out:

filter = [ "a|^/dev/sda2$|" ] > /etc/lvm/lvm.conf
wipefs -af /dev/sdb
multipath -F
pvcreate /dev/sdb

Those steps got me past the filter error - Gluster deployed.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: 
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fprivacy-policy.htmldata=04%7C01%7C%7Cbaf14099af944ee18ee808d890857368%7C84df9e7fe9f640afb435%7C1%7C0%7C637418250125468781%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=XW4V2OFkvlSIR9lHICsp02VLSpukndtYMiyfap8ysic%3Dreserved=0
oVirt Code of Conduct: 
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ovirt.org%2Fcommunity%2Fabout%2Fcommunity-guidelines%2Fdata=04%7C01%7C%7Cbaf14099af944ee18ee808d890857368%7C84df9e7fe9f640afb435%7C1%7C0%7C637418250125478773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=qDiMfLJ9fMljcS3evldQNxeMiGShs7bnOzXqub3fJas%3Dreserved=0
List Archives: 
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.ovirt.org%2Farchives%2Flist%2Fusers%40ovirt.org%2Fmessage%2FBWLDF2ZD54LMZB2IZ7HTAEARMWK7S6OZ%2Fdata=04%7C01%7C%7Cbaf14099af944ee18ee808d890857368%7C84df9e7fe9f640afb435%7C1%7C0%7C637418250125478773%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=ss4dJ7IRCjE1zIMQSC2VFFBNX7R30v7wj2AYuWnx2iE%3Dreserved=0
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QD5YSE333B3R7O3FUTM6JOE36IZQKSHD/

[ovirt-users] Re: bond or different networks for frontend and backend

[Strahil Nikolov via Users]

You can find details here:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/networking_guide/sec-using_channel_bonding

1 or layer3+4 — Uses upper layer protocol information (when available) to 
generate the hash. This allows for traffic to a particular network peer to span 
multiple slaves, although a single connection will not span multiple slaves.

Best Regards,
Strahil Nikolov




В вторник, 24 ноември 2020 г., 15:29:50 Гринуич+2, jb  
написа: 





Sorry I hear this hashing term the first time.

So in cockpit this would be a team with 802.3ad LACP / Passive? And you 
would put all 4 nics in this team?

In the switch I still have to define a link aggregation (on hp switch a 
trunk) with LACP?




Am 24.11.20 um 13:36 schrieb Strahil Nikolov:
> If I had 4 x 1GBE , I would consider LACP with hashing on layer 3+4.
>
> For production use, I would go with 10GBE at least.
>
> Best Regards,
> Strahil Nikolov
>
>
>
>
>
>
> В вторник, 24 ноември 2020 г., 10:40:22 Гринуич+2, jb  
> написа:
>
>
>
>
>
> Hello,
>
> here in the description
> (https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
> it says that we should have at least 2 interfaces to separate frontend
> and backend traffic.
>
> How is this when I have 4 nics and I make with all one bond interface,
> is this not better in terms of performance? What is your recommendation
> with 4 x 1Gbit nics?
>
> Best regards
>
> Jonathan
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C5OPQLQBF7BM4FLH6HL3DKVDCEQTA3NB/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GK3SZ62M3ZCYNYFJWHIVQEN2FDQNWZ36/

[ovirt-users] Cannot SSH into the self hosted host (going through tutorial)

[jenia . ivlev]

Hello.

I want to install oVirt on my PC and for this purpose I'm following the 
tutorial which instructed me to make a VM and install there the oVirt self 
hosted host: 
https://www.ovirt.org/documentation/installing_ovirt_as_a_self-hosted_engine_using_the_cockpit_web_interface/#Installing_Hosts_for_RHV_SHE_cockpit_deploy

I cannot SSH to this new oVirt install - I get the error "Connection refused" 
(Even though I see something listening on port 22 by running `netstat -an`). So 
I tried stopping `sshd`and I got the same error. Tried to do all of this with 
`telnet 192.168.122.1 22`, I get the same error "Connection refused".

Also, Yum returns "could not resolve host: https://mirrors.fedoraproject.org;

I can ping the machine though from my PC.

I turned off `firewalld`. `iproute -S` returns `ACCEPT` for everything. 

My PC is running archlinux and I installed the new VM using "Virtual Machine 
Manager". Normally, I can easily SSH to any VM I create. Maybe someone know 
what I'm doing wrong?


Thanks kindly
Jenia

P.S.

Running `nodectl check` returns "ok" for all.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YERXNFUI6UFTPPE5S6SAFJEWYETM3XYW/

[ovirt-users] Re: Ovirt 4.4.3 Hyper-converged Deployment with GlusterFS

[rcpoling]

Figured it out:

filter = [ "a|^/dev/sda2$|" ] > /etc/lvm/lvm.conf
wipefs -af /dev/sdb
multipath -F
pvcreate /dev/sdb

Those steps got me past the filter error - Gluster deployed.
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/BWLDF2ZD54LMZB2IZ7HTAEARMWK7S6OZ/

[ovirt-users] Re: Replacing ovirt certificates issue

[Dominik Holler]

On Tue, Nov 24, 2020 at 8:45 AM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 4:54 PM Alex K  wrote:
>
>>
>>
>> On Mon, Nov 23, 2020 at 9:42 AM Alex K  wrote:
>>
>>>
>>>
>>> On Mon, Nov 23, 2020 at 9:35 AM Dominik Holler 
>>> wrote:
>>>


 On Fri, Nov 20, 2020 at 12:38 PM Alex K 
 wrote:

> Following the above, I was seeing that OVN provider connectivity test
> was failing due to some certificate issue and had to do the following to
> fix it:
>
> names="ovirt-provider-ovn"
>
> subject="$(\
> openssl x509 \
> -in /etc/pki/ovirt-engine/certs/apache.cer \
> -noout \
> -subject | \
> sed \
> 's;subject= \(.*\);\1;'
>   )"
>
> . /usr/share/ovirt-engine/bin/engine-prolog.sh
>
> for name in $names; do
> /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh \
> --name="${name}" \
> --password=mypass \
> --subject="${subject}" \
> --keep-key \
> --san=DNS:"${ENGINE_FQDN}"
> done
>
> Having fixed the above, when trying to connect two VMs on some OVN
> logical switches it seems they are not able to reach each other.
> I had previously added such logical switched at engine by running:
>
> ovn-nbctl ls-add ovn-net0
> ovn-nbctl ls-add ovn-net1
> etc
>
>
 Not related: Please use ovirt-provider-ovn to create and manage ovn
 entities.


> Checking the logs at the host /var/log/openvswitch/ovsdb-server.log I
> see:
> reconnect|WARN|unix#45: connection dropped (Connection reset by peer)
>
>
 /var/log/openvswitch/ovn-controller.log might contain the reason.


> Also systemctl status ovirt-provider-ovn.service at engine shows:
> /usr/lib/python2.7/site-packages/urllib3/connection.py:344:
> SubjectAltNameWarning:...
>
>
 Looks not good, do tou know which connection this warning referes to?


> I have restarted at engine both engine and ovn services:
> systemctl restart ovirt-engine
> systemctl status ovirt-provider-ovn.service
>
> I have also restarted the relevant service at each host:
> systemctl restart ovn-controller.service
>
> When running at host the following it stucks and does not give any
> output:
> ovn-sbctl show
>
>
 This is expected, the ovn southbound and northbound db exists only on
 the ovn-central, which is places on the same machine as oVirt Engine.
 Only the ovn-controller, which controls openvswitch, and openvswitch,
 which is implementing the data plane, is placed on the ovn-chassis / oVirt
 host.


> I see that the certificate is imported at key-store as it has the same
> fingerprint with the previous root CA:
>
> keytool -list -alias ovirt-provider-ovn -keystore
> /var/lib/ovirt-engine/external_truststore
>
>
 This is only relevant for the connection from oVirt Engine to
 ovirt-provider-ovn.


> At this same cluster, I had previously changed the domain name of each
> host and engine using the rename tool.
> And now replaced the certificates as per previous described so as to
> fix the imageio cert issue and ovn issue.
>
> It seems that OVN is not happy with the status of certificates.
> When testing connection at engine GUI i get a prompt to trust the
> cert, and when pressing ok i get a green confirmation of successful
> connection.
>
>
 This is only relevant for the connection from oVirt Engine to
 ovirt-provider-ovn. The prompt to trust the certificate might be redundant.
 If you get the green confirmation, oVirt Engine is happy and the
 certificate of the REST API of ovirt-provider-ovn is fine.


> Is there anything else that can be done to fix OVN functionality?
>

 Please try to understand what is wrong in the connection between
 ovn-controller and ovn south bound db.
 /var/log/openvswitch/ovn-controller.log should be helpful and might
 contain the reason.

>>> Will run the steps again to see. Do you think I need to take additional
>>> steps when fixing the OVN certs issue due to domain change that this
>>> cluster has undergone?
>>>
>> This time was not able to make OVN provider succeed at the test
>> connection with the new certs. Restored the pki to its previous state,
>> using the previous CA.  Now, I do not see any errors for the last hour.
>> Created also from GUI a logical switch named ovn-switch-1. Attached two VMs
>> to it and was not able to confirm ping between VMs.
>>
>> At engine I see both the MAC addresses of each guest VM.
>> [root@engine ~]# ovn-nbctl show
>> switch ae4e03eb-e097-4629-a7bd-3272eee65599
>> (ovirt-ovn-switch-1-bd04ad69-11a9-46d0-b571-f7dee62dfb7c)
>> port c4e4098b-764f-4696-8506-ccf46a535fd2
>> addresses: ["00:1a:4a:16:02:59"]
>> 

[ovirt-users] Re: bond or different networks for frontend and backend

[jb]

Sorry I hear this hashing term the first time.

So in cockpit this would be a team with 802.3ad LACP / Passive? And you 
would put all 4 nics in this team?


In the switch I still have to define a link aggregation (on hp switch a 
trunk) with LACP?





Am 24.11.20 um 13:36 schrieb Strahil Nikolov:

If I had 4 x 1GBE , I would consider LACP with hashing on layer 3+4.

For production use, I would go with 10GBE at least.

Best Regards,
Strahil Nikolov






В вторник, 24 ноември 2020 г., 10:40:22 Гринуич+2, jb  
написа:





Hello,

here in the description
(https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
it says that we should have at least 2 interfaces to separate frontend
and backend traffic.

How is this when I have 4 nics and I make with all one bond interface,
is this not better in terms of performance? What is your recommendation
with 4 x 1Gbit nics?

Best regards

Jonathan

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C5OPQLQBF7BM4FLH6HL3DKVDCEQTA3NB/

[ovirt-users] Re: ovirt 4.3 - locked image vm - unable to remove a failed deploy of a guest dom

[3c Monitor]

Hi,
anyone with an idea on what else I can do?
Thanks a lot.


___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LIJKPF6HDVWA5ULQV43LK4VLAAKDU2QR/

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

[Sandro Bonazzola]

Il giorno lun 23 nov 2020 alle ore 15:43 Facundo Badaracco <
varekoa...@gmail.com> ha scritto:

> Hi everyone.
>
> Im trying to upload a ISO to my data domain, the GUI gives me this error 
> "Connection
> to ovirt-imageio service has failed. Ensure that ovirt-engine certificate
> 
>  is
> registered as a valid CA in the browser.".
>

Hi, in order to upload an ISO through the browser you need to add the
engine certificate authority in your browser as a trusted certificate
authority for validating websites.
You can download the CA from the link provided in the error message and you
can then import it in your browser by going to preferences -> security
options -> certificates management



>
> the image fails whne trying to upload.
>
> i have added the certificate in chrome, but inst working.
>
> Some help? any other way to upload?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W62HZY7MTAE3Z2GHI2FYGSO52JQM6ISO/

[ovirt-users] Re: bond or different networks for frontend and backend

[Strahil Nikolov via Users]

If I had 4 x 1GBE , I would consider LACP with hashing on layer 3+4.

For production use, I would go with 10GBE at least.

Best Regards,
Strahil Nikolov






В вторник, 24 ноември 2020 г., 10:40:22 Гринуич+2, jb  
написа: 





Hello,

here in the description 
(https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
 
it says that we should have at least 2 interfaces to separate frontend 
and backend traffic.

How is this when I have 4 nics and I make with all one bond interface, 
is this not better in terms of performance? What is your recommendation 
with 4 x 1Gbit nics?

Best regards

Jonathan

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QDRUOUQGS42K7I3IASHJ3RHKH3DNOO4Q/

[ovirt-users] Re: Fix corrupt self-hosted engine

[Yedidyah Bar David]

On Tue, Nov 24, 2020 at 12:38 PM Alex K  wrote:

>
>
> On Mon, Nov 23, 2020 at 10:09 AM Yedidyah Bar David 
> wrote:
>
>> On Mon, Nov 23, 2020 at 9:54 AM Alex K  wrote:
>> >
>> >
>> >
>> > On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David 
>> wrote:
>> >>
>> >> On Thu, Nov 19, 2020 at 9:43 PM Alex K 
>> wrote:
>> >>>
>> >>>
>> >>>
>> >>> On Thu, Nov 19, 2020 at 5:31 PM Alex K 
>> wrote:
>> 
>>  Hi Didi,
>> 
>>  On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
>> wrote:
>> >
>> > On Thu, Nov 19, 2020 at 4:37 PM Alex K 
>> wrote:
>> >>
>> >> Hi all,
>> >>
>> >> I have a corrupt self-hosted engine (with several file system
>> errors, postgres not able to start) and thus it does not give access to the
>> web UI. This happened following an unlucky split brain resolution (I am
>> running 2 nodes). The two hosts are running VMs also which I would like to
>> keep running as they are needed.
>> >>
>> >> When trying to boot into rescue mode (using
>> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
>> else.
>> >
>> >
>> > This means that more than just the DB is corrupt...
>> >
>> >>
>> >>
>> >> I have backups of engine files with scope all (using the
>> engine-backup tool).
>> >> What is the best approach to try and fix the engine or redeploy.
>> >
>> >
>> > If you are careful, and know what you are doing, you can try
>> something like the following. I am not giving many details, hopefully you
>> can find on the net tutorials about how to use the things I suggest:
>> >
>> > 1. Move to global maintenance
>> >
>> > 2. Stop the current dead vm (if needed)
>> >
>> > 3. Find current vm conf, edit it to boot from a rescue iso image of
>> your preference or from net/PXE etc., and start the vm with '--vm-conf'
>> pointing to your edited file.
>> >
>> > 4. Connect a console (hosted-engine --console, or 'virsh console',
>> or use '--add-console-password' and remote viewer, if needed)
>> >
>> > 5. Clean the disk and install the OS, oVirt, etc.
>> >
>> > 6. Copy your backup into the vm and restore with engine-backup
>> >
>> > 7. Then cleanly stop the machine, exit global maint, and let HA
>> start it (or start it yourself with --vm-start).
>> >
>> > At the time, we had a bug [1] to document this. The result is [2].
>> It does not detail how to boot/reinstall os/etc., only restore (if e.g. db
>> is dead but fs is ok).
>> > For something somewhat similar to what you want, see also [3],
>> which uses guestfish. Might be useful, depending on how badly your disk is
>> corrupted.
>> 
>>  I went with the guestfish approach. It has fixed some fs issues and
>> now the yum etc seem fine apart from postgres.
>>  I had tried previously to uninstall/install packages so I ended
>> installing them again with yum install ovirt\*setup\*.
>>  Now I think I have to run engine-setup but I get the error:
>> 
>>   Failed to execute stage 'Environment setup': Cannot connect to
>> Engine database using existing credentials: engine@localhost:5432
>> >>>
>> >>> Seems that I need to have psql running to be able to run
>> engine-backup --mode=restore. Are there any steps how one could manually
>> prepare pgsql for ovirt so as to attempt restoration?
>> >>
>> >>
>> >> Replying again, also to conclude this part of your episode: Generally
>> speaking, that's not needed. restore --provision-all-databases should do
>> that for you.
>> >
>> > Seems that when pgsql is down nothing can be done. You need at least
>> pgsql up and running (e clean state will do) so as to be able to proceed
>> with restoration.
>>
>> Do you still have logs from this? Both engine-backup's (default to
>> /var/log/ovirt-engine-backup/something if you do not pass --log) and
>> ovirt-engine-provisiondb which it runs (at
>> /var/log/ovirt-engine/setup).
>>
> I was using --provision-all-databases flag when trying to restore. I might
> retest to double check. When the pgsql was down, I was getting:
>
> 2020-11-19 22:06:35 4947: Start of engine-backup mode restore scope all
> file /var/backup/daily.0/engine-backup.gz
> 2020-11-19 22:06:35 4947: OUTPUT: Start of engine-backup with mode
> 'restore'
> 2020-11-19 22:06:35 4947: OUTPUT: scope: all
> 2020-11-19 22:06:35 4947: OUTPUT: archive file:
> /var/backup/daily.0/engine-backup.gz
> 2020-11-19 22:06:35 4947: OUTPUT: log file: restore.log
> 2020-11-19 22:06:35 4947: Setting scl env for rh-postgresql10
> 2020-11-19 22:06:35 4947: OUTPUT: Preparing to restore:
> 2020-11-19 22:06:35 4947: OUTPUT: - Unpacking file
> '/var/backup/daily.0/engine-backup.gz'
> 2020-11-19 22:06:35 4947: Opening tarball
> /var/backup/daily.0/engine-backup.gz to /tmp/engine-backup.63eeNqt4NH
> 2020-11-19 22:06:35 4947: Verifying hash
> 2020-11-19 22:06:35 4947: Verifying version
> 2020-11-19 22:06:35 4947: Reading config
> 2020-11-19 22:06:35 4947: OUTPUT: 

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

[Alex K]

On Tue, Nov 24, 2020 at 12:44 PM Facundo Badaracco 
wrote:

> hi alex!
>
> imageio-proxy isnt installed. Only ovirt-imageio service is running.
> (ovirt 4.4 now, i made the update)
>
If I run the following I get:
[root@engine ~]# systemctl | grep image
  ovirt-imageio-proxy.service
Then checking the status of the service I confirm it is up:
  systemctl status ovirt-imageio-proxy.service
If the service is up and ok then you need to check the certificate issue. I
had noticed some times that importing the cert form GUI had not resolved
the issue. You may try to manually get the CA cert from engine
(/etc/pki/ovirt-engine/ca.pem) and import it at your browser. Clean cache
at browser and try again. The browser should indicate the connection is
trusted and secure. Also, you might need to remove the already imported
cert from your browser.


> when i connecto to the web UI, it say the certificate is not valid. with a
> red warning. but, i have already added the certificate to chrome
>
> El mar, 24 de nov. de 2020 a la(s) 07:22, Alex K (rightkickt...@gmail.com)
> escribió:
>
>>
>>
>> On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
>> wrote:
>>
>>> Hi everyone.
>>>
>>> Im trying to upload a ISO to my data domain, the GUI gives me this error
>>> "Connection to ovirt-imageio service has failed. Ensure that ovirt-engine
>>> certificate
>>> 
>>>  is
>>> registered as a valid CA in the browser.".
>>>
>> is the imageio service running ok?  At engine: systemctl status
>> ovirt-imageio-proxy
>> Also, when connecting at the engine web UI, is the browser happy with the
>> certificate of the UI?
>>
>>>
>>> the image fails whne trying to upload.
>>>
>>> i have added the certificate in chrome, but inst working.
>>>
>>> Some help? any other way to upload?
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>>>
>>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/KOO32KJSJCCQEQKA2TLFZ5G26C3TO6WC/

[ovirt-users] Re: oVirt 4.3 DWH with Grafana

[Vrgotic, Marko]

Dear oVirt folks,

Thank you all for suggestions.

I will give it a go and see how far I get.

-
kind regards/met vriendelijke groeten

Marko Vrgotic
Sr. System Engineer @ System Administration

ActiveVideo
o: +31 (35) 6774131
m: +31 (65) 5734174
e: m.vrgo...@activevideo.com
w: www.activevideo.com

ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ 
Hilversum, The Netherlands. The information contained in this message may be 
legally privileged and confidential. It is intended to be read only by the 
individual or entity to whom it is addressed or by their designee. If the 
reader of this message is not the intended recipient, you are on notice that 
any distribution of this message, in any form, is strictly prohibited.  If you 
have received this message in error, please immediately notify the sender 
and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or 
destroy any copy of this message.



From: Yedidyah Bar David 
Date: Sunday, 22 November 2020 at 08:39
To: "Vrgotic, Marko" 
Cc: "users@ovirt.org" 
Subject: Re: [ovirt-users] oVirt 4.3 DWH with Grafana


***CAUTION: This email originated from outside of the organization. Do not 
click links or open attachments unless you recognize the sender!!!***
On Fri, Nov 20, 2020 at 8:45 AM Vrgotic, Marko 
mailto:m.vrgo...@activevideo.com>> wrote:
Dear oVirt,

We are currently running oVirt 4.3 and upgrade/migration to 4.4 won’t be 
possible for few more months.

I am looking into guidelines, how to, for setting up Grafana using 
DataWarehouse as data source.

Did anyone already did this, and would be willing to share the steps?

AFAIU this is definitely not tested/recommended/supported, but the current 
(4.4) dashboards use only 4.3 dwh compatibility views. So in theory, 4.4 
grafana setup can work against your 4.3 engine/dwh without problems. So you can 
try something like:

1. Install el8 on some machine
2. Install ovirt-release (4.4!)
3. Install ovirt-engine-dwh-grafana-integration-setup. I *think*, didn't try, 
that it would carry with it all the dependencies it needs.
4. Run engine-setup. When prompted, only accept "Configure grafana?", and reply 
"No" to everything else
5. Follow the other prompts as applicable

This should be enough.

Not sure about the commands to add SSO on the engine machine. Perhaps better 
verify this first against a test engine (can be on another el7/ovirt4.3 VM with 
no hosts).

But, repeating: this isn't recommended.

Did you consider upgrading only your engine, and keep your hosts 4.3 until you 
can upgrade them later?

Best regards,
--
Didi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/QSBZGMZ3NXRYQWO7ZH6O4NRUU4FBUXI7/

[ovirt-users] Re: Fix corrupt self-hosted engine

[Alex K]

On Mon, Nov 23, 2020 at 10:09 AM Yedidyah Bar David  wrote:

> On Mon, Nov 23, 2020 at 9:54 AM Alex K  wrote:
> >
> >
> >
> > On Sun, Nov 22, 2020 at 8:57 AM Yedidyah Bar David 
> wrote:
> >>
> >> On Thu, Nov 19, 2020 at 9:43 PM Alex K  wrote:
> >>>
> >>>
> >>>
> >>> On Thu, Nov 19, 2020 at 5:31 PM Alex K 
> wrote:
> 
>  Hi Didi,
> 
>  On Thu, Nov 19, 2020 at 5:13 PM Yedidyah Bar David 
> wrote:
> >
> > On Thu, Nov 19, 2020 at 4:37 PM Alex K 
> wrote:
> >>
> >> Hi all,
> >>
> >> I have a corrupt self-hosted engine (with several file system
> errors, postgres not able to start) and thus it does not give access to the
> web UI. This happened following an unlucky split brain resolution (I am
> running 2 nodes). The two hosts are running VMs also which I would like to
> keep running as they are needed.
> >>
> >> When trying to boot into rescue mode (using
> systemd.unit=emergency.target boot parameter) I get a cursor and nothing
> else.
> >
> >
> > This means that more than just the DB is corrupt...
> >
> >>
> >>
> >> I have backups of engine files with scope all (using the
> engine-backup tool).
> >> What is the best approach to try and fix the engine or redeploy.
> >
> >
> > If you are careful, and know what you are doing, you can try
> something like the following. I am not giving many details, hopefully you
> can find on the net tutorials about how to use the things I suggest:
> >
> > 1. Move to global maintenance
> >
> > 2. Stop the current dead vm (if needed)
> >
> > 3. Find current vm conf, edit it to boot from a rescue iso image of
> your preference or from net/PXE etc., and start the vm with '--vm-conf'
> pointing to your edited file.
> >
> > 4. Connect a console (hosted-engine --console, or 'virsh console',
> or use '--add-console-password' and remote viewer, if needed)
> >
> > 5. Clean the disk and install the OS, oVirt, etc.
> >
> > 6. Copy your backup into the vm and restore with engine-backup
> >
> > 7. Then cleanly stop the machine, exit global maint, and let HA
> start it (or start it yourself with --vm-start).
> >
> > At the time, we had a bug [1] to document this. The result is [2].
> It does not detail how to boot/reinstall os/etc., only restore (if e.g. db
> is dead but fs is ok).
> > For something somewhat similar to what you want, see also [3], which
> uses guestfish. Might be useful, depending on how badly your disk is
> corrupted.
> 
>  I went with the guestfish approach. It has fixed some fs issues and
> now the yum etc seem fine apart from postgres.
>  I had tried previously to uninstall/install packages so I ended
> installing them again with yum install ovirt\*setup\*.
>  Now I think I have to run engine-setup but I get the error:
> 
>   Failed to execute stage 'Environment setup': Cannot connect to
> Engine database using existing credentials: engine@localhost:5432
> >>>
> >>> Seems that I need to have psql running to be able to run engine-backup
> --mode=restore. Are there any steps how one could manually prepare pgsql
> for ovirt so as to attempt restoration?
> >>
> >>
> >> Replying again, also to conclude this part of your episode: Generally
> speaking, that's not needed. restore --provision-all-databases should do
> that for you.
> >
> > Seems that when pgsql is down nothing can be done. You need at least
> pgsql up and running (e clean state will do) so as to be able to proceed
> with restoration.
>
> Do you still have logs from this? Both engine-backup's (default to
> /var/log/ovirt-engine-backup/something if you do not pass --log) and
> ovirt-engine-provisiondb which it runs (at
> /var/log/ovirt-engine/setup).
>
I was using --provision-all-databases flag when trying to restore. I might
retest to double check. When the pgsql was down, I was getting:

2020-11-19 22:06:35 4947: Start of engine-backup mode restore scope all
file /var/backup/daily.0/engine-backup.gz
2020-11-19 22:06:35 4947: OUTPUT: Start of engine-backup with mode 'restore'
2020-11-19 22:06:35 4947: OUTPUT: scope: all
2020-11-19 22:06:35 4947: OUTPUT: archive file:
/var/backup/daily.0/engine-backup.gz
2020-11-19 22:06:35 4947: OUTPUT: log file: restore.log
2020-11-19 22:06:35 4947: Setting scl env for rh-postgresql10
2020-11-19 22:06:35 4947: OUTPUT: Preparing to restore:
2020-11-19 22:06:35 4947: OUTPUT: - Unpacking file
'/var/backup/daily.0/engine-backup.gz'
2020-11-19 22:06:35 4947: Opening tarball
/var/backup/daily.0/engine-backup.gz to /tmp/engine-backup.63eeNqt4NH
2020-11-19 22:06:35 4947: Verifying hash
2020-11-19 22:06:35 4947: Verifying version
2020-11-19 22:06:35 4947: Reading config
2020-11-19 22:06:35 4947: OUTPUT: Restoring:
2020-11-19 22:06:35 4947: OUTPUT: - Files
2020-11-19 22:06:35 4947: Restoring files
2020-11-19 22:06:36 4947: Reloading configuration
2020-11-19 22:06:36 4947: Generating pgpass
2020-11-19 

[ovirt-users] Re: ovirt 4.3 cannot upload ISO to data domain

[Alex K]

On Mon, Nov 23, 2020 at 4:43 PM Facundo Badaracco 
wrote:

> Hi everyone.
>
> Im trying to upload a ISO to my data domain, the GUI gives me this error 
> "Connection
> to ovirt-imageio service has failed. Ensure that ovirt-engine certificate
> 
>  is
> registered as a valid CA in the browser.".
>
is the imageio service running ok?  At engine: systemctl status
ovirt-imageio-proxy
Also, when connecting at the engine web UI, is the browser happy with the
certificate of the UI?

>
> the image fails whne trying to upload.
>
> i have added the certificate in chrome, but inst working.
>
> Some help? any other way to upload?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/47YYPUF3NA2SHO2ZL4JAPKULUCMH6JK4/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/YZGGJMCM76MLESWAQRD6BZDTTQV6BLGZ/

[ovirt-users] Re: bond or different networks for frontend and backend

[Alex K]

On Tue, Nov 24, 2020 at 10:40 AM jb  wrote:

> Hello,
>
> here in the description
> (
> https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html)
>
> it says that we should have at least 2 interfaces to separate frontend
> and backend traffic.
>
> How is this when I have 4 nics and I make with all one bond interface,
> is this not better in terms of performance? What is your recommendation
> with 4 x 1Gbit nics?
>
In terms of performance and stability, it is better to assign one NIC for
ovirtmgmt (frontend web, management net) + 3 nics in bond for the gluster
storage network. You could also assign the migration network at same bond.
Though I personally prefer to not mix gluster net with migration.

>
> Best regards
>
> Jonathan
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/5RHYMKE4JSMZF4U4GK2JWUAIBYYCLM2C/

[ovirt-users] bond or different networks for frontend and backend

[jb]

Hello,

here in the description 
(https://www.ovirt.org/documentation/gluster-hyperconverged/chap-Single_node_hyperconverged.html) 
it says that we should have at least 2 interfaces to separate frontend 
and backend traffic.


How is this when I have 4 nics and I make with all one bond interface, 
is this not better in terms of performance? What is your recommendation 
with 4 x 1Gbit nics?


Best regards

Jonathan

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/P5ZLQLG2TZN56IWZ5HC4ZDST66H5DHLO/

[ovirt-users] oVirt 4.4 and Active directory

[Latchezar Filtchev]

Hello All,

Fresh standalone installation of oVirt 4.3 (CentOS 7) . Execution of 
ovirt-engine-extension-aaa-ldap-setup completes normally and DC is connected to 
AD (Domain functional level: Windows Server 2008 ).

On the same hardware fresh standalone installation of oVirt 4.4.
Installation of engine completed with warning:

2020-11-23 14:50:46,159+0200 WARNING 
otopi.plugins.ovirt_engine_common.base.network.hostname 
hostname._validateFQDNresolvability:308 Failed to resolve 44-8.mb118.local 
using DNS, it can be resolved only locally

Despite warning engine portal is resolvable after installation.

Execution of ovirt-engine-extension-aaa-ldap-setup ends with:

[ INFO  ] Stage: Environment customization
  Welcome to LDAP extension configuration program
  Available LDAP implementations:
   1 - 389ds
   2 - 389ds RFC-2307 Schema
   3 - Active Directory
   4 - IBM Security Directory Server
   5 - IBM Security Directory Server RFC-2307 Schema
   6 - IPA
   7 - Novell eDirectory RFC-2307 Schema
   8 - OpenLDAP RFC-2307 Schema
   9 - OpenLDAP Standard Schema
  10 - Oracle Unified Directory RFC-2307 Schema
  11 - RFC-2307 Schema (Generic)
  12 - RHDS
  13 - RHDS RFC-2307 Schema
  14 - iPlanet
  Please select: 3
  Please enter Active Directory Forest name: mb118.local
[ INFO  ] Resolving Global Catalog SRV record for mb118.local
[WARNING] Cannot resolve Global Catalog SRV record for mb118.local. Please 
check you have entered correct Active Directory forest name and check that 
forest is resolvable by your system DNS servers
[ ERROR ] Failed to execute stage 'Environment customization': Active Directory 
forest is not resolvable, please make sure you've entered correct forest name. 
If for some reason you can't use forest and you need some special configuration 
instead, please refer to examples directory provided by 
ovirt-engine-extension-aaa-ldap package.
[ INFO  ] Stage: Clean up
  Log file is available at 
/tmp/ovirt-engine-extension-aaa-ldap-setup-20201123113909-bj749k.log:
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination

Can someone advise on this?

Thank you!
Best,
Latcho

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/PPE4QB6GKE2GYRFMMJTBTN7VQTMGDCCX/