[ovirt-users] Re: User & Roles

[Gonzalo Rafuls]

Hi Simon,

If you plan to add those users from an LDAP server you can check the
documentation [1] for AAA on how to setup this integration.

You can find the additional documentation for adding roles here [2],
and for adding users here [3].
Let me know if you still need some help with that.

Regards,
Gonza.-

[1] 
https://ovirt.org/documentation/admin-guide/chap-Users_and_Roles/#configuring-an-external-ldap-provider-interactive-setup
[2] 
https://ovirt.org/documentation/admin-guide/chap-Global_Configuration/#creating-a-new-role
[3] 
https://ovirt.org/documentation/admin-guide/chap-Users_and_Roles/#adding-users-and-assigning-user-portal-permissions

On Thu, May 17, 2018 at 5:48 PM, Simon Coter  wrote:
> Hi,
>
> I'm looking how-to create roles/users and give them access to specific
> datacenter/host(s).
> I looked on the documentation but I hadn't been able to find the proper
> section; anyone that can give me an help ?
> Thanks
>
> Simon
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org

Re: [ovirt-users] Assistance needed...

[Gonzalo Rafuls]

Here [1] you can find some clarification as to what guest agent is plus
instructions on how to install on different OSs.

[1] https://www.ovirt.org/documentation/internal/guest-
agent/understanding-guest-agents-and-other-tools/

Cheers,
Gonza.-

On Mon, Mar 12, 2018 at 9:13 PM, Dan Yasny  wrote:

> Have you tried installing the guest agent?
>
> On Mon, Mar 12, 2018 at 6:39 AM, Nasrum Minallah Manzoor <
> nasrumminall...@hotmail.com> wrote:
>
>> Hi,
>>
>>
>>
>> I need assistance regarding encircled in red in the attached! How can I
>> remove the error “The latest guest agent needs to be installed and running
>> on the guest”.
>>
>>
>>
>> Else everything is working fine!
>>
>>
>>
>>
>>
>> Kindly response as soon as possible!
>>
>>
>>
>>
>>
>>
>>
>> Regards,
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt tasks "stuck"

[Gonzalo Rafuls]

Hi Jim,

You can try the taskcleaner script on dbutils.
For instance:
# PGPASSWORD={pass} ./taskcleaner.sh -u engine -d engine -t {disk,snapshot}
-z

I recommend you to check all the options available for it.

Cheers,
Gonza.-

On Tue, Apr 25, 2017 at 5:58 PM, Jim Kusznir  wrote:

> (sorry. e-mail client sent message prematurely)
>
> Ok, I figured out that this needs to be run on the engine, I figured out
> that PGPASSWORD is the postgres password, and I finally figured out that
> the db password is stored in:
> /etc/ovirt-engine/engine.conf.d/10-setup-database.conf
>
> Unfortunately, when I run the command provided, I get just an empty line
> back, no UUIDs.
>
> I looked in the gui, under the disks tab and found the ID there.  I ran
> the command on the two UUIDs for the two disks in question:
>
> [root@ovirt ~]# PGPASSWORD= 
> /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
> -q -t disk -u engine
>
> [root@ovirt ~]# PGPASSWORD= 
> /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
> -t snapshot -u engine 405fabe0-873c-4e8e-ae10-9990debf96c0
> Caution, this operation may lead to data corruption and should be used
> with care. Please contact support prior to running this command
> Are you sure you want to proceed? [y/n]
> y
> select fn_db_unlock_snapshot('405fabe0-873c-4e8e-ae10-9990debf96c0');
>
>
> INSERT 0 1
> unlock snapshot 405fabe0-873c-4e8e-ae10-9990debf96c0 completed
> successfully.
> [root@ovirt ~]# PGPASSWORD= 
> /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
> -t snapshot -u engine eada2c1c-1d99-4391-9be3-352c411a0a91
> Caution, this operation may lead to data corruption and should be used
> with care. Please contact support prior to running this command
> Are you sure you want to proceed? [y/n]
> y
> select fn_db_unlock_snapshot('eada2c1c-1d99-4391-9be3-352c411a0a91');
>
>
> INSERT 0 1
> unlock snapshot eada2c1c-1d99-4391-9be3-352c411a0a91 completed
> successfully.
>
> Unfortunately, this doesn't appear to have accomplished anything.  In the
> web UI, the disks are still shown as locked, and the tasks are still shown
> as pending.
>
> I logged into a host node and found the directory by the same UUID:
>
> root@ovirt1 images]# cd 405fabe0-873c-4e8e-ae10-9990debf96c0/
> [root@ovirt1 405fabe0-873c-4e8e-ae10-9990debf96c0]# ls
> 8e4a02a7-760b-478c-a694-81466d601356  
> 8e4a02a7-760b-478c-a694-81466d601356.lease
>  8e4a02a7-760b-478c-a694-81466d601356.meta
> [root@ovirt1 405fabe0-873c-4e8e-ae10-9990debf96c0]# du -sh
> 514M .
>
>
> I'm assuming I should NOT just rm these files and the containing
> directory
>
> Suggestions moving forward?
>
>
> On Tue, Apr 25, 2017 at 8:50 AM, Jim Kusznir  wrote:
>
>> Ok, I figured out that this needs to be run on the engine, I figured out
>> that PGPASSWORD
>>
>> On Tue, Apr 4, 2017 at 2:02 AM, Nathanaël Blanchet 
>> wrote:
>>
>>> For instance
>>>
>>> PGPASSWORD=X /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
>>> -q -t disk -u engine
>>> 296c010e-3c1d-4008-84b3-5cd39cff6aa1 | 525a4dda-dbbb-4872-a5f1-8ac2ae
>>> d48392
>>>
>>> PGPASSWORD=X /usr/share/ovirt-engine/setup/dbutils/unlock_entity.sh
>>> -t snapshot -u engine 525a4dda-dbbb-4872-a5f1-8ac2aed48392
>>>
>>> Le 01/04/2017 à 19:55, Jim Kusznir a écrit :
>>>
>>> Hi:
>>>
>>> A few days ago I attempted to create a new VM from one of the
>>> ovirt-image-repository images.  I haven't really figured out how to use
>>> this reliably yet, and in this case, while trying to import an image, one
>>> of my nodes spontaneously rebooted (or at least, it looked like that to
>>> ovirt...Not sure if it had an OOM issue or something else).  I assume it
>>> was the node that got the task of importing those images, as ever since
>>> then (several days now), on my management screen under "Tasks" it shows the
>>> attempted imports, still stuck in "processing".  I'm quite certain its not
>>> actually processing.  I do believe it used some of my storage up in the
>>> partially downloaded images, though (they do show up as
>>> GlanceDisk-, with a status of "Locked" under the main Disks tab.
>>>
>>> How do I "properly" recover from this (abort the task and delete the
>>> partial download)?
>>>
>>> Thanks!
>>>
>>> --Jim
>>>
>>>
>>> ___
>>> Users mailing 
>>> listUsers@ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>> --
>>> Nathanaël Blanchet
>>>
>>> Supervision réseau
>>> Pôle Infrastrutures Informatiques
>>> 227 avenue Professeur-Jean-Louis-Viala
>>> 34193 MONTPELLIER CEDEX 5   
>>> Tél. 33 (0)4 67 54 84 55
>>> Fax  33 (0)4 67 54 84 14blanc...@abes.fr
>>>
>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] log out event but not log in?

[Gonzalo Rafuls]

On Wed, May 3, 2017 at 10:55 AM, Gianluca Cecchi <gianluca.cec...@gmail.com>
wrote:

> On Fri, Feb 24, 2017 at 5:28 PM, Gonzalo Rafuls <go...@redhat.com> wrote:
>
>>
>> On Thu, Feb 23, 2017 at 8:51 AM, Yura Poltoratskiy <yurapolt...@gmail.com
>> > wrote:
>>
>>> I have the same issue since oVirt 4.0.x.
>>>
>>> 21.02.2017 10:28, Gianluca Cecchi пишет:
>>>
>>>> Hello,
>>>> In oVirt 4.1 web admin gui I see events about users logging out (they
>>>> have been created on internal domain with ovirt-aaa-jdbc-tool command),
>>>> but I don't see the corresponding log in event.
>>>> The same is true for the default admin@internal user.
>>>> Is there any reason or is it a bug?
>>>>
>>>
>> Looks like a bug to me. Raised [1] for it.
>> Thanks for pointing that out!
>>
>> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1426715
>>
>> Cheers,
>> Gonza.-
>>
>>
>>>
>>>>
> I see that it is now in QA.
> Is it possible to test against a running 4.1.1 or changes are too much?
> From reading the bugzilla I don't see a gerrit reference which files are
> involved...
>

Just verified on 4.1.2. You should be able to see the reference to the
gerrit patch under the external trackers section on that BZ.

https://gerrit.ovirt.org/#/c/73287/


>
> Gianluca
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Ovirt Setup Template.

[Gonzalo Rafuls]

Hi,

There are a couple of Ansible modules you can combine to achieve this, like
[1] for setup, [2] for VMs and [3] for network.

Cheers,
Gonza.-

[1]
https://github.com/rhevm-qe-automation/ovirt-ansible/tree/master/roles/ovirt-engine-setup
[2]
https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/cloud/ovirt/ovirt_vms.py
[3]
https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/cloud/ovirt/ovirt_networks.py


On Wed, Mar 29, 2017 at 1:24 PM, TranceWorldLogic . <
tranceworldlo...@gmail.com> wrote:

> Hi,
>
> I was just trying to explore ovirt and was searching for tool that can
> help me to create ovirt setup template.
> But not found much information online. So I tried backup and restore
> method but that not solve my problem.
>
> I am looking for tool, in which I will provide host and number of VM and
> network configuration as template and then on new machine that tool will
> execute template and it setup ovirt engine.
>
> Please let me know if such tool is available in ovirt.
>
> Thanks,
> ~Rohit
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] log out event but not log in?

[Gonzalo Rafuls]

On Thu, Feb 23, 2017 at 8:51 AM, Yura Poltoratskiy 
wrote:

> I have the same issue since oVirt 4.0.x.
>
> 21.02.2017 10:28, Gianluca Cecchi пишет:
>
>> Hello,
>> In oVirt 4.1 web admin gui I see events about users logging out (they
>> have been created on internal domain with ovirt-aaa-jdbc-tool command),
>> but I don't see the corresponding log in event.
>> The same is true for the default admin@internal user.
>> Is there any reason or is it a bug?
>>
>
Looks like a bug to me. Raised [1] for it.
Thanks for pointing that out!

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1426715

Cheers,
Gonza.-


> Thanks,
>> Gianluca
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt java sdk: Port is invalid

[Gonzalo Rafuls]

Try adding port 443 to the URL variable.

private static final String URL = "https://10.64.0.204:443/api
";

On Tue, Apr 26, 2016 at 9:45 AM, David David  wrote:

> code correction:
> In URL variable , using server name, which matches with certificate, not
> address.
>
> 2016-04-26 10:29 GMT+03:00 David David :
>
>> hi.
>>
>> I have a remote server running with oVirt 3.5
>>
>> I'm using ovirt-engine-sdk-java-3.5.1.0-1.fc20.noarch.
>>
>> there is code example:
>> my app:
>> =
>> package lab01;
>>
>> import java.io.IOException;
>> import java.util.List;
>> import java.util.UUID;
>>
>> import org.apache.http.client.ClientProtocolException;
>>
>> import org.ovirt.engine.sdk.*;
>> import org.ovirt.engine.sdk.decorators.*;
>> import org.ovirt.engine.sdk.entities.*;
>> import org.ovirt.engine.sdk.exceptions.*;
>>
>> public class Hello {
>>
>> private static final String URL = "https://10.64.0.204/api;;
>> private static final String crt =
>> "/home/david/Desktop/dev/server.truststore";
>> private static final String user = "admin@internal";
>> private static final String pass = "";
>>
>> public static void main(String[] args) throws
>> ClientProtocolException, ServerException,
>> UnsecuredConnectionAttemptError, IOException {
>>
>> Api api = new Api(URL, user, pass, crt);
>>
>> }
>> }
>> ==
>>
>> Description of problem:
>>
>> While trying to start my app localy on my pc, I am getting an exception:
>>
>> Exception in thread "main" java.lang.IllegalArgumentException: Port is
>> invalid
>> at org.apache.http.util.Args.check(Args.java:36)
>> at org.apache.http.conn.scheme.Scheme.(Scheme.java:92)
>> at
>> org.ovirt.engine.sdk.web.ConnectionsPoolBuilder.createSchemeRegistry(ConnectionsPoolBuilder.java:358)
>> at
>> org.ovirt.engine.sdk.web.ConnectionsPoolBuilder.createPoolingClientConnectionManager(ConnectionsPoolBuilder.java:289)
>> at
>> org.ovirt.engine.sdk.web.ConnectionsPoolBuilder.createDefaultHttpClient(ConnectionsPoolBuilder.java:261)
>> at
>> org.ovirt.engine.sdk.web.ConnectionsPoolBuilder.build(ConnectionsPoolBuilder.java:413)
>> at org.ovirt.engine.sdk.Api.(Api.java:131)
>> at lab01.Hello.main(Hello.java:24)
>>
>> But I can connect to the server in https using curl or webrowser.
>>
>> How to fix it ?
>>
>>
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

[Gonzalo Rafuls]

On Thu, Mar 24, 2016 at 6:59 PM, Ollie Armstrong <ol...@fubra.com> wrote:

> Thanks for the reply Gonza.  When you've quoted what you've used, what
> should I use for "ticket_content" in this case? Is that the literal
> string there?
>

Apparently you can get it as well with something like
"".

Only thing to change then is between curly brackets {}.


> On 24 March 2016 at 17:52, Gonzalo Rafuls <go...@redhat.com> wrote:
> > I was able to get the proxy ticket with curl like this:
> >
> > # curl -k -X POST \
> > -H "Authorization: Basic YWRLKDFLKnfLfdNLDKDFnsldssL2" \
> > -H "Accept: application/xml" \
> > -H "Content-Type: application/xml" \
> > -d
> >
> "ticket_content"
> > \
> > -L
> > https://
> {engine}:443/ovirt-engine/api/vms/{vm:id}/graphicsconsoles/{graphicsconsole:id}/proxyticket
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Using REST API to get a proxyticket

[Gonzalo Rafuls]

Hi Ollie,

I was able to get the proxy ticket with curl like this:

# curl -k -X POST \
-H "Authorization: Basic YWRLKDFLKnfLfdNLDKDFnsldssL2" \
-H "Accept: application/xml" \
-H "Content-Type: application/xml" \
-d
"ticket_content"
\
-L https://
{engine}:443/ovirt-engine/api/vms/{vm:id}/graphicsconsoles/{graphicsconsole:id}/proxyticket

Hope this helps.

Cheers,
Gonza.-

On Thu, Mar 24, 2016 at 4:44 PM, Ollie Armstrong  wrote:

> Hi all,
>
> I'm attempting to use the REST API to get a proxy ticket as BZ1181030
> [0] has added support for, but I am unable to find _any_ documentation
> on how to use this new API call.
>
> All I've found is the git commit message in gerrit [1].  Not quite
> understanding how to interpret this, I've attempted to POST the
> following:
>
> 
>
> As well as:
>
>   ticket_content 
> 
>
> Both of these, and indeed using any other data I can think of, results
> in an NPE being logged in engine.log.  I've uploaded my engine.log [2]
> which is produced when I POST "" to the endpoint.
>
> Is anyone able to tell me how to use this endpoint?  I'm assuming I
> get the NPE because I'm not POSTing the correct data.  The overall
> goal of this is to be able to embed a NoVNC console in our own web UI,
> this is the last piece of the puzzle for me to implement this.
>
> Thanks,
> Ollie
>
> [0] https://bugzilla.redhat.com/show_bug.cgi?id=1181030
> [1] https://gerrit.ovirt.org/#/c/42412/
> [2] http://ix.io/uVP
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Import OVA

[Gonzalo Rafuls]

On Wed, Nov 25, 2015 at 5:52 PM, Melissa Mesler  wrote:

> I am trying to follow the steps below but I don't see anywhere that allows
> me to import the template. There is no import function at all within any
> tab of "Template." Can someone help me with this?
>

After uploading the OVA file with image-uploader to the export domain, go
to "Storage" tab, click on the export domain and then click on "Template
Import" tab below, look for your template image and then click on Import.
After this you should be able to see the template under the "Template" tab.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Import OVA

[Gonzalo Rafuls]

On Wed, Nov 25, 2015 at 3:10 PM, Massimo Mad  wrote:

> How i cam inport a virtual appliance (OVA), what should I write in the
> field "path" ?
>

You can upload the OVA file to export domain with the image-uploader [1].
Then import the template from the domain itself and create a VM with that
template.

Regards,
Gonza.-

[1] http://www.ovirt.org/OVirt_engine_tools#engine-image-uploader

On Wed, Nov 25, 2015 at 3:10 PM, Massimo Mad  wrote:

> Hi,
> How i cam inport a virtual appliance (OVA), what should I write in the
> field "path" ?
> I try with 10.10.10.73:/export/nfsshare but i have this error:
> VDSM ovirtsrv102 command failed: ['Permission denied, please try again.',
> 'Permission denied, please try again.', 'Permission denied
> (publickey,gssapi-keyex,gssapi-with-mic,password).', '/usr/bin/tar:
> 10.10.10.73\\:/export/nfsshare: Cannot open: Input/output error',
> '/usr/bin/tar: Error is not recoverable: exiting now']
> I try to add the memory on a running vm ad i have this error:
> Failed to hot set memory to VM CoverterV2V-REL6. Underlying error message:
> unsupported configuration: unknown device type 'memory'
> VDSM ovirtsrv104 command failed: unsupported configuration: unknown device
> type 'memory'
>
> Regards
> Massimo
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] 'Enable Gluster Service' and 'Enable Virt Service' missing from New Cluster dialog in 3.6 rc

[Gonzalo Rafuls]

Hi Liam,

We had a similar issue [1] when installing oVirt with a config file and an
invalid value for applicationMode, which has already been resolved.
Additionally, you can find some instructions on the BZ for how to enable
these options back again.

Cheers,
Gonza.-

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1149575

On Wed, Oct 7, 2015 at 4:58 PM, Liam Curtis  wrote:

> Hello all,
>
> In oVirt Engine Version: 3.5.4.2-1.el7.centos, I have above two options
> when creating a new cluster.
>
> In oVirt Engine Version:
> 3.6.0-0.0.master.20150909083746.gitbcc44ff.el7.centos, I no longer have
> those options.
>
> I only have:
> Enable to set VM maintenance reason
> Enable to set Host maintenance reason
>
> Has this been removed or am I missing something? Do I need to enable
> gluster support somewhere in UI?
>
> Thanks in advance.
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] USB

[Gonzalo Rafuls]

Jose,

Haven't tried this one before but seems like it is possible:
http://www.ovirt.org/VDSM-Hooks/hostusb

Cheers,
Gonza.-

On Fri, Oct 2, 2015 at 11:02 AM,  wrote:

> Hello,
>
> It's possible for a VM to read a USB pen connetced to the host (oVirt 3.5)?
>
> Thanks
>
> José
>
> --
> --
> Jose Ferradeira
> http://www.logicworks.pt
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users