Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers
Yair, With the latest ovirt-engine, I'm still getting the invalid argument ldapservers if I tried to use the -ldapservers in engine-manage-domains. # rpm -qa ovirt* ovirt-host-deploy-java-1.0.2-1.el6.noarch ovirt-engine-userportal-3.2.2-1.1.el6.noarch ovirt-engine-setup-3.2.2-1.1.el6.noarch ovirt-engine-3.2.2-1.1.el6.noarch ovirt-engine-sdk-3.2.0.10-1.el6.noarch ovirt-log-collector-3.2.2-1.el6.noarch ovirt-engine-backend-3.2.2-1.1.el6.noarch ovirt-engine-genericapi-3.2.2-1.1.el6.noarch ovirt-image-uploader-3.2.2-1.el6.noarch ovirt-engine-cli-3.2.0.11-1.el6.noarch ovirt-engine-restapi-3.2.2-1.1.el6.noarch ovirt-engine-dbscripts-3.2.2-1.1.el6.noarch ovirt-release-el6-7-1.noarch ovirt-host-deploy-1.0.2-1.el6.noarch ovirt-iso-uploader-3.2.2-1.el6.noarch ovirt-engine-webadmin-portal-3.2.2-1.1.el6.noarch ovirt-engine-tools-3.2.2-1.1.el6.noarch Thanks, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers
On 08/21/2013 12:20 PM, H. Haven Liu wrote: Yair, With the latest ovirt-engine, I'm still getting the invalid argument ldapservers if I tried to use the -ldapservers in engine-manage-domains. # rpm -qa ovirt* ovirt-host-deploy-java-1.0.2-1.el6.noarch ovirt-engine-userportal-3.2.2-1.1.el6.noarch ovirt-engine-setup-3.2.2-1.1.el6.noarch ovirt-engine-3.2.2-1.1.el6.noarch ovirt-engine-sdk-3.2.0.10-1.el6.noarch ovirt-log-collector-3.2.2-1.el6.noarch ovirt-engine-backend-3.2.2-1.1.el6.noarch ovirt-engine-genericapi-3.2.2-1.1.el6.noarch ovirt-image-uploader-3.2.2-1.el6.noarch ovirt-engine-cli-3.2.0.11-1.el6.noarch ovirt-engine-restapi-3.2.2-1.1.el6.noarch ovirt-engine-dbscripts-3.2.2-1.1.el6.noarch ovirt-release-el6-7-1.noarch ovirt-host-deploy-1.0.2-1.el6.noarch ovirt-iso-uploader-3.2.2-1.el6.noarch ovirt-engine-webadmin-portal-3.2.2-1.1.el6.noarch ovirt-engine-tools-3.2.2-1.1.el6.noarch Thanks, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users the syntaqx is a bit misleading - did you -ldapservers=xxx? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers
I would also use the fqdn - we saw some issue with AD (yes, I saw you're using IPA, it just rang a bell). so please use -ldapServers=mymachine.example.com and not the IP address of mymachine.example.com Will it be possible to get logs if you still encounter issues? Yair - Original Message - From: Itamar Heim ih...@redhat.com To: H. Haven Liu haven@ucla.edu Cc: users@ovirt.org, Yair Zaslavsky yzasl...@redhat.com Sent: Thursday, August 22, 2013 1:31:50 AM Subject: Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers On 08/21/2013 12:20 PM, H. Haven Liu wrote: Yair, With the latest ovirt-engine, I'm still getting the invalid argument ldapservers if I tried to use the -ldapservers in engine-manage-domains. # rpm -qa ovirt* ovirt-host-deploy-java-1.0.2-1.el6.noarch ovirt-engine-userportal-3.2.2-1.1.el6.noarch ovirt-engine-setup-3.2.2-1.1.el6.noarch ovirt-engine-3.2.2-1.1.el6.noarch ovirt-engine-sdk-3.2.0.10-1.el6.noarch ovirt-log-collector-3.2.2-1.el6.noarch ovirt-engine-backend-3.2.2-1.1.el6.noarch ovirt-engine-genericapi-3.2.2-1.1.el6.noarch ovirt-image-uploader-3.2.2-1.el6.noarch ovirt-engine-cli-3.2.0.11-1.el6.noarch ovirt-engine-restapi-3.2.2-1.1.el6.noarch ovirt-engine-dbscripts-3.2.2-1.1.el6.noarch ovirt-release-el6-7-1.noarch ovirt-host-deploy-1.0.2-1.el6.noarch ovirt-iso-uploader-3.2.2-1.el6.noarch ovirt-engine-webadmin-portal-3.2.2-1.1.el6.noarch ovirt-engine-tools-3.2.2-1.1.el6.noarch Thanks, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users the syntaqx is a bit misleading - did you -ldapservers=xxx? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers
Hello, Please see below: [root@panther ~]# host -t SRV _ldap._tcp.domain.local _ldap._tcp.domain.local has SRV record 0 0 389 auth.domain.local. [root@panther ~]# engine-manage-domains -action=add -domain=domain.local -provider=ipa -user=admin -interactive -ldapservers=ldap://auth.domain.local Invalid argument ldapservers [root@panther ~]# engine-manage-domains -action=add -domain=domain.local -provider=ipa -user=admin -interactive -ldapservers=auth.domain.local Invalid argument ldapservers [root@panther ~]# cat /var/log/ovirt-engine/engine-manage-domains.log ... 2013-08-21 18:05:34,079 ERROR [org.ovirt.engine.core.domains.ManageDomains] Invalid argument ldapservers 2013-08-21 18:05:40,324 ERROR [org.ovirt.engine.core.domains.ManageDomains] Invalid argument ldapservers [root@panther ~]# Haven On Aug 21, 2013, at 5:41 PM, Yair Zaslavsky yzasl...@redhat.com wrote: I would also use the fqdn - we saw some issue with AD (yes, I saw you're using IPA, it just rang a bell). so please use -ldapServers=mymachine.example.com and not the IP address of mymachine.example.com Will it be possible to get logs if you still encounter issues? Yair - Original Message - From: Itamar Heim ih...@redhat.com To: H. Haven Liu haven@ucla.edu Cc: users@ovirt.org, Yair Zaslavsky yzasl...@redhat.com Sent: Thursday, August 22, 2013 1:31:50 AM Subject: Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers On 08/21/2013 12:20 PM, H. Haven Liu wrote: Yair, With the latest ovirt-engine, I'm still getting the invalid argument ldapservers if I tried to use the -ldapservers in engine-manage-domains. # rpm -qa ovirt* ovirt-host-deploy-java-1.0.2-1.el6.noarch ovirt-engine-userportal-3.2.2-1.1.el6.noarch ovirt-engine-setup-3.2.2-1.1.el6.noarch ovirt-engine-3.2.2-1.1.el6.noarch ovirt-engine-sdk-3.2.0.10-1.el6.noarch ovirt-log-collector-3.2.2-1.el6.noarch ovirt-engine-backend-3.2.2-1.1.el6.noarch ovirt-engine-genericapi-3.2.2-1.1.el6.noarch ovirt-image-uploader-3.2.2-1.el6.noarch ovirt-engine-cli-3.2.0.11-1.el6.noarch ovirt-engine-restapi-3.2.2-1.1.el6.noarch ovirt-engine-dbscripts-3.2.2-1.1.el6.noarch ovirt-release-el6-7-1.noarch ovirt-host-deploy-1.0.2-1.el6.noarch ovirt-iso-uploader-3.2.2-1.el6.noarch ovirt-engine-webadmin-portal-3.2.2-1.1.el6.noarch ovirt-engine-tools-3.2.2-1.1.el6.noarch Thanks, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users the syntaqx is a bit misleading - did you -ldapservers=xxx? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers
- Original Message - From: H. Haven Liu haven@ucla.edu To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Thursday, August 22, 2013 4:10:34 AM Subject: Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers Hello, Please see below: [root@panther ~]# host -t SRV _ldap._tcp.domain.local _ldap._tcp.domain.local has SRV record 0 0 389 auth.domain.local. [root@panther ~]# engine-manage-domains -action=add -domain=domain.local -provider=ipa -user=admin -interactive -ldapservers=ldap://auth.domain.local Invalid argument ldapservers Should not contain ldap:// [root@panther ~]# engine-manage-domains -action=add -domain=domain.local -provider=ipa -user=admin -interactive -ldapservers=auth.domain.local Invalid argument ldapservers [root@panther ~]# cat /var/log/ovirt-engine/engine-manage-domains.log Should work. If you run the tool without any parameters, what do u see? (equals to running engine-manage-domains -h) - can you paste us? ... 2013-08-21 18:05:34,079 ERROR [org.ovirt.engine.core.domains.ManageDomains] Invalid argument ldapservers 2013-08-21 18:05:40,324 ERROR [org.ovirt.engine.core.domains.ManageDomains] Invalid argument ldapservers [root@panther ~]# Haven On Aug 21, 2013, at 5:41 PM, Yair Zaslavsky yzasl...@redhat.com wrote: I would also use the fqdn - we saw some issue with AD (yes, I saw you're using IPA, it just rang a bell). so please use -ldapServers=mymachine.example.com and not the IP address of mymachine.example.com Will it be possible to get logs if you still encounter issues? Yair - Original Message - From: Itamar Heim ih...@redhat.com To: H. Haven Liu haven@ucla.edu Cc: users@ovirt.org, Yair Zaslavsky yzasl...@redhat.com Sent: Thursday, August 22, 2013 1:31:50 AM Subject: Re: [Users] oVirt and IPA (LDAP/KERBEROS) - Invalid argument ldapervers On 08/21/2013 12:20 PM, H. Haven Liu wrote: Yair, With the latest ovirt-engine, I'm still getting the invalid argument ldapservers if I tried to use the -ldapservers in engine-manage-domains. # rpm -qa ovirt* ovirt-host-deploy-java-1.0.2-1.el6.noarch ovirt-engine-userportal-3.2.2-1.1.el6.noarch ovirt-engine-setup-3.2.2-1.1.el6.noarch ovirt-engine-3.2.2-1.1.el6.noarch ovirt-engine-sdk-3.2.0.10-1.el6.noarch ovirt-log-collector-3.2.2-1.el6.noarch ovirt-engine-backend-3.2.2-1.1.el6.noarch ovirt-engine-genericapi-3.2.2-1.1.el6.noarch ovirt-image-uploader-3.2.2-1.el6.noarch ovirt-engine-cli-3.2.0.11-1.el6.noarch ovirt-engine-restapi-3.2.2-1.1.el6.noarch ovirt-engine-dbscripts-3.2.2-1.1.el6.noarch ovirt-release-el6-7-1.noarch ovirt-host-deploy-1.0.2-1.el6.noarch ovirt-iso-uploader-3.2.2-1.el6.noarch ovirt-engine-webadmin-portal-3.2.2-1.1.el6.noarch ovirt-engine-tools-3.2.2-1.1.el6.noarch Thanks, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users the syntaqx is a bit misleading - did you -ldapservers=xxx? ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
