RE: ssvm NFS public ip

2018-04-13 Thread Nicolas Bouige 
Hi Swatisk,


Yep, here the repo/url :


KVM  (centos7):

[cloudstack]
name=cloudstack
baseurl=http://cloudstack.apt-get.eu/centos/7/4.11/
enabled=1
gpgcheck=0

MGMT-SRV (centos7) :

[cloudstack]
name=cloudstack
baseurl=http://cloudstack.apt-get.eu/centos/7/4.11/
enabled=1
gpgcheck=0

Systemvm-template :

http://cloudstack.apt-get.eu/systemvm/4.11/systemvmtemplate-4.11.0-kvm.qcow2.bz2


Best regards,
N.B



De : Swastik Mittal 
Envoyé : vendredi 13 avril 2018 10:19:03
À : users@cloudstack.apache.org
Objet : Re: ssvm NFS public ip

Hey Nicolas,

Can you mention the urls's you used finally to get everything working.

Regards
Swastik
 Sent with Mailtrack


On Thu, Apr 12, 2018 at 3:10 PM, Nicolas Bouige  wrote:

> Hello All,
>
> With this new deployement my ssvm is now okay.
> I saw my mistake...the URLs were good for mgmt and systemvm template...but
> not for the cloudstack-agent installed on KVM...
>
> Best regards,
>
> N.B
>
> -Message d'origine-
> De : Nicolas Bouige [mailto:n.bou...@dimsi.fr]
> Envoyé : jeudi 12 avril 2018 09:56
> À : users@cloudstack.apache.org
> Objet : RE: ssvm NFS public ip
>
> Hi Paul,
>
> I used repository from shapeblue for mgmt-server and systemvm-template.
> Im going to make a new fresh install (again :/) and double check the URL.
>
> Thanks,
>
> Best regards,
> N.B
>
>
> -Message d'origine-
> De : Paul Angus [mailto:paul.an...@shapeblue.com] Envoyé : jeudi 12 avril
> 2018 09:12 À : users@cloudstack.apache.org Objet : RE: ssvm NFS public ip
>
> Hi Nicolas, this usually happens if you mix redist and noredist builds of
> mgmt. server and system vm code.
>
> What URLs did you use for the management server repo and the system VM
> templates?
>
>
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>
> -Original Message-
> From: Nicolas Bouige 
> Sent: 11 April 2018 19:44
> To: users@cloudstack.apache.org
> Subject: RE: ssvm NFS public ip
>
> Hi ilya,
>
>
> Thanks for your answer
>
> Yes i did it already with no effect :/
>
>
> Best regards,
>
> N.B
>
> 
> De : ilya musayev  Envoyé : mercredi 11
> avril 2018 20:26:34 À : users@cloudstack.apache.org Objet : Re: ssvm NFS
> public ip
>
> There is a global setting you have to set to use internal non public IP.
>
> Try setting sec.storage.allow.internal.site to an internal network cidr.
>
> You may need to destroy ssvm for settings to take effect. In my case there
> is some sort of minor bug where it takes upward of 5 minutes for ssvm to
> program the internal routes, but since this is onetime operation - I just
> live with it.
>
> On Wed, Apr 11, 2018 at 10:50 AM Nicolas Bouige  wrote:
>
> > a small update about my problem.
> >
> > I 've recreated the zone from scratch this morning and  one of my
> > "cloudbr" used for the secondary storage was misconfigured.
> >
> > So Now, I can ping the secondary storage from KVM host, CS-MGMT,  SSVM
> > and mount the nfs on them...but...the agent still not going up and the
> > ssvm_check.sh give me an ip public for the nfs instead of the private.
> >
> >
> > i got only this error in /var/log:cloud.log :
> >
> > 17:30:22,600 ERROR AgentShell:477 - Unable to start agent: Resource
> > class not found: com.cloud.storage.resource.
> PremiumSecondaryStorageResource due
> > to: java.lang.ClassNotFoundException:
> > com.cloud.storage.resource.PremiumSecondaryStorageReso
> >   urce
> > Unable to start agent: Resource class not found:
> > com.cloud.storage.resource.Prem
> > iumSecondaryStorageResource due to: java.lang.ClassNotFoundException:
> > com.cloud.
> > storage.resource.PremiumSecondaryStorageResource
> >
> > i've tried to update a differente systemvm template with no success...
> > I 've compared the configuration of the ssvm with one of our
> > deployment and i juste noticed the "resource"
> > (org.apache.cloudstack.storage.resource.NfsSecondaryResource) was not
> > the same.
> > i changed it but still the same error...
> >
> > There is a way to find java binaries/script and  upload them on the ssvm
> ?
> >
> > If one of you have an idea, it would be appreciate.
> >
> > Thanks !
> >
> > Best regards,
> > N.B
> >
> >
>
>

Re: ssvm NFS public ip

2018-04-13 Thread Swastik Mittal 
Hey Nicolas,

Can you mention the urls's you used finally to get everything working.

Regards
Swastik
 Sent with Mailtrack


On Thu, Apr 12, 2018 at 3:10 PM, Nicolas Bouige  wrote:

> Hello All,
>
> With this new deployement my ssvm is now okay.
> I saw my mistake...the URLs were good for mgmt and systemvm template...but
> not for the cloudstack-agent installed on KVM...
>
> Best regards,
>
> N.B
>
> -Message d'origine-
> De : Nicolas Bouige [mailto:n.bou...@dimsi.fr]
> Envoyé : jeudi 12 avril 2018 09:56
> À : users@cloudstack.apache.org
> Objet : RE: ssvm NFS public ip
>
> Hi Paul,
>
> I used repository from shapeblue for mgmt-server and systemvm-template.
> Im going to make a new fresh install (again :/) and double check the URL.
>
> Thanks,
>
> Best regards,
> N.B
>
>
> -Message d'origine-
> De : Paul Angus [mailto:paul.an...@shapeblue.com] Envoyé : jeudi 12 avril
> 2018 09:12 À : users@cloudstack.apache.org Objet : RE: ssvm NFS public ip
>
> Hi Nicolas, this usually happens if you mix redist and noredist builds of
> mgmt. server and system vm code.
>
> What URLs did you use for the management server repo and the system VM
> templates?
>
>
>
> paul.an...@shapeblue.com
> www.shapeblue.com
> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK @shapeblue
>
>
>
>
> -Original Message-
> From: Nicolas Bouige 
> Sent: 11 April 2018 19:44
> To: users@cloudstack.apache.org
> Subject: RE: ssvm NFS public ip
>
> Hi ilya,
>
>
> Thanks for your answer
>
> Yes i did it already with no effect :/
>
>
> Best regards,
>
> N.B
>
> 
> De : ilya musayev  Envoyé : mercredi 11
> avril 2018 20:26:34 À : users@cloudstack.apache.org Objet : Re: ssvm NFS
> public ip
>
> There is a global setting you have to set to use internal non public IP.
>
> Try setting sec.storage.allow.internal.site to an internal network cidr.
>
> You may need to destroy ssvm for settings to take effect. In my case there
> is some sort of minor bug where it takes upward of 5 minutes for ssvm to
> program the internal routes, but since this is onetime operation - I just
> live with it.
>
> On Wed, Apr 11, 2018 at 10:50 AM Nicolas Bouige  wrote:
>
> > a small update about my problem.
> >
> > I 've recreated the zone from scratch this morning and  one of my
> > "cloudbr" used for the secondary storage was misconfigured.
> >
> > So Now, I can ping the secondary storage from KVM host, CS-MGMT,  SSVM
> > and mount the nfs on them...but...the agent still not going up and the
> > ssvm_check.sh give me an ip public for the nfs instead of the private.
> >
> >
> > i got only this error in /var/log:cloud.log :
> >
> > 17:30:22,600 ERROR AgentShell:477 - Unable to start agent: Resource
> > class not found: com.cloud.storage.resource.
> PremiumSecondaryStorageResource due
> > to: java.lang.ClassNotFoundException:
> > com.cloud.storage.resource.PremiumSecondaryStorageReso
> >   urce
> > Unable to start agent: Resource class not found:
> > com.cloud.storage.resource.Prem
> > iumSecondaryStorageResource due to: java.lang.ClassNotFoundException:
> > com.cloud.
> > storage.resource.PremiumSecondaryStorageResource
> >
> > i've tried to update a differente systemvm template with no success...
> > I 've compared the configuration of the ssvm with one of our
> > deployment and i juste noticed the "resource"
> > (org.apache.cloudstack.storage.resource.NfsSecondaryResource) was not
> > the same.
> > i changed it but still the same error...
> >
> > There is a way to find java binaries/script and  upload them on the ssvm
> ?
> >
> > If one of you have an idea, it would be appreciate.
> >
> > Thanks !
> >
> > Best regards,
> > N.B
> >
> >
>
>

4.11 : Filter all can be specified by admin only

2018-04-13 Thread Aican France 
Hi All,

I'm using Cloudstack 4.11 : with a dedicated user (user role), I'm trying
to create a new instance, in "disk offrering" , following message appears :
" Filter all can be specified by admin only"

Is there a way to hide this message?

Thank you,

Thomas

Re: Remove 'md5Hashed' variable from Javascript

2018-04-13 Thread Nitin Maharana 
+1

On Mon, Apr 9, 2018 at 11:01 PM, Rafael Weingärtner <
rafaelweingart...@gmail.com> wrote:

> Hello fellow CloudStackers,
>
> Today I was working on CLOUDSTACK-5235, which is a security issue, and I
> noticed a variable ‘md5Hashed’ in the javascript that does not seem to be
> useful at all. This variable was used to control if we hash or not the
> password of users in the user side (browser). However, we no longer hash
> the password on the user side. All of the password processing is executed
> in the server side according to the priority of hashing mechanism defined
> by the administrator.
>
> I am addressing this cleanup with this PR
> https://github.com/apache/cloudstack/pull/2555.
>
> If you have any objections regarding this variable and its relate code
> removal, please do so. Otherwise, we will proceed to remove it.
>
> --
> Rafael Weingärtner
>

Re: Remove 'md5Hashed' variable from Javascript

2018-04-13 Thread Boris Stoyanov 
+1 


boris.stoya...@shapeblue.com 
www.shapeblue.com
53 Chandos Place, Covent Garden, London  WC2N 4HSUK
@shapeblue
  
 

> On 13 Apr 2018, at 2:36, Gabriel Beims Bräscher  wrote:
> 
> +1
> 
> 2018-04-12 20:35 GMT-03:00 Rohit Yadav :
> 
>> +1
>> 
>> 
>> 
>> - Rohit
>> 
>> 
>> 
>> 
>> 
>> 
>> From: Rafael Weingärtner 
>> Sent: Friday, April 13, 2018 4:04:24 AM
>> To: users; dev
>> Subject: Re: Remove 'md5Hashed' variable from Javascript
>> 
>> Hello folks,
>> I have not heard anything back here. I will still wait a few more days. If
>> I do not see anybody against it, I will assume lazy consensus and proceed
>> removing these variables.
>> 
>> On Mon, Apr 9, 2018 at 2:31 PM, Rafael Weingärtner <
>> rafaelweingart...@gmail.com> wrote:
>> 
>>> Hello fellow CloudStackers,
>>> 
>>> Today I was working on CLOUDSTACK-5235, which is a security issue, and I
>>> noticed a variable ‘md5Hashed’ in the javascript that does not seem to be
>>> useful at all. This variable was used to control if we hash or not the
>>> password of users in the user side (browser). However, we no longer hash
>>> the password on the user side. All of the password processing is executed
>>> in the server side according to the priority of hashing mechanism defined
>>> by the administrator.
>>> 
>>> I am addressing this cleanup with this PR https://github.com/apache/
>>> cloudstack/pull/2555.
>>> 
>>> If you have any objections regarding this variable and its relate code
>>> removal, please do so. Otherwise, we will proceed to remove it.
>>> 
>>> --
>>> Rafael Weingärtner
>>> 
>> 
>> 
>> 
>> --
>> Rafael Weingärtner
>> 
>> rohit.ya...@shapeblue.com
>> www.shapeblue.com
>> 53 Chandos Place, Covent Garden, London  WC2N 4HSUK
>> @shapeblue
>> 
>> 
>> 
>>