Re: [ovirt-users] Certificates in a hosted-engine cluster

2016-09-28 Thread Joshua Doll
On Wed, Sep 28, 2016, 3:37 PM Nicolas Ecarnot wrote: > Le 28/09/2016 à 21:35, Joshua Doll a écrit : > > I've found, > > http://www.ovirt.org/develop/release-management/features/infra/pki/ > > > > It seems to be for versions 3.2 and 3.3, is it still valid? > > At least, I

[ovirt-users] Certificates in a hosted-engine cluster

2016-09-28 Thread Joshua Doll
I asked this question earlier, but I am not sure my email made it to the list. I have a two node cluster, and would like to replace all the self signed certificates with certs from my new enterprise CA. I cannot find a list of all the certificates that need to be replaced. My goal is to replace

Re: [ovirt-users] ovirt-engine-extension-aaa-ldap-setup > [ ERROR ] Invalid CA certificate: unknown error (_ssl.c:2988)

2016-09-28 Thread aleksey . maksimov
Yes. You're right. Thank you. > "Please select method to obtain PEM encoded CA certificate" > > File means the PEM file not the jks file. The jks is created by > aaa-ldap-setup. ___ Users mailing list Users@ovirt.org

Re: [ovirt-users] global vs local maintenance with single host

2016-09-28 Thread Gervais de Montbrun
Hi Gianluca, Instead of editing the system's built in systemd configuration, you can do the following... Create a file called /etc/systemd/system/ovirt-ha-broker.service # My custom ovirt-ha-broker.service config that ensures NFS starts before ovirt-ha-broker.service # thanks Gervais for this

Re: [ovirt-users] global vs local maintenance with single host

2016-09-28 Thread Gianluca Cecchi
On Sun, Sep 4, 2016 at 10:54 AM, Yedidyah Bar David wrote: > On Sat, Sep 3, 2016 at 1:18 PM, Gianluca Cecchi > wrote: > > Hello, > > how do the two modes apply in case of single host? > > During an upgrade phase, after having upgraded the self hosted

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Anantha Raghava
Hi, I am able to add the user to oVirt and assign role. Just to test, I assigned one user as "super user" and I am able to login to Administrator Portal. Need to read a bit more about roles and their predefined rights. Any suggestions in this regard? -- Thanks & Regards, Anantha

[ovirt-users] oVirt AD integration problems

2016-09-28 Thread cmc
Hi, I'm trying to use the directory services provided by the ovirt-engine-extension-aaa-ldap, and I can get it to successfully login when I run the tests in the setup script, but when I login via the GUI, it gives me: unexpected error was encountered during validation processing:

[ovirt-users] change disk profile

2016-09-28 Thread vasily.lamy...@megafon.ru
Hello I change disk profile. After OK they returned to defult disk profile with unlimited (iops,mbs) I try add new disk and try create new vm. Always disk profile automatically changed to default unlimited. How can I change disk profile. Ламыкин Василий Старший инженер по эксплуатации сервисных

[ovirt-users] VM pauses/hangs after migration

2016-09-28 Thread Davide Ferrari
Hello trying to migrate a VM from one host to another, a big VM with 96GB of RAM, I found that when the migration completes, the VM goes to a paused satte and cannot be resumed. The libvirt/qemu log it gives is this: 2016-09-28T12:18:15.679176Z qemu-kvm: error while loading state section id

[ovirt-users] Move VM between Datastores

2016-09-28 Thread Carlos García Gómez
Hello, How can I move some VM from one Datastore (NFS) to another Datastore (FibreChannel)? Regards - Sistemas de Información y Comunicaciones Fundación Integra. http://www.f-integra.org Teléfono: +34 968 277847 Teléfono:

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-28 Thread Robert Story
On Tue, 27 Sep 2016 13:22:29 -0400 (EDT) Michal wrote: MS> > On 27 Sep 2016, at 19:12, aleksey.maksi...@it-kb.ru wrote: MS> > MS> > I'm afraid that in the future OS time may get out of sync because of kvm-clock MS> > And as a result Kerberos may stop working MS> > I hope I explained clearly

Re: [ovirt-users] Snapshot deletion failure

2016-09-28 Thread Marcelo Leandro
Hi Ala, When running Live Merge. I create the live snapshot and when I try delete snapshot and has this error. I saw the bug https://bugzilla.redhat.com/1368203 , but I not move the disk to another domain. Thanks. Marcelo Leandro 2016-09-28 9:19 GMT-03:00 Ala Hino : > Hi

Re: [ovirt-users] Snapshot deletion failure

2016-09-28 Thread Ala Hino
Hi Marcelo, This error indicates that the image you are trying to delete doesn't exist. When do you get this error? When running Live Merge or Live Storage Migration (LSM)? Please note that we fixed in LSM area where the VM went down while we tried to delete the auto-generated snapshot. See

Re: [ovirt-users] Time synchronization in guest OS for Hosted Engine VM (for Kerberos)

2016-09-28 Thread aleksey . maksimov
Robert, you're right. Thanks for clarifying. 28.09.2016, 15:10, "Robert Story" : > On Tue, 27 Sep 2016 13:22:29 -0400 (EDT) Michal wrote: > MS> > On 27 Sep 2016, at 19:12, aleksey.maksi...@it-kb.ru wrote: > MS> > > MS> > I'm afraid that in the future OS time may get out of

Re: [ovirt-users] Snapshot deletion failure

2016-09-28 Thread Marcelo Leandro
Hello, I have the same problem but i use the ovirt version 4.0.4.4-1.el7.centos . My logs. Engine.log 2016-09-28 08:18:00,947 INFO [org.ovirt.engine.core.vdsbroker.monitoring.VmJobsMonitoring] (DefaultQuartzScheduler1) [7013b545] VM Job [4dd2b885-2452-4520-b20a-928edea50836]: In progress (no

[ovirt-users] Replacing Certificates in hosted-engine cluster

2016-09-28 Thread Joshua Doll
Hi, I have a two node cluster running a hosted-engine setup. I have stood up an enterprise CA and would like to replace the ovirt self signed certificates. I can't find a list of all the certificates online. Is there a list, or can someone point me in the right direction? Thanks, Josh

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Anantha Raghava
Hello Ondra, It's working now. It browses though the directory and fetching the user / group details. Thanks for your quick support. -- Thanks & Regards, Anantha Raghava eXza Technology Consulting & Services Do not print this e-mail unless required. Save Paper & trees. On Wednesday 28

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Anantha Raghava
Thanks Ondra. Will check this & revert back. -- Thanks & Regards, Anantha Raghava eXza Technology Consulting & Services Do not print this e-mail unless required. Save Paper & trees. On Wednesday 28 September 2016 02:02 PM, Ondra Machacek wrote: Yes, you can. You can use different profile

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Ondra Machacek
Yes, you can. You can use different profile name and those setups can exist together, or you can you same name and the aaa-setup-tool will ask you if you want to override the existing one. - Anantha Raghava wrote: > Thanks for quick response Ondra. > >

[ovirt-users] [Review] oVirt and Gluster - Integrated solution for Disaster Recovery

2016-09-28 Thread Sahina Bose
[Forwarding to a wider audience] Feature page outlining the proposed solution is at http://www.ovirt.org/develop/release-management/features/gluster/gluster-dr/ Please review and provide feedback. thanks, sahina -- Forwarded message -- From: Sahina Bose Date:

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Ondra Machacek
- Anantha Raghava wrote: > Hello Ondra > > Please find the attached file. I have also attached the setup log file. > I find the errors & warnings there too. But I am unable to figure out > what really went wrong. > > One more thing, while setting aaa-ldap

Re: [ovirt-users] oVirt Active Directory Integration

2016-09-28 Thread Ondra Machacek
On 09/28/2016 05:25 AM, Anantha Raghava wrote: Hi, I am trying to integrate the oVirt Engine with Active Directory to enable user logins. I installed the ovirt ldap extension and executed the setup. The process completed successfully and the profile is visible in engine log in page. Most

Re: [ovirt-users] ovirt-engine-extension-aaa-ldap-setup > [ ERROR ] Invalid CA certificate: unknown error (_ssl.c:2988)

2016-09-28 Thread Ondra Machacek
On 09/27/2016 07:39 PM, aleksey.maksi...@it-kb.ru wrote: Hello oVirt guru's! I want to configure MS Active Directory authentication for oVirt web UI. I configured an External LDAP Provider in accordance with the instructions: Link #1)

Re: [ovirt-users] 4-node oVirt with replica-3 gluster

2016-09-28 Thread Sahina Bose
On Tue, Sep 27, 2016 at 8:59 PM, Goorkate, B.J. wrote: > Hi Sahina, > > First: sorry for my delayed response. I wasn't able to respond earlier. > > I already planned on adding the 4th node as a gluster client, so thank you > for > confirming that this works. > > Why I