[ovirt-users] Re: ovirtsdk4 error

2019-12-10 Thread Ondra Machacek
On 10/12/2019 04:58, jeremy_tourvi...@hotmail.com wrote: I have a server which runs a project from Github called SecGen. SecGen uses Vagrant to provision VMs from templates. When I go to my project folder and run vagrant up I get an error.

[ovirt-users] Re: Users and VM permissions matrix

2019-11-05 Thread Ondra Machacek
On 05/11/2019 11:57, Colin Coe wrote: Hi all I've been tasked with creating a matrix of users/groups and VMs so we can easily see who has access to what (via SPCIE console). Google has given me a couple of hints but I can get it over the line. --- users_service =

[ovirt-users] Re: ovirt-web-ui search active directory user problem

2019-10-29 Thread Ondra Machacek
Did you retart ovirt-engine when you've configured the aaa? If not you should. If the problem is after ovirt-engine restart, please share the engine log, so we can investigate what could be the problem. On 25/10/2019 02:20, 山永军 wrote: Ovirt version 4.3, active directory windows 2012r2; after

[ovirt-users] Re: Fail to attach/create disk from template when running via Ansible

2019-10-10 Thread Ondra Machacek
The error message is: Image does not exist in domain: u'image=d680a46a-7188-45f6-b6a7-f830c0b4, domain=935de3ac-a735-4fc8-9161-26bfd751ffc7' Can you please check if the image with id 'd680a46a-7188-45f6-b6a7-f830c0b4' exists on storage domain with id

[ovirt-users] Re: Reboot a guest via ansible in oVirt

2019-09-24 Thread Ondra Machacek
Hi, we don't have implemented direct restart. But the next_run state does something similar. When there is next_run_configuration on the VM, the VM is restarted. I've submitted the issue[1], to add direct restart. [1] https://github.com/ansible/ansible/issues/62775 On 20/09/2019 16:20,

[ovirt-users] Re: Python to retrive the VM-Config from the snapshot

2019-09-10 Thread Ondra Machacek
Hi, this example is the close to what you want to achieve: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L137 but instead of line 137, you would have to do something like this: snap_data = data_vm_service.snapshots_service().list(all_content=True)[0]

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup

2019-09-05 Thread Ondra Machacek
Can you please share the debug log from the ovirt-engine-extensions-test-tool? On 04/09/2019 18:23, Rick A wrote: thanks for the reply. That doesn't seem to work for me either. Strange part is if apply the settings anyway and I use a wildcard "*" in ovirt when searching for users, it lists

[ovirt-users] Re: template permissions not inherited (4.3.4)

2019-07-24 Thread Ondra Machacek
There is 'Copy template permission' check box, when you open 'create vm' dialog. Right after fields, name, description, comment, vm id. It's not visible when using Blank template, but it's visible when you select different template. On 22/07/2019 14:28, Timmi wrote: Hi oVirt List, I have just

[ovirt-users] Re: ansible tower/awx integration in ovirt

2019-06-19 Thread Ondra Machacek
We support tower, so you shouldn't have any issues integrate it. There is oVirt/RHV credentials in the Tower/awx. So you can use those for the authentication. On 19/06/2019 10:37, Nathanaël Blanchet wrote: Hello, I wrote a playbook for workflow that automates a vm creation from a

[ovirt-users] Re: ovirt_vm ansible cloud-init ipv6 related

2019-06-19 Thread Ondra Machacek
Hello, thanks for the report. This is indeed supported by oVirt, but it's not supported by ovirt_vm Ansible module, I've opened an issue[1]. Thanks. [1] https://github.com/ansible/ansible/issues/58054 On 17/06/2019 15:18, Vrgotic, Marko wrote: Dear oVirt Would you be so kind to help out

[ovirt-users] Re: ovirt nic ansible module

2019-06-19 Thread Ondra Machacek
I've opened an issue. This will be supported since 2.9: https://github.com/ansible/ansible/issues/58045 On 18/06/2019 12:00, Nathanaël Blanchet wrote: Hello, With that module, we can make the nic present/absent/plugged/unplugged, but is there a way to make the link state up or down?

[ovirt-users] Re: VM SSO

2019-05-15 Thread Ondra Machacek
On 10/07/2016 09:09 AM, Maxence Sartiaux wrote: Hello, I try to use the VM SSO but no login, still on the logon screen ... I'm on ovirt 4.0.3, connected to an AD (Samba 4.5) + VMs Windows 7/10 stateless sysprep-ed to integrate to the domain and obviously the guest-agent is installed. My AD

[ovirt-users] Re: Unable to add permissions for LDAP users

2019-05-14 Thread Ondra Machacek
On 10/06/2016 01:47 PM, Michael Burch wrote: I'm using the latest ovirt on CentOS7 with the aaa-ldap extension. I can successfully authenticate as an LDAP user. I can also login as admin@internal and search for, find, and select LDAP users but I cannot add permissions for them. Each time I get

[ovirt-users] Re: LDAP - not able to find members of groups

2019-05-09 Thread Ondra Machacek
By default the openldap configuration on oVirt does connect it via member attribute of the group, so you shouldn't have any issue logging in as user from some group. We support also memberOf plugin, but it's not default for openldap. On 08/05/2019 13:10, Timmi wrote: Hi oVirt List, I manage to

[ovirt-users] Re: Ansible oVirt.image-template role

2019-05-09 Thread Ondra Machacek
Can you share what you have in runsetup.yml. According to log, there is run only 'gather facts' task and nothing more. On 09/05/2019 03:41, Jeremy Tourville wrote: I am trying to run an Ansible playbook that doesn't appear to run correctly.  I have followed the example from this blog -

[ovirt-users] Re: Fetching DiskAttachmentService in ovirt-python-sdk-4

2019-04-29 Thread Ondra Machacek
There is also this usage guide: https://github.com/oVirt/ovirt-engine-sdk/tree/master/sdk#usage which may help you better understand difference between the service and the type. On 26/04/2019 11:30, Joey Ma wrote: Beside the doc you've referred to, the example codes for sdk [1] are always

[ovirt-users] Re: Is there a way to tell whether a permission set for a VM is inherited using REST API?

2019-04-23 Thread Ondra Machacek
Actually this is bug, as I see we fill the tag for all permissions, even for inherited permissions, but it should be set only for direct permissions, that's how you would distinguish it. Same as you say you can do it via following the specific permission id. So I am afraid there is no

[ovirt-users] Re: Inconsistencies beteween WebUI, API read verbs and API write verbs

2019-04-16 Thread Ondra Machacek
Hello, instance type module was merged into Ansible 2.8: https://github.com/ansible/ansible/pull/54782 You can try it, if all is working fine for you. But the issue you had is just missing header 'All-content: true', which enable listing all attributes. $ curl -H 'All-content: true' -u

[ovirt-users] Re: Different credentials ovirt_vm module

2019-04-10 Thread Ondra Machacek
Hello, this seems ok to me. Can you please check the engine.log, for some error? On 09/04/2019 22:26, Florian Rädler wrote: Hi, how can i use other credentials (run once) in the ansible playbook for Sysprep domain join? My playbook: User_name and root_password does not sound like it’s the

[ovirt-users] Re: Info about AD integration and Root CA

2019-02-23 Thread Ondra Machacek
Hi, Sorry, but this seems to be Active directory specific issue. I would suggest to ask on some Microsoft AD specific forum for such issue. On 21/02/2019 16:41, Gianluca Cecchi wrote: Hello, in docs for 4.2 RHV (I think it applies to oVirt 4.2 too) for attaching to AD there is the statement

[ovirt-users] Re: latest pycurl 7.43 brokes ovirtsdk4

2019-01-24 Thread Ondra Machacek
/inventory/ovirt4.py as an inventory source Le 23/01/2019 à 11:55, Nathanaël Blanchet a écrit : Le 23/01/2019 à 09:27, Ondra Machacek a écrit : On 1/22/19 5:54 PM, Nathanaël Blanchet wrote: Hi all, If anyone uses latest pycurl 7.43 provided by pip or ansible tower/awx, any ovirtsdk4 calling

[ovirt-users] Re: latest pycurl 7.43 brokes ovirtsdk4

2019-01-23 Thread Ondra Machacek
On 1/22/19 5:54 PM, Nathanaël Blanchet wrote: Hi all, If anyone uses latest pycurl 7.43 provided by pip or ansible tower/awx, any ovirtsdk4 calling will issue with the log: The full traceback is: WARNING: The below traceback may *not* be related to the actual failure.   File

[ovirt-users] Re: AffinityGroup API

2018-11-27 Thread Ondra Machacek
efault task-5233) [] Operation Failed: [User is not authorized to perform this action.] Regards, Paul S. From: Schreuders, Cliffe Sent: 27 November 2018 11:55 To: Ondra Machacek; Staniforth, Paul Cc: Andrej Krejcir; users; Shaw, Thomas Subje

[ovirt-users] Re: AffinityGroup API

2018-11-27 Thread Ondra Machacek
wrote: Hi Andrej I believe they are using 4.2.5 they get a permission error although they can use the python SDK with the same account. Paul S. From: Ondra Machacek Sent: 26 November 2018 11:41 To: Staniforth, Paul Cc: Andrej Krejcir; users Subject: Re

[ovirt-users] Re: IPA Users via AD DC's

2018-11-26 Thread Ondra Machacek
On 11/26/18 5:44 AM, TomK wrote: Hello, I've configured LDAP via IPA in oVirt 4.X.  It works for locally defined users in IPA but not those mapped from the AD DC.  So I had two questions: 1) Is there a format of the username and password I need to type in for this to work?  Or is retrieving

[ovirt-users] Re: AffinityGroup API

2018-11-26 Thread Ondra Machacek
What version of the SDK do you use? I can see it's supported in latest version. On 11/26/18 11:13 AM, Andrej Krejcir wrote: Hi, I don't know much about ruby SDK. I think the SDKs for various languages are generated from the API specification. Ondra, is this a bug in ruby SDK? Andrej On

[ovirt-users] Re: ovirt-host-upgrade failed on centos 7.5 host with new ansible 2.7.1+ and its default yum: dnf backend

2018-11-20 Thread Ondra Machacek
What's your version of python2-dnf? base.update_cache was introduced in 2.1.0-1. On 11/20/18 11:25 AM, Oliver Riesener wrote: Hi, i found an permanent updates avail on centos 7.5 host with ovirt 4.2.7.5-1-el7 and ansible 2.7.1+. Background: ansible 2.7.1+ "auto use" the yum: backend. The

[ovirt-users] Re: Ovirt-engine Domain integration to SAMBA4.7 AD domain controller

2018-11-14 Thread Ondra Machacek
On 11/14/18 6:26 AM, aru_bar...@yahoo.com wrote: 1.I have one samba4 AD domain controller[samba4dc.eipl.com] 2. I get PEM.code from default smb file from domain controller 3. when i try the following command to check user "ovirt-engine-extensions-tool aaa login-user --profile=eipl.com

[ovirt-users] Re: LDAP Bind failing because of SSLHandshakeException after Virtualization Manager was rebooted

2018-11-14 Thread Ondra Machacek
On 11/13/18 10:09 PM, Will Hegedus wrote: So, it turns out that one of the domain controllers had a different certificate chain (outside of my team's control) which was inexplicably causing the whole thing to fail. I would run "ovirt-engine-extensions-tool --log-level=FINEST

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-11-14 Thread Ondra Machacek
ttached my log showing the setup completion. From: Jeremy Tourville Sent: Monday, November 5, 2018 2:58 PM To: Ondra Machacek Cc: users@ovirt.org Subject: Re: [ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed Can you try to run that on command line[

[ovirt-users] Re: poweroff and reboot with ovirt_vm ansible module

2018-11-05 Thread Ondra Machacek
Joey is right, we don't such functionality. But feel free to open an issue here[1] and we can implement it. [1] https://github.com/ansible/ansible/issues On 11/3/18 1:10 AM, Joey Ma wrote: hi, AFAIK, setting state=stopped is the only way to poweroff a VM. While to reboot a VM, you could also

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-11-05 Thread Ondra Machacek
Looking at logs you may see: 2018-10-31 16:48:09,331-05 FINEPerforming SearchRequest 'SearchRequest(baseDN='dc=cyber-range,dc=lan', scope=SUB, deref=NEVER, sizeLimit=0, timeLimit=0, filter='&(objectClass=organizationalPerson)(uid=*)(uid=admin)', attrs={nsuniqueid, uid, cn, displayName,

[ovirt-users] Re: Automated VM rollout

2018-10-31 Thread Ondra Machacek
In case of virtio_scsi, you should use following: /dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_{{ disk_id[:-16] }} Where disk_id[:-16], is id which you get from API, for example: /api/disks/cdb62095-62ba-4137-8fa0-6375748d8868 so the result path is:

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-10-25 Thread Ondra Machacek
On 10/24/18 1:00 AM, Jeremy Tourville wrote: I am having trouble completing the AAA extension setup. It fails at the end when testing the login flow, if I test the search that part works. I can confirm that I am able to login to my system using the admin account so there is not a password

[ovirt-users] Re: REST API on Engine

2018-10-25 Thread Ondra Machacek
On 10/24/18 7:15 AM, Vrgotic, Marko wrote: Dear oVirt team, My project with the company for Operations is a success and department is successfully using oVirt 4.2.6 (started with 4.2.0 this January) platform with SHE and 12 Hypervisors, hooked to GlusterFS distributed-replicated, managed

[ovirt-users] Re: LDAP-Error

2018-09-27 Thread Ondra Machacek
You get following error: Internal Server Error: Cannot resolve principal 'nbud...@psecure.net' 2018-09-26 21:30:35,573+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUt Meaning that user with UPN(user principal name) nbud...@psecure.net can't be found. Please double check if the user with that

[ovirt-users] Re: Ldap-configure

2018-09-26 Thread Ondra Machacek
Hi, you can check the documentation: https://www.ovirt.org/documentation/admin-guide/chap-Users_and_Roles/#chapter-15-users-and-roles On 9/26/18 10:12 AM, Budur Nagaraju wrote: Hi Can you please let us know how to configure LDAP authentication in oVirt 4.2 ? Thanks, Nagaraju

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-09-25 Thread Ondra Machacek
Can you please share the whole log? On 9/25/18 8:25 AM, mopiel games wrote: i try it with new user dn:uid=user,dc=exalt,dc=ps but it show this : 2018-09-25 09:23:04,441+03 FINEST simple_attrsGroupRecord = entryUUID, cn, description 2018-09-25 09:23:04,441+03 FINEST

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-09-24 Thread Ondra Machacek
If you are sure you are passing correct credentials, then please save the correct configuration and run following command: $ ovirt-engine-extensions-tool --log-level=FINEST aaa login-user --user-name=taha --profile=ldap23.exalt.ps and share the output. On 9/24/18 11:11 AM, mopiel games

[ovirt-users] Re: ovirt4 api create snapshot

2018-09-07 Thread Ondra Machacek
On 09/06/2018 01:07 PM, David David wrote: hi i have a vm with 3 disks and i want to take a snapshot with only two disks how to do a multiple disk snapshot in the code below? snap = snaps_service.add( snapshot=types.Snapshot( description=snap_description,

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup credentials invalid

2018-08-31 Thread Ondra Machacek
Computing Unit Weill Cornell Medicine 1300 York Avenue New York, NY 10065 E: d...@med.cornell.edu O: 212-746-6305 F: 212-746-8690 On Thu, Aug 30, 2018 at 8:36 AM, Ondra Machacek wrote: On 08/29/2018 08:04 PM, Douglas Duckworth wrote: Hi I am not able to finish ovirt-engine-extension-aaa-ldap

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup credentials invalid

2018-08-30 Thread Ondra Machacek
On 08/29/2018 08:04 PM, Douglas Duckworth wrote: Hi I am not able to finish ovirt-engine-extension-aaa-ldap-setup due to the error "credentials invalid." My password's correct. Our directory server's OpenLDAP standard schema. Our accounts are under OU=People. We are binding with a service

[ovirt-users] Re: ovirt-ansible download/upload of snapshots for backup

2018-08-16 Thread Ondra Machacek
On 08/15/2018 03:19 PM, Николаев Алексей wrote: Hi community! Does the ansible module "ovirt_snapshots" support download/upload of snapshots? According to the https://bugzilla.redhat.com/show_bug.cgi?id=1405805 support of this functionality is already implemented in the ovirt API. How to use

[ovirt-users] Re: [ovirt-engine-api-model] Any solutions to add custom key/value pairs into entities?

2018-08-14 Thread Ondra Machacek
Hi, On 08/14/2018 11:53 AM, Joey Ma wrote: Hi all, In my case, I need to add customized KVs into API model entities, such as VM, Disk, Template and etc. I looked through the API model documents and got some existing Tag/Property/CustomProperty structs, all of which have limitations and

[ovirt-users] Re: AAA question...takes long time to log in

2018-07-31 Thread Ondra Machacek
On 07/27/2018 01:59 AM, sipandb...@hotmail.com wrote: I work at a company with a massive AD infrastructure. Is there any way to specify a specific OU to search through instead of just providing a top level DN? We use sssd for all our authing needs on our linux machines and would like to do

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
24, 2018 at 3:26 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: Something like this should work for you: import ovirtsdk4 as sdk import ovirtsdk4.types as types DOMAIN_NAME = 'internal-authz' connection = sdk.Connection(...) user

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
ion. Much Appreciated. It's not, but you can write a script which can do this. - Could you give a small brief on the type of script we need to write? On Tue, Jul 24, 2018 at 12:50 PM, Ondra Machacek mailto:omach...@redhat.com>> wrote: It's not, but you can write a scri

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
It's not, but you can write a script which can do this. But if you want all users from the ldap are able to login I would suggest to you create some group in LDAP and add all users as a member of this group and add this group to ovirt and assign it the permissions. On 07/23/2018 08:36 PM, Hari

[ovirt-users] Re: Ovirt4.2 AD integration issue

2018-07-24 Thread Ondra Machacek
Can you please share the full debug log? On 07/23/2018 02:55 PM, Arun S wrote: Hello, I need help to resolve Ovirt AD auth setup issue. I have setup ovirt-engine-4.2 and I am trying to integrate with AD for user authentication. Using  (ad.properties) I am able to bind to AD, however

[ovirt-users] Re: Problem with following host link for vm list using Java SDK.

2018-07-13 Thread Ondra Machacek
On 07/12/2018 11:25 PM, dchamb...@bugfixer.net wrote: When trying to do VM list using the 4.2.4 Java SDK against a 4.2.4 engine, I am getting an error while trying to follow the host link to get host info. Any suggestions on fixing this? List vms = vmsService.list()

[ovirt-users] Re: Python-SDK4: Check snapshot deletion result?

2018-07-12 Thread Ondra Machacek
On 07/11/2018 10:10 AM, nico...@devels.es wrote: Hi, We're using ovirt-engine-sdk-python 4.1.6 on oVirt 4.1.9, currently we're trying to delete some snapshots via a script like this:     sys_serv = conn.system_service()     vms_service = sys_serv.vms_service()     vm_service =

[ovirt-users] Re: oVirt Authentication and Authorization

2018-06-29 Thread Ondra Machacek
What's your use-case? You need all users to access without any username/password? Why not rather share some username/password of guest account them? On 06/29/2018 12:39 PM, Hari Prasanth Loganathan wrote: Guys any update on this, If you have any clarification in my query please let me know.

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
in oVirt Rest API? On Thu, Jun 21, 2018 at 4:30 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: Well, I don't know what are you using to generate the JSON, but you just need to check if engine is v4.1 and then send the JSON without the field and if version is v4.2 a

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
side, I didn't get this point, Could you explain, please. On Thu, Jun 21, 2018 at 4:20 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: We do not support this. For xml we use event handler, which takes unknown fields as error: https://github.com/oVirt/ovirt-en

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
We do not support this. For xml we use event handler, which takes unknown fields as error: https://github.com/oVirt/ovirt-engine/blob/68753f46f09419ddcdbb632453501273697d1a20/backend/manager/modules/restapi/jaxrs/src/main/java/org/ovirt/engine/api/restapi/xml/JAXBProvider.java#L182 For json

[ovirt-users] Re: LDAP logins do not work

2018-06-14 Thread Ondra Machacek
n.com" but then receive an error as follows. The user u...@example.com@example.com is not authorized to perform login How do I enable debug logs?  The log entries from the engine.log file are the same as my previous message. On 06/14/2018 06:37 AM, Ondra Machacek wrote: Can you share the debug log

[ovirt-users] Re: LDAP logins do not work

2018-06-14 Thread Ondra Machacek
Can you share the debug log, and also make sure the search user you are using is correct for example by running the ldapsearch command with it. On 06/13/2018 05:33 PM, Michael Watters wrote: I've ran the ovirt-engine-extension-aaa-ldap-setup command to configure LDAP authentication using Active

[ovirt-users] Re: how to use oVirt engine API to retrieve the attached VM list by a disk id.

2018-06-01 Thread Ondra Machacek
Jun 1, 2018 at 8:51 AM, Joey Ma <mailto:majunj...@gmail.com>> wrote: OK, got it. Search is a powerful solution. Thank you very much. On Thu, May 31, 2018 at 6:49 PM, Ondra Machacek mailto:omach...@redhat.com>> wrote: On 05/31/2018 09:28 AM, iterjpnic 

[ovirt-users] Re: how to use oVirt engine API to retrieve the attached VM list by a disk id.

2018-05-31 Thread Ondra Machacek
On 05/31/2018 09:28 AM, iterjpnic wrote: Hi all, I use oVirt engine API v4.2 for implementing terraform oVirt provider. And I want to check if a Disk has been attached to a VM, so I need to find all vms attached by this disk. But after I checked the GET-Response data from the

[ovirt-users] Re: Unable to login after upgrade

2018-05-31 Thread Ondra Machacek
That's very strange, can you please share the upgrade log if you still have it? Also can you please share the output of: $ select * from users; and $ select * from permissions; and also please share content of: /etc/ovirt-engine/extensions.d/internal-authn.properties

[ovirt-users] Re: Simple API call to start VM

2018-05-30 Thread Ondra Machacek
On 05/30/2018 08:07 AM, Kirin van der Veer wrote: Hi oVirt users, I have (what I hope) is a simple problem. I want to make an https request to start a VM via the oVirt REST API. Here is the command that I think should work: curl --user "admin:SECRETPASSWORD" --request POST --header

[ovirt-users] Re: LDAP Authentication issues

2018-05-29 Thread Ondra Machacek
What's you LDAP and what profile did you choose? This looks like you have chosen incorect profile during setup. Are you sure you arent using posix group and using non-posix aaa profile? Sharing a debug log of ovirt-engine-extensions-tool would be helpfull. On Fri, May 25, 2018, 10:04 AM Callum

[ovirt-users] Re: Obtain dynamic inventory onto local machine using ovirt4.py for self-hosted engine

2018-05-22 Thread Ondra Machacek
On 05/22/2018 06:44 PM, 03ce...@gmail.com wrote: I have successfully deployed self-hosted-engine (4.2) on centos (7.4) server. the server address is ovirt where the self-hosted engine running on it has fdqn as engine.ovirt. I have ovirt,ini configured on server acan run the ovirt4.py from

[ovirt-users] Re: Use local ansible to talk to engineVM and other vm

2018-05-22 Thread Ondra Machacek
On 05/21/2018 11:51 AM, 03ce...@gmail.com wrote: I have a self-hosted-engine (4.2) running on a centos 7.4 server. I have downloaded ovirt ansible roles from ansible-galaxy and can run them from the server where the engineVM is running and able to deploy new vms, clusters, dc, etc. I have

[ovirt-users] Re: sdk api and follow question / bug

2018-05-14 Thread Ondra Machacek
On 05/10/2018 10:32 AM, Peter Hudec wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I'm using API to get stats about the VM using the FOLLOW syntax described in http://ovirt.github.io/ovirt-engine-api-model/4.2/#documents/003_common_ concepts/follow In my case I list all VM with

Re: [ovirt-users] Fwd: FreeIPA authentication broken

2018-04-25 Thread Ondra Machacek
: *Kristian Petersen* <nesre...@chem.byu.edu <mailto:nesre...@chem.byu.edu>> Date: Tue, Apr 24, 2018 at 12:38 PM Subject: Re: [ovirt-users] FreeIPA authentication broken To: Ondra Machacek <omach...@redhat.com <mailto:omach...@redhat.com>> That directory only contains internal.

Re: [ovirt-users] FreeIPA authentication broken

2018-04-24 Thread Ondra Machacek
Right, you are missing file /etc/ovirt-engine/aaa/IPA.properties It's not subdirectory of /etc/ovirt-engine/extensions.d, but it's in /etc/ovirt-engine/ in 'aaa' subdirectory, can you check what's there? Please check also the correct permissions of that file, it should be '600' and owned by

Re: [ovirt-users] FreeIPA authentication broken

2018-04-23 Thread Ondra Machacek
On 04/23/2018 04:30 PM, Kristian Petersen wrote: Hey everyone, I had FreeIPA authentication set up on my oVirt instance and it was working great.  Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine.  Once I got it back up and running again, my

Re: [ovirt-users] Some questions about Ovirt REST API

2018-04-12 Thread Ondra Machacek
as draft for start, we could better understand the patch then. On 04/12/2018 10:14 AM, gss...@pku.edu.cn wrote: Do you mean /@override/ /getMytestsResource() / in BackendVmResource ? I have done that, otherwise GET would not pass. *From:* Ondra Machacek <mailto:omach...@redhat.com>

Re: [ovirt-users] Some questions about Ovirt REST API

2018-04-12 Thread Ondra Machacek
On 04/11/2018 08:19 AM, gss...@pku.edu.cn wrote: Hi, I wants to creating my own service under ../vms/{vmid}/myservice.Here is my methods: 1. create VmMytestService in /https://github.com/oVirt/ovirt-engine-api-model project./ add/@Service VmMytestService mytests() in /VmService .java 2.

Re: [ovirt-users] Query on VM Clone

2018-03-29 Thread Ondra Machacek
On 03/29/2018 01:02 PM, Karli Sjöberg wrote: On Thu, 2018-03-29 at 11:21 +0200, Ondra Machacek wrote: On 03/29/2018 11:09 AM, Hari Prasanth Loganathan wrote: Hi Team, 1) I perform the VM clone using the following API api/vms/{vmId}/clone 2) The above API is returning the job id 3) Using

Re: [ovirt-users] Query on VM Clone

2018-03-29 Thread Ondra Machacek
On 03/29/2018 11:09 AM, Hari Prasanth Loganathan wrote: Hi Team, 1) I perform the VM clone using the following API api/vms/{vmId}/clone 2) The above API is returning the job id 3) Using the job Id, we continuously query the oVirt to get the status of the clone operation.

Re: [ovirt-users] Authentication

2018-03-23 Thread Ondra Machacek
On 03/22/2018 11:25 PM, Bryan Sockel wrote: Hey Guys, Was working on switching my authentication over to TLS, and during the process I have lost the Internal Authentication option on my drop down list.  Need to Know how to add it back it back to the list of drop down items. Just re-run

Re: [ovirt-users] Setting up a LDAP conf

2018-03-16 Thread Ondra Machacek
On 03/16/2018 12:26 AM, Jose Fernandes wrote: Hello, I have an OpenDJ LDAP server, and I need some help to do query on a specific filter search. I remember I used to setup OpenDJ some time ago, please check this blog post: http://machacekondra.blogspot.cz/2015/05/saml-and-ovirt-35.html

Re: [ovirt-users] How to setup users to see a subset of VMs in oVirt

2018-03-06 Thread Ondra Machacek
On 03/06/2018 12:03 AM, Jean Pickard wrote: Hello, I need to create user accounts in oVirt that can only manage a specific set of VMs and I don't want them to see any other ones. example: User1 can only see VM1, VM2, VM3, VM4 User2 can only see VM5, VM6, VM7 Admin can see all of them. How do I

Re: [ovirt-users] Users/Groups Permissions

2018-03-06 Thread Ondra Machacek
On 03/05/2018 10:42 AM, markus.schauf...@ooe.gv.at wrote: Hi! Still new to oVirt and got another question: I have many Windows and Linux VMs and created for each the Windows and Linux machines two Usergroups (limited and admins). Now I want to grant the groups according permissions to

Re: [ovirt-users] Q: Can't connect to oVirt shell / SSL cert issue

2018-03-05 Thread Ondra Machacek
On 03/05/2018 01:28 PM, Andrei Verovski wrote: On 03/05/2018 12:58 PM, Ondra Machacek wrote: You should use CA certificate if you use default one it's:  /etc/pki/ovirt-engine/ca.pem Executed as root ovirt-shell -l https://node00.mydomain.com/ovirt-engine/api --cert-file /etc/pki/ovirt

Re: [ovirt-users] Q: Can't connect to oVirt shell / SSL cert issue

2018-03-05 Thread Ondra Machacek
You should use CA certificate if you use default one it's: /etc/pki/ovirt-engine/ca.pem You can find more information about oVirt PKI here: https://www.ovirt.org/develop/release-management/features/infra/pki/ On 03/05/2018 11:51 AM, Andrei Verovski wrote: Hi, Thanks,  corrected URL

Re: [ovirt-users] oVirt API (4.0 and 4.1) not reporting vms running on a given storage domain

2018-03-02 Thread Ondra Machacek
On 03/02/2018 05:24 PM, Luca 'remix_tj' Lorenzetto wrote: On Fri, Mar 2, 2018 at 3:21 PM, Ondra Machacek <omach...@redhat.com> wrote: Hi, As per documentation: http://ovirt.github.io/ovirt-engine-api-model/4.1/#services/storage_domain_vms That resource is used to list VMs on export s

Re: [ovirt-users] oVirt API (4.0 and 4.1) not reporting vms running on a given storage domain

2018-03-02 Thread Ondra Machacek
Hi, As per documentation: http://ovirt.github.io/ovirt-engine-api-model/4.1/#services/storage_domain_vms That resource is used to list VMs on export storage domain, not on data domain. If you want to find VMs using specific storage you may use following query:

Re: [ovirt-users] Hosts firewall custom setup

2018-02-27 Thread Ondra Machacek
On 02/27/2018 11:29 AM, Nicolas Ecarnot wrote: Le 26/02/2018 à 15:00, Yedidyah Bar David a écrit : But how do we add custom rules in case of firewalld type? Please see: https://ovirt.org/blog/2017/12/host-deploy-customization/ Hello Didi and al, - I followed the advices found in this blog

Re: [ovirt-users] ovirt-ansible-modules vs ovirt 3.6

2018-02-27 Thread Ondra Machacek
Hi, unfortunately no, ovirt-ansible-modules can be used only with oVirt >= 4.0. On 02/27/2018 12:22 PM, Николаев Алексей wrote: Hi community! Is it possible to use ovirt-ansible-modules with ovirt-engine 3.6 api? I'm trying to obtain SSO token by ovirt_auth. And get error: "The response

Re: [ovirt-users] API endpoint for a VM to fetch metadata about itself

2018-02-27 Thread Ondra Machacek
{vm_id}.  Can the API be used to query for a VM and it's attributes based on something like a MAC address or the IP itself? -Geoff On Sun, Feb 25, 2018 at 11:05 PM, Ondra Machacek <omach...@redhat.com <mailto:omach...@redhat.com>> wrote: We don't have any such resource. W

Re: [ovirt-users] API endpoint for a VM to fetch metadata about itself

2018-02-25 Thread Ondra Machacek
We don't have any such resource. We have those information in different places of the API. For example to find the information about devices of the VM, like network device information (IP address, MAC, etc), you can query: /ovirt-engine/api/vms/{vm_id}/reporteddevices The FQDN is listed right

Re: [ovirt-users] Internal Server Error while add Permission [cli]

2018-02-16 Thread Ondra Machacek
Hi, in the /var/log/ovirt-engine/server.log there will be some trace of the exception, right after running that command, can you please share it? Thanks. On 02/16/2018 09:40 AM, Thomas Fecke wrote: Hey dear Community, I work a bit with that ovirt shell. That worked pretty fine but I got

Re: [ovirt-users] 4.2 aaa LDAP setup issue

2018-02-13 Thread Ondra Machacek
Hello, On 02/09/2018 08:17 PM, Jamie Lawrence wrote: Hello, I'm bringing up a new 4.2 cluster and would like to use LDAP auth. Our LDAP servers are fine and function normally for a number of other services, but I can't get this working. Our LDAP setup requires startTLS and a login. That

Re: [ovirt-users] Engine AAA LDAP startTLS Protocol Issue

2018-02-08 Thread Ondra Machacek
On 02/08/2018 11:04 AM, Alan Griffiths wrote: Hi, Trying to configure Engine to authenticate against OpenLDAP and I seem to be hitting a protocol bug. Attempts to test the login during the setup fail with 2018-02-07 12:27:37,872Z WARNING Exception: The connection reader was unable to

Re: [ovirt-users] oVirt CLI Question

2018-02-08 Thread Ondra Machacek
On 02/07/2018 11:28 PM, Andrei V wrote: Hi, How to force power off, and then launch (after timeout e.g. 20sec) particular VM from bash or Python script? Please check the following Python script: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/stop_vm.py It stops the VM

Re: [ovirt-users] Reassign ovirtmgmt to a new bond with ansible

2017-12-14 Thread Ondra Machacek
Hi, On 12/13/2017 11:52 AM, Luca 'remix_tj' Lorenzetto wrote: Hello, I'm trying to create a playbook for deployment of a new node in my ovirt deployment. I'm using the role ovirt-infra from ovirt-infra-roles 1.1.1. I'm creating a new bond and assigning ovirtmgmt to that bond: This is the

Re: [ovirt-users] LDAP sources

2017-11-15 Thread Ondra Machacek
Hello, On Wed, Nov 15, 2017 at 9:03 AM, Magnus Isaksson wrote: > Hello, > > I have tried googling and searching in the documentation, but i can't seem > to find any instructions on how to remove a authentication source. > > The background is that i did set up an FreeIPA

Re: [ovirt-users] Testing ansible playbook against a mock engine?

2017-10-25 Thread Ondra Machacek
On Wed, Oct 25, 2017 at 9:40 AM, Luca 'remix_tj' Lorenzetto wrote: > Hello, > > i'm planning to create a big standardization playbook for my > environment to ensure that all the required configs (networks, hosts, > host's nics and networks) are correctly set up. >

Re: [ovirt-users] Fwd: ovirt-engine-extension-aaa-ldap active directory

2017-10-11 Thread Ondra Machacek
ntile <nicola.gentile...@gmail.com> wrote: > I do this already. > The CA certificate that i download is fine also for ldap? > > Nick > > 2017-10-11 14:56 GMT+02:00 Ondra Machacek <omach...@redhat.com>: >> You can download it just a temporary, for example to /t

Re: [ovirt-users] Fwd: ovirt-engine-extension-aaa-ldap active directory

2017-10-11 Thread Ondra Machacek
gt; Yes I created by aaa-setup tool. > I noticed that the CA certificate was expired, than I download new > certificate and I run aaa-setup tool. > > is there a specific place to put the certificate file ca? I put in root home. > > Thank a lot > > Nick > > 2017-10-1

Re: [ovirt-users] Fwd: ovirt-engine-extension-aaa-ldap active directory

2017-10-11 Thread Ondra Machacek
It fails on SSL handshake: sun.security.validator.ValidatorException: No trusted certificate found How did you create 'polito.it.jks' file? By aaa-setup tool? Are use sure you've entered correct CA certificate there? On Wed, Oct 11, 2017 at 1:30 PM, nicola gentile

Re: [ovirt-users] How to import a qcow2 disk into ovirt

2017-10-04 Thread Ondra Machacek
Check this log file on engine machine: /var/log/ovirt-imageio-proxy/image-proxy.log And this on the host which is used to upload: /var/log/ovirt-imageio-daemon/daemon.log Any errors there? On Wed, Oct 4, 2017 at 2:38 PM, nicola.gentile.to wrote: > Thanks

Re: [ovirt-users] Having issue with external IPA

2017-10-02 Thread Ondra Machacek
On Sun, Oct 1, 2017 at 1:07 PM, Yan Naing Myint wrote: > Hello guys, > > I'm having problem with adding users from my FreeIPA server to oVirt. > 1. Status of ovirt-engine-extension-aaa-ldap-setup is success with RHDS > 2. I cannot add IPA users in oVirt webadmin panel >

Re: [ovirt-users] Failure while using ovirt-image-template role

2017-09-29 Thread Ondra Machacek
On Thu, Sep 28, 2017 at 12:23 AM, Marc Seward wrote: > Hi, > > I'm trying to use the ovirt-image-template role to import a Glance image as > a template into ovirt and I'm running into this error with > python-ovirt-engine-sdk4-4.1.6-1.el7ev.x86_64 > > I'd appreciate any

Re: [ovirt-users] ansible ovirt_vms parameter cloud_init_nics

2017-09-27 Thread Ondra Machacek
On Wed, Sep 27, 2017 at 9:32 AM, TranceWorldLogic . wrote: > Hi, > > I was trying to initialize more than one nic via cloud init using ansible as > shown below > > vars: >myNicList: [ { nic_name: "eth0, nic_boot_protocol: "dhcp", nic_on_boot: > "true"},{ nic_name:

Re: [ovirt-users] oVirt automation through Ansible and cloud-init in oVirt 4.1.5 + Ansible 2.3.1

2017-09-11 Thread Ondra Machacek
On Sat, Sep 9, 2017 at 2:02 AM, Julián Tete wrote: > oVirt Version: 4.1.5 > > Ansible: 2.3.1 > > Hello Friends of oVirt > > I want to automate the creation, provisioning and deployment of virtual > machines in oVirt, using Ansible. > > I want to use a non-cloud image for

Re: [ovirt-users] testing REST API

2017-08-19 Thread Ondra Machacek
On Fri, Aug 18, 2017 at 11:38 PM, wodel youchi wrote: > > Hi; > > I am reading the REST API Guide, it's the first time that I am testing this. > > I have hard time to use OAuth authentication to make queries. > > I can get the token with curl and with a firefox REST module

  1   2   3   4   >