Re: [Users] engine Failed to decrypt Data error
- Original Message -
> From: "Alon Bar-Lev"
> To: "Eli Mesika"
> Cc: "users" , "Dead Horse"
> Sent: Monday, January 28, 2013 11:20:30 PM
> Subject: Re: [Users] engine Failed to decrypt Data error
>
>
>
> - Original Message -
> > From: "Eli Mesika"
> > To: "Dead Horse"
> > Cc: "users" , "Alon Bar-Lev"
> > Sent: Monday, January 28, 2013 11:16:16 PM
> > Subject: Re: [Users] engine Failed to decrypt Data error
> >
> >
> >
> > - Original Message -
> > > From: "Dead Horse"
> > > To: "Alon Bar-Lev"
> > > Cc: "users" , "Eli Mesika"
> > > Sent: Monday, January 28, 2013 11:04:53 PM
> > > Subject: Re: [Users] engine Failed to decrypt Data error
> > >
> > >
> > > psql -U engine -d engine -c "select * from vdc_options where
> > > option_name in ('LocalAdminPassword', 'AdminPassword');"
> > > option_id | option_name |
> > >
> > > option_value
> > >
> > > | version
> > > ---++---
> > >
> > >
> > >
> > > ---+-
> > > 127 | LocalAdminPassword |
> > > KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
> > > OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
> > > Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
> > > X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
> > > hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
> > > general
> > > 7 | AdminPassword |
> > > AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
> > > VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
> > > O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
> > > 40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
> > > qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
> > > general
> > > (2 rows)
> >
> > Too long , supported values for encryption should be < 127
> > characters
>
> Why too long? it should be 2048 RSA key.
> And it is exactly 256 decoded.
OK
Didn't you say that practically it should be < 256 ?
>
> >
> >
> > >
> > >
> > >
> > >
> > > On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev < alo...@redhat.com
> > > >
> > > wrote:
> > >
> > >
> > >
> > > - Original Message -
> > > > From: "Dead Horse" < deadhorseconsult...@gmail.com >
> > > > To: "Alon Bar-Lev" < alo...@redhat.com >
> > > > Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> > > > emes...@redhat.com
> > > > >
> > >
> > > > Sent: Monday, January 28, 2013 10:35:34 PM
> > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > >
> > > >
> > > >
> > >
> > > > was in the middle of a fresh engine setup which did not exhibit
> > > > the
> > > > symptom. However after running: "engine-config -s
> > > > AdminPassword=interactive" and restarting the engine service on
> > > > the
> > > > clean setup the error message now shows up.
> > > >
> > > > - DHC
> > > >
> > > >
> > > >
> > >
> > > OK, at least it is related to the admin password.
> > >
> > > Please send me the output of:
> > >
> > > psql -U engine -d engine -c "select * from vdc_options where
> > > option_name in ('LocalAdminPassword', 'AdminPassword');"
> > >
> > >
> > > Thanks!
> > >
> > > >
> > > > On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev <
> > > > alo...@redhat.com
> > > > >
> > > > wrote:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > - Original Message -
> > > > > From: "Dead Horse" < deadhorseconsult...@gmail.com >
> > > > > To: "Alon Bar-Lev" < alo...@redhat.com >
> > > > > Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> > > > > emes...@redhat.com
> > > > > >
> > > >
> > > > > Sent: Monday, January 28, 2013 9:46:53 PM
> > > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > > > > Current running engine build --> commit:
> > > > > 61c11aecc40e755d08b6c34c6fe1c0a07fa94de8
> > > > >
> > > > > ran engine upgrade against the built rpms from that commit.
> > > > >
> > > > >
> > > > > Thus I applied it as an upgrade against prior running build
> > > > > -->
> > > > > commit:
> > > > > 1eb895355239bbcb7a7ceda172405f0b68f18f35
> > > >
> > > > [Please use plain text mails in lists.]
> > > >
> > > >
> > > > Can you please patch EncryptionUtils.decrypt() with the
> > > > following,
> > > > so
> > > > I can see what source is? source is encrypted blob, should not
> > > > be
> > > > a
> > > > problem to send it.
> > > >
> > > > if (!StringHelper.isNullOrEmpty(source.trim())) {
> > > > KeyStore store = EncryptionUtils.getKeyStore(keyFile, passwd,
> > > > certType);
> > > > Key key = store.getKey(al
Re: [Users] engine Failed to decrypt Data error
- Original Message -
> From: "Eli Mesika"
> To: "Alon Bar-Lev"
> Cc: "users" , "Dead Horse"
> Sent: Tuesday, January 29, 2013 10:33:04 AM
> Subject: Re: [Users] engine Failed to decrypt Data error
>
>
>
> - Original Message -
> > From: "Alon Bar-Lev"
> > To: "Eli Mesika"
> > Cc: "users" , "Dead Horse"
> >
> > Sent: Monday, January 28, 2013 11:20:30 PM
> > Subject: Re: [Users] engine Failed to decrypt Data error
> >
> >
> >
> > - Original Message -
> > > From: "Eli Mesika"
> > > To: "Dead Horse"
> > > Cc: "users" , "Alon Bar-Lev"
> > > Sent: Monday, January 28, 2013 11:16:16 PM
> > > Subject: Re: [Users] engine Failed to decrypt Data error
> > >
> > >
> > >
> > > - Original Message -
> > > > From: "Dead Horse"
> > > > To: "Alon Bar-Lev"
> > > > Cc: "users" , "Eli Mesika"
> > > >
> > > > Sent: Monday, January 28, 2013 11:04:53 PM
> > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > >
> > > >
> > > > psql -U engine -d engine -c "select * from vdc_options where
> > > > option_name in ('LocalAdminPassword', 'AdminPassword');"
> > > > option_id | option_name |
> > > >
> > > > option_value
> > > >
> > > > | version
> > > > ---++---
> > > >
> > > >
> > > >
> > > > ---+-
> > > > 127 | LocalAdminPassword |
> > > > KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
> > > > OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
> > > > Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
> > > > X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
> > > > hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
> > > > general
> > > > 7 | AdminPassword |
> > > > AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
> > > > VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
> > > > O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
> > > > 40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
> > > > qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
> > > > general
> > > > (2 rows)
> > >
> > > Too long , supported values for encryption should be < 127
> > > characters
> >
> > Why too long? it should be 2048 RSA key.
> > And it is exactly 256 decoded.
> OK
> Didn't you say that practically it should be < 256 ?
The encrypted blob is exactly 256 (keysize/8).
The plain text within that blob is at same length.
The PKCS#5 padding that we should use (or should have used) takes at lease one
byte from suffix, hence the <256, but this applies to the plain text.
>From the exception we see that the java crypto provider complains we provide a
>block >256 and key size of 2048, so there is something wrong with the buffer
>we pass as it must be =256 bytes.
> >
> > >
> > >
> > > >
> > > >
> > > >
> > > >
> > > > On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev <
> > > > alo...@redhat.com
> > > > >
> > > > wrote:
> > > >
> > > >
> > > >
> > > > - Original Message -
> > > > > From: "Dead Horse" < deadhorseconsult...@gmail.com >
> > > > > To: "Alon Bar-Lev" < alo...@redhat.com >
> > > > > Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> > > > > emes...@redhat.com
> > > > > >
> > > >
> > > > > Sent: Monday, January 28, 2013 10:35:34 PM
> > > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > > >
> > > > >
> > > > >
> > > >
> > > > > was in the middle of a fresh engine setup which did not
> > > > > exhibit
> > > > > the
> > > > > symptom. However after running: "engine-config -s
> > > > > AdminPassword=interactive" and restarting the engine service
> > > > > on
> > > > > the
> > > > > clean setup the error message now shows up.
> > > > >
> > > > > - DHC
> > > > >
> > > > >
> > > > >
> > > >
> > > > OK, at least it is related to the admin password.
> > > >
> > > > Please send me the output of:
> > > >
> > > > psql -U engine -d engine -c "select * from vdc_options where
> > > > option_name in ('LocalAdminPassword', 'AdminPassword');"
> > > >
> > > >
> > > > Thanks!
> > > >
> > > > >
> > > > > On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev <
> > > > > alo...@redhat.com
> > > > > >
> > > > > wrote:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > - Original Message -
> > > > > > From: "Dead Horse" < deadhorseconsult...@gmail.com >
> > > > > > To: "Alon Bar-Lev" < alo...@redhat.com >
> > > > > > Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> > > > > > emes...@redhat.com
> > > > > > >
> > > > >
> > > > > > Sent: Monday, January 28, 2013 9:46:53 PM
Re: [Users] Cannot run VM. Low disk space on relevant Storage Domain
Hi, I think you mean Engine-config in oVirt? Just so other people with the same question goes in the right direction here. Thanks anyway, you helped me up on the track. Regards //Ricky On 2013-01-27 15:31, Dafna Ron wrote: > you can set the limit of low disk space using rhevm-config > > FreeSpaceCriticalLowInGB: "Critical low disk space alert threshold (in > GB)" (Value Type: Integer) > FreeSpaceLow: "Limit of % free disk-space below which it is considered > low" (Value Type: Integer)* > * > run rhevm-config --help for more info on how to use the command. > > and note that you need to restart ovirt-engine service after change. > > > On 01/27/2013 11:39 AM, Ricky Schneberger wrote: >> Hi, >> >> I have put up a test environment with oVirt 3.1 and found out (because >> of limited storage) that when trying to run a vm i got "Error while >> executing action: Cannot run VM. Low disk space on relevant Storage Domain." >> >> Disk space on the storage domain is 322GB free (9% of total). >> >> Can I change these limits? How are they calculated? By percentage? >> I dont use quotas anywhere. >> >> Regards >> >> //Ricky >> >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] default mutipath.conf config for fedora 18 invalid
On Fri, Jan 25, 2013 at 10:53:51PM +0200, Dan Kenigsberg wrote: > On Thu, Jan 24, 2013 at 10:44:48AM -0500, Yeela Kaplan wrote: > > Hi, > > I've tested the new patch on fedora 18 vdsm host (created iscsi storage > > domain, attached, activated) and it works well. > > Even though multipath.conf no longer uses getuid_callout to recognize the > > device's wwid, > > it still knows how to deal with the attribute's existence in the conf file > > when running multipath command (only output is to stdout which we don't use > > anyway, stderr empty and rc=0). > > The relevant patch is: http://gerrit.ovirt.org/#/c/10824/ > > Given your verification, and the fact that this patch is a step forward, > I've taken it into vdsm master and acked it for ovirt-3.2. I trust Ben > Marzinski to shout at us loudly if keeping the outdated verb is terribly > wrong. There's no harm at all in using invalid keywords in multipath.conf. It just prints a warning message. > > I'd expect to see a future patch, adding getuid_callout only for > multipath versions that actually need it. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] engine Failed to decrypt Data error
- Original Message -
> From: "Alon Bar-Lev"
> To: "Eli Mesika"
> Cc: "users" , "Dead Horse"
> Sent: Tuesday, January 29, 2013 10:40:59 AM
> Subject: Re: [Users] engine Failed to decrypt Data error
>
>
>
> - Original Message -
> > From: "Eli Mesika"
> > To: "Alon Bar-Lev"
> > Cc: "users" , "Dead Horse"
> >
> > Sent: Tuesday, January 29, 2013 10:33:04 AM
> > Subject: Re: [Users] engine Failed to decrypt Data error
> >
> >
> >
> > - Original Message -
> > > From: "Alon Bar-Lev"
> > > To: "Eli Mesika"
> > > Cc: "users" , "Dead Horse"
> > >
> > > Sent: Monday, January 28, 2013 11:20:30 PM
> > > Subject: Re: [Users] engine Failed to decrypt Data error
> > >
> > >
> > >
> > > - Original Message -
> > > > From: "Eli Mesika"
> > > > To: "Dead Horse"
> > > > Cc: "users" , "Alon Bar-Lev"
> > > >
> > > > Sent: Monday, January 28, 2013 11:16:16 PM
> > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > >
> > > >
> > > >
> > > > - Original Message -
> > > > > From: "Dead Horse"
> > > > > To: "Alon Bar-Lev"
> > > > > Cc: "users" , "Eli Mesika"
> > > > >
> > > > > Sent: Monday, January 28, 2013 11:04:53 PM
> > > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > > >
> > > > >
> > > > > psql -U engine -d engine -c "select * from vdc_options where
> > > > > option_name in ('LocalAdminPassword', 'AdminPassword');"
> > > > > option_id | option_name |
> > > > >
> > > > > option_value
> > > > >
> > > > > | version
> > > > > ---++---
> > > > >
> > > > >
> > > > >
> > > > > ---+-
> > > > > 127 | LocalAdminPassword |
> > > > > KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
> > > > > OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
> > > > > Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
> > > > > X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
> > > > > hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
> > > > > general
> > > > > 7 | AdminPassword |
> > > > > AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
> > > > > VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
> > > > > O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
> > > > > 40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
> > > > > qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
> > > > > general
> > > > > (2 rows)
> > > >
> > > > Too long , supported values for encryption should be < 127
> > > > characters
> > >
> > > Why too long? it should be 2048 RSA key.
> > > And it is exactly 256 decoded.
> > OK
> > Didn't you say that practically it should be < 256 ?
>
> The encrypted blob is exactly 256 (keysize/8).
> The plain text within that blob is at same length.
> The PKCS#5 padding that we should use (or should have used) takes at
> lease one byte from suffix, hence the <256, but this applies to the
> plain text.
> From the exception we see that the java crypto provider complains we
> provide a block >256 and key size of 2048, so there is something
> wrong with the buffer we pass as it must be =256 bytes.
That raises the chance of bug in the EncryptionUtils code , can you take a look
?
>
> > >
> > > >
> > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev <
> > > > > alo...@redhat.com
> > > > > >
> > > > > wrote:
> > > > >
> > > > >
> > > > >
> > > > > - Original Message -
> > > > > > From: "Dead Horse" < deadhorseconsult...@gmail.com >
> > > > > > To: "Alon Bar-Lev" < alo...@redhat.com >
> > > > > > Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> > > > > > emes...@redhat.com
> > > > > > >
> > > > >
> > > > > > Sent: Monday, January 28, 2013 10:35:34 PM
> > > > > > Subject: Re: [Users] engine Failed to decrypt Data error
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > > was in the middle of a fresh engine setup which did not
> > > > > > exhibit
> > > > > > the
> > > > > > symptom. However after running: "engine-config -s
> > > > > > AdminPassword=interactive" and restarting the engine
> > > > > > service
> > > > > > on
> > > > > > the
> > > > > > clean setup the error message now shows up.
> > > > > >
> > > > > > - DHC
> > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > > OK, at least it is related to the admin password.
> > > > >
> > > > > Please send me the output of:
> > > > >
> > > > > psql -U engine -d engine -c "select * from vdc_options where
> > > > > option_name in ('LocalAdminPass
Re: [Users] oVirt 3.2 Release delayed
On Tue, Jan 29, 2013 at 12:56 AM, Mike Burns wrote: >> > > Sorry for the delay in my response. I was travelling last week and am just > catching up now. > > We'll be delaying the Test Day to Thursday this week. An official > announcement will be coming soon for both the Test Day and the Beta. > > Thanks > > Mike No problem, Mike One question: is it supposed to work making an update from a nightly past days to this beta? For example from 3.2.0-1.20130123.git2ad65d0 based f18 rpm packages to beta. Or are January nightly packages already ahead in respect with it? Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] ovirt / spice client /connection
Hi, is it possible to change the key combination from Shift + F12 to CTRL+ALT to "release the cursor/mouse" ? Alex -- | RHCE | Senior Systems Engineer | www.vcore.co | www.vsearchcloud.com | ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] engine Failed to decrypt Data error
On 01/29/2013 10:00 AM, Eli Mesika wrote:
- Original Message -
From: "Alon Bar-Lev"
To: "Eli Mesika"
Cc: "users" , "Dead Horse"
Sent: Tuesday, January 29, 2013 10:40:59 AM
Subject: Re: [Users] engine Failed to decrypt Data error
- Original Message -
From: "Eli Mesika"
To: "Alon Bar-Lev"
Cc: "users" , "Dead Horse"
Sent: Tuesday, January 29, 2013 10:33:04 AM
Subject: Re: [Users] engine Failed to decrypt Data error
- Original Message -
From: "Alon Bar-Lev"
To: "Eli Mesika"
Cc: "users" , "Dead Horse"
Sent: Monday, January 28, 2013 11:20:30 PM
Subject: Re: [Users] engine Failed to decrypt Data error
- Original Message -
From: "Eli Mesika"
To: "Dead Horse"
Cc: "users" , "Alon Bar-Lev"
Sent: Monday, January 28, 2013 11:16:16 PM
Subject: Re: [Users] engine Failed to decrypt Data error
- Original Message -
From: "Dead Horse"
To: "Alon Bar-Lev"
Cc: "users" , "Eli Mesika"
Sent: Monday, January 28, 2013 11:04:53 PM
Subject: Re: [Users] engine Failed to decrypt Data error
psql -U engine -d engine -c "select * from vdc_options where
option_name in ('LocalAdminPassword', 'AdminPassword');"
option_id | option_name |
option_value
| version
---++---
---+-
127 | LocalAdminPassword |
KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
general
7 | AdminPassword |
AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
general
(2 rows)
Too long , supported values for encryption should be < 127
characters
Why too long? it should be 2048 RSA key.
And it is exactly 256 decoded.
OK
Didn't you say that practically it should be < 256 ?
The encrypted blob is exactly 256 (keysize/8).
The plain text within that blob is at same length.
The PKCS#5 padding that we should use (or should have used) takes at
lease one byte from suffix, hence the <256, but this applies to the
plain text.
From the exception we see that the java crypto provider complains we
provide a block >256 and key size of 2048, so there is something
wrong with the buffer we pass as it must be =256 bytes.
That raises the chance of bug in the EncryptionUtils code , can you take a look
?
As the exceptions are coming from several different threads that are
running in parallel I would look for a concurrency problem. In
particular I would check the "Encoding" class. It seems to me that it
uses the "Base64.decode(...)" method from multiple threads in an unsafe way.
On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev <
alo...@redhat.com
wrote:
- Original Message -
From: "Dead Horse" < deadhorseconsult...@gmail.com >
To: "Alon Bar-Lev" < alo...@redhat.com >
Cc: "users" < users@ovirt.org >, "Eli Mesika" <
emes...@redhat.com
Sent: Monday, January 28, 2013 10:35:34 PM
Subject: Re: [Users] engine Failed to decrypt Data error
was in the middle of a fresh engine setup which did not
exhibit
the
symptom. However after running: "engine-config -s
AdminPassword=interactive" and restarting the engine
service
on
the
clean setup the error message now shows up.
- DHC
OK, at least it is related to the admin password.
Please send me the output of:
psql -U engine -d engine -c "select * from vdc_options where
option_name in ('LocalAdminPassword', 'AdminPassword');"
Thanks!
On Mon, Jan 28, 2013 at 1:55 PM, Alon Bar-Lev <
alo...@redhat.com
wrote:
- Original Message -
From: "Dead Horse" < deadhorseconsult...@gmail.com >
To: "Alon Bar-Lev" < alo...@redhat.com >
Cc: "users" < users@ovirt.org >, "Eli Mesika" <
emes...@redhat.com
Sent: Monday, January 28, 2013 9:46:53 PM
Subject: Re: [Users] engine Failed to decrypt Data error
Current running engine build --> commit:
61c11aecc40e755d08b6c34c6fe1c0a07fa94de8
ran engine upgrade against the built rpms from that
commit.
Thus I applied it as an upgrade against prior running
build
-->
commit:
1eb895355239bbcb7a7ceda172405f0b68f18f35
[Please use plain text mails in lists.]
Can you please patch EncryptionUtils.decrypt() with the
follo
Re: [Users] oVirt 3.2 Test Day
Hi Shu, From my understanding: The 3.2 engine should work fine on F17. To use an F17 host as a node, however, you would have to back-port a more recent version of libvirt to that which is available on F17. To those who know: would that be difficult at all? Perhaps we could enable that by providing the relevant RPM on the site? Thanks, Dave. On 01/29/2013 02:54 AM, Shu Ming wrote: A quick questions: Doesn't oVirt 3.2 support FC17? I can only find the directory for FC18&FC19 in the oVirt release repositories. Mike Burns: The test day for oVirt 3.2 will be held on Thursday January 31. For information of the Test Day, please follow: http://www.ovirt.org/Testing/OvirtTestDay Thanks Mike ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.2 Test Day
On 29-1-2013 11:59, Dave Neary wrote: Hi Shu, From my understanding: The 3.2 engine should work fine on F17. To use an F17 host as a node, however, you would have to back-port a more recent version of libvirt to that which is available on F17. To those who know: would that be difficult at all? Perhaps we could enable that by providing the relevant RPM on the site? I don't know but I used the danken repo for that when I used F17 as hosts. I have now switched to F18 and the version of libvirt in the standard repos is new enough. Joop ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.2 Release delayed
On 01/29/2013 04:03 AM, Gianluca Cecchi wrote: On Tue, Jan 29, 2013 at 12:56 AM, Mike Burns wrote: Sorry for the delay in my response. I was travelling last week and am just catching up now. We'll be delaying the Test Day to Thursday this week. An official announcement will be coming soon for both the Test Day and the Beta. Thanks Mike No problem, Mike One question: is it supposed to work making an update from a nightly past days to this beta? For example from 3.2.0-1.20130123.git2ad65d0 based f18 rpm packages to beta. Or are January nightly packages already ahead in respect with it? Nightly may be ahead, but they could include things that are not being shipped in 3.2. When we move to beta, we branch the git repo and only include changes that are deemed blockers for release. Mike Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt / spice client /connection
- Original Message - > From: "Alex Leonhardt" > To: "oVirt Mailing List" > Sent: Tuesday, January 29, 2013 4:07:13 AM > Subject: [Users] ovirt / spice client /connection > Hi, > is it possible to change the key combination from Shift + F12 to > CTRL+ALT to "release the cursor/mouse" ? Use the engine-config utility to change the value for SpiceReleaseCursorKeys the default is "shift+f12" but it can be easily modified. Aic > Alex > -- > | RHCE | Senior Systems Engineer | www.vcore.co | > | www.vsearchcloud.com | > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] engine Failed to decrypt Data error
- Original Message -
> From: "Juan Hernandez"
> To: "Eli Mesika"
> Cc: "Alon Bar-Lev" , "users"
> Sent: Tuesday, January 29, 2013 12:03:05 PM
> Subject: Re: [Users] engine Failed to decrypt Data error
>
> On 01/29/2013 10:00 AM, Eli Mesika wrote:
> >
> >
> > - Original Message -
> >> From: "Alon Bar-Lev"
> >> To: "Eli Mesika"
> >> Cc: "users" , "Dead Horse"
> >>
> >> Sent: Tuesday, January 29, 2013 10:40:59 AM
> >> Subject: Re: [Users] engine Failed to decrypt Data error
> >>
> >>
> >>
> >> - Original Message -
> >>> From: "Eli Mesika"
> >>> To: "Alon Bar-Lev"
> >>> Cc: "users" , "Dead Horse"
> >>>
> >>> Sent: Tuesday, January 29, 2013 10:33:04 AM
> >>> Subject: Re: [Users] engine Failed to decrypt Data error
> >>>
> >>>
> >>>
> >>> - Original Message -
> From: "Alon Bar-Lev"
> To: "Eli Mesika"
> Cc: "users" , "Dead Horse"
>
> Sent: Monday, January 28, 2013 11:20:30 PM
> Subject: Re: [Users] engine Failed to decrypt Data error
>
>
>
> - Original Message -
> > From: "Eli Mesika"
> > To: "Dead Horse"
> > Cc: "users" , "Alon Bar-Lev"
> >
> > Sent: Monday, January 28, 2013 11:16:16 PM
> > Subject: Re: [Users] engine Failed to decrypt Data error
> >
> >
> >
> > - Original Message -
> >> From: "Dead Horse"
> >> To: "Alon Bar-Lev"
> >> Cc: "users" , "Eli Mesika"
> >>
> >> Sent: Monday, January 28, 2013 11:04:53 PM
> >> Subject: Re: [Users] engine Failed to decrypt Data error
> >>
> >>
> >> psql -U engine -d engine -c "select * from vdc_options where
> >> option_name in ('LocalAdminPassword', 'AdminPassword');"
> >> option_id | option_name |
> >>
> >> option_value
> >>
> >> | version
> >> ---++---
> >>
> >>
> >>
> >> ---+-
> >> 127 | LocalAdminPassword |
> >> KiG8670o1qXVX6omYsiCdaaXtQc/mGmr0qgLHqc8yykoRz
> >> OwbfZzU9AxBYwYrJEwyqdq8c2ZwfGVvQ1YVIfGRspKLKogl59gBnwcQuk3al1K4Vtmr2hgWDtm5FBYd5
> >> Nac4WIly4efjMCRjwrpPVkpAX55N8tGJ9LNzX8eRszQ4iVs8zivl0eu9SVhrB8tbHkA/+U5/vss26za8
> >> X+AV67dtDzoD7ZS0eOT1Vx9vrOGHvDYU8tANEb29Et79CJ0whLOOEeuwTpkK1yZdF3PaWRbnTwXZUsB1
> >> hMs9NLdo2ZxZOVSIK1E2mPh1WLybgIX1YB0Ra3BZvjAR9wPZz+jdfZng== |
> >> general
> >> 7 | AdminPassword |
> >> AakmoHu69RmCWkSoVXLOv0cwzwGscXaM+HJAONRtSdECEA
> >> VL+bjc1Lis6PHR1vBwdmhITxAvo2998pTJNusvtuTCODra40MTC+9p9+Oev4jWIbkncHH8gRdIKyvHuz
> >> O6fNda50VXeWYhGNFIMavw15PlslutUWEpyNAasjEWyZ7cNyjKK2eFKNDZ3F5PCv9RcQXfXkKSveWm6M
> >> 40zUVOx1ZjCnptNUpB4VYf5vW8LOpSL5NJpfJQmu36QbBRDDo3+3XPb4ELXA4t1rbPYw9Z7hRbk5Mbtq
> >> qvOA7q4+G4nPtxHB7d6dYT2QJ58wgXUSIIoz/odvz5yVYeazIFS3Faww== |
> >> general
> >> (2 rows)
> >
> > Too long , supported values for encryption should be < 127
> > characters
>
> Why too long? it should be 2048 RSA key.
> And it is exactly 256 decoded.
> >>> OK
> >>> Didn't you say that practically it should be < 256 ?
> >>
> >> The encrypted blob is exactly 256 (keysize/8).
> >> The plain text within that blob is at same length.
> >> The PKCS#5 padding that we should use (or should have used) takes
> >> at
> >> lease one byte from suffix, hence the <256, but this applies to
> >> the
> >> plain text.
> >> From the exception we see that the java crypto provider complains
> >> we
> >> provide a block >256 and key size of 2048, so there is something
> >> wrong with the buffer we pass as it must be =256 bytes.
> >
> > That raises the chance of bug in the EncryptionUtils code , can you
> > take a look ?
>
> As the exceptions are coming from several different threads that are
> running in parallel I would look for a concurrency problem. In
> particular I would check the "Encoding" class. It seems to me that it
> uses the "Base64.decode(...)" method from multiple threads in an
> unsafe way.
Right, we should really need to remove the legacy code.
http://gerrit.ovirt.org/11495
http://gerrit.ovirt.org/11496
http://gerrit.ovirt.org/11497
http://gerrit.ovirt.org/11498
>
> >
> >>
>
> >
> >
> >>
> >>
> >>
> >>
> >> On Mon, Jan 28, 2013 at 2:38 PM, Alon Bar-Lev <
> >> alo...@redhat.com
> >>>
> >> wrote:
> >>
> >>
> >>
> >> - Original Message -
> >>> From: "Dead Horse" < deadhorseconsult...@gmail.com >
> >>> To: "Alon Bar-Lev" < alo...@redhat.com >
> >>> Cc: "users" < users@ovirt.org >, "Eli Mesika" <
> >>> emes...@redhat.com
>
> >>
> >>> Sent: Monday, January 28, 2013 10
[Users] node iso installer drops into dracut with Supermicro Virtual CD drive
Hi, I'm still having the same problems booting from a virtual CD problems with the latest node iso (ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso). The node boots into the installer and then drops into a dracut shell: dracut-initqueue[488]: Warning: Could not boot. dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does not exist dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist dracut:/# blkid /dev/sr0: UUID="2013-01-28-01-35-21-00" LABEL="ovirt-node-iso" TYPE="iso9660" PTTYPE="dos" I'll use foreman to deploy it for now but it's making casual testing a bit harder. -- Kind Regards, Jorick Astrego Netbulae B.V. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive
Hi, You should alter your grub command line. This is a bug on Fedora. Instead of /dev/mapper/live-rw, it should be /dev/sr0, for instance... Alex 2013/1/29 Jorick Astrego : > Hi, > > I'm still having the same problems booting from a virtual CD problems with > the latest node iso > (ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso). > > The node boots into the installer and then drops into a dracut shell: > > dracut-initqueue[488]: Warning: Could not boot. > dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does not > exist > dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist > > dracut:/# blkid > /dev/sr0: UUID="2013-01-28-01-35-21-00" LABEL="ovirt-node-iso" > TYPE="iso9660" PTTYPE="dos" > > I'll use foreman to deploy it for now but it's making casual testing a bit > harder. > > -- > Kind Regards, > > Jorick Astrego > > Netbulae B.V. > > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive
On 01/29/2013 03:31 PM, Alexandre Santos wrote: Hi, You should alter your grub command line. This is a bug on Fedora. Instead of /dev/mapper/live-rw, it should be /dev/sr0, for instance... Alex 2013/1/29 Jorick Astrego : Hi, I'm still having the same problems booting from a virtual CD problems with the latest node iso (ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso). The node boots into the installer and then drops into a dracut shell: dracut-initqueue[488]: Warning: Could not boot. dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does not exist dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist dracut:/# blkid /dev/sr0: UUID="2013-01-28-01-35-21-00" LABEL="ovirt-node-iso" TYPE="iso9660" PTTYPE="dos" I'll use foreman to deploy it for now but it's making casual testing a bit harder. -- Kind Regards, Jorick Astrego Netbulae B.V. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users Hi, Ok I can do that, but how do I do that on boot? I could modify the iso but I don't have the normal grub bootscreen so I can edit it. I tried replacing the CDLABEL parameter in the kernel arguments but this gets me nowhere. You state it's a bug on Fedora, but from a user perspective that doesn't matter it just doesn't work properly. And this hasn't worked for nearly a year now. An installer where you have to manually enter parameters on boot in a limited time window (a couple of seconds otherwise you have reboot again) doesn't make us admins happy. -- Kind regards, Jorick Astrego Netbulae B.V. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive
I'm also hoping that these issues get solved in the future 2013/1/29 Jorick Astrego : > On 01/29/2013 03:31 PM, Alexandre Santos wrote: >> >> Hi, >> You should alter your grub command line. This is a bug on Fedora. >> Instead of /dev/mapper/live-rw, it should be /dev/sr0, for instance... >> Alex >> >> >> 2013/1/29 Jorick Astrego : >>> >>> Hi, >>> >>> I'm still having the same problems booting from a virtual CD problems >>> with >>> the latest node iso >>> (ovirt-node-iso-2.6.0-20130125090303git3839439.566.fc18.iso). >>> >>> The node boots into the installer and then drops into a dracut shell: >>> >>> dracut-initqueue[488]: Warning: Could not boot. >>> dracut-initqueue[488]: Warning: /dev/disk/by-label/ovirt-node-iso does >>> not >>> exist >>> dracut-initqueue[488]: Warning: /dev/mapper/live-rw does not exist >>> >>> dracut:/# blkid >>> /dev/sr0: UUID="2013-01-28-01-35-21-00" LABEL="ovirt-node-iso" >>> TYPE="iso9660" PTTYPE="dos" >>> >>> I'll use foreman to deploy it for now but it's making casual testing a >>> bit >>> harder. >>> >>> -- >>> Kind Regards, >>> >>> Jorick Astrego >>> >>> Netbulae B.V. >>> >>> >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > > Hi, > > Ok I can do that, but how do I do that on boot? I could modify the iso but I > don't have the normal grub bootscreen so I can edit it. > > I tried replacing the CDLABEL parameter in the kernel arguments but this > gets me nowhere. > > You state it's a bug on Fedora, but from a user perspective that doesn't > matter it just doesn't work properly. And this hasn't worked for nearly > a year now. > > An installer where you have to manually enter parameters on boot in a > limited time window (a couple of seconds otherwise you have reboot again) > doesn't make us admins happy. > > > -- > Kind regards, > > Jorick Astrego > > Netbulae B.V. > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] node iso installer drops into dracut with Supermicro Virtual CD drive
On Tue, 2013-01-29 at 18:22 +0100, Jorick Astrego wrote: > On 01/29/2013 03:31 PM, Alexandre Santos wrote: > Hi, > > Ok I can do that, but how do I do that on boot? I could modify the iso > but I don't have the normal grub bootscreen so I can edit it. > > I tried replacing the CDLABEL parameter in the kernel arguments but this > gets me nowhere. > > You state it's a bug on Fedora, but from a user perspective that doesn't > matter it just doesn't work properly. And this hasn't worked for > nearly a year now. > > An installer where you have to manually enter parameters on boot in a > limited time window (a couple of seconds otherwise you have reboot > again) doesn't make us admins happy. > > Hi, You can change boot options using the following steps: 1. Boot from CD 2. Press "Tab" when you see "Start Ovirt Node" 3. Change "root=live:CDLABEL=ovirt-node-iso" to "root=live:/dev/sr0" Regards, René ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] Engine upgrade failure broken in master
Commit: 72a51f5e21f38bf259a460948670eac92e97ca24 Breaks engine upgrades: 2013-01-29 12:40:52::ERROR::engine-upgrade::1177::root:: Traceback (most recent call last): File "/usr/bin/engine-upgrade", line 1170, in main(options) File "/usr/bin/engine-upgrade", line 1071, in main if zombieTasksFound(): File "/usr/bin/engine-upgrade", line 766, in zombieTasksFound msg="Can't get zombie async tasks", File "/usr/share/ovirt-engine/scripts/common_utils.py", line 459, in execCmd env=env, File "/usr/lib64/python2.7/subprocess.py", line 679, in __init__ errread, errwrite) File "/usr/lib64/python2.7/subprocess.py", line 1249, in _execute_child raise child_exception OSError: [Errno 8] Exec format error Upgrade was attempted on engine built from commit: 61c11aecc40e755d08b6c34c6fe1c0a07fa94de8 Building from commit: 82bdc46dfdb46b000f67f0cd4e51fc39665bf13b and upgrading works as expected. - DHC ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt / spice client /connection
fab, thanks i'll try that On 01/29/2013 12:24 PM, Andrew Cathrow wrote: - Original Message - From: "Alex Leonhardt" To: "oVirt Mailing List" Sent: Tuesday, January 29, 2013 4:07:13 AM Subject: [Users] ovirt / spice client /connection Hi, is it possible to change the key combination from Shift + F12 to CTRL+ALT to "release the cursor/mouse" ? Use the engine-config utility to change the value for SpiceReleaseCursorKeys the default is "shift+f12" but it can be easily modified. Aic Alex -- | RHCE | Senior Systems Engineer | www.vcore.co | | www.vsearchcloud.com | ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Engine upgrade failure broken in master
Looks like the following commits around the async task clearner introduced between the two commits you specified - e16f21c1a42d418cfb7528b7819d97e576d715f3 9393178a693cddc8756cf3b21198faa43407ff5d Looks like the one that handles the extra character fixes this. - Original Message - > From: "Dead Horse" > To: "" > Sent: Tuesday, January 29, 2013 10:19:31 PM > Subject: [Users] Engine upgrade failure broken in master > Commit: 72a51f5e21f38bf259a460948670eac92e97ca24 > Breaks engine upgrades: > 2013-01-29 12:40:52::ERROR::engine-upgrade::1177::root:: Traceback > (most recent call last): > File "/usr/bin/engine-upgrade", line 1170, in > main(options) > File "/usr/bin/engine-upgrade", line 1071, in main > if zombieTasksFound(): > File "/usr/bin/engine-upgrade", line 766, in zombieTasksFound > msg="Can't get zombie async tasks", > File "/usr/share/ovirt-engine/scripts/common_utils.py", line 459, in > execCmd > env=env, > File "/usr/lib64/python2.7/subprocess.py", line 679, in __init__ > errread, errwrite) > File "/usr/lib64/python2.7/subprocess.py", line 1249, in > _execute_child > raise child_exception > OSError: [Errno 8] Exec format error > Upgrade was attempted on engine built from commit: > 61c11aecc40e755d08b6c34c6fe1c0a07fa94de8 > Building from commit: 82bdc46dfdb46b000f67f0cd4e51fc39665bf13b and > upgrading works as expected. > - DHC > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
