Re: [Users] Migration issue Asking For Help
Le 21/02/2013 08:45, Roy Golan a écrit : Speaking about this : I don't know if this is the expecting way to do? Is there such a thing like iptables rules pushed my the manager to the nodes? And in that case, I swear the iptables of the node had no way to allow a migration from the other hosts (oVirt 3.1, F17, all fresh installed) have you checked that Automatically configure host firewall is checked when you added you host? I can not remember firmly, but I'm almost sure I UNchecked this option, dumb as I can be. Thank you Roy ! -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Lost our management server.. have DB backup but no /etc/pki/
Hi David, thanks for your contribution! I've added a link to your page in http://www.ovirt.org/Backup_And_Restore_Engine Thanks! -- Sandro Il 20/02/2013 23:49, St.Keimond ha scritto: All, I have documented backup, backup monitoring,.. and referenced another users docs for the restore process. I have made a note to myself to still write up a separate document on how to do a restore without any files but the database and will try to get to that soon... http://www.ovirt.org/User_talk:Stkeimond/Backing_Up_And_Restoring_OVirt Thanks!   David On 02/20/2013 08:47 AM, Itamar Heim wrote: On 20/02/2013 16:53, Saint Keimond wrote: All,   Thank you for your help! I love the linux community. I actually was able to get my system up 2 days ago. I did a fresh minimal install of F17, and ovirt 3.1. * ran engine-setup trying to use as many of the same variables as I would have around a year ago. * shutdown jboss-as and ovirt-engine * imported the database * started services back up * ran engine-config to reset the password * restarted services * was able to log in * Had to wait roughly 10-15 minutes before ovirt decided that nothing was running and I could finally delete the nodes from my cluster * Re-added the nodes.. they got the new certificates * Networking Storage (I use ISCSI) came back just fine * SUCCESS !!! (such a great feeling) . . . . and now you IDIOT (me) . . . . back up the certificates too! ---David please wikify for other who may need this in the future. thanks On 2/18/13 5:00 AM, Adrian Gibanel wrote: If it can help I wrote an oVirt engine migration page for oVirt 3.1 on: http://www.ovirt.org/User:Adrian15/oVirt_engine_migration . I suppose some of the steps might be adapted for your case easily.    *De: *Itamar Heim ih...@redhat.com    *Para: *Saint Keimond st.keim...@gmail.com    *CC: *users@ovirt.org    *Enviados: *Domingo, 17 de Febrero 2013 9:26:34    *Asunto: *Re: [Users] Lost our management server.. have DB backup    but no       /etc/pki/    On 17/02/2013 04:17, Saint Keimond wrote:    Hello,       We lost our Fedora 17 server with ovirt 3.1 on it. We have a good    database backup but do not have have any certificates. From what    I read,    it is possible to still do a restore.. we just have to rejoin    all the    nodes so that they get a new certificate.       I've tried to bring the database in to a fresh 3.1 install and a    fresh    3.2 install.. with no success on either. I need some helping    figuring    this out :)          Thanks,        David    i don't remember the exact process of the top of my head, but it    should    be either:    1. restore db, then install ovirt (exact same version by re-using the        db.    2. install ovirt, restore the db over it, and fix some config    entries to    correctly map the new certificates.    then just remove hosts and re-add them to generate new certs for them    (or just move them to maint and re-install them via the link that    should    appear in the general subtab) -- http://www.btactic.com/*Adrián Gibanel* I.T. Manager +34 675 683 301 www.btactic.com http://btactic.com/ * Ens podeu seguir a/Nos podeis seguir en: http://www.facebook.com/pages/btactic/118651634826400?v=app_9953271133 i http://twitter.com/btactic* Abans d´imprimir aquest missatge, pensa en el medi ambient. El medi ambient és cosa de tothom. / Antes de imprimir el mensaje piensa en el medio ambiente. El medio ambiente es cosa de todos. AVIS: El contingut d'aquest missatge i els seus annexos és confidencial. Si no en sou el destinatari, us fem saber que està prohibit utilitzar-lo, divulgar-lo i/o copiar-lo sense tenir l'autorització corresponent. Si heu rebut aquest missatge per error, us agrairem que ho feu saber immediatament al remitent i que procediu a destruir el missatge. AVISO: El contenido de este mensaje y de sus anexos es confidencial. Si no es el destinatario, les hacemos saber que está prohibido utilizarlo, divulgarlo y/o copiarlo sin tener la autorización correspondiente. Si han recibido este mensaje por error, les agradecerÃamos que lo hagan saber inmediatamente al remitente y que procedan a destruir el mensaje. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt kerberos/ldap
- Original Message -
Hi all!
I'm trying to link a ldap/kerberos to my ovirt without success. I'm
stuck with this:
oVirt engine:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: KDC has no support for encryption type
(14) -
BAD_ENCRYPTION_TYPE
Please snoop the connection between the engine and the IPA server. Port 88,
full packets ('-s 1500' on tcpdump), into file ('-w /tmp/kerb.pcap' ).
Y.
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
kdc log:
Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption
type
Any sugestion?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] HELP! Errors creating iSCSI Storage Domain
Hi, Please add engine and vdsm full logs. Regards, Vered - Original Message - From: Кочанов Иван k...@dcak.ru To: users@ovirt.org Sent: Thursday, February 21, 2013 4:26:14 AM Subject: [Users] HELP! Errors creating iSCSI Storage Domain Hello oVirt Community! Need help in configuring iSCSI DataCenter on oVirt. I have HP P4000 iSCSI Storage (LeftHand). And LUN on it. This LUN is available for the Server. I tried to install oVirt from ovirt-dre repo. Everything works except adding iSCSI Storage Domain. After iSCSI-discovery i get list of iSCSI LUNs. But I get error after choosing LUN I need (Error#1). If I try to add it second time I get another errors (Error#2 or Error#3). If I operate with iSCSI volume manually, I have no problems - Partitions are created. Can you advise something? I stuck with this problem for two weeks already... First I installed ovirt3.1. This week ovirt3.2 released and I did a fresh installation of this version, but nothing changed - errors are the same. Error #1: Error while executing action New SAN Storage Domain: Cannot create Logical Volume Error #2: Error while executing action New SAN Storage Domain: Physical device initialization failed. Check that the device is empty. Please remove all files and partitions from the device. Error #3: Error while executing action New SAN Storage Domain: Invalid physical device LUN info: # iscsiadm -m discovery -t st -p 172.16.20.1 172.16.20.1:3260,1 iqn.2003-10.com.lefthandnetworks:mg-dcak-p4000:134:vol-os-virtualimages # pvs PV VG Fmt Attr PSize PFree /dev/mapper/36000eb35f449ac1c0086 db260c45-8dd2-4397-a5bf-fd577bbbe0d4 lvm2 a-- 1023.62g 1023.62g # fdisk -l Disk /dev/sdc: 1099.5 GB, 1099511627776 bytes 255 heads, 63 sectors/track, 133674 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x Disk /dev/mapper/36000eb35f449ac1c0086: 1099.5 GB, 1099511627776 bytes 255 heads, 63 sectors/track, 133674 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x Server info: # rpm -q centos-release centos-release-6-3.el6.centos.9.x86_64 # uname -r 2.6.32-279.22.1.el6.x86_64 -- Sysadmin DCAK k...@dcak.ru ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt kerberos/ldap
Please provide info also on the IPA server you are using (use rpm -qa for that)
- Original Message -
From: Yaniv Kaul yk...@redhat.com
To: Eduardo Ramos edua...@freedominterface.org
Cc: users@ovirt.org
Sent: Thursday, February 21, 2013 11:14:41 AM
Subject: Re: [Users] ovirt kerberos/ldap
- Original Message -
Hi all!
I'm trying to link a ldap/kerberos to my ovirt without success. I'm
stuck with this:
oVirt engine:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: KDC has no support for encryption type
(14) -
BAD_ENCRYPTION_TYPE
Please snoop the connection between the engine and the IPA server.
Port 88, full packets ('-s 1500' on tcpdump), into file ('-w
/tmp/kerb.pcap' ).
Y.
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
kdc log:
Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption
type
Any sugestion?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
[Users] oVirt 3.2 - Problem configuring Node.
Hello, I did a fresh install with 3.2 GA release and since i had problems with ovirt-node, i decided to install a minimum fedora 18. When i tried to add that node on the webadmin interface, i got this error: Host xx installation failed. Unexpected connection termination. I have this message on logs: 2013-02-21 09:54:41,650 INFO [org.apache.sshd.common.util.SecurityUtils] (pool-3-thread-4) BouncyCastle not registered, using the default JCE provider 2013-02-21 09:54:41,746 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Session created... 2013-02-21 09:54:41,782 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Server version string: SSH-2.0-OpenSSH_6.1 2013-02-21 09:54:41,786 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Received SSH_MSG_KEXINIT 2013-02-21 09:54:41,807 INFO [org.apache.sshd.client.kex.DHG1] (NioProcessor-2) Send SSH_MSG_KEXDH_INIT 2013-02-21 09:54:41,814 INFO [org.apache.sshd.client.kex.DHG1] (NioProcessor-2) Received SSH_MSG_KEXDH_REPLY 2013-02-21 09:54:41,826 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Received SSH_MSG_NEWKEYS 2013-02-21 09:54:41,830 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Send SSH_MSG_SERVICE_REQUEST for ssh-userauth 2013-02-21 09:54:41,912 INFO [org.apache.sshd.client.auth.UserAuthPassword] (pool-3-thread-4) Send SSH_MSG_USERAUTH_REQUEST for password 2013-02-21 09:54:48,696 INFO [org.apache.sshd.client.auth.UserAuthPassword] (NioProcessor-2) Received SSH_MSG_USERAUTH_SUCCESS 2013-02-21 09:54:48,753 INFO [org.apache.sshd.client.channel.ChannelExec] (pool-3-thread-4) Send SSH_MSG_CHANNEL_OPEN on channel 0 2013-02-21 09:54:48,782 INFO [org.apache.sshd.client.channel.ChannelExec] (NioProcessor-2) Send SSH_MSG_CHANNEL_REQUEST exec 2013-02-21 09:54:48,823 INFO [org.apache.sshd.client.channel.ChannelExec] (NioProcessor-2) Received SSH_MSG_CHANNEL_REQUEST on channel 0 2013-02-21 09:54:48,838 INFO [org.apache.sshd.client.session.ClientSessionImpl] (NioProcessor-2) Session root@/192.168.218.228:22 closed There's something that i missed? Many Tnkx. Regards, Josué Delgado ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] HELP! Errors creating iSCSI Storage Domain
We would also like to know whether the first creation of the iscsi storage domain succeeded and only the latter ones failed. Whether you possibly tried to create a storage domain with a already used lun, and specifically - do you have any iscsi storage domain at all that you can see on the webadmin? Regards, Vered - Original Message - From: Eduardo Warszawski ewars...@redhat.com To: Vered Volansky ve...@redhat.com Cc: users@ovirt.org Sent: Thursday, February 21, 2013 11:57:09 AM Subject: Re: [Users] HELP! Errors creating iSCSI Storage Domain - Original Message - Hi, Please add engine and vdsm full logs. Regards, Vered - Original Message - From: Кочанов Иван k...@dcak.ru To: users@ovirt.org Sent: Thursday, February 21, 2013 4:26:14 AM Subject: [Users] HELP! Errors creating iSCSI Storage Domain LUN info: # iscsiadm -m discovery -t st -p 172.16.20.1 172.16.20.1:3260,1 iqn.2003-10.com.lefthandnetworks:mg-dcak-p4000:134:vol-os-virtualimages # pvs PV VG Fmt Attr PSize PFree /dev/mapper/36000eb35f449ac1c0086 db260c45-8dd2-4397-a5bf-fd577bbbe0d4 lvm2 a-- 1023.62g 1023.62g The PV already belongs to VG db260c45-8dd2-4397-a5bf-fd577bbbe0d4. This VG was very probably created by ovirt and is part of a StorageDomain. (Then you already succeeded.) If you are sure that no valuable info is in this VG you can use the force thick. Anyway I suggest you to look for the SDUUID: db260c45-8dd2-4397-a5bf-fd577bbbe0d4 and removing this StorageDomain from the system or use this already created SD. vdsm and engine logs will be very valuable, as Vered said. Please include them since you started, in order to confirm to which SD the lun belongs. Best regards, E. -- Sysadmin DCAK k...@dcak.ru ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] vlan interface failed : Bridged network Internet is attached to multiple interfaces: UNKNOWN on Host node1.
They pushed a change to initscripts and systemd that should fix the issue:
https://admin.fedoraproject.org/updates/FEDORA-2013-1590/initscripts-9.42.2-1.fc18,systemd-197-1.fc18.2
- Original Message -
From: Jeff Bailey bai...@cs.kent.edu
To: users@ovirt.org
Sent: Wednesday, February 20, 2013 11:26:33 AM
Subject: Re: [Users] vlan interface failed : Bridged network Internet is
attached to multiple interfaces: UNKNOWN
on Host node1.
On 2/20/2013 4:56 AM, Antoni Segura Puimedon wrote:
There's a systemd hackfest this week on occasion of the developers
conference in Brno. I'll try to see what can be done about this.
@Kevin. Did you try the 60-net.rules that Lukas Nykryn proposed?
ACTION==add, SUBSYSTEM==net, ATTRS{type}==1,
PROGRAM=/lib/udev/rename_device, RESULT==?*, NAME=$result
I had tried this and it didn't help. It seems that the vlan
interface
has type 1 (/sys/class/net/em1_1.538/type contains 1) and the rename
still happens.
Best,
Toni
- Original Message -
From: Jeff Bailey bai...@cs.kent.edu
To: users@ovirt.org
Sent: Wednesday, February 20, 2013 3:38:28 AM
Subject: Re: [Users] vlan interface failed : Bridged network
Internet is attached to multiple interfaces: UNKNOWN
on Host node1.
On 2/19/2013 8:04 PM, Jeff Bailey wrote:
On 2/19/2013 5:34 PM, Dan Kenigsberg wrote:
On Tue, Feb 19, 2013 at 11:12:42PM +0100, Kevin Maziere Aubry
wrote:
Hi
I've just found a workaround ... rm
/usr/lib/udev/rules.d/60-net.rules and
reboot
Then I can add vlan to physical interface.
2013/2/19 Kevin Maziere Aubry kevin.mazi...@alterway.fr
Hi
Today on IRC we worked on this issue and I will try to
summarized the
results of our troubleshooting :
Current stable systemd rpm has a bug with device mapper which
cause
all
device created on a fibrechannel to have wrong access right.
So the workaround is to replace systemd with the one on the
testing
repo.
But the testing release as also a bug with udev which rename
network
interface so that each new network interface is named
renameX@interface.
We test some udev workaround unsucessfully. (
https://bugzilla.redhat.com/show_bug.cgi?id=907365 )
Now I think a patch on systemd testing rpm should fix the
issue,
waiting
for it
Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=912323
Last word that I've heard about this bug ^^^ (Bug 912323 -
Adding
a
VLAN Device does not Work ) is that Muli can no longer
reproduce
it on
his host.
If this does reproduce on your system, would you provide more
data
as
requested on
https://bugzilla.redhat.com/show_bug.cgi?id=912323#c2
?
Note that I've just called the systemd cavalry to our
assistance.
I thought I had a simple (if inconvenient) work around but it
looks
like something (either the deploy or syncing the management
network)
puts the HWADDR line back in ifcfg-em1_1. I'm going to do some
more
testing... Yep, it's the network sync that adds HWADDR back
which
then triggers udev to rename em1_1.538 to em1_1 which doesn't
work
and
I end up with rename??@em1_1. I can live without the sync I
suppose. I'll try leaving the manual config of the management
network
alone and then config the other networks and see what happens.
Well, that didn't work. I can't seem to find any combination that
plays
nicely together. Looks like Kevin's solution of ripping out
udev's
ability to rename interfaces may be the only quick fix. It does
get
us
the ability to change ownership of LVs back which is more
important.
So
far, I've seen no ill effects and everything (networking and
storage)
seems to be working as it should.
Dan.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
[Users] iSCSI multipath with EqualLogic SAN
Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? Have a nice day. Regards. Baptiste. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Thin Provisioning
Can you please tell me what disk type you have on the template and send a screen shot of the Resource Allocation tab to the users@ovirt.org list? On 02/21/2013 09:43 AM, Juan Jose wrote: Hello Dafna, Yes, I have already selected the Clone radio button as the Start Guide shows and the Thin Provision doesn't appears. On Wed, Feb 20, 2013 at 5:50 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com wrote: ok. so you have 1 NFS data domain which has a template on it and when you are trying to create a new vm you only have preallocated disk type. when you open the new vm dialogue, after you select the template, in the Resource allocation tab you need to select the clone radio button (its near the Template Provisioning). once you do that, the allocation policy scroll will become active and you will be able to select thin or preallocated. let me know if after you select the clone you still only have preallocated. On 02/20/2013 06:09 PM, Juan Jose wrote: Hello Dafna, Are you want to say one NFS domain?, I have one for VM aand one isos. On Wed, Feb 20, 2013 at 4:46 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com wrote: do you have more than one domain? On 02/20/2013 05:38 PM, Juan Jose wrote: Hello everybody, I'm following the Quick Start Guide to clone a machine from a Template that it's already created. As thi guide says it's necessary to select in Allocation tab from Resource Allocation, Thin Provision. When I try to do this and down the select field it doesn't appear this option, I only can see Preallocated. I have oVirt engine 3.1. Can somebody give some light why I haven't this option in my webadmin? Many thanks in avanced, Juanjo. ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dafna Ron ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dafna Ron -- Dafna Ron ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt kerberos/ldap
Morning!
That's my log entry. PCAP attached.
Feb 21 08:12:57 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption type
My /etc/krb5.conf
[libdefaults]
default_realm = GSR.INPE.BR
allow_weak_crypto = yes
default_tkt_enctypes = rc4-hmac des-cbc-md5
default_tgs_enctypes = rc4-hmac des-cbc-md5
[realms]
GSR.INPE.BR = {
master_kdc = GSR.INPE.BR
kdc = kerberos.gsr.inpe.br
default_domain = gsr.inpe.br
}
[domain_realm]
.gsr.inpe.br = GSR.INPE.BR
gsr.inpe.br = GSR.INPE.BR
[logging]
kdc = SYSLOG:INFO
Is it sufice?
On 02/21/2013 06:48 AM, Yair Zaslavsky wrote:
Please provide info also on the IPA server you are using (use rpm -qa for that)
- Original Message -
From: Yaniv Kaul yk...@redhat.com
To: Eduardo Ramos edua...@freedominterface.org
Cc: users@ovirt.org
Sent: Thursday, February 21, 2013 11:14:41 AM
Subject: Re: [Users] ovirt kerberos/ldap
- Original Message -
Hi all!
I'm trying to link a ldap/kerberos to my ovirt without success. I'm
stuck with this:
oVirt engine:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: KDC has no support for encryption type
(14) -
BAD_ENCRYPTION_TYPE
Please snoop the connection between the engine and the IPA server.
Port 88, full packets ('-s 1500' on tcpdump), into file ('-w
/tmp/kerb.pcap' ).
Y.
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
kdc log:
Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption
type
Any sugestion?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
kerb.pcap
Description: Binary data
libssh2-1.2.2-11.el6_3.x86_64
setup-2.8.14-16.el6.noarch
libxml2-2.7.6-8.el6_3.4.x86_64
basesystem-10.0-4.el6.noarch
libtalloc-2.0.1-1.1.el6.x86_64
ca-certificates-2010.63-3.el6_1.5.noarch
libtdb-1.2.1-3.el6.x86_64
libcollection-0.6.0-9.el6.x86_64
nss-softokn-freebl-3.12.9-11.el6.x86_64
libldb-0.9.10-23.el6.x86_64
perl-version-0.77-127.el6.x86_64
bash-4.1.2-9.el6_2.x86_64
perl-Pod-Simple-3.13-127.el6.x86_64
libcap-2.16-5.5.el6.x86_64
perl-5.10.1-127.el6.x86_64
info-4.13a-8.el6.x86_64
perl-XML-SAX-0.96-7.el6.noarch
chkconfig-1.3.49.3-2.el6.x86_64
perl-Compress-Raw-Zlib-2.020-127.el6.x86_64
libacl-2.2.49-6.el6.x86_64
perl-URI-1.40-2.el6.noarch
audit-libs-2.2-2.el6.x86_64
perl-Compress-Zlib-2.020-127.el6.x86_64
db4-4.7.25-17.el6.x86_64
perl-Digest-SHA1-2.12-2.el6.x86_64
readline-6.0-4.el6.x86_64
perl-Convert-ASN1-0.22-1.el6.noarch
libselinux-2.0.94-5.3.el6.x86_64
perl-HTML-Parser-3.64-2.el6.x86_64
glib2-2.22.5-7.el6.x86_64
perl-Net-SSLeay-1.35-9.el6.x86_64
shadow-utils-4.1.4.2-13.el6.x86_64
perl-GSSAPI-0.26-5.el6.x86_64
perl-Text-Iconv-1.7-6.el6.x86_64
libstdc++-4.4.6-4.el6.x86_64
libpath_utils-0.2.1-9.el6.x86_64
file-libs-5.04-13.el6.x86_64
perl-libwww-perl-5.833-2.el6.noarch
libtool-ltdl-2.2.6-15.5.el6.x86_64
xz-libs-4.999.9-0.3.beta.20091007git.el6.x86_64
make-3.81-20.el6.x86_64
lua-5.1.4-4.1.el6.x86_64
libref_array-0.1.1-9.el6.x86_64
iproute-2.6.32-20.el6.x86_64
c-ares-1.7.0-6.el6.x86_64
elfutils-libelf-0.152-1.el6.x86_64
sssd-1.8.0-32.el6.x86_64
perl-LDAP-0.40-1.el6.noarch
libtirpc-0.2.1-5.el6.x86_64
vim-common-7.2.411-1.8.el6.x86_64
pcre-7.8-4.el6.x86_64
vim-enhanced-7.2.411-1.8.el6.x86_64
findutils-4.4.2-6.el6.x86_64
gpg-pubkey-0608b895-4bd22942
libselinux-utils-2.0.94-5.3.el6.x86_64
apr-1.3.9-5.el6_2.x86_64
bzip2-1.0.5-7.el6_0.x86_64
apr-util-ldap-1.3.9-3.el6_0.1.x86_64
pth-2.0.7-9.3.el6.x86_64
httpd-2.2.15-15.el6.centos.1.x86_64
expat-2.0.1-11.el6_2.x86_64
php-cli-5.3.3-14.el6_3.x86_64
dbus-glib-0.86-5.el6.x86_64
lighttpd-1.4.31-1.el6.x86_64
iptables-ipv6-1.4.7-5.1.el6_2.x86_64
upstart-0.6.5-12.el6.x86_64
xinetd-2.3.14-35.el6_3.x86_64
nss-softokn-3.12.9-11.el6.x86_64
krb5-appl-clients-1.0.1-7.el6_2.1.x86_64
libusb-0.1.12-23.el6.x86_64
xz-4.999.9-0.3.beta.20091007git.el6.x86_64
grubby-7.0.15-3.el6.x86_64
man-1.6f-30.el6.x86_64
libutempter-1.1.5-4.1.el6.x86_64
strace-4.5.19-1.11.el6_3.2.x86_64
tar-1.23-7.el6.x86_64
nmap-5.51-2.el6.x86_64
krb5-libs-1.9-33.el6_3.3.x86_64
e2fsprogs-libs-1.41.12-12.el6.x86_64
krb5-appl-servers-1.0.1-7.el6_2.1.x86_64
pinentry-0.7.6-6.el6.x86_64
krb5-workstation-1.9-33.el6_3.3.x86_64
m4-1.4.13-5.el6.x86_64
diffutils-2.8.1-28.el6.x86_64
libedit-2.11-4.20080712cvs.1.el6.x86_64
groff-1.18.1.4-21.el6.x86_64
coreutils-libs-8.4-19.el6.x86_64
cracklib-2.8.16-4.el6.x86_64
coreutils-8.4-19.el6.x86_64
hwdata-0.233-7.8.el6.noarch
Re: [Users] oVirt 3.1 - engine configuration problem
- Original Message - From: Piotr Szubiakowski piotr.szubiakow...@nask.pl To: users@ovirt.org Sent: Thursday, February 21, 2013 1:30:25 PM Subject: [Users] oVirt 3.1 - engine configuration problem Hi, I'm building oVirt engine 3.1 from source on Scientific Linux 6.3. I'm working on branch origin/engine_3.1. During startup the application throws following error: 2013-02-21 11:53:33,768 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: CbcCheckOnVdsChange 2013-02-21 11:53:33,995 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:33,996 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property CertificatePassword will be used encrypted value 2013-02-21 11:53:34,000 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: ENGINEEARLib 2013-02-21 11:53:34,001 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: CAEngineKey 2013-02-21 11:53:34,008 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,009 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property AdminPassword will be used encrypted value 2013-02-21 11:53:34,015 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,015 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property LocalAdminPassword will be used encrypted value 2013-02-21 11:53:34,020 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: MinimalETLVersion 2013-02-21 11:53:34,024 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: ScriptsPath 2013-02-21 11:53:34,025 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: SQLServerI18NPrefix 2013-02-21 11:53:34,071 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,072 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property TruststorePass will be used encrypted value It seams to be a configuration problem. I followed this manual http://www.ovirt.org/Engine_Node_Integration (section Engine core machine). Is this manual up to date? Hi It seems that you have some hosts with Power Management configured and that some agent passwords are still stored as plain-text Please try the following For each host with PM Edit the Host Enter gain the PM agent password Save your changes Let me know if this solves the problem Best regarts, Piotr ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Flush old logs
- Original Message - From: Nicolas Ecarnot nico...@ecarnot.net To: users@ovirt.org Sent: Thursday, February 21, 2013 10:21:15 AM Subject: Re: [Users] Flush old logs Hi, This is not a serious issue, just a very small pain in the neck, but I can not get rid of this error message : http://www.zimage.fr/photo.php?id=143945 Amongst 2 other nodes, this node is working very well, it can reboot when asked, its network is perfect, it can handle every order I send, it has registered perfectly. I took the time to wait for the monthly flush. I also reduced the threshold delay and waited for the cleanup to happen. So, do I have to dig through the database looking for the precise flag to update, or is there some more clever way? Regards, -- Nicolas Ecarnot Nicolas Thanks for your waiting and trying all approaches that should clear this message. Please open a oVirt bug for that. If you need to clear this specific message manually, please ping me on the oVirt IRC channel and I will be happy to assist you. Best Regards Eli (emesika on teh oVirt channel) Le 22/01/2013 10:41, Nicolas Ecarnot a écrit : Hi Eli, Le 22/01/2013 00:13, Eli Mesika a écrit : From: Nicolas Ecarnot nico...@ecarnot.net To: users@ovirt.org Here's a simple question : In the Alerts message queue at the bottom of the screen, I see an error message dating from two weeks (about the failure to verify to restart status of a host). I'm pretty sure this shouldn't be there anymore, as the power management of this host has already been tested and approved many times since. Hi Nicolas The Alert should be deleted from the Alert View once you had succeeded to configure test it successfully If you only configure it without testing or test failed, only the Alert saying that PM is not configured for the Host will be deleted. The message you had noted failure to verify to restart status of a host is not the exact one, can you give please the exact message? Failed to verify Host x Restart status, Please Restart Host x manually. The tests I did on power management, either via the test button, or via some actions, including power up, reboot, are all reacting well. I'm close to think there is actually NO problem, except this old log msg. I haven't find any trivial way to flush this message queue, and I was wondering whether it was stored in a database? Yes, it is stored in the database. Is there a way to clear these error messages? (Am I right with the db location?) The table holding all those messages is called audit_log, deleting from this table manually is not recommended. The table has also a auto-clean mechanism controlled by the AuditLogAgingThreashold configuration value that is set by default to 30 days. this value may be modified using the engine-config tool (requires restart of the engine to take place) Ok, so either I wait 15 more days for this msg to disapear, either I find the adequate config command line to shorten it, and restart. Ok, this is enough for me. Thank you for your explanation. Regards, -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Project personas
- Original Message - From: Noam Slomianko nslom...@redhat.com To: users@ovirt.org Sent: Wednesday, February 20, 2013 6:00:15 PM Subject: [Users] Project personas After an interesting presentation by Dave Neary today we started thinking about the persona[*] of the ovirt project users We focused on the users of the new coming feature of UI plugins. And this was our vision of an active user: Name: Dan Age: 25 Job position: an integrator at a medium sized service company Technical level: computer savvy person with interest in gadgets and innovations. Has about two years of java coding experience, but coding may not be his main focus at work. Reason for using the UI Plugins feature: After getting requests from his costumers for simple log monitoring feature, the integration team leader have decided that implementing this as a Plugin for ovirt would offer a more centralised solution and has assigned dan to start getting familiar with it and give him a time estimation for completion. By creating a more accurate persona(s) of the user base we could more easily understand the needs of the users and steer the project in more productive and helpful ways for the people that really need it. It would be very interesting to see what others think this person is like and what does he need. so who do you feel is the likely user? In hopes of making ovirt better and more relevant to its users, Noam. :) [*] For those who don't know what a persona is: It's a fictional person that represents the users/costumers/people of interest of a product. by giving this person a name, age, education level and other traits its easier to relate and vision his needs Thanks Noam, I'd love to see others share their thoughts / similar work on $SUBJECT. So with additional inputs to help us improve the focus. Doron ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] info on logs regarding tasks..
Hello, on oVirt 3.2 I successfully tested disk moving for a powered off windows 7 VM (I'm going to try powered on case later). Storage As soon as the operation starts, I can see its details on task section at bottom board. But when it completes I then am unable to see in events any information, for example to track down duration. Any info on where can I find in Webadmin GUI this kind of information? Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.1 - engine configuration problem
- Original Message - From: Piotr Szubiakowski piotr.szubiakow...@nask.pl To: Eli Mesika emes...@redhat.com Cc: users@ovirt.org Sent: Thursday, February 21, 2013 2:03:48 PM Subject: Re: [Users] oVirt 3.1 - engine configuration problem - Original Message - From: Piotr Szubiakowskipiotr.szubiakow...@nask.pl To: users@ovirt.org Sent: Thursday, February 21, 2013 1:30:25 PM Subject: [Users] oVirt 3.1 - engine configuration problem Hi, I'm building oVirt engine 3.1 from source on Scientific Linux 6.3. I'm working on branch origin/engine_3.1. During startup the application throws following error: 2013-02-21 11:53:33,768 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: CbcCheckOnVdsChange 2013-02-21 11:53:33,995 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:33,996 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property CertificatePassword will be used encrypted value 2013-02-21 11:53:34,000 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: ENGINEEARLib 2013-02-21 11:53:34,001 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: CAEngineKey 2013-02-21 11:53:34,008 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,009 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property AdminPassword will be used encrypted value 2013-02-21 11:53:34,015 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,015 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property LocalAdminPassword will be used encrypted value 2013-02-21 11:53:34,020 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: MinimalETLVersion 2013-02-21 11:53:34,024 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: ScriptsPath 2013-02-21 11:53:34,025 WARN [org.ovirt.engine.core.utils.ConfigUtilsBase] (MSC service thread 1-22) Could not find enum value for option: SQLServerI18NPrefix 2013-02-21 11:53:34,071 ERROR [org.ovirt.engine.core.engineencryptutils.EncryptionUtils] (MSC service thread 1-22) Failed to decryptData must start with zero 2013-02-21 11:53:34,072 ERROR [org.ovirt.engine.core.dal.dbbroker.generic.DBConfigUtils] (MSC service thread 1-22) Failed to decrypt value for property TruststorePass will be used encrypted value It seams to be a configuration problem. I followed this manual http://www.ovirt.org/Engine_Node_Integration (section Engine core machine). Is this manual up to date? Hi It seems that you have some hosts with Power Management configured and that some agent passwords are still stored as plain-text Please try the following For each host with PM Edit the Host Enter gain the PM agent password Save your changes Let me know if this solves the problem Thanks for the response, I have clean database, just created by create_db_devel.sh script. I haven't add any hosts jet. The only changes I made on database were queries described in engine_node_integration manual. can you please provide the result of psql -U engine -c select count(*) from vds_static where pm_enabled; engine Thanks Best regards, Piotr ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] VM Export and import problem
I have exported a couple of VMs to an export domain and did a new setup of ovirt-engine. Importing is no problem as long as I import all machines first and then create new VMs. If I first create a couple of VM's and then try to import I get the error that the mac address is already in use. No problem, but I don't see an option to change the mac address of the to be imported machine so can't import it. Finding the active VM with the offending mac address is possible but not really the way to go IMHO. Is there an other route to get those VM's imported? Thanks, Joop van de Wege -- irc: jvandewege ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Export and import problem
On 21-2-2013 14:07, noc wrote: I have exported a couple of VMs to an export domain and did a new setup of ovirt-engine. Importing is no problem as long as I import all machines first and then create new VMs. If I first create a couple of VM's and then try to import I get the error that the mac address is already in use. No problem, but I don't see an option to change the mac address of the to be imported machine so can't import it. Finding the active VM with the offending mac address is possible but not really the way to go IMHO. Is there an other route to get those VM's imported? Sorry forgot to mention that this is oVirt-3.2 stable on Fedora 18 engine en hosts. Joop ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.1 - engine configuration problem
Hi, $ psql -U postgres -c select count(*) from vds_static where pm_enabled; ovirtdb count --- 0 (1 wiersz) the table is empty. Maybe there is a problem with encryption of engine admin password. I think that this password is in plain text. Best regards, Piotr W dniu 21.02.2013 14:00, Eli Mesika pisze: psql -U engine -c select count(*) from vds_static where pm_enabled; engine ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VNC web console
On Feb 18, 2013, at 10:10 , Jaco ubuntumu...@gmail.com wrote: I've seen this in the list archives, but not sure how much traction it's gained in the intervening period (or ). Hi, still pending, but we're getting there:-) I've fiddled with, and had some pretty decent experiences with Guacamole: http://guac-dev.org/ An HTML(5?)-based VNC client for a browser - no client-side components needed :) how would you compare it to novnc? RDP support might be handy…on the other hand at first sight looking at http://sourceforge.net/projects/guacamole/forums/forum/1110834/topic/5236646 and http://cloudiad.com/analysis/doc1 it looks noVNC would be easier to integrate with. Especially when qemu just recently got direct support for websockets. Then we really do not need anything at the engine side at all. Thanks, michal Could fit in nicely with the project. Just putting it out there - J ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Thin Provisioning
Hi Juan, I see what the issue is and it's actually by design. The template you created has a Preallocated image. in NFS, to make a preallocated image we actually write to the disk to make it preallocated. as you can see, I created a vm with preallocated disk in NFS and if I run DU during the creation of the image you can see the size go up: 2.4G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# du -h 2.5G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# du -h 2.6G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# so in NFS storage, if your template is preallocated you cannot create a thin provision copy vm (distinguishing between the actual data and previously zeroed will be complicated). you can create a snapshot of that image which will be thin provision but it will be linked to the template. or you can create a thin provision template and than create a thin provision vm or preallocated vm. Dafna On 02/21/2013 01:56 PM, Juan Jose wrote: Hello Dafna, I hope that this two screenshots provides this information. On Thu, Feb 21, 2013 at 11:38 AM, Dafna Ron d...@redhat.com mailto:d...@redhat.com wrote: Can you please tell me what disk type you have on the template and send a screen shot of the Resource Allocation tab to the users@ovirt.org mailto:users@ovirt.org list? On 02/21/2013 09:43 AM, Juan Jose wrote: Hello Dafna, Yes, I have already selected the Clone radio button as the Start Guide shows and the Thin Provision doesn't appears. On Wed, Feb 20, 2013 at 5:50 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com wrote: ok. so you have 1 NFS data domain which has a template on it and when you are trying to create a new vm you only have preallocated disk type. when you open the new vm dialogue, after you select the template, in the Resource allocation tab you need to select the clone radio button (its near the Template Provisioning). once you do that, the allocation policy scroll will become active and you will be able to select thin or preallocated. let me know if after you select the clone you still only have preallocated. On 02/20/2013 06:09 PM, Juan Jose wrote: Hello Dafna, Are you want to say one NFS domain?, I have one for VM aand one isos. On Wed, Feb 20, 2013 at 4:46 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com wrote: do you have more than one domain? On 02/20/2013 05:38 PM, Juan Jose wrote: Hello everybody, I'm following the Quick Start Guide to clone a machine from a Template that it's already created. As thi guide says it's necessary to select in Allocation tab from Resource Allocation, Thin Provision. When I try to do this and down the select field it doesn't appear this option, I only can see Preallocated. I have oVirt engine 3.1. Can somebody give some light why I haven't this option in my webadmin? Many thanks in avanced, Juanjo. ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dafna Ron ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dafna Ron -- Dafna Ron -- Dafna Ron ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Export and import problem
Hi, This is indeed the current behavior. The issue will be solved in the near future, and the new behavior will allow importing the VM, while unplugging the specific network interface. In the mean time, you can set the AllowDuplicateMacAddresses flag to true (either using the engine-config tool, or directly in the DB in table vdc_options). Obviously, having two network interfaces with the same MAC address is highly unrecommended. Muli - Original Message - From: noc n...@nieuwland.nl To: users@ovirt.org Sent: Thursday, 21 February, 2013 3:13:30 PM Subject: Re: [Users] VM Export and import problem On 21-2-2013 14:07, noc wrote: I have exported a couple of VMs to an export domain and did a new setup of ovirt-engine. Importing is no problem as long as I import all machines first and then create new VMs. If I first create a couple of VM's and then try to import I get the error that the mac address is already in use. No problem, but I don't see an option to change the mac address of the to be imported machine so can't import it. Finding the active VM with the offending mac address is possible but not really the way to go IMHO. Is there an other route to get those VM's imported? Sorry forgot to mention that this is oVirt-3.2 stable on Fedora 18 engine en hosts. Joop ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt kerberos/ldap
I got new step!
I added arcfour-hmac-md5:normal into supported_enctypes and
permitted_enctypes directives in kdc.conf.
Then I changed password of my principal using the following:
change_password -e arcfour-hmac-md5:normal admin/adimin
Now, it's ok, but now I got another error that I didn't understand as
follows:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: Checksum failed
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
The log of kdc says:
Feb 21 10:36:45 ldap krb5kdc[5386]: AS_REQ (1 etypes {23})
150.163.73.78: ISSUE: authtime 1361453805, etypes {rep=23 tkt=16
ses=23}, admin/ad...@gsr.inpe.br for krbtgt/gsr.inpe...@gsr.inpe.br
And the engine-manage-domains.log says:
2013-02-21 10:36:46,722 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Creating kerberos
configuration for domain(s): gsr.inpe.br
2013-02-21 10:36:46,745 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Successfully
created kerberos configuration for domain(s): gsr.inpe.br
2013-02-21 10:36:46,745 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Testing kerberos
configuration for domain: gsr.inpe.br
2013-02-21 10:36:46,819 ERROR
[org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck] Error:
exception message: Checksum failed
2013-02-21 10:36:46,822 ERROR
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Failure while
testing domain gsr.inpe.br. Details: Kerberos error. Please check log
for further details.
On 02/21/2013 08:55 AM, Yaniv Kaul wrote:
On 21/02/13 13:24, Eduardo Ramos wrote:
Morning!
That's my log entry. PCAP attached.
Feb 21 08:12:57 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption type
You are using rc4_hmac, which is the right encryption protocol
usually. One can disable it (using 'permitted_enctypes' directive).
My /etc/krb5.conf
This is not the krb5.conf file oVirt is using. Please search your
system for oVirt's krb5.conf (sorry, don't have it from the top of my
head).
In any case, I'd check the IPA configuration.
Y.
[libdefaults]
default_realm = GSR.INPE.BR
allow_weak_crypto = yes
default_tkt_enctypes = rc4-hmac des-cbc-md5
default_tgs_enctypes = rc4-hmac des-cbc-md5
[realms]
GSR.INPE.BR = {
master_kdc = GSR.INPE.BR
kdc = kerberos.gsr.inpe.br
default_domain = gsr.inpe.br
}
[domain_realm]
.gsr.inpe.br = GSR.INPE.BR
gsr.inpe.br = GSR.INPE.BR
[logging]
kdc = SYSLOG:INFO
Is it sufice?
On 02/21/2013 06:48 AM, Yair Zaslavsky wrote:
Please provide info also on the IPA server you are using (use rpm
-qa for that)
- Original Message -
From: Yaniv Kaul yk...@redhat.com
To: Eduardo Ramos edua...@freedominterface.org
Cc: users@ovirt.org
Sent: Thursday, February 21, 2013 11:14:41 AM
Subject: Re: [Users] ovirt kerberos/ldap
- Original Message -
Hi all!
I'm trying to link a ldap/kerberos to my ovirt without success. I'm
stuck with this:
oVirt engine:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: KDC has no support for encryption type
(14) -
BAD_ENCRYPTION_TYPE
Please snoop the connection between the engine and the IPA server.
Port 88, full packets ('-s 1500' on tcpdump), into file ('-w
/tmp/kerb.pcap' ).
Y.
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
kdc log:
Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption
type
Any sugestion?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] 3.2 final and status of spice console in ie
On 20 Feb 2013, at 23:52, Gianluca Cecchi gianluca.cec...@gmail.com wrote: On Wed, Feb 20, 2013 at 10:12 AM, Michal Skrivanek wrote: Hi, did you follow http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal? Thanks, michal Ok, I was able to install and run the spice plugin on my system with WIndows 7 (64bit) and Internet Explorer 9 It seems from first tests that it works quite well (tested only with Windows XP VM right now) I took the time to change two small things on the wiki page: Thanks! - WEB_INF -- WEB-INF - Changed the note regarding spice servlet this way: NOTE the file web.xml is part of ovirt-engine-backend rpm; in oVirt 3.2 the servlet definition for SpiceX.cab is already in place Also, inside the section regarding portals I noticed that the file /usr/share/ovirt-engine/engine.ear/root.war/index.html is different from what written into the wiki... I didn't change it yet, in case you want to retain some sort of 3.1 compatibility... In case let me know and I'll update that too. I'd go ahead and change it, no need to keep obsolete information Some notes regarding installation - added link to spice page in portals main page - click on it - click on button install spice - accept activeX install apparently at this point nothing happened.. I waited a couple of minutes.. no virtviewer entry in allprograms section Then I tried to open a spice console and again I got the message regarding the plugin, accept and then got the install window So now I can click again on spice console button of the vm and spice console fires up... I'm going to try with another windows 7 (32bit) system and document better... Note: I also got the Error: A Request to the Server failed with the following Status Code: 400 window; probably due to the first spice console access that implied true installation of plugin... Yeah, the download may take quite some time and there's no feedback. Well,I hope people will eventualy give up on IE;) The xpi plugin, MIME file, and HTML5 client would replace ActiveX in the future well enough Thanks, michal Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] ovirt kerberos/ldap
Path to ovirt krb5.conf file - /etc/ovirt-engine/krb5.conf
- Original Message -
From: Eduardo Ramos edua...@freedominterface.org
To: Yaniv Kaul yk...@redhat.com
Cc: yzasl...@redhat.com, users@ovirt.org
Sent: Thursday, February 21, 2013 3:43:04 PM
Subject: Re: [Users] ovirt kerberos/ldap
I got new step!
I added arcfour-hmac-md5:normal into supported_enctypes and
permitted_enctypes directives in kdc.conf.
Then I changed password of my principal using the following:
change_password -e arcfour-hmac-md5:normal admin/adimin
Now, it's ok, but now I got another error that I didn't understand as
follows:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: Checksum failed
Failure while testing domain gsr.inpe.br. Details: Kerberos error.
Please check log for further details.
The log of kdc says:
Feb 21 10:36:45 ldap krb5kdc[5386]: AS_REQ (1 etypes {23})
150.163.73.78: ISSUE: authtime 1361453805, etypes {rep=23 tkt=16
ses=23}, admin/ad...@gsr.inpe.br for krbtgt/gsr.inpe...@gsr.inpe.br
And the engine-manage-domains.log says:
2013-02-21 10:36:46,722 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Creating
kerberos
configuration for domain(s): gsr.inpe.br
2013-02-21 10:36:46,745 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Successfully
created kerberos configuration for domain(s): gsr.inpe.br
2013-02-21 10:36:46,745 INFO
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Testing kerberos
configuration for domain: gsr.inpe.br
2013-02-21 10:36:46,819 ERROR
[org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck] Error:
exception message: Checksum failed
2013-02-21 10:36:46,822 ERROR
[org.ovirt.engine.core.utils.kerberos.ManageDomains] Failure while
testing domain gsr.inpe.br. Details: Kerberos error. Please check log
for further details.
On 02/21/2013 08:55 AM, Yaniv Kaul wrote:
On 21/02/13 13:24, Eduardo Ramos wrote:
Morning!
That's my log entry. PCAP attached.
Feb 21 08:12:57 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for encryption
type
You are using rc4_hmac, which is the right encryption protocol
usually. One can disable it (using 'permitted_enctypes' directive).
My /etc/krb5.conf
This is not the krb5.conf file oVirt is using. Please search your
system for oVirt's krb5.conf (sorry, don't have it from the top of
my
head).
In any case, I'd check the IPA configuration.
Y.
[libdefaults]
default_realm = GSR.INPE.BR
allow_weak_crypto = yes
default_tkt_enctypes = rc4-hmac des-cbc-md5
default_tgs_enctypes = rc4-hmac des-cbc-md5
[realms]
GSR.INPE.BR = {
master_kdc = GSR.INPE.BR
kdc = kerberos.gsr.inpe.br
default_domain = gsr.inpe.br
}
[domain_realm]
.gsr.inpe.br = GSR.INPE.BR
gsr.inpe.br = GSR.INPE.BR
[logging]
kdc = SYSLOG:INFO
Is it sufice?
On 02/21/2013 06:48 AM, Yair Zaslavsky wrote:
Please provide info also on the IPA server you are using (use rpm
-qa for that)
- Original Message -
From: Yaniv Kaul yk...@redhat.com
To: Eduardo Ramos edua...@freedominterface.org
Cc: users@ovirt.org
Sent: Thursday, February 21, 2013 11:14:41 AM
Subject: Re: [Users] ovirt kerberos/ldap
- Original Message -
Hi all!
I'm trying to link a ldap/kerberos to my ovirt without success.
I'm
stuck with this:
oVirt engine:
# engine-manage-domains -action=add -domain=gsr.inpe.br
-user=admin/admin -interactive -provider=IPA
Enter password:
Error: exception message: KDC has no support for encryption
type
(14) -
BAD_ENCRYPTION_TYPE
Please snoop the connection between the engine and the IPA
server.
Port 88, full packets ('-s 1500' on tcpdump), into file ('-w
/tmp/kerb.pcap' ).
Y.
Failure while testing domain gsr.inpe.br. Details: Kerberos
error.
Please check log for further details.
kdc log:
Feb 20 18:02:55 ldap krb5kdc[4314]: AS_REQ (1 etypes {23})
150.163.73.78: BAD_ENCRYPTION_TYPE: admin/ad...@gsr.inpe.br for
krbtgt/gsr.inpe...@gsr.inpe.br, KDC has no support for
encryption
type
Any sugestion?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] 3.2 final and status of spice console in ie
On Thu, Feb 21, 2013 at 2:44 PM, Michal Skrivanek wrote: Also, inside the section regarding portals I noticed that the file /usr/share/ovirt-engine/engine.ear/root.war/index.html is different from what written into the wiki... I didn't change it yet, in case you want to retain some sort of 3.1 compatibility... In case let me know and I'll update that too. I'd go ahead and change it, no need to keep obsolete information Ok, done. Yeah, the download may take quite some time and there's no feedback. Well,I hope people will eventualy give up on IE;) The xpi plugin, MIME file, and HTML5 client would replace ActiveX in the future well enough Thanks, michal I will be the first ;-) (Even if I have to admit that the rendering of the Webadmin GUI in IE9 and WIndows 7 is far the best one compared with Firefox and Chrome, at this time with 3.2 final. give the devil (his due) ) ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.1 - engine configuration problem
- Original Message - From: Piotr Szubiakowski piotr.szubiakow...@nask.pl To: Eli Mesika emes...@redhat.com Cc: users@ovirt.org Sent: Thursday, February 21, 2013 3:15:19 PM Subject: Re: [Users] oVirt 3.1 - engine configuration problem Hi, $ psql -U postgres -c select count(*) from vds_static where pm_enabled; ovirtdb count --- 0 (1 wiersz) the table is empty. Maybe there is a problem with encryption of engine admin password. I think that this password is in plain text. OK, can you please use teh engine-config utility to set the following configuration keys again: AdminPassword LocalAdminPassword Best regards, Piotr W dniu 21.02.2013 14:00, Eli Mesika pisze: psql -U engine -c select count(*) from vds_static where pm_enabled; engine ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] iSCSI multipath with EqualLogic SAN
Le 21/02/2013 11:30, Baptiste AGASSE a écrit : Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? I don't know if this is the best setup, but this is exaclty what I did (iSCSI with an Equllogic SAN) : I bonded 4 interfaces of the iSCSI subnet, and it's working fine so far... -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] iSCSI multipath with EqualLogic SAN
Hi Baptiste, usually a SAN doesn't support bonding (see post of Nicolas) of its interfaces, so you have to use multipathing technology. You have to separate all nics in different subnets so multipath can work. Command multipath -ll with show the connected paths. If you merge all paths in one subnet you will have the result/behavior you just posted. So this is less oVirt related, more network specific. We have a running iSCSI config with 4 networks and oVirt runs well. Maybe the following link will help you here: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Cheers, Sven. -Ursprüngliche Nachricht- Von: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] Im Auftrag von Nicolas Ecarnot Gesendet: Donnerstag, 21. Februar 2013 15:48 An: users@ovirt.org Betreff: Re: [Users] iSCSI multipath with EqualLogic SAN Le 21/02/2013 11:30, Baptiste AGASSE a écrit : Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? I don't know if this is the best setup, but this is exaclty what I did (iSCSI with an Equllogic SAN) : I bonded 4 interfaces of the iSCSI subnet, and it's working fine so far... -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] info on logs regarding tasks..
- Original Message - From: Vered Volansky ve...@redhat.com To: Gianluca Cecchi gianluca.cec...@gmail.com Cc: users users@ovirt.org Sent: Thursday, February 21, 2013 2:49:02 PM Subject: Re: [Users] info on logs regarding tasks.. Hi Gianluca, AFAIK there is no such option at the moment, nor is this data logged. Feel free to open an RFE in Bugzilla describing exactly what you'd like to have. Note that a proper duration should only refer to one operation and not a flow of them, i.e., move = one operation. Stopping and restarting VMs are two others. Best Regards, Vered - Original Message - From: Gianluca Cecchi gianluca.cec...@gmail.com To: users users@ovirt.org Sent: Thursday, February 21, 2013 2:26:16 PM Subject: [Users] info on logs regarding tasks.. Hello, on oVirt 3.2 I successfully tested disk moving for a powered off windows 7 VM (I'm going to try powered on case later). Hi, Look at events - I see there - 2013-Feb-21, 17:00 User admin@internal finished moving disk vm2_Disk6 to domain nfs4. After moving disk has completed successfully. Storage As soon as the operation starts, I can see its details on task section at bottom board. But when it completes I then am unable to see in events any information, for example to track down duration. Any info on where can I find in Webadmin GUI this kind of information? Thanks, Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VNC web console
My 2 cents here. I think what he masses would like to ultimately see here is a pure web based SPICE/VNC client nicely integrated into the user/admin portals. In this regard the console becomes truly portable across operating systems and browsers. The biggest win here is no longer having to be stuck with Internet Exploder as the only browser on a windows client that can access a spice console. At least on a Linux based client we have Firefox, but chrome would be nice. Due to the current console situation what is completely out in the cold here is tablets (granted you can use a vnc client on a tablet, but painful due to manual connection steps ip/port/password ATM). Likewise VNC != SPICE quality and interactivity wise on top of the other obvious advantages or SPICE over VNC (EG: HW Accel via QXL). Also left out here are OSX users for which a solution like this would console enable them as well. - DHC On Thu, Feb 21, 2013 at 7:16 AM, Michal Skrivanek michal.skriva...@redhat.com wrote: On Feb 18, 2013, at 10:10 , Jaco ubuntumu...@gmail.com wrote: I've seen this in the list archives, but not sure how much traction it's gained in the intervening period (or ). Hi, still pending, but we're getting there:-) I've fiddled with, and had some pretty decent experiences with Guacamole: http://guac-dev.org/ An HTML(5?)-based VNC client for a browser - no client-side components needed :) how would you compare it to novnc? RDP support might be handy…on the other hand at first sight looking at http://sourceforge.net/projects/guacamole/forums/forum/1110834/topic/5236646and http://cloudiad.com/analysis/doc1 it looks noVNC would be easier to integrate with. Especially when qemu just recently got direct support for websockets. Then we really do not need anything at the engine side at all. Thanks, michal Could fit in nicely with the project. Just putting it out there - J ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Thin Provisioning
Many thanks for your information Dafna. Quick Start Guide doesn't explain nothing about this and I have follewed it to create the two VM, Fedora 17 and Windows 7, that I'm using to create Templates and when I have arrived to this part I have found this problem. Now I know what is the procedure Juanjo. On Thu, Feb 21, 2013 at 2:25 PM, Dafna Ron d...@redhat.com wrote: Hi Juan, I see what the issue is and it's actually by design. The template you created has a Preallocated image. in NFS, to make a preallocated image we actually write to the disk to make it preallocated. as you can see, I created a vm with preallocated disk in NFS and if I run DU during the creation of the image you can see the size go up: 2.4G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# du -h 2.5G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# du -h 2.6G. [root@orion f1a6a2e7-38f1-4a7c-8f3b-efbca664d7aa]# so in NFS storage, if your template is preallocated you cannot create a thin provision copy vm (distinguishing between the actual data and previously zeroed will be complicated). you can create a snapshot of that image which will be thin provision but it will be linked to the template. or you can create a thin provision template and than create a thin provision vm or preallocated vm. Dafna On 02/21/2013 01:56 PM, Juan Jose wrote: Hello Dafna, I hope that this two screenshots provides this information. On Thu, Feb 21, 2013 at 11:38 AM, Dafna Ron d...@redhat.com mailto:d...@redhat.com wrote: Can you please tell me what disk type you have on the template and send a screen shot of the Resource Allocation tab to the users@ovirt.org mailto:users@ovirt.org list? On 02/21/2013 09:43 AM, Juan Jose wrote: Hello Dafna, Yes, I have already selected the Clone radio button as the Start Guide shows and the Thin Provision doesn't appears. On Wed, Feb 20, 2013 at 5:50 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com wrote: ok. so you have 1 NFS data domain which has a template on it and when you are trying to create a new vm you only have preallocated disk type. when you open the new vm dialogue, after you select the template, in the Resource allocation tab you need to select the clone radio button (its near the Template Provisioning). once you do that, the allocation policy scroll will become active and you will be able to select thin or preallocated. let me know if after you select the clone you still only have preallocated. On 02/20/2013 06:09 PM, Juan Jose wrote: Hello Dafna, Are you want to say one NFS domain?, I have one for VM aand one isos. On Wed, Feb 20, 2013 at 4:46 PM, Dafna Ron d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com mailto:d...@redhat.com wrote: do you have more than one domain? On 02/20/2013 05:38 PM, Juan Jose wrote: Hello everybody, I'm following the Quick Start Guide to clone a machine from a Template that it's already created. As thi guide says it's necessary to select in Allocation tab from Resource Allocation, Thin Provision. When I try to do this and down the select field it doesn't appear this option, I only can see Preallocated. I have oVirt engine 3.1. Can somebody give some light why I haven't this option in my webadmin? Many thanks in avanced, Juanjo. ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Dafna Ron ___ Users mailing list Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org mailto:Users@ovirt.org
Re: [Users] info on logs regarding tasks..
On Thu, Feb 21, 2013 at 4:02 PM, Yair Zaslavsky wrote: Hi, Look at events - I see there - 2013-Feb-21, 17:00 User admin@internal finished moving disk vm2_Disk6 to domain nfs4. After moving disk has completed successfully. Are you using 3.2 final? As there are several sections, both in top and details sections, where exactly do you click the events bar and see the event? I tried several ones but I don't see anything. I can try again. Was your VM running or in power off state? Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] vlan interface failed : Bridged network Internet is attached to multiple interfaces: UNKNOWN on Host node1.
Hi
(it works)
I've installed a fresh f18 netinstall.
I've install all these rpm from
https://admin.fedoraproject.org/updates/FEDORA-2013-1590/initscripts-9.42.2-1.fc18,systemd-197-1.fc18.2
:
-rw-r--r--. 1 root root 123K 20 févr. 17:08
debugmode-9.42.2-1.fc18.x86_64.rpm
-rw-r--r--. 1 root root 919K 20 févr. 17:08
initscripts-9.42.2-1.fc18.x86_64.rpm
-rw-r--r--. 1 root root 192K 20 févr. 17:08
initscripts-debuginfo-9.42.2-1.fc18.x86_64.rpm
-rw-r--r--. 1 root root 37K 28 janv. 20:06
libgudev1-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 49K 28 janv. 20:06
libgudev1-devel-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 2,2M 28 janv. 20:06 systemd-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 27K 28 janv. 20:05
systemd-analyze-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 7,0M 28 janv. 20:05
systemd-debuginfo-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 131K 28 janv. 20:05
systemd-devel-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 128K 28 janv. 20:06
systemd-libs-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 33K 28 janv. 20:06
systemd-python-197-1.fc18.2.x86_64.rpm
-rw-r--r--. 1 root root 25K 28 janv. 20:05
systemd-sysv-197-1.fc18.2.x86_64.rpm
When installing vdsm from the manager, the node loose the network.
In fact NetworkManager to no add the gateway, so I add it to
/etc/sysconfig/network, and do a reinstall
The node reboot and come back as non operationnal.
In fact the ovirtmgmt was not attached to p1p1, so I attached it, and no
issue.
The node is up
Then I attached my Vlan interface, and IT WORKS as requested !!
Nice work guys, I have only set a gateway and installed required rpm, leave
NetworkManager started, and no issue regarding network for the moment.
Kevin
2013/2/21 Antoni Segura Puimedon asegu...@redhat.com
They pushed a change to initscripts and systemd that should fix the issue:
https://admin.fedoraproject.org/updates/FEDORA-2013-1590/initscripts-9.42.2-1.fc18,systemd-197-1.fc18.2
- Original Message -
From: Jeff Bailey bai...@cs.kent.edu
To: users@ovirt.org
Sent: Wednesday, February 20, 2013 11:26:33 AM
Subject: Re: [Users] vlan interface failed : Bridged network Internet is
attached to multiple interfaces: UNKNOWN
on Host node1.
On 2/20/2013 4:56 AM, Antoni Segura Puimedon wrote:
There's a systemd hackfest this week on occasion of the developers
conference in Brno. I'll try to see what can be done about this.
@Kevin. Did you try the 60-net.rules that Lukas Nykryn proposed?
ACTION==add, SUBSYSTEM==net, ATTRS{type}==1,
PROGRAM=/lib/udev/rename_device, RESULT==?*, NAME=$result
I had tried this and it didn't help. It seems that the vlan
interface
has type 1 (/sys/class/net/em1_1.538/type contains 1) and the rename
still happens.
Best,
Toni
- Original Message -
From: Jeff Bailey bai...@cs.kent.edu
To: users@ovirt.org
Sent: Wednesday, February 20, 2013 3:38:28 AM
Subject: Re: [Users] vlan interface failed : Bridged network
Internet is attached to multiple interfaces: UNKNOWN
on Host node1.
On 2/19/2013 8:04 PM, Jeff Bailey wrote:
On 2/19/2013 5:34 PM, Dan Kenigsberg wrote:
On Tue, Feb 19, 2013 at 11:12:42PM +0100, Kevin Maziere Aubry
wrote:
Hi
I've just found a workaround ... rm
/usr/lib/udev/rules.d/60-net.rules and
reboot
Then I can add vlan to physical interface.
2013/2/19 Kevin Maziere Aubry kevin.mazi...@alterway.fr
Hi
Today on IRC we worked on this issue and I will try to
summarized the
results of our troubleshooting :
Current stable systemd rpm has a bug with device mapper which
cause
all
device created on a fibrechannel to have wrong access right.
So the workaround is to replace systemd with the one on the
testing
repo.
But the testing release as also a bug with udev which rename
network
interface so that each new network interface is named
renameX@interface.
We test some udev workaround unsucessfully. (
https://bugzilla.redhat.com/show_bug.cgi?id=907365 )
Now I think a patch on systemd testing rpm should fix the
issue,
waiting
for it
Reference:
https://bugzilla.redhat.com/show_bug.cgi?id=912323
Last word that I've heard about this bug ^^^ (Bug 912323 -
Adding
a
VLAN Device does not Work ) is that Muli can no longer
reproduce
it on
his host.
If this does reproduce on your system, would you provide more
data
as
requested on
https://bugzilla.redhat.com/show_bug.cgi?id=912323#c2
?
Note that I've just called the systemd cavalry to our
assistance.
I thought I had a simple (if inconvenient) work around but it
looks
like something (either the deploy or syncing the management
network)
puts the HWADDR line back in ifcfg-em1_1. I'm going to do some
more
testing... Yep, it's the network sync that adds HWADDR back
which
then triggers udev to rename em1_1.538 to em1_1
[Users] oVirt 3.2 and win 7 VM often in blue screen
Hello, I have f18 engine server + another f18 node with 3.2 final. I have a win7 vm *32bit) that repeatedly goes blue screen after a couple of hours... qemu options are : qemu 8067 1 17 17:16 ?00:03:44 /usr/bin/qemu-kvm -name w7 -S -M pc-0.14 -cpu Opteron_G2 -enable-kvm -m 1024 -smp 1,sockets=1,cores=1,threads=1 -uuid cc62f232-2172-4f66-8a06-0ec549277049 -smbios type=1,manufacturer=oVirt,product=oVirt Node,version=18-1,serial=34353439-3036-435A-4A38-303330393338,uuid=cc62f232-2172-4f66-8a06-0ec549277049 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/w7.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=2013-02-21T17:16:05,driftfix=slew -no-shutdown -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x5.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x5 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x5.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x5.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x7 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-center/5849b030-626e-47cb-ad90-3ce782d831b3/14b5167c-5883-4920-8236-e8905456b01f/images/5fa75ba2-ea0c-47e3-91d9-42148b75b1cf/aec75a91-ecac-4275-8728-9355e86b890c,if=none,id=drive-virtio-disk0,format=qcow2,serial=5fa75ba2-ea0c-47e3-91d9-42148b75b1cf,cache=none,werror=stop,rerror=stop,aio=native -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,fd=31,id=hostnet0,vhost=on,vhostfd=32 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:04:04:5c,bus=pci.0,addr=0x3 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/w7.com.redhat.rhevm.vdsm,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/w7.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel2,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0 -spice port=5903,tls-port=5904,addr=0,x509-dir=/etc/pki/vdsm/libvirt-spice,tls-channel=main,tls-channel=display,tls-channel=inputs,tls-channel=cursor,tls-channel=playback,tls-channel=record,tls-channel=smartcard,tls-channel=usbredir -k en-us -vga qxl -global qxl-vga.vram_size=67108864 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -chardev spicevmc,id=charredir2,name=usbredir -device usb-redir,chardev=charredir2,id=redir2 -chardev spicevmc,id=charredir3,name=usbredir -device usb-redir,chardev=charredir3,id=redir3 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 On engine events I see 2013-Feb-21, 12:28 VM w7 started on Host f18ovn03.ceda.polimi.it then 2013-Feb-21, 13:04 VM w7 is down. Exit message: User shut down (but I didn't shutdown it...) I start it at 17:16 and I get the black background page asking if I want to start normally. I say yes and after booting I get the window regarding unclean shutdown: Problem signature: Problem Event Name: BlueScreen OS Version: 6.1.7601.2.1.0.256.48 Locale ID: 1040 Additional information about the problem: BCCode: 108e BCP1: C005 BCP2: 8B923037 BCP3: 8A623ACC BCP4: OS Version: 6_1_7601 Service Pack: 1_0 Product: 256_1 Files that help describe the problem: C:\Windows\Minidump\022113-10155-01.dmp C:\Users\politest1\AppData\Local\Temp\WER-23025-0.sysdata.xml Read our privacy statement online: http://go.microsoft.com/fwlink/?linkid=104288clcid=0x0409 If the online privacy statement is not available, please read our privacy statement offline: C:\Windows\system32\en-US\erofflps.txt What can I do to debug? Are the two files referred (the .dmp and the .xml that I collected) useful to analyze anything? Do the contain sensitive data? The win7 VM has spice-guest-toos-0.3 installed and defined with spice console. It is the first win7 VM on final 3.2, while on another cluster with 3.2 beta I have another similar one (same iso) that stays up for several days without problem, so I presume something possible with particular hw of this node: HP BL685c G1 with 32Gb of ram AMD Opteron G2 (quad sockets dualcore) OS Version: Fedora - 18 - 1 kernel 3.7.8 - 202.fc18.x86_64 qemu-kvm 1.2.2 - 6.fc18 vdsm-4.10.3-8.fc18 libvirt-0.10.2.3-1.fc18 spice 0.12.2 - 3.fc18 active VMs : 4 Thanks, Gianluca ___ Users
Re: [Users] oVirt 3.2 and win 7 VM often in blue screen
This is a really great program to debug Blue Screens just FYI. Its a lot easier to use than Microsoft's tools. http://www.majorgeeks.com/BlueScreenView_d6200.html On Thu, Feb 21, 2013 at 11:41 AM, Gianluca Cecchi gianluca.cec...@gmail.com wrote: Hello, I have f18 engine server + another f18 node with 3.2 final. I have a win7 vm *32bit) that repeatedly goes blue screen after a couple of hours... qemu options are : qemu 8067 1 17 17:16 ?00:03:44 /usr/bin/qemu-kvm -name w7 -S -M pc-0.14 -cpu Opteron_G2 -enable-kvm -m 1024 -smp 1,sockets=1,cores=1,threads=1 -uuid cc62f232-2172-4f66-8a06-0ec549277049 -smbios type=1,manufacturer=oVirt,product=oVirt Node,version=18-1,serial=34353439-3036-435A-4A38-303330393338,uuid=cc62f232-2172-4f66-8a06-0ec549277049 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/w7.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=2013-02-21T17:16:05,driftfix=slew -no-shutdown -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x5.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x5 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x5.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x5.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x7 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=/rhev/data-center/5849b030-626e-47cb-ad90-3ce782d831b3/14b5167c-5883-4920-8236-e8905456b01f/images/5fa75ba2-ea0c-47e3-91d9-42148b75b1cf/aec75a91-ecac-4275-8728-9355e86b890c,if=none,id=drive-virtio-disk0,format=qcow2,serial=5fa75ba2-ea0c-47e3-91d9-42148b75b1cf,cache=none,werror=stop,rerror=stop,aio=native -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x6,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,fd=31,id=hostnet0,vhost=on,vhostfd=32 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:04:04:5c,bus=pci.0,addr=0x3 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channels/w7.com.redhat.rhevm.vdsm,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.rhevm.vdsm -chardev socket,id=charchannel1,path=/var/lib/libvirt/qemu/channels/w7.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel2,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=com.redhat.spice.0 -spice port=5903,tls-port=5904,addr=0,x509-dir=/etc/pki/vdsm/libvirt-spice,tls-channel=main,tls-channel=display,tls-channel=inputs,tls-channel=cursor,tls-channel=playback,tls-channel=record,tls-channel=smartcard,tls-channel=usbredir -k en-us -vga qxl -global qxl-vga.vram_size=67108864 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -chardev spicevmc,id=charredir2,name=usbredir -device usb-redir,chardev=charredir2,id=redir2 -chardev spicevmc,id=charredir3,name=usbredir -device usb-redir,chardev=charredir3,id=redir3 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 On engine events I see 2013-Feb-21, 12:28 VM w7 started on Host f18ovn03.ceda.polimi.it then 2013-Feb-21, 13:04 VM w7 is down. Exit message: User shut down (but I didn't shutdown it...) I start it at 17:16 and I get the black background page asking if I want to start normally. I say yes and after booting I get the window regarding unclean shutdown: Problem signature: Problem Event Name: BlueScreen OS Version: 6.1.7601.2.1.0.256.48 Locale ID: 1040 Additional information about the problem: BCCode: 108e BCP1: C005 BCP2: 8B923037 BCP3: 8A623ACC BCP4: OS Version: 6_1_7601 Service Pack: 1_0 Product: 256_1 Files that help describe the problem: C:\Windows\Minidump\022113-10155-01.dmp C:\Users\politest1\AppData\Local\Temp\WER-23025-0.sysdata.xml Read our privacy statement online: http://go.microsoft.com/fwlink/?linkid=104288clcid=0x0409 If the online privacy statement is not available, please read our privacy statement offline: C:\Windows\system32\en-US\erofflps.txt What can I do to debug? Are the two files referred (the .dmp and the .xml that I collected) useful to analyze anything? Do the contain sensitive data? The win7 VM has spice-guest-toos-0.3 installed and defined with spice console. It is the first win7 VM on final 3.2, while on another cluster with 3.2 beta I have another similar one (same iso) that stays up for several days without problem, so I presume something possible with
Re: [Users] iSCSI multipath with EqualLogic SAN
Ive discussed this at length with dell's EQ support team, and on a regular system that's connected in to an equallogic san, all the iscsi ports would be on the same subnet. The kicker is, dell really wants you to use their specialized driver/iscsiinitiator to access (known as their HIT kit...host integration tools), and the HIT kit handles establishing all the multiple sessions into the EQ SAN. Unfortunately, equallogic doesnt support RHEV (and thus ovirt), and ovirt does not seem to execute the commands the HIT driver would want to intitiate multiple connections. Dell says that the use of bonding for iscsi just begs for tcp retransmits. since bonding is the only method of failover I see for now, were using anyway against their recommendations (so far zero retransmits, but were not running our systems hard yet). Cheers, Jonathan -Original Message- From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of Sven Knohsalla Sent: Thursday, February 21, 2013 8:55 AM To: Baptiste AGASSE Cc: users@ovirt.org Subject: Re: [Users] iSCSI multipath with EqualLogic SAN Hi Baptiste, usually a SAN doesn't support bonding (see post of Nicolas) of its interfaces, so you have to use multipathing technology. You have to separate all nics in different subnets so multipath can work. Command multipath -ll with show the connected paths. If you merge all paths in one subnet you will have the result/behavior you just posted. So this is less oVirt related, more network specific. We have a running iSCSI config with 4 networks and oVirt runs well. Maybe the following link will help you here: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Cheers, Sven. -Ursprüngliche Nachricht- Von: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] Im Auftrag von Nicolas Ecarnot Gesendet: Donnerstag, 21. Februar 2013 15:48 An: users@ovirt.org Betreff: Re: [Users] iSCSI multipath with EqualLogic SAN Le 21/02/2013 11:30, Baptiste AGASSE a écrit : Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? I don't know if this is the best setup, but this is exaclty what I did (iSCSI with an Equllogic SAN) : I bonded 4 interfaces of the iSCSI subnet, and it's working fine so far... -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind SKOPOS to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] oVirt 3.2 and win 7 VM often in blue screen
On Thu, Feb 21, 2013 at 5:48 PM, Chris Noffsinger wrote: This is a really great program to debug Blue Screens just FYI. Its a lot easier to use than Microsoft's tools. http://www.majorgeeks.com/BlueScreenView_d6200.html Thanks! I'll check It is the first win7 VM on final 3.2, while on another cluster with 3.2 beta I have another similar one (same iso) that stays up for several days without problem, so I presume something possible with particular hw of this node: HP BL685c G1 with 32Gb of ram AMD Opteron G2 (quad sockets dualcore) I have to correct myself ! I have another infra where the node is a Dell R815 with Here I still have 3.2 beta, and configured and left running 7 days ago 3 VMs wxp fedora 18 w7 I reconnect today to update to 3.2 final and I see that while wxp and f18 are running, w7 VM had the same shutdown problem about 1,5 hours after booting So it seems the same, in fact I got the same warnings at today power on of w7 VM. See here: https://docs.google.com/file/d/0BwoPbcrMv8mvTFFDZUdfR3gtT2c/edit?usp=sharing This node is with cpu AMD Opteron(tm) Processor 6174 Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] iSCSI multipath with EqualLogic SAN
We have 2 Equallogic PS4100s. And someone more knowledgeable may prove me wrong here but, Multipathd is not my most favorite thing to configure, but you can configure your nodes to use the other paths using the command line on the Centos nodes. Yeah Dell will tell you that they want you to use their software (like the mem plugin in Vmware) but the Linux OS will see the other paths and treat it like any other SAN, you are just going to have to configure them to use them. The link sent earlier in the thread is the official guide to doing that. https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Here is another Doc I used that is for Rhel5 but I beleive the multipath commands are the same: http://www.equallogic.com/WorkArea/downloadasset.aspx?id=8727 On Thu, Feb 21, 2013 at 1:09 PM, Jonathan Horne jho...@skopos.us wrote: Ive discussed this at length with dell's EQ support team, and on a regular system that's connected in to an equallogic san, all the iscsi ports would be on the same subnet. The kicker is, dell really wants you to use their specialized driver/iscsiinitiator to access (known as their HIT kit...host integration tools), and the HIT kit handles establishing all the multiple sessions into the EQ SAN. Unfortunately, equallogic doesnt support RHEV (and thus ovirt), and ovirt does not seem to execute the commands the HIT driver would want to intitiate multiple connections. Dell says that the use of bonding for iscsi just begs for tcp retransmits. since bonding is the only method of failover I see for now, were using anyway against their recommendations (so far zero retransmits, but were not running our systems hard yet). Cheers, Jonathan -Original Message- From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of Sven Knohsalla Sent: Thursday, February 21, 2013 8:55 AM To: Baptiste AGASSE Cc: users@ovirt.org Subject: Re: [Users] iSCSI multipath with EqualLogic SAN Hi Baptiste, usually a SAN doesn't support bonding (see post of Nicolas) of its interfaces, so you have to use multipathing technology. You have to separate all nics in different subnets so multipath can work. Command multipath -ll with show the connected paths. If you merge all paths in one subnet you will have the result/behavior you just posted. So this is less oVirt related, more network specific. We have a running iSCSI config with 4 networks and oVirt runs well. Maybe the following link will help you here: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Cheers, Sven. -Ursprüngliche Nachricht- Von: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] Im Auftrag von Nicolas Ecarnot Gesendet: Donnerstag, 21. Februar 2013 15:48 An: users@ovirt.org Betreff: Re: [Users] iSCSI multipath with EqualLogic SAN Le 21/02/2013 11:30, Baptiste AGASSE a écrit : Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? I don't know if this is the best setup, but this is exaclty what I did (iSCSI with an Equllogic SAN) : I bonded 4 interfaces of the iSCSI subnet, and it's working fine so far... -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind SKOPOS to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users -- Chris Noffsinger ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VNC web console
http://cloudiad.com/analysis/doc1 it looks noVNC would be easier to integrate with. Thanks for the link - did not know that. I think noVNC has a bit more traction in the industry (with good reason), since is does seem to be a fairly simple straight-forward client, whereas Guagamole is actually a more generic/general VNC ( RDP) proxy. In theory Guacamole may be extendible to the SPICE protocol, enabling a single interface for accessing instance consoles. - J ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] VM Export and import problem
Muli Salem wrote: Hi, This is indeed the current behavior. The issue will be solved in the near future, and the new behavior will allow importing the VM, while unplugging the specific network interface. What would be real nice is a selection dialog window for mac addresses from a pool(manager) I have an 'old' xen virtualisation solution running which has quite a few features that I would like to see in oVirt, mac address pool manager is one of them. In the mean time, you can set the AllowDuplicateMacAddresses flag to true (either using the engine-config tool, or directly in the DB in table vdc_options). Obviously, having two network interfaces with the same MAC address is highly unrecommended. Understood, use clone to circumvent this problem, only need to remove /etc/udev/rules.d/xx-net.rules and then the network will come up. Joop -- irc: jvandewege ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] Project personas
Thanks Noam! On 02/21/2013 01:52 PM, Doron Fediuck wrote: After an interesting presentation by Dave Neary today we started thinking about the persona[*] of the ovirt project users We focused on the users of the new coming feature of UI plugins. And this was our vision of an active user: Name: Dan Age: 25 Job position: an integrator at a medium sized service company Technical level: computer savvy person with interest in gadgets and innovations. Has about two years of java coding experience, but coding may not be his main focus at work. Reason for using the UI Plugins feature: After getting requests from his costumers for simple log monitoring feature, the integration team leader have decided that implementing this as a Plugin for ovirt would offer a more centralised solution and has assigned dan to start getting familiar with it and give him a time estimation for completion. Interesting that this came the same week as the Nagios plug-in was announced on the list ;-) My follow-on questions: what does Dan need from the oVirt project? Tutorials and documentation on writing a plug-in, I imagine, perhaps a plug-in template or example he can read, understand and modify to fit his needs. Does he need/want a way to distribute, promote, update, and manage his plug-in through oVirt.org? Perhaps he'd like users to be able to tell him whether they like it, ask him questions? By creating a more accurate persona(s) of the user base we could more easily understand the needs of the users and steer the project in more productive and helpful ways for the people that really need it. It would be very interesting to see what others think this person is like and what does he need. so who do you feel is the likely user? I think that we definitely have a number of types of UI plug-in developer - perhaps another one might be a start-up who wants to promote their product by integrating into oVirt? Or perhaps someone like NetApp or HP, a partner working ot integrate their hardware solutions? It would be really interesting if someone had thought about and put together user profiles or personas for people like that ;-) (for those watching at home, I split our group into smaller groups, and indeed there were two groups who came up with profiles like those above). Thanks also Doron for the vote of confidence! Regards, Dave. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] (no subject)
Hi Charlie, On 02/21/2013 07:13 PM, Charlie wrote: Wow. That's an incredibly tight focus! I've always recommended targeting all human beings (including blind, color-blind, and physically handicapped people) mostly because I think those damn Martians and Jovians are a bunch of whiners. They should stop complaining about being excluded and just learn to live at one Earth gravity like normal right-thinking people. Working towards a maximally useful product wastes resources, and the aliens will never buy Earth goods anyway. Thanks for the feedback - as the guy who gave the presentation,perhaps I can explain. Projects have users, and those users have things they need/want to do. If you can think of the people and the problems they have, you can figure out what their needs are, and whether you meet them. Let me give you an example. Let's say I am bringing a new lollipop to the market. I *could* say to myself anyone could buy this - some people do not like sweet things, so it should not be too sweet, but other people like spicy things, so it should be a bit spicy, etc. I could, instead, say who has the problem which is solved by a lollipop? I might decide one of the problems is I want a lollipop stick, and then I'm thinking of people who might want lollipop sticks, and why, and whether I want to meet their needs. I would probably decide children like sweet things. I need to consider the needs of a child who wants a lollipop. Children are small, so the lollipops should not be high up. They like sweet things. Based on interviews with kids, I ascertain that the favourite flavours of 7 and 8 year old kids are banana, chili and strawberry. So I decide to make lollipops basedon these three flavours. When I try to figure out how the kids will get the lollys, I realise that they don't buy lollipops, their parents do. So I make sure the lollipops are at eye level for an 8yo (not high on a shelf), in a place where the parents have no choice but to stand and wait (beside the cash register) and are priced at a level that a parent will add one to the shopping just to shut the kid up. Lollipops do not have one target audience. Perhaps I'm also targeting college kids studying for exams who want a coffee flavoured lolly. I make sure that university campuses get lots of these at the right time of the year, and that they are also available in the 24h service stations near the universities. By making a range of personas, I cover the entirity of my target audience. oVirt has lots of target user types: * Sysadmins who will install and maintain virt infrastructure for medium sized companies * Sysadmins who will install and maintain virt infrastructure for large companies * Consultants in a service company who want to install and support virt for their clients (perhaps as a remote admin tool?) * University CIO who wants to have a nice VDI solution for his students * Developers/testers/??? working in a medium size enterprise, who want to spin up and down VMs at will, create them from templates and images, live snapshot to save state, etc * ISP clients, who have access to the VMs their ISP created for them, and who just need to be able to shut down and restart, and also monitor resource usage. * Developers who want to integrate their stuff into market virt solutions, to grow the market for their stuff * Developers of core code Some of these, we can take care of my addressing another group. For example, maybe the medium sized company's needs are taken care of by the same features as the big company, and maybe not. But we can identify 3 or 4 personas for oVirt which cover most of them - and the UI plug-in author is one of them. Thanks for your feedback! A pesky Martian. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] iSCSI multipath with EqualLogic SAN
Never heard of HIT before. Seems to be a proprietary Dell solution? Ok, I just high-lighted the classical /most common SAN connection :) We are using a Dell MD3220i (much smaller then EQ series) with MD1200 units, and yes the network configuration for subnet separated multipathing seems to be more complicated at first, but it will give you load-balancing and auto fail-over functionality. Of course a nice and quick alternative as suggested here ...but you can configure your nodes to use the other paths using the command line on the Centos nodes..., is also possible. Cheers, Sven. Von: Chris Noffsinger [mailto:cnoff...@gmail.com] Gesendet: Donnerstag, 21. Februar 2013 20:05 An: Jonathan Horne Cc: Sven Knohsalla; Baptiste AGASSE; users@ovirt.org Betreff: Re: [Users] iSCSI multipath with EqualLogic SAN We have 2 Equallogic PS4100s. And someone more knowledgeable may prove me wrong here but, Multipathd is not my most favorite thing to configure, but you can configure your nodes to use the other paths using the command line on the Centos nodes. Yeah Dell will tell you that they want you to use their software (like the mem plugin in Vmware) but the Linux OS will see the other paths and treat it like any other SAN, you are just going to have to configure them to use them. The link sent earlier in the thread is the official guide to doing that. https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Here is another Doc I used that is for Rhel5 but I beleive the multipath commands are the same: http://www.equallogic.com/WorkArea/downloadasset.aspx?id=8727 On Thu, Feb 21, 2013 at 1:09 PM, Jonathan Horne jho...@skopos.usmailto:jho...@skopos.us wrote: Ive discussed this at length with dell's EQ support team, and on a regular system that's connected in to an equallogic san, all the iscsi ports would be on the same subnet. The kicker is, dell really wants you to use their specialized driver/iscsiinitiator to access (known as their HIT kit...host integration tools), and the HIT kit handles establishing all the multiple sessions into the EQ SAN. Unfortunately, equallogic doesnt support RHEV (and thus ovirt), and ovirt does not seem to execute the commands the HIT driver would want to intitiate multiple connections. Dell says that the use of bonding for iscsi just begs for tcp retransmits. since bonding is the only method of failover I see for now, were using anyway against their recommendations (so far zero retransmits, but were not running our systems hard yet). Cheers, Jonathan -Original Message- From: users-boun...@ovirt.orgmailto:users-boun...@ovirt.org [mailto:users-boun...@ovirt.orgmailto:users-boun...@ovirt.org] On Behalf Of Sven Knohsalla Sent: Thursday, February 21, 2013 8:55 AM To: Baptiste AGASSE Cc: users@ovirt.orgmailto:users@ovirt.org Subject: Re: [Users] iSCSI multipath with EqualLogic SAN Hi Baptiste, usually a SAN doesn't support bonding (see post of Nicolas) of its interfaces, so you have to use multipathing technology. You have to separate all nics in different subnets so multipath can work. Command multipath -ll with show the connected paths. If you merge all paths in one subnet you will have the result/behavior you just posted. So this is less oVirt related, more network specific. We have a running iSCSI config with 4 networks and oVirt runs well. Maybe the following link will help you here: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/pdf/DM_Multipath/Red_Hat_Enterprise_Linux-6-DM_Multipath-en-US.pdf Cheers, Sven. -Ursprüngliche Nachricht- Von: users-boun...@ovirt.orgmailto:users-boun...@ovirt.org [mailto:users-boun...@ovirt.orgmailto:users-boun...@ovirt.org] Im Auftrag von Nicolas Ecarnot Gesendet: Donnerstag, 21. Februar 2013 15:48 An: users@ovirt.orgmailto:users@ovirt.org Betreff: Re: [Users] iSCSI multipath with EqualLogic SAN Le 21/02/2013 11:30, Baptiste AGASSE a écrit : Hi all, I'm testing ovirt 3.1 on centos boxes. I setup ovirt management node and 4 vdsm hosts. vdsm hosts have 2 nics on the SAN subnet. When i create a iscsi storage domain, it use only one of the two nics on the SAN network (showed with iscsiadm -m session on vdsm nodes). Does ovirt support multiples nics on the same subnet for iscsi SAN connection ? I don't know if this is the best setup, but this is exaclty what I did (iSCSI with an Equllogic SAN) : I bonded 4 interfaces of the iSCSI subnet, and it's working fine so far... -- Nicolas Ecarnot ___ Users mailing list Users@ovirt.orgmailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.orgmailto:Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users This is a PRIVATE message. If you are not the intended
[Users] workflow for minor updates in al-in-one config
Suppose that for your Fedora 18 oVirt 3.2 all-in-one config, where you have both the engine (ovirt-engine service) and the node (vdsmd service) there are a bunch of updates available such as: vdsm kernel ... is it correct to go through the workflow below? 1) stop running VMs 2) upgrade engine 2a) no related updates # engine-upgrade Checking for updates... (This may take several minutes)...[ DONE ] No updates available 2b) some related updates (eg. Supposing x.y below is the same as the one currrently installed Checking for updates... (This may take several minutes)...[ DONE ] 11 Updates available: * ovirt-engine-x.y.x-4.fc18.noarch * ovirt-engine-backend-x.y.z-4.fc18.noarch .. Error: New ovirt-engine-setup rpm available via yum. Please execute `yum update ovirt-engine-setup`, then re-execute 'engine-upgrade'. ) # yum update ovirt-engine-setup # engine-upgrade 3) stop engine # systemctl stop ovirt-engine.service 4) stop vdsmd # systemctl stop vdsmd.service 5) update remaining system packages if something already done in step 2 # yum update 6) reboot and check all is ok Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] workflow for minor updates in al-in-one config
Hi Gianluca, The work flow you described seems correct to me. You may want to run rpmconf after step 5 just to be sure you're not missing some configuration changes. -- Sandro Il 22/02/2013 06:45, Gianluca Cecchi ha scritto: Suppose that for your Fedora 18 oVirt 3.2 all-in-one config, where you have both the engine (ovirt-engine service) and the node (vdsmd service) there are a bunch of updates available such as: vdsm kernel ... is it correct to go through the workflow below? 1) stop running VMs 2) upgrade engine 2a) no related updates # engine-upgrade Checking for updates... (This may take several minutes)...[ DONE ] No updates available 2b) some related updates (eg. Supposing x.y below is the same as the one currrently installed Checking for updates... (This may take several minutes)...[ DONE ] 11 Updates available: * ovirt-engine-x.y.x-4.fc18.noarch * ovirt-engine-backend-x.y.z-4.fc18.noarch .. Error: New ovirt-engine-setup rpm available via yum. Please execute `yum update ovirt-engine-setup`, then re-execute 'engine-upgrade'. ) # yum update ovirt-engine-setup # engine-upgrade 3) stop engine # systemctl stop ovirt-engine.service 4) stop vdsmd # systemctl stop vdsmd.service 5) update remaining system packages if something already done in step 2 # yum update 6) reboot and check all is ok Gianluca ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
