Re: [Users] oVirt 3.2.1 - virt-v2v import problem

2013-04-23 Thread Richard W.M. Jones

On Fri, Apr 12, 2013 at 12:34:04PM +0200, Piotr Szubiakowski wrote:
> Hi,
> I have problem with virt-v2v tool. I'm trying to import XEN image.
> On oVirt 3.0 the import works well. On oVirt 3.2.1 there is an
> error:
> 
> virt-v2v -i libvirtxml -o rhev -os localhost:/var/ovirt/export api.xml
> arch-dev.img: 100% 
> [==]D
> 0h02m53s
> Please enter your authentication name: vdsm@rhevh
> Please enter your password:
> could not connect to libvirt (URI = NULL): authentication failed:
> authentication failed [code=45 domain=7] at
> /usr/share/perl5/vendor_perl/Sys/VirtConvert/GuestfsHandle.pm line
> 96.
> 
> It looks like after image upload, virt-v2v ties to connect to
> libvirtd. The vdsm@rhevh login with shibboleth password doesn't
> work. The oVirt is installed on Fedora 18. Engine and vdsmd runs on
> the same host. Is there any difference between authentication to
> libvirt on oVirt 3.0 and oVirt 3.2? Could I ask you for help with
> this problem?

virt-v2v is known to be broken on Fedora 18 at the moment.

If you contact us upstream there is a complex workaround that
can be done.

Really it does need to be fixed properly however.

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
Read my programming blog: http://rwmj.wordpress.com
Fedora now supports 80 OCaml packages (the OPEN alternative to F#)
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] forced shutdown with client agent

2013-04-23 Thread Simon Grinberg


- Original Message -
> From: "Michal Skrivanek" 
> To: "Itamar Heim" , users@ovirt.org
> Cc: "Gal Hammer" , "Simon Grinberg" 
> Sent: Tuesday, April 23, 2013 9:58:57 AM
> Subject: Re: [Users] forced shutdown with client agent
> 
> 
> On Apr 22, 2013, at 23:19 , Itamar Heim  wrote:
> 
> > On 04/22/2013 01:59 PM, Michal Skrivanek wrote:
> >>> >
> >>> >- Original Message -
>  >>From: "Michal Skrivanek"
>  >>To:users@ovirt.org, "Thomas Scofield",
>  >>"Vinzenz Feenstra", "Barak
>  >>Azulay", "Gal Hammer"
>  >>Sent: Monday, April 22, 2013 11:48:18 AM
>  >>Subject: Re: [Users] forced shutdown with client agent
>  >>
>  >>
>  >>On Apr 20, 2013, at 22:42 , Itamar Heim
>  >> wrote:
>  >>
> > >>>On 03/29/2013 04:58 AM, Thomas Scofield wrote:
> >> I have run into a scenario after installing the client
> >> agent.  If
> >> a VM
> >> is shutdown, the client agent calls the shutdown command
> >> with a 1
> >> minute
> >> timeout.
> >> 
> >> Dummy-2::INFO::2013-03-28
> >> 14:05:21,892::vdsAgentLogic::138::root::Shutting down
> >> (timeout =
> >> 30,
> >> message = 'System Administrator has initiated shutdown of
> >> this
> >> Virtual
> >> Machine. Virtual Machine is shutting down.'
> >> 
> >> Since the shutdown command is called with time parameter
> >> the VM
> >> sets the
> >> /etc/nologin file. When the VM is forced down the
> >> /etc/nologin
> >> file is
> >> not cleared and when it comes back up only root can login
> >> until
> >> the
> >> /etc/nologin file is cleared.
> If you don't want it setting user_shutdown_timeout to 0 should solve
> this.
> 
> > >>>
> > >>>hmmm, Vinzenz - should guest agent clear that on guest
> > >>>startup, if
> > >>>guest agent set this at shutdown?
> > >>>
> >> 
> >> Is their some some reason the shutdown time is set to 30
> >> seconds
> >> (rounded up to 1 minute in the code)?
> it is rounded up because unix shutdown works with minutes only. So
> it's the seconds from user_shutdown_timeout is rounded up to
> minutes.
> The Windows one should really be 30s.
> 
> >> Are there any know issues
> >> with
> >> setting this to 0?
>  >>I wouldn't mind changing this to 0 by default if there are no
>  >>objections.
>  >>Barak, Gal, what do you think? Do you see any strong reason
>  >>for
>  >>keeping a grace period?
> >>> >
> >>> >The idea was to allow a logged in user to orderly close his work
> >>> >right?
> >>> >For that I'm not sure that even 30 seconds is enough.
> >> For that typically sysadmins use 5 or 10 minutes. 30s is
> >> worthless, no one would be able to react that fast…so to me this
> >> is the same as initiating shutdown right away. It's graceful
> >> anyway and all common apps would save the workspace on SIGTERM
> >> anyway. Well, does it even do anything on Windows?
> >> That's why I'd vote for 0. And keep is configurable in case you
> >> want to use it, sure.
> >> 
> > 
> > do we allow users to cancel the shutdown?
> nope.
> It can be stopped inside the guest, well, if you manage to do that in
> that short time.


From all the said above seems that indeed default shut-down time should be 0
But we need to be able to set shut-down policy per VM/Cluster/Something that 
will override the global config. One time fits all does not sound reasonable. 

I would say that for Desktop use case you'll probably want to allow the User 
some time to finish up things, while for Server you won't care. Etc 



> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Wrong Master domain or its version

2013-04-23 Thread Michael Kublin




- Original Message -
> From: "Jonas Israelsson" 
> To: "Michael Kublin" 
> Cc: users@ovirt.org
> Sent: Tuesday, April 23, 2013 3:04:17 PM
> Subject: Re: [Users] Wrong Master domain or its version
> 
> > Hi, I suppose you have one host, if you will take a look to
> > rhev-engine logs you will see
> > kind of the following error: Cannot connect to Pool wrong master
> > domain or it version.
> 
> One host (only), yes.
> 
> > The only advice is to access to DB and update msater domain version
> > inside storage_pool table.
> > The query should be "update storage_pool set
> > master_domain_version=110"
> > after that please try to activate a host again
> 
> Indeed, that seem to do the trick (thanks!). Setting the version in the
> database to match the one from the log does make me able to bring the
> host back online
> 
> While the host came back online as well as all other storage domain the
> master domain did not. I remains in status locked. Part from not being
> able to access the vm-data from that domain it also gives some funny
> side effects. For instance I could quite happily put the export-domain
> to maintenance mode but not re-attach the same since the master domain
> is not active.
> 
If domains are marked as Locked in GUI they be also unlocked in DB.
My advice is to put host in maintainence, after that
please run the following query :  update storage_pool_iso_map set status = 0
(The following table also contains storage_pool_id and storage_id, so you can 
make query more specific, info about domains is located inside 
storage_domain_static
table)
Activate a host, after that host should try to connect to all storages and to 
pool again.

> Not sure if related, but when trying to also take the host into
> maintenance mode it refuses due to ongoing tasks.
> 
> [root@fat-tony admin]# vdsClient -s 0 getAllTasks
> 4ca8e2f9-b8a6-425d-baba-b3cb9a6a154f :
>  verb = createVolume
>  code = 0
>  state = failed
>  tag = spm
>  result =
>  message = Task is initializing
>  id = 4ca8e2f9-b8a6-425d-baba-b3cb9a6a154f
> 
> I did manage to get rid of that with 'vdsClient clearTask' but it makes
> no difference putting the host in and out of maintenance mode and or
> rebooting it. The lock remains.
> 
Task are left in host and not located in engine it is a known issue, and I 
think that engine 
should handle such problem if domains was not in status Locked 
> I fail to find any information where this lock is set. Is is done by the
> vdsm-layer and therefore to be controlled by the...
> 
> 'vdsClient aquire|releaseDomainLock' .. ?
> 
> That however seem to fail as well
> 
> vdsClient -s 0 releaseDomainLock dae1ba5e-548a-473e-94b6-7d08d3a6229a
> ea5643f7-f41f-4c44-a27f-f31240cd0f19
> Traceback (most recent call last):
>File "/usr/share/vdsm/vdsClient.py", line 2411, in 
>File "/usr/share/vdsm/vdsClient.py", line 1381, in releaseDomainLock
>File "/usr/lib64/python2.7/xmlrpclib.py", line 1224, in __call__
>File "/usr/lib64/python2.7/xmlrpclib.py", line 1578, in __request
>File "/usr/lib64/python2.7/xmlrpclib.py", line 1264, in request
>File "/usr/lib64/python2.7/xmlrpclib.py", line 1297, in single_request
>File "/usr/lib64/python2.7/xmlrpclib.py", line 1473, in parse_response
>File "/usr/lib64/python2.7/xmlrpclib.py", line 793, in close
> Fault: :method
> "releaseDomainLock" is not supported'>
> 
> 
> Could someone please point me in the right direction ?
> 
> Rgds Jonas
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] AD authentication for ovirt manager

2013-04-23 Thread Christian Hernandez
Tom,

I *believe* that you can use 389 with TLS

FWIW I have successfully added an AD and IPA domain.


Thank you,

Christian Hernandez
1225 Los Angeles Street
Glendale, CA 91204
Phone: 877-782-2737 ext. 4566
Fax: 818-265-3152
christi...@4over.com 
www.4over.com 


On Tue, Apr 23, 2013 at 7:16 AM, Tom Brown  wrote:

>
>
>
> Hello Jonathan,
>
> I believe you can use the Red Hat Documentation for this.
>
>
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Evaluation_Guide/Evaluation_Guide-VDI.html#Evaluation_Guide-Add_Active_Directory
>
> One of the "gotchas" that I ran into is that you need to specify the
> Active Directory as your DNS provider in your resolv.conf file (not sure if
> it was coincidence or not; but I ran into some issues that went away when I
> did this)
>
>
> Has anyone had success doing this with 389 ?
>
> cheers
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] virt-v2v

2013-04-23 Thread Richard W.M. Jones
On Thu, Apr 18, 2013 at 10:25:50AM +0100, supo...@logicworks.pt wrote:
> Yes, that's right, but the problem was with the syntax. 
> After running the command, at the end I get this error message: 
> 
> virt-v2v: Failed to launch guestfs appliance. Try running again with 
> LIBGUESTFS_DEBUG=1 for more information 
> 
> Any idea? 

Run it again with LIBGUESTFS_DEBUG=1 ..?

More here:
http://libguestfs.org/guestfs-faq.1.html#debugging-libguestfs

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-df lists disk usage of guests without needing to install any
software inside the virtual machine.  Supports Linux and Windows.
http://people.redhat.com/~rjones/virt-df/
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] NFS ISO DOmain

2013-04-23 Thread Sandro Bonazzola
Il 23/04/2013 15:29, Itamar Heim ha scritto:
> On 04/23/2013 03:20 PM, Allon Mureinik wrote:
>>
>>
>> - Original Message -
>>> From: "Itamar Heim" 
>>> To: "Allon Mureinik" 
>>> Cc: "Sandro Bonazzola" , supo...@logicworks.pt,
>>> Users@ovirt.org, wu...@linux.vnet.ibm.com
>>> Sent: Tuesday, April 23, 2013 12:47:50 PM
>>> Subject: Re: [Users] NFS ISO DOmain
>>>
>>> On 04/23/2013 12:46 PM, Allon Mureinik wrote:
 Not completely on-topic, but somewhat related:
 I just merged a couple of patches by Mark Wu (thanks Mark!) that
 remove the
 NFS limitation for ISO domains, and allow creating them on any
 file-based
 domain.
 Perhaps we'd like to allow the installer to create the ISO domain
 on local
 storage?
>>>
>>> that's only relevant for the AIO mode, not for any other mode?
>> It's a new ability, regardless of AIO.
>> I'm suggesting that AIO could utilize it, since it will remove the
>> dependency on nfsd.
>
> then i would only add this option in the AIO plugin.
> otherwise, its misleading (sounds simpler, but will block you from
> using it)
>

Has anybody opened a bug about this?



>>
>>>


 -Allon

 - Original Message -
> From: "Sandro Bonazzola" 
> To: "Itamar Heim" 
> Cc: supo...@logicworks.pt, Users@ovirt.org
> Sent: Monday, April 22, 2013 12:10:46 PM
> Subject: Re: [Users] NFS ISO DOmain
>
> Il 20/04/2013 21:56, Itamar Heim ha scritto:
>> On 04/09/2013 08:13 PM, supo...@logicworks.pt wrote:
>>> Hi,
>>>
>>> I just installed the last version of engine and host using
>>> fedora18. I
>>> notice that in the engine the nfs server is not up and running,
>>> so is
>>> not possible to attach the iso domain.
>>> How can I start the nfs server on engine?
>>> Is this the correct thing to do?
>>>
>>> vi 
>>> /etc/idmapd.conf
>>> # line 5: uncomment and change to your domain name
>>>
>>> Domain =server.world
>>>
>>> [root@dlp ~]#systemctl
>>>  start
>>> rpcbind.service
>>> [root@dlp ~]#systemctl
>>>  start
>>> nfs-server.service
>>> [root@dlp ~]#systemctl
>>>  start
>>> nfs-lock.service
>>> [root@dlp ~]#systemctl
>>>  start
>>> nfs-idmap.service
>>> [root@dlp ~]#systemctl
>>> 
>>> enable
>>> rpcbind.service
>>> [root@dlp ~]#systemctl
>>> 
>>> enable
>>> nfs-server.service
>>> [root@dlp ~]#systemctl
>>> 
>>> enable
>>> nfs-lock.service
>>> [root@dlp ~]#systemctl
>>> 
>>> enable
>>> nfs-idmap.service
>>>
>>> -- 
>>> 
>>>
>>> Jose Ferradeira
>>> http://www.logicworks.pt
>>>
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>
>> alex/sandro - doesn't the installer check for nfs service running?
>
> Yes if you choose to configure a NFS Iso domain during setup.
> No if you doesn't choose to do that and decide to do it manually
> later.
>
> -- 
> Sandro Bonazzola
> Better technology. Faster innovation. Powered by community
> collaboration.
> See how it works at redhat.com
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>>>
>>>
>


-- 
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] NFS ISO DOmain

2013-04-23 Thread Itamar Heim

On 04/23/2013 03:20 PM, Allon Mureinik wrote:



- Original Message -

From: "Itamar Heim" 
To: "Allon Mureinik" 
Cc: "Sandro Bonazzola" , supo...@logicworks.pt, 
Users@ovirt.org, wu...@linux.vnet.ibm.com
Sent: Tuesday, April 23, 2013 12:47:50 PM
Subject: Re: [Users] NFS ISO DOmain

On 04/23/2013 12:46 PM, Allon Mureinik wrote:

Not completely on-topic, but somewhat related:
I just merged a couple of patches by Mark Wu (thanks Mark!) that remove the
NFS limitation for ISO domains, and allow creating them on any file-based
domain.
Perhaps we'd like to allow the installer to create the ISO domain on local
storage?


that's only relevant for the AIO mode, not for any other mode?

It's a new ability, regardless of AIO.
I'm suggesting that AIO could utilize it, since it will remove the dependency 
on nfsd.


then i would only add this option in the AIO plugin.
otherwise, its misleading (sounds simpler, but will block you from using it)








-Allon

- Original Message -

From: "Sandro Bonazzola" 
To: "Itamar Heim" 
Cc: supo...@logicworks.pt, Users@ovirt.org
Sent: Monday, April 22, 2013 12:10:46 PM
Subject: Re: [Users] NFS ISO DOmain

Il 20/04/2013 21:56, Itamar Heim ha scritto:

On 04/09/2013 08:13 PM, supo...@logicworks.pt wrote:

Hi,

I just installed the last version of engine and host using fedora18. I
notice that in the engine the nfs server is not up and running, so is
not possible to attach the iso domain.
How can I start the nfs server on engine?
Is this the correct thing to do?

vi 
/etc/idmapd.conf
# line 5: uncomment and change to your domain name

Domain =server.world

[root@dlp ~]#systemctl
 start
rpcbind.service
[root@dlp ~]#systemctl
 start
nfs-server.service
[root@dlp ~]#systemctl
 start
nfs-lock.service
[root@dlp ~]#systemctl
 start
nfs-idmap.service
[root@dlp ~]#systemctl
 enable
rpcbind.service
[root@dlp ~]#systemctl
 enable
nfs-server.service
[root@dlp ~]#systemctl
 enable
nfs-lock.service
[root@dlp ~]#systemctl
 enable
nfs-idmap.service

--

Jose Ferradeira
http://www.logicworks.pt



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



alex/sandro - doesn't the installer check for nfs service running?


Yes if you choose to configure a NFS Iso domain during setup.
No if you doesn't choose to do that and decide to do it manually later.

--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users






___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] Wrong Master domain or its version

2013-04-23 Thread Jonas Israelsson

Hi, I suppose you have one host, if you will take a look to
rhev-engine logs you will see
kind of the following error: Cannot connect to Pool wrong master
domain or it version.


One host (only), yes.


The only advice is to access to DB and update msater domain version
inside storage_pool table.
The query should be "update storage_pool set
master_domain_version=110"
after that please try to activate a host again


Indeed, that seem to do the trick (thanks!). Setting the version in the 
database to match the one from the log does make me able to bring the 
host back online


While the host came back online as well as all other storage domain the 
master domain did not. I remains in status locked. Part from not being 
able to access the vm-data from that domain it also gives some funny 
side effects. For instance I could quite happily put the export-domain 
to maintenance mode but not re-attach the same since the master domain 
is not active.


Not sure if related, but when trying to also take the host into 
maintenance mode it refuses due to ongoing tasks.


[root@fat-tony admin]# vdsClient -s 0 getAllTasks
4ca8e2f9-b8a6-425d-baba-b3cb9a6a154f :
verb = createVolume
code = 0
state = failed
tag = spm
result =
message = Task is initializing
id = 4ca8e2f9-b8a6-425d-baba-b3cb9a6a154f

I did manage to get rid of that with 'vdsClient clearTask' but it makes 
no difference putting the host in and out of maintenance mode and or 
rebooting it. The lock remains.


I fail to find any information where this lock is set. Is is done by the 
vdsm-layer and therefore to be controlled by the...


'vdsClient aquire|releaseDomainLock' .. ?

That however seem to fail as well

vdsClient -s 0 releaseDomainLock dae1ba5e-548a-473e-94b6-7d08d3a6229a 
ea5643f7-f41f-4c44-a27f-f31240cd0f19

Traceback (most recent call last):
  File "/usr/share/vdsm/vdsClient.py", line 2411, in 
  File "/usr/share/vdsm/vdsClient.py", line 1381, in releaseDomainLock
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1224, in __call__
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1578, in __request
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1264, in request
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1297, in single_request
  File "/usr/lib64/python2.7/xmlrpclib.py", line 1473, in parse_response
  File "/usr/lib64/python2.7/xmlrpclib.py", line 793, in close
Fault: :method 
"releaseDomainLock" is not supported'>



Could someone please point me in the right direction ?

Rgds Jonas
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] AD authentication for ovirt manager

2013-04-23 Thread Tom Brown



> Hello Jonathan,
> 
> I believe you can use the Red Hat Documentation for this.
> 
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Evaluation_Guide/Evaluation_Guide-VDI.html#Evaluation_Guide-Add_Active_Directory
> 
> One of the "gotchas" that I ran into is that you need to specify the Active 
> Directory as your DNS provider in your resolv.conf file (not sure if it was 
> coincidence or not; but I ran into some issues that went away when I did this)

Has anyone had success doing this with 389 ?

cheers

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] NFS ISO DOmain

2013-04-23 Thread Allon Mureinik


- Original Message -
> From: "Itamar Heim" 
> To: "Allon Mureinik" 
> Cc: "Sandro Bonazzola" , supo...@logicworks.pt, 
> Users@ovirt.org, wu...@linux.vnet.ibm.com
> Sent: Tuesday, April 23, 2013 12:47:50 PM
> Subject: Re: [Users] NFS ISO DOmain
> 
> On 04/23/2013 12:46 PM, Allon Mureinik wrote:
> > Not completely on-topic, but somewhat related:
> > I just merged a couple of patches by Mark Wu (thanks Mark!) that remove the
> > NFS limitation for ISO domains, and allow creating them on any file-based
> > domain.
> > Perhaps we'd like to allow the installer to create the ISO domain on local
> > storage?
> 
> that's only relevant for the AIO mode, not for any other mode?
It's a new ability, regardless of AIO.
I'm suggesting that AIO could utilize it, since it will remove the dependency 
on nfsd.

> 
> >
> >
> > -Allon
> >
> > - Original Message -
> >> From: "Sandro Bonazzola" 
> >> To: "Itamar Heim" 
> >> Cc: supo...@logicworks.pt, Users@ovirt.org
> >> Sent: Monday, April 22, 2013 12:10:46 PM
> >> Subject: Re: [Users] NFS ISO DOmain
> >>
> >> Il 20/04/2013 21:56, Itamar Heim ha scritto:
> >>> On 04/09/2013 08:13 PM, supo...@logicworks.pt wrote:
>  Hi,
> 
>  I just installed the last version of engine and host using fedora18. I
>  notice that in the engine the nfs server is not up and running, so is
>  not possible to attach the iso domain.
>  How can I start the nfs server on engine?
>  Is this the correct thing to do?
> 
>  vi 
>  /etc/idmapd.conf
>  # line 5: uncomment and change to your domain name
> 
>  Domain =server.world
> 
>  [root@dlp ~]#systemctl
>   start
>  rpcbind.service
>  [root@dlp ~]#systemctl
>   start
>  nfs-server.service
>  [root@dlp ~]#systemctl
>   start
>  nfs-lock.service
>  [root@dlp ~]#systemctl
>   start
>  nfs-idmap.service
>  [root@dlp ~]#systemctl
>   enable
>  rpcbind.service
>  [root@dlp ~]#systemctl
>   enable
>  nfs-server.service
>  [root@dlp ~]#systemctl
>   enable
>  nfs-lock.service
>  [root@dlp ~]#systemctl
>   enable
>  nfs-idmap.service
> 
>  --
>  
>  Jose Ferradeira
>  http://www.logicworks.pt
> 
> 
> 
>  ___
>  Users mailing list
>  Users@ovirt.org
>  http://lists.ovirt.org/mailman/listinfo/users
> 
> >>>
> >>> alex/sandro - doesn't the installer check for nfs service running?
> >>
> >> Yes if you choose to configure a NFS Iso domain during setup.
> >> No if you doesn't choose to do that and decide to do it manually later.
> >>
> >> --
> >> Sandro Bonazzola
> >> Better technology. Faster innovation. Powered by community collaboration.
> >> See how it works at redhat.com
> >>
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >>
> 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] AD authentication for ovirt manager

2013-04-23 Thread Chris Noffsinger
Also create a different user.  For instance I could not get the
Administrator user to bind with my samba4 DC.  Had to create a different
user to bind to.

On Tue, Apr 23, 2013 at 10:09 AM, Charlie  wrote:

> Also set your Active Directory source as your time synchronization
> provider.  You need DNS, Directory services, Kerberos and network time
> all from the same source if you want anything approaching reliability.
>
> --Charlie
>
> On Mon, Apr 22, 2013 at 6:17 PM, Christian Hernandez
>  wrote:
> > Hello Jonathan,
> >
> > I believe you can use the Red Hat Documentation for this.
> >
> >
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Evaluation_Guide/Evaluation_Guide-VDI.html#Evaluation_Guide-Add_Active_Directory
> >
> > One of the "gotchas" that I ran into is that you need to specify the
> Active
> > Directory as your DNS provider in your resolv.conf file (not sure if it
> was
> > coincidence or not; but I ran into some issues that went away when I did
> > this)
> >
> > HTH
> >
> >
> > Thank you,
> >
> > Christian Hernandez
> > 1225 Los Angeles Street
> > Glendale, CA 91204
> > Phone: 877-782-2737 ext. 4566
> > Fax: 818-265-3152
> > christi...@4over.com 
> > www.4over.com 
> >
> >
> > On Mon, Apr 22, 2013 at 2:57 PM, Jonathan Horne 
> wrote:
> >>
> >> Is there a write up out there for setting up ovirt users and
> adminstrators
> >> to authenticate into the portal via AD?
> >>
> >>
> >>
> >> Thanks,
> >>
> >> Jonathan
> >>
> >>
> >>
> >>
> >> 
> >> This is a PRIVATE message. If you are not the intended recipient, please
> >> delete without copying and kindly advise us by e-mail of the mistake in
> >> delivery. NOTE: Regardless of content, this e-mail shall not operate to
> bind
> >> SKOPOS to any order or other contract unless pursuant to explicit
> written
> >> agreement or government initiative expressly permitting the use of
> e-mail
> >> for such purpose.
> >>
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >>
> >
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>



-- 
Chris Noffsinger
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] AD authentication for ovirt manager

2013-04-23 Thread Charlie
Also set your Active Directory source as your time synchronization
provider.  You need DNS, Directory services, Kerberos and network time
all from the same source if you want anything approaching reliability.

--Charlie

On Mon, Apr 22, 2013 at 6:17 PM, Christian Hernandez
 wrote:
> Hello Jonathan,
>
> I believe you can use the Red Hat Documentation for this.
>
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Evaluation_Guide/Evaluation_Guide-VDI.html#Evaluation_Guide-Add_Active_Directory
>
> One of the "gotchas" that I ran into is that you need to specify the Active
> Directory as your DNS provider in your resolv.conf file (not sure if it was
> coincidence or not; but I ran into some issues that went away when I did
> this)
>
> HTH
>
>
> Thank you,
>
> Christian Hernandez
> 1225 Los Angeles Street
> Glendale, CA 91204
> Phone: 877-782-2737 ext. 4566
> Fax: 818-265-3152
> christi...@4over.com 
> www.4over.com 
>
>
> On Mon, Apr 22, 2013 at 2:57 PM, Jonathan Horne  wrote:
>>
>> Is there a write up out there for setting up ovirt users and adminstrators
>> to authenticate into the portal via AD?
>>
>>
>>
>> Thanks,
>>
>> Jonathan
>>
>>
>>
>>
>> 
>> This is a PRIVATE message. If you are not the intended recipient, please
>> delete without copying and kindly advise us by e-mail of the mistake in
>> delivery. NOTE: Regardless of content, this e-mail shall not operate to bind
>> SKOPOS to any order or other contract unless pursuant to explicit written
>> agreement or government initiative expressly permitting the use of e-mail
>> for such purpose.
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] [Spice-devel] Server 2k8

2013-04-23 Thread David Jaša
Alon Levy píše v Út 23. 04. 2013 v 06:48 -0400:
> > Ryan Wilkinson píše v Po 22. 04. 2013 v 14:43 -0600:
> > > Sounds like I'm missing something. We're looking at using Windows
> > > Server 2k8 as a workstation OS as the licensing seems to be more
> > > reasonable for vdi.
> > 
> > Ah, OK. Then it would be reasonable to add server systems as supported
> > to driver metadata. Alon?
> 
> If the current driver works then hopefully it's just an ini file change. Can 
> anyone open a bug for this please? (maybe there is one already, no idea..)

I've force-installed in in 2008 R2 in the past and it worked just fine.
I'll open the bug.

David

> 
> > 
> > >   That's why I'm concerned about video and mouse drivers - not getting
> > > either of those when I install spice guest tools like I do with Win7
> > > or XP.  Please advise.
> > 
> > The tools installer should install virtio-serial driver and
> > spice-vdagent ("RHEV Spice Agent" service) for you. If the service is in
> > services.msc but it can not be started, you have a problem with
> > virtio-serial driver.
> > 
> > David
> > 
> > > 
> > > 
> > > 
> > > On Mon, Apr 22, 2013 at 5:48 AM, David Jaša  wrote:
> > > Itamar Heim píše v So 20. 04. 2013 v 16:31 +0300:
> > > > On 04/20/2013 01:29 AM, Ryan Wilkinson wrote:
> > > > > Are spice guest tools that will work with Server 2k8
> > > available -
> > > > > especially video drivers?
> > > 
> > > 
> > > You can force-install qxl for win 7 64b if you wish to do so,
> > > but the
> > > question is - why do you need graphic driver on server
> > > windows? The
> > > spipce-vdagent should be all you need b/c it will give you
> > > local mouse.
> > > 
> > > David
> > > 
> > > > >
> > > > >
> > > > > ___
> > > > > Users mailing list
> > > > > Users@ovirt.org
> > > > > http://lists.ovirt.org/mailman/listinfo/users
> > > > >
> > > >
> > > > adding spice-devel.
> > > 
> > > > ___
> > > > Spice-devel mailing list
> > > > spice-de...@lists.freedesktop.org
> > > > http://lists.freedesktop.org/mailman/listinfo/spice-devel
> > > 
> > > --
> > > 
> > > David Jaša, RHCE
> > > 
> > > SPICE QE based in Brno
> > > GPG Key: 22C33E24
> > > Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
> > > 
> > > 
> > > 
> > > 
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > 
> > --
> > 
> > David Jaša, RHCE
> > 
> > SPICE QE based in Brno
> > GPG Key: 22C33E24
> > Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
> > 
> > 
> > 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

-- 

David Jaša, RHCE

SPICE QE based in Brno
GPG Key: 22C33E24 
Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24




smime.p7s
Description: S/MIME cryptographic signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] [Spice-devel] Server 2k8

2013-04-23 Thread Alon Levy
> Ryan Wilkinson píše v Po 22. 04. 2013 v 14:43 -0600:
> > Sounds like I'm missing something. We're looking at using Windows
> > Server 2k8 as a workstation OS as the licensing seems to be more
> > reasonable for vdi.
> 
> Ah, OK. Then it would be reasonable to add server systems as supported
> to driver metadata. Alon?

If the current driver works then hopefully it's just an ini file change. Can 
anyone open a bug for this please? (maybe there is one already, no idea..)

> 
> >   That's why I'm concerned about video and mouse drivers - not getting
> > either of those when I install spice guest tools like I do with Win7
> > or XP.  Please advise.
> 
> The tools installer should install virtio-serial driver and
> spice-vdagent ("RHEV Spice Agent" service) for you. If the service is in
> services.msc but it can not be started, you have a problem with
> virtio-serial driver.
> 
> David
> 
> > 
> > 
> > 
> > On Mon, Apr 22, 2013 at 5:48 AM, David Jaša  wrote:
> > Itamar Heim píše v So 20. 04. 2013 v 16:31 +0300:
> > > On 04/20/2013 01:29 AM, Ryan Wilkinson wrote:
> > > > Are spice guest tools that will work with Server 2k8
> > available -
> > > > especially video drivers?
> > 
> > 
> > You can force-install qxl for win 7 64b if you wish to do so,
> > but the
> > question is - why do you need graphic driver on server
> > windows? The
> > spipce-vdagent should be all you need b/c it will give you
> > local mouse.
> > 
> > David
> > 
> > > >
> > > >
> > > > ___
> > > > Users mailing list
> > > > Users@ovirt.org
> > > > http://lists.ovirt.org/mailman/listinfo/users
> > > >
> > >
> > > adding spice-devel.
> > 
> > > ___
> > > Spice-devel mailing list
> > > spice-de...@lists.freedesktop.org
> > > http://lists.freedesktop.org/mailman/listinfo/spice-devel
> > 
> > --
> > 
> > David Jaša, RHCE
> > 
> > SPICE QE based in Brno
> > GPG Key: 22C33E24
> > Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
> > 
> > 
> > 
> > 
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> 
> --
> 
> David Jaša, RHCE
> 
> SPICE QE based in Brno
> GPG Key: 22C33E24
> Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
> 
> 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] NFS ISO DOmain

2013-04-23 Thread Itamar Heim

On 04/23/2013 12:46 PM, Allon Mureinik wrote:

Not completely on-topic, but somewhat related:
I just merged a couple of patches by Mark Wu (thanks Mark!) that remove the NFS 
limitation for ISO domains, and allow creating them on any file-based domain.
Perhaps we'd like to allow the installer to create the ISO domain on local 
storage?


that's only relevant for the AIO mode, not for any other mode?




-Allon

- Original Message -

From: "Sandro Bonazzola" 
To: "Itamar Heim" 
Cc: supo...@logicworks.pt, Users@ovirt.org
Sent: Monday, April 22, 2013 12:10:46 PM
Subject: Re: [Users] NFS ISO DOmain

Il 20/04/2013 21:56, Itamar Heim ha scritto:

On 04/09/2013 08:13 PM, supo...@logicworks.pt wrote:

Hi,

I just installed the last version of engine and host using fedora18. I
notice that in the engine the nfs server is not up and running, so is
not possible to attach the iso domain.
How can I start the nfs server on engine?
Is this the correct thing to do?

vi 
/etc/idmapd.conf
# line 5: uncomment and change to your domain name

Domain =server.world

[root@dlp ~]#systemctl
 start
rpcbind.service
[root@dlp ~]#systemctl
 start
nfs-server.service
[root@dlp ~]#systemctl
 start
nfs-lock.service
[root@dlp ~]#systemctl
 start
nfs-idmap.service
[root@dlp ~]#systemctl
 enable
rpcbind.service
[root@dlp ~]#systemctl
 enable
nfs-server.service
[root@dlp ~]#systemctl
 enable
nfs-lock.service
[root@dlp ~]#systemctl
 enable
nfs-idmap.service

--

Jose Ferradeira
http://www.logicworks.pt



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



alex/sandro - doesn't the installer check for nfs service running?


Yes if you choose to configure a NFS Iso domain during setup.
No if you doesn't choose to do that and decide to do it manually later.

--
Sandro Bonazzola
Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] NFS ISO DOmain

2013-04-23 Thread Allon Mureinik
Not completely on-topic, but somewhat related:
I just merged a couple of patches by Mark Wu (thanks Mark!) that remove the NFS 
limitation for ISO domains, and allow creating them on any file-based domain.
Perhaps we'd like to allow the installer to create the ISO domain on local 
storage?


-Allon

- Original Message -
> From: "Sandro Bonazzola" 
> To: "Itamar Heim" 
> Cc: supo...@logicworks.pt, Users@ovirt.org
> Sent: Monday, April 22, 2013 12:10:46 PM
> Subject: Re: [Users] NFS ISO DOmain
> 
> Il 20/04/2013 21:56, Itamar Heim ha scritto:
> > On 04/09/2013 08:13 PM, supo...@logicworks.pt wrote:
> >> Hi,
> >>
> >> I just installed the last version of engine and host using fedora18. I
> >> notice that in the engine the nfs server is not up and running, so is
> >> not possible to attach the iso domain.
> >> How can I start the nfs server on engine?
> >> Is this the correct thing to do?
> >>
> >> vi 
> >> /etc/idmapd.conf
> >> # line 5: uncomment and change to your domain name
> >>
> >> Domain =server.world
> >>
> >> [root@dlp ~]#systemctl
> >>  start
> >> rpcbind.service
> >> [root@dlp ~]#systemctl
> >>  start
> >> nfs-server.service
> >> [root@dlp ~]#systemctl
> >>  start
> >> nfs-lock.service
> >> [root@dlp ~]#systemctl
> >>  start
> >> nfs-idmap.service
> >> [root@dlp ~]#systemctl
> >>  enable
> >> rpcbind.service
> >> [root@dlp ~]#systemctl
> >>  enable
> >> nfs-server.service
> >> [root@dlp ~]#systemctl
> >>  enable
> >> nfs-lock.service
> >> [root@dlp ~]#systemctl
> >>  enable
> >> nfs-idmap.service
> >>
> >> --
> >> 
> >> Jose Ferradeira
> >> http://www.logicworks.pt
> >>
> >>
> >>
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >>
> >
> > alex/sandro - doesn't the installer check for nfs service running?
> 
> Yes if you choose to configure a NFS Iso domain during setup.
> No if you doesn't choose to do that and decide to do it manually later.
> 
> --
> Sandro Bonazzola
> Better technology. Faster innovation. Powered by community collaboration.
> See how it works at redhat.com
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] [Spice-devel] Server 2k8

2013-04-23 Thread David Jaša
Ryan Wilkinson píše v Po 22. 04. 2013 v 14:43 -0600:
> Sounds like I'm missing something. We're looking at using Windows
> Server 2k8 as a workstation OS as the licensing seems to be more
> reasonable for vdi.

Ah, OK. Then it would be reasonable to add server systems as supported
to driver metadata. Alon?

>   That's why I'm concerned about video and mouse drivers - not getting
> either of those when I install spice guest tools like I do with Win7
> or XP.  Please advise.

The tools installer should install virtio-serial driver and
spice-vdagent ("RHEV Spice Agent" service) for you. If the service is in
services.msc but it can not be started, you have a problem with
virtio-serial driver.

David

> 
> 
> 
> On Mon, Apr 22, 2013 at 5:48 AM, David Jaša  wrote:
> Itamar Heim píše v So 20. 04. 2013 v 16:31 +0300:
> > On 04/20/2013 01:29 AM, Ryan Wilkinson wrote:
> > > Are spice guest tools that will work with Server 2k8
> available -
> > > especially video drivers?
> 
> 
> You can force-install qxl for win 7 64b if you wish to do so,
> but the
> question is - why do you need graphic driver on server
> windows? The
> spipce-vdagent should be all you need b/c it will give you
> local mouse.
> 
> David
> 
> > >
> > >
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > >
> >
> > adding spice-devel.
> 
> > ___
> > Spice-devel mailing list
> > spice-de...@lists.freedesktop.org
> > http://lists.freedesktop.org/mailman/listinfo/spice-devel
> 
> --
> 
> David Jaša, RHCE
> 
> SPICE QE based in Brno
> GPG Key: 22C33E24
> Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

-- 

David Jaša, RHCE

SPICE QE based in Brno
GPG Key: 22C33E24 
Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24




smime.p7s
Description: S/MIME cryptographic signature
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] I can't start a virutal machine,when I stop it.

2013-04-23 Thread Dafna Ron

On 04/23/2013 10:30 AM, Dan Kenigsberg wrote:

On Mon, Apr 22, 2013 at 10:10:03AM +0800, 882406701 wrote:

I use ovirt already half a year. Now, ovirt have an error, and  I can't solve 
it.

The virtual machine returns a permission error When I want startup it.
the permission error is:
"VM kaoqin is down. Exit message: cannot open file 
'/rhev/data-center/78e07dee-36bc-439b-b71e-72cfd87a2bb3/d69d6576-511c-4b98-b5f3-69c7252c5738/images/dd4c9d3e-8d37-4c92-bcc7-ca7e17fc1ee0/b9d038a0-e3eb-447d-9780-55e2af35f361':
 Permission denied."

"VM kaoqin is down. Exit message: operation failed: domain 'kaoqin' already exists 
with uuid 0a558c62-6268-f27e-3437-d7b2da4a42b4."

And I can start this virtual machine on after a while.

But ovirt-engine continued to give me a error :

"VM kaoqin is down. Exit message: cannot open file 
'/rhev/data-center/78e07dee-36bc-439b-b71e-72cfd87a2bb3/d69d6576-511c-4b98-b5f3-69c7252c5738/images/dd4c9d3e-8d37-4c92-bcc7-ca7e17fc1ee0/b9d038a0-e3eb-447d-9780-55e2af35f361':
 Permission denied."


And now,when I stop this virtual machine, I can't start it..

Which version of vdsm are you using? Which type of storage is it? If
it's NFS or Local - would you report the file permission?

Also, it may be interesting to see /var/log/libvirt/qemu/kaoqin.log for


Also, what libvirt are you using and does this vm has any snapshots?

more information about the failure.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users




--
Dafna Ron
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] I can't start a virutal machine,when I stop it.

2013-04-23 Thread Dan Kenigsberg
On Mon, Apr 22, 2013 at 10:10:03AM +0800, 882406701 wrote:
> I use ovirt already half a year. Now, ovirt have an error, and  I can't solve 
> it.
> 
> The virtual machine returns a permission error When I want startup it.
> the permission error is:
> "VM kaoqin is down. Exit message: cannot open file 
> '/rhev/data-center/78e07dee-36bc-439b-b71e-72cfd87a2bb3/d69d6576-511c-4b98-b5f3-69c7252c5738/images/dd4c9d3e-8d37-4c92-bcc7-ca7e17fc1ee0/b9d038a0-e3eb-447d-9780-55e2af35f361':
>  Permission denied."
> 
> "VM kaoqin is down. Exit message: operation failed: domain 'kaoqin' already 
> exists with uuid 0a558c62-6268-f27e-3437-d7b2da4a42b4."
> 
> And I can start this virtual machine on after a while.
> 
> But ovirt-engine continued to give me a error :
> 
> "VM kaoqin is down. Exit message: cannot open file 
> '/rhev/data-center/78e07dee-36bc-439b-b71e-72cfd87a2bb3/d69d6576-511c-4b98-b5f3-69c7252c5738/images/dd4c9d3e-8d37-4c92-bcc7-ca7e17fc1ee0/b9d038a0-e3eb-447d-9780-55e2af35f361':
>  Permission denied."
> 
> 
> And now,when I stop this virtual machine, I can't start it..

Which version of vdsm are you using? Which type of storage is it? If
it's NFS or Local - would you report the file permission?

Also, it may be interesting to see /var/log/libvirt/qemu/kaoqin.log for
more information about the failure.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [Users] how to understand UI design

2013-04-23 Thread Lior Vernia
Hello,

Generally speaking, for each popup window and tab you have a model class
in the uicommonweb project which takes care of the business logic, and a
view class in the webadmin project which takes care of presenting the
logic to the user.

Concerning UI operations (drag & drop, clicking etc.), there's a system
of events and listeners. If you're asking specifically about the Setup
Networks dialog, a good place to start is the HostSetupNetworksPopupView
class. Notice the method edit() where event listeners are created and
events are handled.

Hope this helps, feel free to ask more specific questions.

Yours, Lior Vernia.

On 23/04/13 09:47, bigclouds wrote:
> hi,all
>  i need to make some modification on UI,
> could you tell me the mechanism of host setupNetwork, operations like
> drag,drop , and how to catch its event, how to get data corresponding to
> operations.
>  
> thanks
> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users