Re: [ovirt-users] oVirt Reports

2016-08-15 Thread Yaniv Dary
This looks like a DWH, not a reports issue. Are you sure you only install
reports remotely?

Yaniv Dary
Technical Product Manager
Red Hat Israel Ltd.
34 Jerusalem Road
Building A, 4th floor
Ra'anana, Israel 4350109

Tel : +972 (9) 7692306
8272306
Email: yd...@redhat.com
IRC : ydary


On Tue, Aug 16, 2016 at 8:48 AM, Yedidyah Bar David  wrote:

> On Tue, Aug 16, 2016 at 12:09 AM, Fernando Fuentes 
> wrote:
> > David,
>
> (Actually it's "Yedidyah" or "Didi", "Bar David" is my surname)
>
> >
> > After an attempt to run this remote setup something went really wrong
> > and my dwh went fubar on my ovirt 4.0
> >
> > I got:
> >
> > 2016-08-15 16:03:34|ETL Service Started
> > ovirtEngineDbDriverClass|org.postgresql.Driver
> > ovirtEngineHistoryDbJdbcConnection|jdbc:postgresql://
> localhost:5432/ovirt_engine_history?sslfactory=org.postgresql.ssl.
> NonValidatingFactory
> > hoursToKeepDaily|43800
> > hoursToKeepHourly|1440
> > ovirtEngineDbPassword|**
> > runDeleteTime|3
> > ovirtEngineDbJdbcConnection|jdbc:postgresql://localhost:
> 5432/engine?sslfactory=org.postgresql.ssl.NonValidatingFactory
> > runInterleave|20
> > limitRows|limit 1000
> > ovirtEngineHistoryDbUser|ovirt_engine_history
> > ovirtEngineDbUser|engine
> > deleteIncrement|10
> > timeBetweenErrorEvents|30
> > hoursToKeepSamples|24
> > deleteMultiplier|1000
> > lastErrorSent|2011-07-03 12:46:47.00
> > etlVersion|4.0.2
> > dwhAggregationDebug|false
> > dwhUuid|759f3eb5-5072-4c28-9686-a363eb956077
> > ovirtEngineHistoryDbDriverClass|org.postgresql.Driver
> > ovirtEngineHistoryDbPassword|**
> > Exception in component tJDBCInput_2
> > org.postgresql.util.PSQLException: ERROR: relation
> > "history_configuration" does not exist
> >   Position: 65
> > at
> > org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(
> QueryExecutorImpl.java:2157)
> > at
> > org.postgresql.core.v3.QueryExecutorImpl.processResults(
> QueryExecutorImpl.java:1886)
> > at
> > org.postgresql.core.v3.QueryExecutorImpl.execute(
> QueryExecutorImpl.java:255)
> > at
> > org.postgresql.jdbc2.AbstractJdbc2Statement.execute(
> AbstractJdbc2Statement.java:555)
> > at
> > org.postgresql.jdbc2.AbstractJdbc2Statement.executeWithFlags(
> AbstractJdbc2Statement.java:403)
> > at
> > org.postgresql.jdbc2.AbstractJdbc2Statement.executeQuery(
> AbstractJdbc2Statement.java:283)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.
> tJDBCInput_2Process(MinimalVersionCheck.java:1574)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.
> tJDBCInput_1Process(MinimalVersionCheck.java:1229)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.
> tJDBCConnection_2Process(MinimalVersionCheck.java:782)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.
> tJDBCConnection_1Process(MinimalVersionCheck.java:657)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.
> runJobInTOS(MinimalVersionCheck.java:3089)
> > at
> > ovirt_engine_dwh.minimalversioncheck_4_0.
> MinimalVersionCheck.runJob(MinimalVersionCheck.java:2853)
> > at
> > ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(
> HistoryETL.java:8009)
> > at
> > ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.
> java:11520)
> > 2016-08-15
> > 16:03:34|NAl0ai|349e7f|349e7f|OVIRT_ENGINE_DWH|
> MinimalVersionCheck|Default|6|Java
> > Exception|tJDBCInput_2|org.postgresql.util.PSQLException:ERROR: relation
> > "history_configuration" does not exist
> >   Position: 65|1
> > Exception in component tRunJob_2
> > java.lang.RuntimeException: Child job running failed
> > at
> > ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(
> HistoryETL.java:8032)
> > at
> > ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.
> java:11520)
> > 2016-08-15
> > 16:03:34|349e7f|349e7f|349e7f|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java
> > Exception|tRunJob_2|java.lang.RuntimeException:Child job running
> > failed|1
> > 2016-08-15 16:03:34|ETL Service Stopped
> >
> > Can you please help?
>
> Please provide setup logs on the engine and reports machines. All of
> /var/log/ovirt-engine/setup/* on both of them. Thanks.
>
> >
> > Regards,
> >
> > --
> > Fernando Fuentes
> > ffuen...@txweather.org
> > http://www.txweather.org
> >
> > On Mon, Aug 15, 2016, at 10:16 AM, Fernando Fuentes wrote:
> >> Thanks David!
> >>
> >> Regards,
> >>
> >>
> >> --
> >> Fernando Fuentes
> >> ffuen...@txweather.org
> >> http://www.txweather.org
> >>
> >> On Mon, Aug 15, 2016, at 12:31 AM, Yedidyah Bar David wrote:
> >> > On Sun, Aug 14, 2016 at 6:57 PM, Fernando Fuentes <
> ffuen...@darktcp.net>
> >> > wrote:
> >> > > David,

Re: [ovirt-users] oVirt Reports

2016-08-15 Thread Yedidyah Bar David
On Tue, Aug 16, 2016 at 12:09 AM, Fernando Fuentes  wrote:
> David,

(Actually it's "Yedidyah" or "Didi", "Bar David" is my surname)

>
> After an attempt to run this remote setup something went really wrong
> and my dwh went fubar on my ovirt 4.0
>
> I got:
>
> 2016-08-15 16:03:34|ETL Service Started
> ovirtEngineDbDriverClass|org.postgresql.Driver
> ovirtEngineHistoryDbJdbcConnection|jdbc:postgresql://localhost:5432/ovirt_engine_history?sslfactory=org.postgresql.ssl.NonValidatingFactory
> hoursToKeepDaily|43800
> hoursToKeepHourly|1440
> ovirtEngineDbPassword|**
> runDeleteTime|3
> ovirtEngineDbJdbcConnection|jdbc:postgresql://localhost:5432/engine?sslfactory=org.postgresql.ssl.NonValidatingFactory
> runInterleave|20
> limitRows|limit 1000
> ovirtEngineHistoryDbUser|ovirt_engine_history
> ovirtEngineDbUser|engine
> deleteIncrement|10
> timeBetweenErrorEvents|30
> hoursToKeepSamples|24
> deleteMultiplier|1000
> lastErrorSent|2011-07-03 12:46:47.00
> etlVersion|4.0.2
> dwhAggregationDebug|false
> dwhUuid|759f3eb5-5072-4c28-9686-a363eb956077
> ovirtEngineHistoryDbDriverClass|org.postgresql.Driver
> ovirtEngineHistoryDbPassword|**
> Exception in component tJDBCInput_2
> org.postgresql.util.PSQLException: ERROR: relation
> "history_configuration" does not exist
>   Position: 65
> at
> 
> org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2157)
> at
> 
> org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1886)
> at
> 
> org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:255)
> at
> 
> org.postgresql.jdbc2.AbstractJdbc2Statement.execute(AbstractJdbc2Statement.java:555)
> at
> 
> org.postgresql.jdbc2.AbstractJdbc2Statement.executeWithFlags(AbstractJdbc2Statement.java:403)
> at
> 
> org.postgresql.jdbc2.AbstractJdbc2Statement.executeQuery(AbstractJdbc2Statement.java:283)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCInput_2Process(MinimalVersionCheck.java:1574)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCInput_1Process(MinimalVersionCheck.java:1229)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCConnection_2Process(MinimalVersionCheck.java:782)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCConnection_1Process(MinimalVersionCheck.java:657)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.runJobInTOS(MinimalVersionCheck.java:3089)
> at
> 
> ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.runJob(MinimalVersionCheck.java:2853)
> at
> 
> ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(HistoryETL.java:8009)
> at
> 
> ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.java:11520)
> 2016-08-15
> 16:03:34|NAl0ai|349e7f|349e7f|OVIRT_ENGINE_DWH|MinimalVersionCheck|Default|6|Java
> Exception|tJDBCInput_2|org.postgresql.util.PSQLException:ERROR: relation
> "history_configuration" does not exist
>   Position: 65|1
> Exception in component tRunJob_2
> java.lang.RuntimeException: Child job running failed
> at
> 
> ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(HistoryETL.java:8032)
> at
> 
> ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.java:11520)
> 2016-08-15
> 16:03:34|349e7f|349e7f|349e7f|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java
> Exception|tRunJob_2|java.lang.RuntimeException:Child job running
> failed|1
> 2016-08-15 16:03:34|ETL Service Stopped
>
> Can you please help?

Please provide setup logs on the engine and reports machines. All of
/var/log/ovirt-engine/setup/* on both of them. Thanks.

>
> Regards,
>
> --
> Fernando Fuentes
> ffuen...@txweather.org
> http://www.txweather.org
>
> On Mon, Aug 15, 2016, at 10:16 AM, Fernando Fuentes wrote:
>> Thanks David!
>>
>> Regards,
>>
>>
>> --
>> Fernando Fuentes
>> ffuen...@txweather.org
>> http://www.txweather.org
>>
>> On Mon, Aug 15, 2016, at 12:31 AM, Yedidyah Bar David wrote:
>> > On Sun, Aug 14, 2016 at 6:57 PM, Fernando Fuentes 
>> > wrote:
>> > > David,
>> > >
>> > > Thats exactly what I am trying to accomplish.
>> > > When I re-run the ovirt setup on my 3.6 system, I give it the IP of my
>> > > ovirt 4.0 machine, Do I leave the DB to the default name? Is there a db
>> > > user and password on the 4.0 machine?
>> > >
>> > > Sorry for so many questions... This is not documented...
>> >
>> > Not for 3.6 vs 4.0, but it actually is, here:
>> >
>> > http://www.ovirt.org/develop/release-management/features/engine/separate-reports-host/
>> >
>> > See also:
>> >
>> > http://www.ovirt.org/develop/release-management/features/engine/separate-dwh-host/
>> >

[ovirt-users] qos problem in ovirt python sdk

2016-08-15 Thread like...@cs2c.com.cn
Hello,

I'm using ovirt3.6.7, and i want to use QoS function by restapi. But i fount i 
can't update the qos to unlimited. 
For example, i assigned a qos named qos1 to a vnic profile named vprofile1, 
then i want to set the qos of vprofile1 to unlimited,
so i set the qos to None in sdk when update vnic profile, but after update the 
vnic profile still has qos named qos1.

So, how should i do if i want to set qos of a vnic profile to unlimited?

Look forward to your help!
Thanks 



like...@cs2c.com.cn
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] restore db table

2016-08-15 Thread Fernando Fuentes
a restore of the dwhdb did the trick.

-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org

On Mon, Aug 15, 2016, at 04:35 PM, Fernando Fuentes wrote:
> Looks like running a remote reports wiped my reports table.
> 
> postgres=# \list
>  List of databases
>  Name |Owner | Encoding |   Collate   | 
>Ctype|   Access privileges   
> --+--+--+-+-+---
>  engine   | engine   | UTF8 | en_US.UTF-8 |
>  en_US.UTF-8 | 
>  ovirt_engine_history | ovirt_engine_history | UTF8 | en_US.UTF-8 |
>  en_US.UTF-8 | 
>  postgres | postgres | UTF8 | en_US.UTF-8 |
>  en_US.UTF-8 | 
>  template0| postgres | UTF8 | en_US.UTF-8 |
>  en_US.UTF-8 | =c/postgres  +
>   |  |  | | 
>  | postgres=CTc/postgres
>  template1| postgres | UTF8 | en_US.UTF-8 |
>  en_US.UTF-8 | =c/postgres  +
>   |  |  | | 
>  | postgres=CTc/postgres
> (5 rows)
> 
> postgres=# \c ovirt_engine_history;
> You are now connected to database "ovirt_engine_history" as user
> "postgres".
> ovirt_engine_history=# \dt
> No relations found.
> ovirt_engine_history=# 
> 
> Is there a way to just restore that table?
> 
> Regards,
> 
> 
> -- 
> Fernando Fuentes
> ffuen...@txweather.org
> http://www.txweather.org
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] restore db table

2016-08-15 Thread Fernando Fuentes
Looks like running a remote reports wiped my reports table.

postgres=# \list
 List of databases
 Name |Owner | Encoding |   Collate   | 
   Ctype|   Access privileges   
--+--+--+-+-+---
 engine   | engine   | UTF8 | en_US.UTF-8 |
 en_US.UTF-8 | 
 ovirt_engine_history | ovirt_engine_history | UTF8 | en_US.UTF-8 |
 en_US.UTF-8 | 
 postgres | postgres | UTF8 | en_US.UTF-8 |
 en_US.UTF-8 | 
 template0| postgres | UTF8 | en_US.UTF-8 |
 en_US.UTF-8 | =c/postgres  +
  |  |  | | 
 | postgres=CTc/postgres
 template1| postgres | UTF8 | en_US.UTF-8 |
 en_US.UTF-8 | =c/postgres  +
  |  |  | | 
 | postgres=CTc/postgres
(5 rows)

postgres=# \c ovirt_engine_history;
You are now connected to database "ovirt_engine_history" as user
"postgres".
ovirt_engine_history=# \dt
No relations found.
ovirt_engine_history=# 

Is there a way to just restore that table?

Regards,


-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] oVirt Reports

2016-08-15 Thread Fernando Fuentes
David,

After an attempt to run this remote setup something went really wrong
and my dwh went fubar on my ovirt 4.0

I got:

2016-08-15 16:03:34|ETL Service Started
ovirtEngineDbDriverClass|org.postgresql.Driver
ovirtEngineHistoryDbJdbcConnection|jdbc:postgresql://localhost:5432/ovirt_engine_history?sslfactory=org.postgresql.ssl.NonValidatingFactory
hoursToKeepDaily|43800
hoursToKeepHourly|1440
ovirtEngineDbPassword|**
runDeleteTime|3
ovirtEngineDbJdbcConnection|jdbc:postgresql://localhost:5432/engine?sslfactory=org.postgresql.ssl.NonValidatingFactory
runInterleave|20
limitRows|limit 1000
ovirtEngineHistoryDbUser|ovirt_engine_history
ovirtEngineDbUser|engine
deleteIncrement|10
timeBetweenErrorEvents|30
hoursToKeepSamples|24
deleteMultiplier|1000
lastErrorSent|2011-07-03 12:46:47.00
etlVersion|4.0.2
dwhAggregationDebug|false
dwhUuid|759f3eb5-5072-4c28-9686-a363eb956077
ovirtEngineHistoryDbDriverClass|org.postgresql.Driver
ovirtEngineHistoryDbPassword|**
Exception in component tJDBCInput_2
org.postgresql.util.PSQLException: ERROR: relation
"history_configuration" does not exist
  Position: 65
at

org.postgresql.core.v3.QueryExecutorImpl.receiveErrorResponse(QueryExecutorImpl.java:2157)
at

org.postgresql.core.v3.QueryExecutorImpl.processResults(QueryExecutorImpl.java:1886)
at

org.postgresql.core.v3.QueryExecutorImpl.execute(QueryExecutorImpl.java:255)
at

org.postgresql.jdbc2.AbstractJdbc2Statement.execute(AbstractJdbc2Statement.java:555)
at

org.postgresql.jdbc2.AbstractJdbc2Statement.executeWithFlags(AbstractJdbc2Statement.java:403)
at

org.postgresql.jdbc2.AbstractJdbc2Statement.executeQuery(AbstractJdbc2Statement.java:283)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCInput_2Process(MinimalVersionCheck.java:1574)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCInput_1Process(MinimalVersionCheck.java:1229)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCConnection_2Process(MinimalVersionCheck.java:782)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.tJDBCConnection_1Process(MinimalVersionCheck.java:657)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.runJobInTOS(MinimalVersionCheck.java:3089)
at

ovirt_engine_dwh.minimalversioncheck_4_0.MinimalVersionCheck.runJob(MinimalVersionCheck.java:2853)
at

ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(HistoryETL.java:8009)
at
ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.java:11520)
2016-08-15
16:03:34|NAl0ai|349e7f|349e7f|OVIRT_ENGINE_DWH|MinimalVersionCheck|Default|6|Java
Exception|tJDBCInput_2|org.postgresql.util.PSQLException:ERROR: relation
"history_configuration" does not exist
  Position: 65|1
Exception in component tRunJob_2
java.lang.RuntimeException: Child job running failed
at

ovirt_engine_dwh.historyetl_4_0.HistoryETL.tRunJob_2Process(HistoryETL.java:8032)
at
ovirt_engine_dwh.historyetl_4_0.HistoryETL$3.run(HistoryETL.java:11520)
2016-08-15
16:03:34|349e7f|349e7f|349e7f|OVIRT_ENGINE_DWH|HistoryETL|Default|6|Java
Exception|tRunJob_2|java.lang.RuntimeException:Child job running
failed|1
2016-08-15 16:03:34|ETL Service Stopped

Can you please help?

Regards,

-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org

On Mon, Aug 15, 2016, at 10:16 AM, Fernando Fuentes wrote:
> Thanks David!
> 
> Regards,
> 
> 
> -- 
> Fernando Fuentes
> ffuen...@txweather.org
> http://www.txweather.org
> 
> On Mon, Aug 15, 2016, at 12:31 AM, Yedidyah Bar David wrote:
> > On Sun, Aug 14, 2016 at 6:57 PM, Fernando Fuentes 
> > wrote:
> > > David,
> > >
> > > Thats exactly what I am trying to accomplish.
> > > When I re-run the ovirt setup on my 3.6 system, I give it the IP of my
> > > ovirt 4.0 machine, Do I leave the DB to the default name? Is there a db
> > > user and password on the 4.0 machine?
> > >
> > > Sorry for so many questions... This is not documented...
> > 
> > Not for 3.6 vs 4.0, but it actually is, here:
> > 
> > http://www.ovirt.org/develop/release-management/features/engine/separate-reports-host/
> > 
> > See also:
> > 
> > http://www.ovirt.org/develop/release-management/features/engine/separate-dwh-host/
> > 
> > In above, each of engine, dwh, reports is in its own machine.
> > You can do a similar thing with engine+dwh on one and reports on another.
> > 
> > Do not hesitate ping back if you are stuck!
> > 
> > Best,
> > 
> > >
> > > Thank you for all the help!
> > >
> > > Regards,
> > >
> > > --
> > > Fernando Fuentes
> > > ffuen...@txweather.org
> > > http://www.txweather.org
> > >
> > > On Sun, Aug 14, 2016, at 02:01 AM, Yedidyah Bar David wrote:
> > >> On Sat, Aug 13, 2016 at 10:38 PM, 

[ovirt-users] Short SSL key sizes, and TLS 1.2 on vdsm

2016-08-15 Thread Chris H
Hello,

My RHEVM hypervisors (Red Hat Enterprise Virtualization Hypervisor release
7.2 (20160627.3.el7ev)) are failing corporate Nessus TCP/IP vulnerability
scans spectacularly with the following.

1) "SSL Certificate Chain Contains RSA Keys Less Than 2048 bits": many
ports in the 5900 range are presenting certificates signed by a key of 1024
bits.  I can certainly see 1024-bit keys on the management server and the
hypervisors:

management ovirt-engine]# openssl x509 -in ca.pem -noout -text | grep
Public-Key
Public-Key: (1024 bit)

hypervisor admin]# openssl x509 -in /etc/pki/vdsm/certs/cacert.pem -noout
-text | grep Public-Key
Public-Key: (1024 bit)


Can anyone point me at directions on how to regenerate the key(s) with 2048
bits, and all certificates, preferably without breaking anything?
The management server is running RHEL 6.8, rhevm-3.6.7.5.

2) "TLS Version 1.2 Protocol Detection": Port 54321 is failing because it
doesn't support TLS v1.2 (and also because its certificate's key is less
than 2048 bits).  This port is used by "/usr/bin/python
/usr/share/vdsm/vdsm".

Can I enable TLS v1.2 in vdsm? It doesn't have to accept TLSv1.2
exclusively, it just has to have v1.2 available (and NOT SSLv2 or 3).



If I firewall off these ports, I can't connect to VMs' consoles anymore, so
hiding from the scanner isn't feasible for long. Please help point me in
the right direction.

Thanks,
Chris

-- 
*The Starflyer is real!*
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: wss://ovirt.engine.fqdn:6100/

2016-08-15 Thread aleksey . maksimov
I tried a version of Nicolás. 
No success :((

1) I create full bundle cert file:

# cat /etc/pki/ovirt-engine/certs/apache.cer 
/etc/pki/ovirt-engine/apache-ca.pem > 
/etc/pki/ovirt-engine/certs/apache-with-ca.cer
# openssl verify /etc/pki/ovirt-engine/certs/apache-with-ca.cer

/etc/pki/ovirt-engine/certs/apache-with-ca.cer: OK

2) I changed config file:

# cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf

PROXY_PORT=6100
SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache-with-ca.cer
SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
SSL_ONLY=True
FORCE_DATA_VERIFICATION=False

3) I restarted the service

# service ovirt-websocket-proxy restart

Problem still exists :(
Any ideas how to trablshut problem?

14.08.2016, 08:59, "aleksey.maksi...@it-kb.ru" :
> Hi Jiri.
> But your variant does not work, too
>
> # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
> PROXY_PORT=6100
> SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
> SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
> CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
> SSL_ONLY=True
>
> Some error:
> WebSocket error: Can't connect to websocket on URL: 
> wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]
>
> any ideas how to trablshut problem?
>
> 14.08.2016, 01:53, "Jiri Belka" :
>>  I have different files for those variables, maybe this is the case?
>>
>>  Review again.
>>
>>  j.
>>
>>  - Original Message -
>>  From: "aleksey maksimov" 
>>  To: "Jiri Belka" 
>>  Cc: "users" 
>>  Sent: Saturday, August 13, 2016 4:57:45 PM
>>  Subject: Re: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE 
>> HTML5 browser client -> WebSocket error: Can't connect to websocket on URL: 
>> wss://ovirt.engine.fqdn:6100/
>>
>>  I changed my file 
>> /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf to:
>>
>>  PROXY_PORT=6100
>>  #SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/websocket-proxy.cer
>>  #SSL_KEY=/etc/pki/ovirt-engine/keys/websocket-proxy.key.nopass
>>  #CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
>>  SSL_CERTIFICATE=/etc/pki/ovirt-engine/certs/apache.cer
>>  SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
>>  CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/apache-ca.pem
>>  SSL_ONLY=True
>>
>>  ...and restart HostedEngine VM.
>>  Problem still exists.
>>
>>  13.08.2016, 17:52, "aleksey.maksi...@it-kb.ru" :
>>>   It does not work for me. any ideas?
>>>
>>>   02.08.2016, 17:22, "Jiri Belka" :
    This works for me:

    # cat /etc/ovirt-engine/ovirt-websocket-proxy.conf.d/10-setup.conf
    PROXY_PORT=6100
    SSL_CERTIFICATE=/etc/pki/ovirt-engine/apache-ca.pem
    SSL_KEY=/etc/pki/ovirt-engine/keys/apache.key.nopass
    CERT_FOR_DATA_VERIFICATION=/etc/pki/ovirt-engine/certs/engine.cer
    SSL_ONLY=True

    - Original Message -
    From: "aleksey maksimov" 
    To: "users" 
    Sent: Monday, August 1, 2016 12:13:38 PM
    Subject: [ovirt-users] oVirt 4 with custom SSL-certificate and SPICE 
 HTML5 browser client -> WebSocket error: Can't connect to websocket on 
 URL: wss://ovirt.engine.fqdn:6100/

    Hello oVirt guru`s !

    I have successfully replaced the oVirt 4 site SSL-certificate according 
 to the instructions from "Replacing oVirt SSL Certificate"
    section in "oVirt Administration Guide"
    http://www.ovirt.org/documentation/admin-guide/administration-guide/

    3 files have been replaced:

    /etc/pki/ovirt-engine/certs/apache.cer
    /etc/pki/ovirt-engine/keys/apache.key.nopass
    /etc/pki/ovirt-engine/apache-ca.pem

    Now the oVirt site using my certificate and everything works fine, but 
 when I try to use SPICE HTML5 browser client in Firefox or Chrome I see a 
 gray screen and message under the button "Toggle messages output":

    WebSocket error: Can't connect to websocket on URL: 
 wss://ovirt.engine.fqdn:6100/eyJ...0=[object Event]

    Before replacing certificates SPICE HTML5 browser client works.
    Native SPICE client works fine.

    Tell me what to do with SPICE HTML5 browser client?
    ___
    Users mailing list
    Users@ovirt.org
    http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt4.0.1 and new node, migration fails

2016-08-15 Thread Bill James

sure did. No word yet on that.
bug 1363900



On 08/14/2016 03:43 AM, Yaniv Dary wrote:

Did you open a bug like Michal asked?

Yaniv Dary Technical Product Manager Red Hat Israel Ltd. 34 Jerusalem 
Road Building A, 4th floor Ra'anana, Israel 4350109 Tel : +972 (9) 
7692306 8272306 Email: yd...@redhat.com  IRC 
: ydary


On Fri, Aug 12, 2016 at 2:23 AM, Bill James > wrote:


just fyi, I tried updating to ovirt-engine-4.0.2.6-1.el7.centos.noarch
and still same story, it won't let me select a specific host to
deploy a VM to, and doesn't tell me why not.

However I can migrate the VM from one node to the other one just fine.

Any ideas why?

I provided logs earlier.




On 08/03/2016 02:32 PM, Bill James wrote:

opened bug 1363900.
It also includes recent logs from all 3 servers.

Also tried updating vdsm to 4.18.10-1 and restarted ovirt-engine.
No change in results.

I can migrate VMs to new node but not initially assign VMs to
that node.


On 07/29/2016 09:31 AM, Bill James wrote:

ok, I will raise a bug. Yes it is very frustrating just
having button not work without explanation.
I don't know if this is related, the new host that I am
having troubles with is running 4.0.1.1-1,
other other host is running 4.0.0.6-1

I was planning on migrating VMs then upgrade the older host.
Also Cluster is still in 3.6 mode, also waiting for
upgrade of older node.
All storage domains are on older node, its the NFS server.


hmm, just retried migration so I could get vdsm logs from
both hosts.
1 VM worked, the other 3 failed.
And I still can't assign VMs to new node.

VM that worked: f4cd4891-977d-44c2-8554-750ce86da7c9

Not sure what's special about it.
It and 45f4f24b-2dfa-401b-8557-314055a4662c are clones
from same template.


Attaching logs from 2 nodes and engine now.



On 7/29/16 4:00 AM, Michal Skrivanek wrote:

On 28 Jul 2016, at 18:37, Bill James
> wrote:

I'm trying to test out ovirt4.0.1.
I added a new hardware node to the cluster. Its
status is Up.
But for some reason when I create a new VM and try
to select "Specific Host" the radio button doesn't
let me select it so I can't assign a VM to new node.

please raise that as a bug if there is no explanation why

When I try to migrate a VM to new node it fails with:

MigrationError: Domain not found: no domain with
matching uuid '45f4f24b-2dfa-401b-8557-314055a4662c'


What did I miss?

for migration issues you always need to include vdsm
logs from both source and destination host. Hard to
say otherwise. Anything special about your deployment?

ovirt-engine-4.0.1.1-1.el7.centos.noarch
vdsm-4.18.6-1.el7.centos.x86_64

storage is NFS.

Attached logs.


___

Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users






Cloud Services for Business www.j2.com
j2 | eFax | eVoice | FuseMail | Campaigner | KeepItSafe | Onebox


This email, its contents and attachments contain information from j2 Global, 
Inc. and/or its affiliates which may be privileged, confidential or otherwise 
protected from disclosure. The information is intended to be for the 
addressee(s) only. If you are not an addressee, any disclosure, copy, 
distribution, or use of the contents of this message is prohibited. If you have 
received this email in error please notify the sender by reply e-mail and 
delete the original message and any copies. (c) 2015 j2 Global, Inc. All rights 
reserved. eFax, eVoice, Campaigner, FuseMail, KeepItSafe, and Onebox are 
registered trademarks of j2 Global, Inc. and its affiliates.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] oVirt Reports

2016-08-15 Thread Fernando Fuentes
Thanks David!

Regards,


-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org

On Mon, Aug 15, 2016, at 12:31 AM, Yedidyah Bar David wrote:
> On Sun, Aug 14, 2016 at 6:57 PM, Fernando Fuentes 
> wrote:
> > David,
> >
> > Thats exactly what I am trying to accomplish.
> > When I re-run the ovirt setup on my 3.6 system, I give it the IP of my
> > ovirt 4.0 machine, Do I leave the DB to the default name? Is there a db
> > user and password on the 4.0 machine?
> >
> > Sorry for so many questions... This is not documented...
> 
> Not for 3.6 vs 4.0, but it actually is, here:
> 
> http://www.ovirt.org/develop/release-management/features/engine/separate-reports-host/
> 
> See also:
> 
> http://www.ovirt.org/develop/release-management/features/engine/separate-dwh-host/
> 
> In above, each of engine, dwh, reports is in its own machine.
> You can do a similar thing with engine+dwh on one and reports on another.
> 
> Do not hesitate ping back if you are stuck!
> 
> Best,
> 
> >
> > Thank you for all the help!
> >
> > Regards,
> >
> > --
> > Fernando Fuentes
> > ffuen...@txweather.org
> > http://www.txweather.org
> >
> > On Sun, Aug 14, 2016, at 02:01 AM, Yedidyah Bar David wrote:
> >> On Sat, Aug 13, 2016 at 10:38 PM, Fernando Fuentes 
> >> wrote:
> >> > Team,
> >> >
> >> > I got two oVirt Servers. One in 4.0.2 and one in 3.6.X
> >> > I love the new 4.0 dashboard, But I need a way to continue to build
> >> > reports with ease, 3.6 Can do this with ovirt-reports. How can I make my
> >> > oVirt 4.0.2 send data for reports to my ovirt reports on 3.6?
> >> >
> >> > Thanks for the help team!
> >>
> >> I didn't try this myself, but pointing your reports setup to the 4.0 dwh
> >> database should work. If you have problems, please give more details -
> >> it's not clear what exactly you have on each machine.
> >>
> >> Generally speaking, oVirt does not currently provide tools to make
> >> the engine or dwh "send data" elsewhere (a 3.6 reports or whatever).
> >> You can try doing this yourself using generic postgresql means/tools.
> >>
> >> Best
> >> --
> >> Didi
> 
> 
> 
> -- 
> Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] erros after upgrade

2016-08-15 Thread Fernando Fuentes
Team,

After upgrading to 4.0.2 I am starting to get the following errors:

Failed to check for available updates on host ogias with message
'Command returned failure code 1 during SSH session 'root@IP''.

Do I need to update each hosts manually?

Regards,

-- 
Fernando Fuentes
ffuen...@txweather.org
http://www.txweather.org
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] iSCSI Multipathing -> host inactive

2016-08-15 Thread Elad Ben Aharon
Hi,

Is the iSCSI domain that supposed to be connected through the bond the
current master domain?

Also, can you please provide the output of 'iscsiadm -m session -P3' ?


Thanks



On Mon, Aug 15, 2016 at 4:31 PM, Uwe Laverenz  wrote:

> Hi all,
>
> I'd like to test iSCSI multipathing with OVirt 4.02 and see the following
> problem: if I try to add an iSCSI-Bond the host loses connection to _all_
> storage domains.
>
> I guess I'm doing something wrong. :)
>
> I have built a small test environment for this:
>
> The storage is provided by a freenas box with two dedicated interfaces for
> two separate iSCSI networks.
>
> Each interface has one address in one network (no VLANs, no trunking). For
> each network there is one portal configured. Both portals point to the same
> target. The target has 4 LUNs.
>
> The host also has two dedicated interfaces for iSCSI and finds the target
> over both portals, all LUNs are selected for use and show 2 paths.
>
> My questions:
>
> 1) Is this setup ok or did I miss something?
>
> 2) The LUNs already show 2 paths (multipath -ll), one "active" and one
> "enabled", what difference would a Datacenter iSCSI-bond make?
>
> 3) What combination of checkboxes do I have to use?
>
> Logical Letworks
>
> [ ] ISCSIA
> [ ] ISCSIB
>
> Storage Targets
>
> [ ] iqn.2005-10.org.freenas.ctl:tgt01   10.0.131.121   3260
> [ ] iqn.2005-10.org.freenas.ctl:tgt01   10.0.132.121   3260
>
>
> As stated in the beginning: all my tests made the host lose connection to
> all storage domains (NFS included) and I can not see what I am doing wrong.
>
> Thank you very much!
>
> cu,
> Uwe
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] iSCSI Multipathing -> host inactive

2016-08-15 Thread Uwe Laverenz

Hi all,

I'd like to test iSCSI multipathing with OVirt 4.02 and see the 
following problem: if I try to add an iSCSI-Bond the host loses 
connection to _all_ storage domains.


I guess I'm doing something wrong. :)

I have built a small test environment for this:

The storage is provided by a freenas box with two dedicated interfaces 
for two separate iSCSI networks.


Each interface has one address in one network (no VLANs, no trunking). 
For each network there is one portal configured. Both portals point to 
the same target. The target has 4 LUNs.


The host also has two dedicated interfaces for iSCSI and finds the 
target over both portals, all LUNs are selected for use and show 2 paths.


My questions:

1) Is this setup ok or did I miss something?

2) The LUNs already show 2 paths (multipath -ll), one "active" and one 
"enabled", what difference would a Datacenter iSCSI-bond make?


3) What combination of checkboxes do I have to use?

Logical Letworks

[ ] ISCSIA
[ ] ISCSIB

Storage Targets

[ ] iqn.2005-10.org.freenas.ctl:tgt01   10.0.131.121   3260
[ ] iqn.2005-10.org.freenas.ctl:tgt01   10.0.132.121   3260


As stated in the beginning: all my tests made the host lose connection 
to all storage domains (NFS included) and I can not see what I am doing 
wrong.


Thank you very much!

cu,
Uwe
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Change local DC host address

2016-08-15 Thread Alexandr Krivulya
Hi!

There is any way to change host address in a local DC? In web-ui it's
grayed out, ovirt-shell gives an error:

  status: 400
  reason: Bad Request
  detail: Host Address can not be modified due to Security
restrictions.  In order to change Host Address, Host has to be reinstalled
 

Reinstall host is not a solution with local DC.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] LDAP-based domain not working after upgrade?

2016-08-15 Thread Nicolás



El 15/08/16 a las 13:28, Ondra Machacek escribió:

On 08/13/2016 12:44 AM, nico...@devels.es wrote:

El 2016-08-12 20:38, Ondra Machacek escribió:

On 08/12/2016 05:53 PM, nico...@devels.es wrote:

El 2016-08-10 14:46, Nicolás escribió:

En 10/8/2016 2:29 p. m., Alexander Wels  escribió:


On Wednesday, August 10, 2016 9:02:16 AM EDT Alexander Wels wrote:



On Wednesday, August 10, 2016 9:10:25 AM EDT nico...@devels.es

wrote:



El 2016-08-10 08:58, Ondra Machacek escribió:



> On 08/10/2016 09:37 AM, Nicolás wrote:



>> Hi,



>>



>> We're running oVirt 4.0.1.1 [1], and we're trying to grant a

permission to



>> a



>> user on a VM. Thing is when we open the 'Permissions' subtab

on that



>> VM,



>> we click on Add, the LDAP backend shows up but any value

entered into



>> the search box returns nothing, even when I know the values

exist.



>>



>> This has been working on oVirt 3.x, we actually migrated to

4.x last



>> week and didn't notice this issue.



>>



>> Additionally, there's no combobox to choose the permission to

grant?



>



> There should be combo box to choose a role.







I've attached a screenshot, seems there's not.







Its highly likely the dropdown is there, but its scrolled below

the bottom



of the dialog and thus you can't see it. I thought I made sure all

the



dialogs were working, seems like I missed one. Let me check it out

and see



what is going on.











Okay I double checked, I went to the VMs main tab, selected a VM,
then went to



the permissions sub tab. Clicked add. The dialog that popped up
looks like the



one attached, which is what I was expecting. The one you attached
appears to



be missing some styling, which is likely what caused the Role to
Assign part



to be scrolled below the bottom of the page.







Can you complete clear your cache (not shift reload, but
settings->clear



cache). If that doesn't work can you tell us the version of the
patternfly rpm



installed on your engine?







Yes, I already did that, also opened the engine on different clients
and the behavior is the same, I believe this is not a client issue.
Patternfly package is patternfly1-1.3.0-1.el7.centos.noarch




Ok, this indeed seems like a graphics problem since I am seeing this
connecting to a machine through a VNC server and the Role combobox is
moved down out of the dialog.

However, the LDAP issue persists. When I choose the 'internal' 
domain, I
can search the 'admin' user successfully, however, if I set it to 
be the

LDAP domain, any search returns nothing.

Any hints or ideas how to debug this?


Can you please enable debug log[1] and send it here?

[1]
https://github.com/oVirt/ovirt-engine-extension-aaa-ldap/blob/master/README#L442 






Thanks. I was now able to see why it is failing:

TRACE [org.ovirt.engineextensions.aaa.ldap.Framework] (default task-13)
[] SearchRequest: Exception: LDAPSearchException(resultCode=11 (admin
limit exceeded), numEntries=0, numReferences=0, errorMessage='admin
limit exceeded')


This is server error, that number of entries to be returned is higher, 
than the limit set on server.
You should either increase that limit server side, or don't use '*', 
but use some filter. ( ie. user* )




That's the problem, the patterns we enter in the search box are specific 
usernames that usually return only one or 2 results at most from the 
LDAP directory, that's why I think this filter is needlessly too broad 
in our case. I've been making the query more specific on the command 
line (i.e., using ldapsearch) and removing some of the OR (|) clauses 
seems to return a lower number of entries below the limit, that's why I 
asked if it's possible to manually specify the filter.


Do you think it would be useful to open a RFE on BZ asking for a feature 
to allow the user specify the filter?


I'll see what's the best way to workaround this problem as is, either 
defining a user and allowing them a higher number of returned results or 
increasing the limit on the server side.


Thanks.



Indeed, if I run that query using the ldapsearch command I can clearly
see it is returning an "admin limit exceeded" error.

The applied filter is:
(&(objectClass=posixAccount)(uid=*)(|(givenName=username)(sn=username)(displayName=username)(uid=username))) 




Strange thing is this hasn't been an issue on oVirt 3.6.x and we've not
changed our LDAP configuration. Has the filter been changed in 4.x by
default?


It didn't.



If so, is there a way to override the filter to make it simpler? (In our
case we'll always seek by username, so no need to search by givenName,
sn or displayName).



Filtering is constructed on client side, in this case ovirt-engine 
backend,

so unfortunatelly it's not easilly modifiable.


Thanks.



Thanks.







Anyhow, I see there are lots of packages to update so I'll do so
within a few days and report results.







>> All this is done with the admin@internal user, so I guess


Re: [ovirt-users] new internal SSO

2016-08-15 Thread Ravi Nori
In addition to the list of urls in the original email

/ovirt-engine/webadmin/sso/logout
/ovirt-engine/userportal/sso/oauth2-callback
/ovirt-engine/userportal/sso/login
/ovirt-engine/userportal/sso/logout
/ovirt-engine/login
/ovirt-engine/logout
/ovirt-engine/switch-user
/ovirt-engine/error.html
/ovirt-engine/index.html
/ovirt-engine/oauth2-callback

/ovirt-engine/sso/interactive-login
/ovirt-engine/sso/interactive-redirect-to-module
/ovirt-engine/sso/interactive-login-basic
/ovirt-engine/sso/interactive-login-basic-enforce
/ovirt-engine/sso/interactive-login-negotiate
/ovirt-engine/sso/interactive-change-passwd
/ovirt-engine/sso/login-unauthorized
/ovirt-engine/sso/interactive-login-next-auth
/ovirt-engine/sso/oauth/authorize
/ovirt-engine/sso/oauth/token
/ovirt-engine/sso/oauth/token-http-auth/*
/ovirt-engine/sso/oauth/token-info
/ovirt-engine/sso/oauth/revoke
/ovirt-engine/sso/login.html
/ovirt-engine/sso/credentials-change.html

and there is also

/ovirt-engine/api and all the resources  hosts, vms etc


On Fri, Aug 12, 2016 at 6:45 AM, Fabrice Bacchella
 wrote:
> I'm currently fighting with the new mandatory SSO system introduced in 4.0.
>
> It's also used internally as ovirt-engine is calling himself, as shown in
> the apache log, to identity himself to himself:
>
> [2016-08-12 11:30:24] 10.83.16.34 "ovirt.prod.exalead.com" "POST
> /ovirt-engine/sso/status HTTP/1.1" 256 401 + 163 "-" "Java/1.8.0_92"
> [2016-08-12 10:55:49] 10.83.16.34 "ovirt.prod.exalead.com" "POST
> /ovirt-engine/sso/oauth/token HTTP/1.1" 237 401 + 163 "-" "Java/1.8.0_92"
>
> But the sso will be acceded by human too:
>
> [2016-08-12 11:29:27] 192.168.205.59 "ovirt.prod.exalead.com" "GET
> /ovirt-engine/sso/interactive-redirect-to-module HTTP/1.1" 5097 302 + -
> "https://ovirt.prod.exalead.com/ovirt-engine/; "Mozilla/5.0 (Macintosh;
> Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
>
>
> I'm using a custom apache configuration, as I need that to better integrate
> ovirt in our running SSO and PKI setup.
>
> So under SSO I wonder which part needs to be protected using our own SSO,
> and what part can be open to any access, and the internal security of ovirt
> will manage it ?
>
> In https://bugzilla.redhat.com/show_bug.cgi?id=1342192, it seems for me that
> ^/ovirt-engine/sso/(interactive-login-negotiate|oauth/token-http-auth) needs
> to be protected. Am i right ?
>
> In my log, I've seen access to:
>
> /ovirt-engine/sso/status
> /ovirt-engine/sso/oauth/token-info
> /ovirt-engine/webadmin/sso/oauth2-callback
> /ovirt-engine/webadmin/sso/login
> /ovirt-engine/sso/oauth/token
> /ovirt-engine/sso/oauth/authorize
> /ovirt-engine/sso/interactive-redirect-to-module
> /ovirt-engine/sso/interactive-login-next-auth
> /ovirt-engine/sso/interactive-login-negotiate/ovirt-auth
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] unable to find valid certification path to requested target

2016-08-15 Thread Martin Perina
Hi Bill,

are you using HTTPS certificate signed by custom CA? If so please take a
look at Doc Text in

https://bugzilla.redhat.com/show_bug.cgi?id=1336838

how to setup external CA in 4.0 correctly.

If you are not using custom CA, could you please share you server/engine
logs?

Thanks

Martin Perina


On Sat, Aug 13, 2016 at 10:24 PM, Bill Bill  wrote:

> Recently upgraded ovirt-engine and now cannot log in. Getting the error
> below:
>
>
>
>
>
> sun.security.validator.ValidatorException: PKIX path building failed:
> sun.security.provider.certpath.SunCertPathBuilderException: unable to
> find valid certification path to requested target
>
>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users