[Users] ovirt-engine-sdk-java 1.0.0.9-1 released
* Fri Jun 28 2013 Michael Pasternak mpast...@redhat.com - 1.0.0.9-1 - configure log4j programmatically More details can be found at [1]. [1] http://www.ovirt.org/Java-sdk-changelog -- Michael Pasternak RedHat, ENG-Virtualization RD ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] too much debugging in ovirt-node
On 06/26/2013 07:47 PM, Winfried de Heiden wrote: Hi all, Using ovirt-node-iso-2.6.1-20120228.fc18.iso (2012 seems to be a typo, must be 2013?) is logging with too much debugging. Changing all theDEBUG to WARNOMG in /etc/vdsm/logger.conf and persist /etc/vdsm/logger.conf solved it for /var/log/vdsm/vdsm.log. However, /var/log/libvirtd.log also shows tons of debug messages. The file /etc/libvirt/libvirtd.conf shows: listen_addr=0.0.0.0 unix_sock_group=kvm unix_sock_rw_perms=0770 auth_unix_rw=sasl host_uuid=06304eff-1c91-4e1e-86e2-d773621dcab3 log_outputs=1:file:/var/log/libvirtd.log ca_file=/etc/pki/vdsm/certs/cacert.pem cert_file=/etc/pki/vdsm/certs/vdsmcert.pem key_file=/etc/pki/vdsm/keys/vdsmkey.pem Changing log_outputs=1:file:/var/log/libvirtd.log to log_outputs=3:file:/var/log/libvirtd.log with persist (or unpersist first, thn persist) doesn't help. After a reboot log_outputs=1:file:/var/log/libvirtd.log will appear again. How to decrease the log level for libvirtd? Check also log_level and log_filter properties. You can cut down the logs a lot, but beware that in case something happens... You probably know. The advantage with using something on top of libvirt (oVirt for example) is that you will be probably able to reproduce libvirt problems in case there will be any and then you can switch the debugging back. For full options on logging, see http://libvirt.org/logging.html Martin ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] too much debugging in ovirt-node
I have also libvirt logs with about 10GB of space, annoying, needs to be fixed. 2013/6/28 Martin Kletzander mklet...@redhat.com On 06/26/2013 07:47 PM, Winfried de Heiden wrote: Hi all, Using ovirt-node-iso-2.6.1-20120228.fc18.iso (2012 seems to be a typo, must be 2013?) is logging with too much debugging. Changing all theDEBUG to WARNOMG in /etc/vdsm/logger.conf and persist /etc/vdsm/logger.conf solved it for /var/log/vdsm/vdsm.log. However, /var/log/libvirtd.log also shows tons of debug messages. The file /etc/libvirt/libvirtd.conf shows: listen_addr=0.0.0.0 unix_sock_group=kvm unix_sock_rw_perms=0770 auth_unix_rw=sasl host_uuid=06304eff-1c91-4e1e-86e2-d773621dcab3 log_outputs=1:file:/var/log/libvirtd.log ca_file=/etc/pki/vdsm/certs/cacert.pem cert_file=/etc/pki/vdsm/certs/vdsmcert.pem key_file=/etc/pki/vdsm/keys/vdsmkey.pem Changing log_outputs=1:file:/var/log/libvirtd.log to log_outputs=3:file:/var/log/libvirtd.log with persist (or unpersist first, thn persist) doesn't help. After a reboot log_outputs=1:file:/var/log/libvirtd.log will appear again. How to decrease the log level for libvirtd? Check also log_level and log_filter properties. You can cut down the logs a lot, but beware that in case something happens... You probably know. The advantage with using something on top of libvirt (oVirt for example) is that you will be probably able to reproduce libvirt problems in case there will be any and then you can switch the debugging back. For full options on logging, see http://libvirt.org/logging.html Martin ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] engine-update problem
Il 27/06/2013 19:03, Juan Pablo Lorier ha scritto: Hi again, What if I run engine-setup again as I start from scratch? will it overwrite the database and loose all the vm's info? regards If it's not so important for you, I think it's better to reinstall 3.2.2 on your system. Running engine-setup again without engine-cleanup is not a supported procedure. I'm not sure that this procedure will preserve the database and your vms so make a backup first. Maybe someone else can confirm that this procedure works on a running system before you try this, I don't want to have you loosing your data. # engine-cleanup --dont-drop-db should cleanup your current setup preserving the db. ensure you have all the ovirt packages from the ovirt repo. then run engine-setup using the same password you used in your previous setup. on my test system (but without any vm managed, so I'm not sure it will work for you) the output is: oVirt Engine will be installed using the following configuration: = override-httpd-root: yes host-fqdn: ovirt.localhost.localdomain auth-pass: org-name: localhost.localdomain application-mode: both default-dc-type: NFS db-remote-install: local db-local-pass: nfs-mp:/var/lib/exports/iso_2013_06_28_13_03_01 config-nfs:yes firewall-manager: None Proceed with the configuration listed above? (yes|no): yes Installing: Configuring oVirt Engine... [ DONE ] Configuring JVM... [ DONE ] Configuring JBOSS...[ DONE ] Creating CA... [ DONE ] Updating ovirt-engine service...[ DONE ] Setting Database Configuration... [ DONE ] Setting Database Security...[ DONE ] Upgrading Database Schema...[ DONE ] Editing oVirt Engine Configuration... [ DONE ] Editing Postgresql Configuration... [ DONE ] Configuring the Default ISO Domain... [ DONE ] Configuring Firewall... [ DONE ] Starting ovirt-engine Service...[ DONE ] Configuring HTTPD...[ DONE ] Installation completed successfully ** (Please allow oVirt Engine a few moments to start up.) To access oVirt Engine browse to http://ovirt.localhost.localdomain:80 Additional information: * There are less than 16384 MBs of available free memory on this machine. It is recommended to have at least 16384 MBs of available memory to run the oVirt Engine. * oVirt Engine CA SSL Certificate SHA1 fingerprint: 49:76:EF:B4:04:FA:63:19:47:A5:A2:C9:40:D6:24:57:E6:F7:02:A2 * SSH Public key fingerprint: dd:70:48:af:b1:66:f9:b5:a5:82:36:27:fa:83:22:85 * DB was upgraded to latest version. previous DB backup can be found at /var/lib/ovirt-engine/backups/tmpW61lgG.sql * A default ISO share has been created on this host. If IP based access restrictions are required, please edit /var/lib/exports/iso_2013_06_28_13_03_01 entry in /etc/exports * oVirt Engine requires the following TCP/IP Incoming ports to be opened on the firewall: 22, 80, 443 * an example of the required configuration for iptables can be found at: /etc/ovirt-engine/iptables.example * In order to configure firewalld, please copy the template files from /usr/share/ovirt-engine/firewalld to /etc/firewalld/services and execute the following commands: firewall-cmd --permanent --add-service ovirt-http firewall-cmd --permanent --add-service ovirt-https firewall-cmd --permanent --add-service ovirt-nfsfirewall-cmd --reload * The installation log file is available at: /var/log/ovirt-engine/engine-setup_2013_06_28_13_03_01.log * Please use the user admin and password specified in order to login into oVirt Engine * To configure additional users, first configure authentication domains using the 'engine-manage-domains' utility -- Sandro Bonazzola Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] remove vm after failed import
Thanks, that script got me unlocked. On Thu, Jun 27, 2013 at 5:35 AM, Eli Mesika emes...@redhat.com wrote: - Original Message - From: Eli Mesika emes...@redhat.com To: Tony Feldmann trfeldm...@gmail.com Cc: users@ovirt.org Sent: Thursday, June 27, 2013 1:31:54 PM Subject: Re: [Users] remove vm after failed import - Original Message - From: Tony Feldmann trfeldm...@gmail.com To: users@ovirt.org Sent: Wednesday, June 26, 2013 11:08:46 PM Subject: [Users] remove vm after failed import Hello, I was wondering if anyone knew how I could get a disk image of a failed vm import unlocked so I can delete the vm. There is a utility that can do just that Look under the dbscripts die for unlock_entity.sh sorry for the typo die=dir The host that was importing crashed during the import and the vm image has been locked since. It also looks like the vm disk's storage domain is listed as the export domain and not the domain on the systems housing vms ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [Users] engine-update problem
Hi Sandro, I tried to run the engine-cleanup --dont-drop-db and after the engine-setup but got this: Upgrading Database Schema... [ ERROR ] backupDB() got an unexpected keyword argument 'backup_file' Please check log file /var/log/ovirt-engine/engine-setup_2013_06_28_10_18_53.log for more information and the log: 2013-06-28 10:21:36::ERROR::engine-setup::2392::root:: Traceback (most recent call last): File /usr/bin/engine-setup, line 2386, in module main(confFile) File /usr/bin/engine-setup, line 2169, in main runSequences() File /usr/bin/engine-setup, line 2092, in runSequences controller.runAllSequences() File /usr/share/ovirt-engine/scripts/setup_controller.py, line 54, in runAllSequences sequence.run() File /usr/share/ovirt-engine/scripts/setup_sequences.py, line 154, in run step.run() File /usr/share/ovirt-engine/scripts/setup_sequences.py, line 60, in run function() File /usr/bin/engine-setup, line 1149, in _upgradeDB port=getDbPort(), TypeError: backupDB() got an unexpected keyword argument 'backup_file' Regards, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[Users] oVirt 3.2.2 successfully connected to Samba4
Hello, in the past there were some threads related to this subject. Today I successfully connected my oVirt 3.2.2 (installed on f18 with ovirt-repo) to a CentOS 6 samba4 server. Basically I followed this nice page for CentOS 6 with the difference that I downloaded and compiled 4.0.6 version of Samba instead of 4.0.0: http://opentodo.net/2013/01/samba4-as-ad-domain-controller-on-centos-6/ One important thing is that I had to put samba4 server ip in resolv.conf as the first for my engine. But in my case this was not a problem because samba4 is then configured with the original corporate dns as forwarder, so all is ok for me Some commands' output [root@c6dc samba-4.0.6]# /usr/local/samba/bin/samba-tool domain provision --realm=ovtest.local --domain=OVTEST --adminpass 'X' --server-role=dc --dns-backend=BIND9_DLZ Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up secrets.ldb Setting up the registry Setting up the privileges database Setting up idmap db Setting up SAM db Setting up sam.ldb partitions and settings Setting up sam.ldb rootDSE Pre-loading the Samba 4 and AD schema Adding DomainDN: DC=ovtest,DC=local Adding configuration container Setting up sam.ldb schema Setting up sam.ldb configuration data Setting up display specifiers Modifying display specifiers Adding users container Modifying users container Adding computers container Modifying computers container Setting up sam.ldb data Setting up well known security principals Setting up sam.ldb users and groups Setting up self join Adding DNS accounts Creating CN=MicrosoftDNS,CN=System,DC=ovtest,DC=local Creating DomainDnsZones and ForestDnsZones partitions Populating DomainDnsZones and ForestDnsZones partitions See /usr/local/samba/private/named.conf for an example configuration include file for BIND and /usr/local/samba/private/named.txt for further documentation required for secure DNS updates Setting up sam.ldb rootDSE marking as synchronized Fixing provision GUIDs A Kerberos configuration suitable for Samba 4 has been generated at /usr/local/samba/private/krb5.conf Once the above files are installed, your Samba4 server will be ready to use Server Role: active directory domain controller Hostname: c6dc NetBIOS Domain:OVTEST DNS Domain:ovtest.local DOMAIN SID:S-1-5-21-4186344073-955232896-1764362378 [root@c6dc samba-4.0.6]# rndc-confgen -a -r /dev/urandom wrote key file /etc/rndc.key - tests (see also http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller) [root@c6dc ]# /usr/local/samba/bin/smbclient -L localhost -U% Domain=[OVTEST] OS=[Unix] Server=[Samba 4.0.6] Sharename Type Comment - --- netlogonDisk sysvol Disk IPC$IPC IPC Service (Samba 4.0.6) Domain=[OVTEST] OS=[Unix] Server=[Samba 4.0.6] Server Comment ---- WorkgroupMaster ---- [root@c6dc ntp-4.2.6p5]# host -t SRV _ldap._tcp.ovtest.local. _ldap._tcp.ovtest.local has SRV record 0 100 389 c6dc.ovtest.local. [root@c6dc ntp-4.2.6p5]# host -t SRV _kerberos._udp.ovtest.local. _kerberos._udp.ovtest.local has SRV record 0 100 88 c6dc.ovtest.local. [root@c6dc ntp-4.2.6p5]# kinit administrator@OVTEST.LOCAL Password for administrator@OVTEST.LOCAL: Warning: Your password will expire in 41 days on Fri Aug 9 13:30:59 2013 [root@c6dc ntp-4.2.6p5]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator@OVTEST.LOCAL Valid starting ExpiresService principal 06/28/13 14:55:11 06/29/13 00:55:11 krbtgt/OVTEST.LOCAL@OVTEST.LOCAL renew until 07/05/13 14:55:08 Users' mgmt can be done from windows with Samba AD management tools see: http://wiki.samba.org/index.php/Samba_AD_management_from_windows I managed from linux see: http://wiki.samba.org/index.php/Adding_users_with_samba_tool [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/samba-tool user add OVIRTADM New Password: Retype Password: User 'OVIRTADM' created successfully [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/wbinfo --name-to-sid OVIRTADM S-1-5-21-4186344073-955232896-1764362378-1104 SID_USER (1) [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/wbinfo --sid-to-uid S-1-5-21-4186344073-955232896-1764362378-1104 316 I missed givenName and sn in user creation Unfortunately there is a only proposed patch for an edit subcommand but is not inside yet. http://samba.2283325.n4.nabble.com/Patch-for-samba-tool-user-modify-subcommand-td4634884.html See also: https://wiki.samba.org/index.php/Samba4/LDBIntro To modify users' attributes I used this: [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/ldbedit -e vi -H /usr/local/samba/private/idmap.ldb objectsid=S-1-5-21-4186344073-955232896-1764362378-1104 here you enter into a vi session # editing 1 records # record 1 dn: CN=S-1-5-21-4186344073-955232896-1764362378-1104 cn:
Re: [Users] oVirt 3.2.2 successfully connected to Samba4
Excellent, Gianluca, thanks for sharing the information! --Charlie On Fri, Jun 28, 2013 at 10:19 AM, Gianluca Cecchi gianluca.cec...@gmail.com wrote: Hello, in the past there were some threads related to this subject. Today I successfully connected my oVirt 3.2.2 (installed on f18 with ovirt-repo) to a CentOS 6 samba4 server. Basically I followed this nice page for CentOS 6 with the difference that I downloaded and compiled 4.0.6 version of Samba instead of 4.0.0: http://opentodo.net/2013/01/samba4-as-ad-domain-controller-on-centos-6/ One important thing is that I had to put samba4 server ip in resolv.conf as the first for my engine. But in my case this was not a problem because samba4 is then configured with the original corporate dns as forwarder, so all is ok for me Some commands' output [root@c6dc samba-4.0.6]# /usr/local/samba/bin/samba-tool domain provision --realm=ovtest.local --domain=OVTEST --adminpass 'X' --server-role=dc --dns-backend=BIND9_DLZ Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up secrets.ldb Setting up the registry Setting up the privileges database Setting up idmap db Setting up SAM db Setting up sam.ldb partitions and settings Setting up sam.ldb rootDSE Pre-loading the Samba 4 and AD schema Adding DomainDN: DC=ovtest,DC=local Adding configuration container Setting up sam.ldb schema Setting up sam.ldb configuration data Setting up display specifiers Modifying display specifiers Adding users container Modifying users container Adding computers container Modifying computers container Setting up sam.ldb data Setting up well known security principals Setting up sam.ldb users and groups Setting up self join Adding DNS accounts Creating CN=MicrosoftDNS,CN=System,DC=ovtest,DC=local Creating DomainDnsZones and ForestDnsZones partitions Populating DomainDnsZones and ForestDnsZones partitions See /usr/local/samba/private/named.conf for an example configuration include file for BIND and /usr/local/samba/private/named.txt for further documentation required for secure DNS updates Setting up sam.ldb rootDSE marking as synchronized Fixing provision GUIDs A Kerberos configuration suitable for Samba 4 has been generated at /usr/local/samba/private/krb5.conf Once the above files are installed, your Samba4 server will be ready to use Server Role: active directory domain controller Hostname: c6dc NetBIOS Domain:OVTEST DNS Domain:ovtest.local DOMAIN SID:S-1-5-21-4186344073-955232896-1764362378 [root@c6dc samba-4.0.6]# rndc-confgen -a -r /dev/urandom wrote key file /etc/rndc.key - tests (see also http://www.alexwyn.com/computer-tips/centos-samba4-active-directory-domain-controller ) [root@c6dc ]# /usr/local/samba/bin/smbclient -L localhost -U% Domain=[OVTEST] OS=[Unix] Server=[Samba 4.0.6] Sharename Type Comment - --- netlogonDisk sysvol Disk IPC$IPC IPC Service (Samba 4.0.6) Domain=[OVTEST] OS=[Unix] Server=[Samba 4.0.6] Server Comment ---- WorkgroupMaster ---- [root@c6dc ntp-4.2.6p5]# host -t SRV _ldap._tcp.ovtest.local. _ldap._tcp.ovtest.local has SRV record 0 100 389 c6dc.ovtest.local. [root@c6dc ntp-4.2.6p5]# host -t SRV _kerberos._udp.ovtest.local. _kerberos._udp.ovtest.local has SRV record 0 100 88 c6dc.ovtest.local. [root@c6dc ntp-4.2.6p5]# kinit administrator@OVTEST.LOCAL Password for administrator@OVTEST.LOCAL: Warning: Your password will expire in 41 days on Fri Aug 9 13:30:59 2013 [root@c6dc ntp-4.2.6p5]# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator@OVTEST.LOCAL Valid starting ExpiresService principal 06/28/13 14:55:11 06/29/13 00:55:11 krbtgt/OVTEST.LOCAL@OVTEST.LOCAL renew until 07/05/13 14:55:08 Users' mgmt can be done from windows with Samba AD management tools see: http://wiki.samba.org/index.php/Samba_AD_management_from_windows I managed from linux see: http://wiki.samba.org/index.php/Adding_users_with_samba_tool [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/samba-tool user add OVIRTADM New Password: Retype Password: User 'OVIRTADM' created successfully [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/wbinfo --name-to-sid OVIRTADM S-1-5-21-4186344073-955232896-1764362378-1104 SID_USER (1) [root@c6dc ntp-4.2.6p5]# /usr/local/samba/bin/wbinfo --sid-to-uid S-1-5-21-4186344073-955232896-1764362378-1104 316 I missed givenName and sn in user creation Unfortunately there is a only proposed patch for an edit subcommand but is not inside yet. http://samba.2283325.n4.nabble.com/Patch-for-samba-tool-user-modify-subcommand-td4634884.html See also: https://wiki.samba.org/index.php/Samba4/LDBIntro To modify users' attributes I used this: [root@c6dc
Re: [Users] ids sanlock error
Hi, all... I have a bit a related question and I am trying to decide the best path. Currently we have 3.1 in production and an entirely new Setup in our internal DC that is waiting to be built out. Should I start with 3.2 to begin with? Or 3.1 then migrate to 3.2 to gain the experience? I might add we are running CentOS 6.3. Which has a few difference. On top of all that; there is the 3.3rc's to be considered. But we are in a fully functional, and heavily used production environment. All help is appreciate. I am also happy to share any of the things I have learned in this lengthy endeavor. Feel free to ask; or email me direct. mattcu...@linux.com Thanks to all, Matt On 6/26/13 8:10 AM, Tony Feldmann wrote: I ended up removing the gluster volumes and then the cluster. I was a little frustrated with why I couldn't get it to work and made a hasty decision. Thank you very much for your response, but I am basically going to have to re-build at this point. On Wed, Jun 26, 2013 at 7:48 AM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com wrote: On 06/26/2013 03:41 PM, Tony Feldmann wrote: I am not sure how to retrieve that info. psql engine postgres -c select * from vds_static; psql engine postgres -c select * from vds_spm_id_map; On Wed, Jun 26, 2013 at 7:00 AM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 06/26/2013 02:59 PM, Tony Feldmann wrote: yes. what's the content of this table? vds_spm_id_map (also of vds_static) thanks On Wed, Jun 26, 2013 at 6:57 AM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 06/26/2013 02:55 PM, Tony Feldmann wrote: Ii won't let me move the hosts as they have gluster volumes in that cluster. so the cluster is both virt and gluster? On Wed, Jun 26, 2013 at 6:49 AM, Itamar Heim ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com mailto:ih...@redhat.com wrote: On 06/26/2013 04:35 AM, Tony Feldmann wrote: I was messing around with some things and force removed my DC. My cluster is still there with the 2 gluster volumes, however I cannot move that cluster into a new dc, I just get the following error in engine.log: 2013-06-25 20:26:15,218 ERROR [org.ovirt.engine.core.bll.__AddVdsSpmIdCommand] (ajp--127.0.0.1-8702-2) [7d1289a6] Command org.ovirt.engine.core.bll.__AddVdsSpmIdCommand throw exception: org.springframework.dao.__DuplicateKeyException: CallableStatementCallback; SQL [{call insertvds_spm_id_map(?, ?, ?)}]; ERROR: duplicate key value violates unique constraint pk_vds_spm_id_map Detail: Key (storage_pool_id, vds_spm_id)=(084def30-1e19-__4777-9251-8eb1f7569b53, 1) already exists. Where: SQL statement INSERT INTO vds_spm_id_map(storage_pool___id, vds_id, vds_spm_id) VALUES(v_storage_pool_id, v_vds_id, v_vds_spm_id) I would really like to get this back into a dc without destroying my gluster volumes and losing my data. Can
Re: [Users] engine-update problem
Hi Sandro, I don't know if it's not better just to start over, because I'm wasting your time and it's not even a production environment. Maybe it's better just to cleanup everything and start over. Other idea I had is to cleanup the database and then import the backup that the upgrade made before rolling back. I don't know if that can lead to an inconsistent database or not. Regards, ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users