[ovirt-users] Instructions for novices
Hi, Can someone point me to instructions for building a CentOS server that would be ready for installing the self hosted node. I have a 7x 500GB HD, 16 GB RAM, i7 computer that I have installed CentOS 6.5 (Software RAID6) to and would now like to install the self-hosted-engine. While I do have experience with Debian as a server and some experience with CentOS, I have not so far found any information regarding how to build a basic server ready for installing oVirt packages, for example configuring static IP addresses, hostname, hosts file, maybe NFS shares ? or iSCSI shares ? http://www.ovirt.org/Download#Install_oVirt Step 6 says Follow the on screen prompts to configure and install the engine , however knowing what to supply for the prompts and what to have already configured on your server would be very helpful. http://www.ovirt.org/Hosted_Engine_Howto During the deployment you'll be asked for input on host name, storage path and other relevant information , it is how to set up the environment for answering these questions that I would like assistance with (e.g. a HowTo ?) I have once before installed the ovirt-engine-setup-plugin-allinone in a VMware Workstation VM, but not without many challenges. I would now like to install the ovirt-hosted-engine-ha The second prompt said Please specify the full shared storage connection path to use (example: host:/path):, however it does not say that it will create this or whether you need to have this created earlier ? At this time I don't have a static IP address nor the hosts file containing the host name, this is just a newly built CentOS server with minimum GUI, updates applied and no other changes. So is there any documentation which would explain what other changes are needed and how to do this? http://www.ovirt.org/Quick_Start_Guide Two packages, ovirt-hosted-engine-setup and ovirt-hosted-engine-ha provide the setup and services necessary to deploy a self-hosted-engine oVirt environment. For more on the oVirt Self-Hosted Engine, see the oVirt Installation Guide. https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.3/html/Installation_Guide/Configuring_the_Self-Hosted_Engine.html http://blog.gluster.org/2014/05/ovirt-3-4-glusterized/ The Hosted Engine feature relies on NFS storage to house the management VM. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] list of answer file parameters?
On 08/17/2014 02:01 PM, Yedidyah Bar David wrote: - Original Message - From: Jorick Astrego j.astr...@netbulae.eu To: users@ovirt.org Sent: Friday, August 15, 2014 5:24:04 PM Subject: Re: [ovirt-users] list of answer file parameters? [snip] As ovirt-cleanup is not working and reinstall fails with detail: Cannot create Data Center. The Data Center name is already in use., I'd like to drop the database when I rerun the installer. I found: OVESETUP_REMOVE But I don't know what to tell it.. Kind regards, Jorick Astrego Just to head you off, I can drop the database myself that's no problem. But I like to do less and less manual work ;-) If that's your goal you should use engine-cleanup. When does it say when failing? What version(s)? That was one off the goals. For the rest I just want to skip manual install in the future... I've been installing ovirt so many times the last year that I'm getting bored with it. And that is where I use answer files for when they are used. When I did IBM work in the past, I exclusively used answer files as they were very extensively documented and installations could run for hours. I even built scripts that generated the needed answer files to make installation easy and without errors. For the cleanup bug https://bugzilla.redhat.com/show_bug.cgi?id=1130137 Kind regards, Jorick Astrego Netbulae B.V. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] list of answer file parameters?
On 08/17/2014 02:23 PM, Jorick Astrego wrote: On 08/17/2014 02:01 PM, Yedidyah Bar David wrote: - Original Message - From: Jorick Astrego j.astr...@netbulae.eu To: users@ovirt.org Sent: Friday, August 15, 2014 5:24:04 PM Subject: Re: [ovirt-users] list of answer file parameters? [snip] As ovirt-cleanup is not working and reinstall fails with detail: Cannot create Data Center. The Data Center name is already in use., I'd like to drop the database when I rerun the installer. I found: OVESETUP_REMOVE But I don't know what to tell it.. Kind regards, Jorick Astrego Just to head you off, I can drop the database myself that's no problem. But I like to do less and less manual work ;-) If that's your goal you should use engine-cleanup. When does it say when failing? What version(s)? That was one off the goals. For the rest I just want to skip manual install in the future... I've been installing ovirt so many times the last year that I'm getting bored with it. And that is where I use answer files for when they are used. When I did IBM work in the past, I exclusively used answer files as they were very extensively documented and installations could run for hours. I even built scripts that generated the needed answer files to make installation easy and without errors. For the cleanup bug https://bugzilla.redhat.com/show_bug.cgi?id=1130137 Kind regards, Jorick Astrego Netbulae B.V. Would it be an option to have a parameter so the installer only generates the answer file and doesn't do any changes/installation. Kind regards, Jorick Astrego ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] list of answer file parameters?
- Original Message - From: Jorick Astrego j.astr...@netbulae.eu Cc: users@ovirt.org Sent: Sunday, August 17, 2014 3:23:05 PM Subject: Re: [ovirt-users] list of answer file parameters? On 08/17/2014 02:01 PM, Yedidyah Bar David wrote: - Original Message - From: Jorick Astrego j.astr...@netbulae.eu To: users@ovirt.org Sent: Friday, August 15, 2014 5:24:04 PM Subject: Re: [ovirt-users] list of answer file parameters? [snip] As ovirt-cleanup is not working and reinstall fails with detail: Cannot create Data Center. The Data Center name is already in use., I'd like to drop the database when I rerun the installer. I found: OVESETUP_REMOVE But I don't know what to tell it.. Kind regards, Jorick Astrego Just to head you off, I can drop the database myself that's no problem. But I like to do less and less manual work ;-) If that's your goal you should use engine-cleanup. When does it say when failing? What version(s)? That was one off the goals. For the rest I just want to skip manual install in the future... I've been installing ovirt so many times the last year that I'm getting bored with it. And that is where I use If it's for non-production work, I think you can simply use the existing files you created, and recreate them for newer versions if the old ones break... answer files for when they are used. When I did IBM work in the past, I exclusively used answer files as they were very extensively documented and installations could run for hours. I even built scripts that generated the needed answer files to make installation easy and without errors. For the cleanup bug https://bugzilla.redhat.com/show_bug.cgi?id=1130137 Thanks for the report. Already solved in the code, should be fixed soon in a new build. Or use the nightly builds... -- Didi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt with 389 server inactive groups
here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | core.ux.medi a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the permissions inherited by Everyone it does not show any permissions inherited by the sysadmin group. This is not good - I mean, should have worked. just to prove it didnt work I logged out and attempted to log back in as the user (pmarino) it wouldn't let me log in I logged back in as the internal admin user then I added the SuperUser permissions directly to the pmarino account and logged back out again. Now when I logged in as pmarino it gave me the access I expected. Can I please ask you to provide some database info ? It will be awesome if you can provide the following SQL queries results - select group_ids, groups from users where username ilike '%pmarino%'; In addition, please perform - select id, name from ad_groups; Thanks for your help. P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the solution to the bugs) should have fixed your issue as well. Here is the relevant portion of the engine log 2014-08-13 16:00:38,801 INFO [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5) [1e7fa420] Running command: AddGroupCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2014-08-13 16:00:38,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call Stack: null, Custom Event ID: -1, Message: User 'domain name/Groups/sysadmin' was added successfully to the system. 2014-08-13 16:09:01,352 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System, ID: aaa0----123456789aaa Type: System 2014-08-13 16:09:01,371 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-4-thread-24) [75cab17c] Correlation ID: 75cab17c, Call Stack: null, Custom Event ID: -1, Message: User/Group domain name/Groups/sysadmin was granted permission for Role SuperUser on System by admin. 2014-08-13 16:10:40,963 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (org.ovirt.thread.pool-4-thread-26) [b42abcb] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System, ID: aaa0----123456789aaa Type: System 2014-08-13
Re: [ovirt-users] ovirt with 389 server inactive groups
Just for the sake of testing even though some one said previously to ignore it I set the active = t on the group in ad_group on the sysadmin group it had no effect other than changing Active: to true in the iterface and in answer to this I assume also you see the permissiosn in the permissions sub tab when you click the group. yes On Sun, Aug 17, 2014 at 9:33 AM, Paul Robert Marino prmari...@gmail.com wrote: here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | core.ux.medi a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the permissions inherited by Everyone it does not show any permissions inherited by the sysadmin group. This is not good - I mean, should have worked. just to prove it didnt work I logged out and attempted to log back in as the user (pmarino) it wouldn't let me log in I logged back in as the internal admin user then I added the SuperUser permissions directly to the pmarino account and logged back out again. Now when I logged in as pmarino it gave me the access I expected. Can I please ask you to provide some database info ? It will be awesome if you can provide the following SQL queries results - select group_ids, groups from users where username ilike '%pmarino%'; In addition, please perform - select id, name from ad_groups; Thanks for your help. P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the solution to the bugs) should have fixed your issue as well. Here is the relevant portion of the engine log 2014-08-13 16:00:38,801 INFO [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5) [1e7fa420] Running command: AddGroupCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2014-08-13 16:00:38,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call Stack: null, Custom Event ID: -1, Message: User 'domain name/Groups/sysadmin' was added successfully to the system. 2014-08-13 16:09:01,352 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System, ID: aaa0----123456789aaa Type: System 2014-08-13 16:09:01,371 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-4-thread-24) [75cab17c] Correlation ID: 75cab17c, Call Stack: null, Custom Event ID: -1, Message: User/Group
Re: [ovirt-users] ovirt with 389 server inactive groups
- Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | core.ux.medi a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the permissions inherited by Everyone it does not show any permissions inherited by the sysadmin group. This is not good - I mean, should have worked. just to prove it didnt work I logged out and attempted to log back in as the user (pmarino) it wouldn't let me log in I logged back in as the internal admin user then I added the SuperUser permissions directly to the pmarino account and logged back out again. Now when I logged in as pmarino it gave me the access I expected. Can I please ask you to provide some database info ? It will be awesome if you can provide the following SQL queries results - select group_ids, groups from users where username ilike '%pmarino%'; In addition, please perform - select id, name from ad_groups; Thanks for your help. P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the solution to the bugs) should have fixed your issue as well. Here is the relevant portion of the engine log 2014-08-13 16:00:38,801 INFO [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5) [1e7fa420] Running command: AddGroupCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2014-08-13 16:00:38,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call Stack: null, Custom Event ID: -1, Message: User 'domain name/Groups/sysadmin' was added successfully to the system. 2014-08-13 16:09:01,352 INFO [org.ovirt.engine.core.bll.AddSystemPermissionCommand] (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command: AddSystemPermissionCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System, ID: aaa0----123456789aaa Type: System 2014-08-13
Re: [ovirt-users] ovirt with 389 server inactive groups
confirmed that does seem to be the cause I updated the group_ids field of a user to the appropriate Id's from ad_groups and it fixed that user. in answer to your question Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Ive tried it ever different way I can think of the results are always the same. On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | domain here/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the permissions inherited by Everyone it does not show any permissions inherited by the sysadmin group. This is not good - I mean, should have worked. just to prove it didnt work I logged out and attempted to log back in as the user (pmarino) it wouldn't let me log in I logged back in as the internal admin user then I added the SuperUser permissions directly to the pmarino account and logged back out again. Now when I logged in as pmarino it gave me the access I expected. Can I please ask you to provide some database info ? It will be awesome if you can provide the following SQL queries results - select group_ids, groups from users where username ilike '%pmarino%'; In addition, please perform - select id, name from ad_groups; Thanks for your help. P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the solution to the bugs) should have fixed your issue as well. Here is the relevant portion of the engine log 2014-08-13 16:00:38,801 INFO [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5) [1e7fa420] Running command: AddGroupCommand internal: false. Entities affected : ID: aaa0----123456789aaa Type: System 2014-08-13 16:00:38,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call Stack: null, Custom Event ID: -1,
Re: [ovirt-users] ovirt with 389 server inactive groups
I found why the group_ids field is wrong If you look at the ad_groups table then mane for the group is domain here/Groups/sysadmin however if you look at the groups field in the users table it says domain here/groups/sysadmin I tried updating the name field in the ad_groups table to match domain here/groups/sysadmin then removed and added a user now the if for that group in the group_ids field is being set correctly. This is at least a usable workaround for now. now we need to find the root cause. On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino prmari...@gmail.com wrote: confirmed that does seem to be the cause I updated the group_ids field of a user to the appropriate Id's from ad_groups and it fixed that user. in answer to your question Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Ive tried it ever different way I can think of the results are always the same. On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | domain here/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the permissions inherited by Everyone it does not show any permissions inherited by the sysadmin group. This is not good - I mean, should have worked. just to prove it didnt work I logged out and attempted to log back in as the user (pmarino) it wouldn't let me log in I logged back in as the internal admin user then I added the SuperUser permissions directly to the pmarino account and logged back out again. Now when I logged in as pmarino it gave me the access I expected. Can I please ask you to provide some database info ? It will be awesome if you can provide the following SQL queries results - select group_ids, groups from users where username ilike '%pmarino%'; In addition, please perform - select id, name from ad_groups; Thanks for your help. P.S - As far as I understand the two bugs mentioend by
Re: [ovirt-users] ovirt with 389 server inactive groups
Ok I dug in a little further it looks like them memberof plugin in 389 server is making them lowercase which from an LDAP and or Posix perspective is not a problem but this seems to be the root cause of the issue of the difference. while this behavior is strange it is not invalid because DN's are case insensitive. The easiest way to fix this is to change the query of the group from the ad_groups table to an ilike. The potential problem here is it conflicts with SAM in windows where group names are case sensitive. This is definitely a conflict in design between AD and LDAP's core design. Interestingly I can add roles to the group and there is no problem it sets it correctly so somewhere else in the code an ilike is being uses to query the groups table. On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino prmari...@gmail.com wrote: I found why the group_ids field is wrong If you look at the ad_groups table then mane for the group is domain here/Groups/sysadmin however if you look at the groups field in the users table it says domain here/groups/sysadmin I tried updating the name field in the ad_groups table to match domain here/groups/sysadmin then removed and added a user now the if for that group in the group_ids field is being set correctly. This is at least a usable workaround for now. now we need to find the root cause. On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino prmari...@gmail.com wrote: confirmed that does seem to be the cause I updated the group_ids field of a user to the appropriate Id's from ad_groups and it fixed that user. in answer to your question Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Ive tried it ever different way I can think of the results are always the same. On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | domain here/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far. I assume also you see the permissiosn in the permissions sub tab when you click the group. I added a user (pmarino) to the system which shows in the Directory Group tab shows sysadmingroups domian name among others however it only shows in the Permissions tab the
Re: [ovirt-users] ovirt with 389 server inactive groups
I think we now have enough for a proper ticket. I will create one latter today. also since I have RHEV support for my production instances I will also create a matching case with Red Hat. On Sun, Aug 17, 2014 at 11:27 AM, Paul Robert Marino prmari...@gmail.com wrote: Ok I dug in a little further it looks like them memberof plugin in 389 server is making them lowercase which from an LDAP and or Posix perspective is not a problem but this seems to be the root cause of the issue of the difference. while this behavior is strange it is not invalid because DN's are case insensitive. The easiest way to fix this is to change the query of the group from the ad_groups table to an ilike. The potential problem here is it conflicts with SAM in windows where group names are case sensitive. This is definitely a conflict in design between AD and LDAP's core design. Interestingly I can add roles to the group and there is no problem it sets it correctly so somewhere else in the code an ilike is being uses to query the groups table. On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino prmari...@gmail.com wrote: I found why the group_ids field is wrong If you look at the ad_groups table then mane for the group is domain here/Groups/sysadmin however if you look at the groups field in the users table it says domain here/groups/sysadmin I tried updating the name field in the ad_groups table to match domain here/groups/sysadmin then removed and added a user now the if for that group in the group_ids field is being set correctly. This is at least a usable workaround for now. now we need to find the root cause. On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino prmari...@gmail.com wrote: confirmed that does seem to be the cause I updated the group_ids field of a user to the appropriate Id's from ad_groups and it fixed that user. in answer to your question Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Ive tried it ever different way I can think of the results are always the same. On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | domain here/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups Ok so before I open a bug ticket I want to confirm I'm not doing any thing wrong here. I upgraded to 3.4 now it says Active:false on LDAP groups. Again I tried to add the sysadmin group from the directory server and set the power user and super user roles on the group it shows up as domain name/Groups/sysadmin I adder the permisions by clicking on the configure link on the top of the screen and set them in the System Permissions tab Sounds good so far.
[ovirt-users] Reactivate a storage domain
Hello Ovirt users, How do I unlock a storage domain? The underlying NFS volume had filled up (I corrected that). I tried to reactivate the storage domain (it had deactivated to the volume filling up) but then it went into a locked state According to df -h: 8.0T 6.0T 2.1T 75% # 6T used, 2.1T free Ovirt thinks it only has 6.0T as is full (well, 1GB free, which is now false, but I can't convince it other wise). (I increased the size of the volume after VMs went into pause due to it filling up). Now no hosts wants to be the SPM... So my ovirt managed data center is down until I reactivate the NFS storage domain (that is the master). The storage domain reverts back to an inactive state after a while, but whenever I try to reactivate it goes to the locked state. Sincerely, Dwight Schauer ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Self-hosted engine won't start
Hi Jirka, Thanks for the update. It sounds like the same bug but with a few extra issues thrown in. e.g. Comment 9 seems to me to be a completely separate bug, although it may affect the issue I reported. I can't see any mention of how the problem is being resolved, which I am interested in, but will keep an eye on it. I'll try the patched version when I get the time and enthusiasm to give it another crack. regards, John On 14/08/14 22:57, Jiri Moskovcak wrote: Hi John, after a deeper look I realized that you're probably facing [1]. The patch is ready and I will also backport it to 3.4 branch. --Jirka [1] https://bugzilla.redhat.com/show_bug.cgi?id=1093638 On 07/29/2014 11:41 PM, John Gardeniers wrote: Hi Jiri, Sorry, I can't supply the log because the hosts have been recycled but I'm sure it would have contained exactly the same information that you already have from host2. It's a classic deadlock situation that should never be allowed to happen. A simple and time proven solution was in my original post. The reason for recycling the hosts is that I discovered yesterday that although the engine was still running it could not be accessed in any way. Upon further finding that there was no way to get it restarted I decided to abandon the whole idea of self-hosting until such time as I see an indication that it's production ready. regards, John On 29/07/14 22:52, Jiri Moskovcak wrote: Hi John, thanks for the logs. Seems like the engine is running on host2 and it decides that it doesn't have the best score and shuts the engine down and then neither of them want's to start the vm until you restart the host2. Unfortunately the logs doesn't contain the part from host1 from 2014-07-24 09:XX which I'd like to investigate because it might contain the information why host1 refused to start the vm when host2 killed it. Regards, Jirka On 07/28/2014 02:57 AM, John Gardeniers wrote: Hi Jira, Version: ovirt-hosted-engine-ha-1.1.5-1.el6.noarch Attached are the logs. Thanks for looking. Regards, John On 25/07/14 17:47, Jiri Moskovcak wrote: On 07/24/2014 11:37 PM, John Gardeniers wrote: Hi Jiri, Perhaps you can tell me how to determine the exact version of ovirt-hosted-engine-ha. Centos/RHEL/Fedora: rpm -q ovirt-hosted-engine-ha As for the logs, I am not going to attach 60MB of logs to an email, - there are other ways to share the logs nor can I see any imaginagle reason for you wanting to see them all, as the bulk is historical. I have already included the *relevant* sections. However, if you think there may be some other section that may help you feel free to be more explicit about what you are looking for. Right now I fail to understand what you might hope to see in logs from several weeks ago that you can't get from the last day or so. It's a standard way, people tend to think that they know what is a relevant part of a log, but in many cases they fail. Asking for the whole logs has proven to be faster than trying to find the relevant part through the user. And you're right, I don't need the logs from last week, just logs since the last start of the services when you observed the problem. Regards, Jirka regards, John On 24/07/14 19:10, Jiri Moskovcak wrote: Hi, please provide the the exact versions of ovirt-hosted-engine-ha and all logs from /var/log/ovirt-hosted-engine-ha/ Thank you, Jirka On 07/24/2014 01:29 AM, John Gardeniers wrote: Hi All, I have created a lab with 2 hypervisors and a self-hosted engine. Today I followed the upgrade instructions as described in http://www.ovirt.org/Hosted_Engine_Howto and rebooted the engine. I didn't really do an upgrade but simply wanted to test what would happen when the engine was rebooted. When the engine didn't restart I re-ran hosted-engine --set-maintenance=none and restarted the vdsm, ovirt-ha-agent and ovirt-ha-broker services on both nodes. 15 minutes later it still hadn't restarted, so I then tried rebooting both hypervisers. After an hour there was still no sign of the engine starting. The agent logs don't help me much. The following bits are repeated over and over. ovirt1 (192.168.19.20): MainThread::INFO::2014-07-24 09:18:40,272::brokerlink::108::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify) Trying: notify time=1406157520.27 type=state_transition detail=EngineDown-EngineDown hostname='ovirt1.om.net' MainThread::INFO::2014-07-24 09:18:40,272::brokerlink::117::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify) Success, was notification of state_transition (EngineDown-EngineDown) sent? ignored MainThread::INFO::2014-07-24 09:18:40,594::hosted_engine::327::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(start_monitoring) Current state EngineDown (score: 2400) MainThread::INFO::2014-07-24
[ovirt-users] Master Storage goes Inactive - Failed to activate Storage Domain
Hello All, I am having an issue on my test setup, the master storage goes inactive. It is set up as to use Gluster and the volume is up and running without issues. Here is a snippet of /var/log/ovirt-engine/engine.log (these are just the ERRORs): 2014-08-18 01:47:04,173 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-98) [40e8ae30] Failed in SpmStatusVDS method 2014-08-18 01:47:04,174 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-98) [40e8ae30] Command SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId = 4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:47:14,286 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-68) [357af14e] Failed in SpmStatusVDS method 2014-08-18 01:47:14,287 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-68) [357af14e] Command SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId = 4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:47:24,400 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-51) [11269c17] Failed in SpmStatusVDS method 2014-08-18 01:47:24,400 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-51) [11269c17] Command SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId = 4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:47:34,514 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-59) [40622d60] Failed in SpmStatusVDS method 2014-08-18 01:47:34,515 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-59) [40622d60] Command SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId = 4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:47:44,651 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-97) Failed in SpmStatusVDS method 2014-08-18 01:47:44,652 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-97) Command SpmStatusVDSCommand(HostName = u5.veerotech.net, HostId = 57dac47a-8db9-4d64-86c2-6f9b2a89b3f5, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:47:54,765 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-73) [44b5af81] Failed in SpmStatusVDS method 2014-08-18 01:47:54,766 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-73) [44b5af81] Command SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId = 4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:48:04,881 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-19) [7bf1ea79] Failed in SpmStatusVDS method 2014-08-18 01:48:04,883 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-19) [7bf1ea79] Command SpmStatusVDSCommand(HostName = u5.veerotech.net, HostId = 57dac47a-8db9-4d64-86c2-6f9b2a89b3f5, storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100 2014-08-18 01:48:14,994 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-20) [4fed0eac] Failed in SpmStatusVDS method 2014-08-18 01:48:14,995 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] (DefaultQuartzScheduler_Worker-20) [4fed0eac] Command SpmStatusVDSCommand(HostName
[ovirt-users] [SOLVED] RE: Reactivate a storage domain
Hello Ovirt users, Well, I solved the problem. When the NFS volume had filled up that knocked out non Ovirt managed VMs as well including DHCP servers. I'd been using DHCP for the management network. The Ovirt hypervisors never refreshed when I brought the DHCP servers back. (The management network was no longer connected). I went into one Ovirt hypervisor, configured it with static, and after a couple of minutes it become the SPM on its own without my involvement and the storage domains came back. Sincerely, Dwight Schauer -Original Message- From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of Dwight Schauer Sent: Sunday, August 17, 2014 12:37 PM To: users@ovirt.org Subject: [ovirt-users] Reactivate a storage domain Hello Ovirt users, How do I unlock a storage domain? The underlying NFS volume had filled up (I corrected that). I tried to reactivate the storage domain (it had deactivated to the volume filling up) but then it went into a locked state According to df -h: 8.0T 6.0T 2.1T 75% # 6T used, 2.1T free Ovirt thinks it only has 6.0T as is full (well, 1GB free, which is now false, but I can't convince it other wise). (I increased the size of the volume after VMs went into pause due to it filling up). Now no hosts wants to be the SPM... So my ovirt managed data center is down until I reactivate the NFS storage domain (that is the master). The storage domain reverts back to an inactive state after a while, but whenever I try to reactivate it goes to the locked state. Sincerely, Dwight Schauer ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt with 389 server inactive groups
- Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: users@ovirt.org Sent: Sunday, August 17, 2014 6:32:15 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups I think we now have enough for a proper ticket. I will create one latter today. also since I have RHEV support for my production instances I will also create a matching case with Red Hat. Thank you very much for your help here! Please add a link to this mailing list thread when you open the ticket. Many thanks, Yair On Sun, Aug 17, 2014 at 11:27 AM, Paul Robert Marino prmari...@gmail.com wrote: Ok I dug in a little further it looks like them memberof plugin in 389 server is making them lowercase which from an LDAP and or Posix perspective is not a problem but this seems to be the root cause of the issue of the difference. while this behavior is strange it is not invalid because DN's are case insensitive. The easiest way to fix this is to change the query of the group from the ad_groups table to an ilike. The potential problem here is it conflicts with SAM in windows where group names are case sensitive. This is definitely a conflict in design between AD and LDAP's core design. Interestingly I can add roles to the group and there is no problem it sets it correctly so somewhere else in the code an ilike is being uses to query the groups table. On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino prmari...@gmail.com wrote: I found why the group_ids field is wrong If you look at the ad_groups table then mane for the group is domain here/Groups/sysadmin however if you look at the groups field in the users table it says domain here/groups/sysadmin I tried updating the name field in the ad_groups table to match domain here/groups/sysadmin then removed and added a user now the if for that group in the group_ids field is being set correctly. This is at least a usable workaround for now. now we need to find the root cause. On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino prmari...@gmail.com wrote: confirmed that does seem to be the cause I updated the group_ids field of a user to the appropriate Id's from ad_groups and it fixed that user. in answer to your question Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Ive tried it ever different way I can think of the results are always the same. On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Sunday, August 17, 2014 4:33:30 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups here are the results of the queries you asked for group_ids | groups ---+- - ----,----,----,----,----,---- | domain here/groups/sysadmin,domain here/groups/pmarino,domain here/groups/pd managers,domain here/groups/qa managers,domain here/groups/accounting managers,domain here/directory administrat ors (1 row) engine=# select id, name from ad_groups; id | name --+--- eee0----123456789eee | Everyone 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin (2 rows) It does look that there is something wrong in the association of users to their group IDS. Just to make sure I'm not missing anything - Did you first add the goup, and then added users (that belong to a group) either by adding users, or by adding a permission? Yair On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote: - Original Message - From: Paul Robert Marino prmari...@gmail.com To: Yair Zaslavsky yzasl...@redhat.com Cc: Itamar Heim ih...@redhat.com, users@ovirt.org Sent: Wednesday, August 13, 2014 11:47:40 PM Subject: Re: [ovirt-users] ovirt with 389 server inactive groups