[ovirt-users] Instructions for novices

2014-08-17 Thread OvirtAndKvm
Hi,

Can someone point me to instructions for building a CentOS server that
would be ready for installing the self hosted node.

I have a 7x 500GB HD, 16 GB RAM, i7 computer that I have installed
CentOS 6.5 (Software RAID6) to and would now like to install the
self-hosted-engine.

While I do have experience with Debian as a server and some experience
with CentOS, I have not so far found any information regarding how to
build a basic server ready for installing oVirt packages, for example
configuring static IP addresses, hostname, hosts file, maybe NFS
shares ? or iSCSI shares ?

http://www.ovirt.org/Download#Install_oVirt

Step 6 says Follow the on screen prompts to configure and install the
engine , however knowing what to supply for the prompts and what to
have already configured on your server would be very helpful.

http://www.ovirt.org/Hosted_Engine_Howto
During the deployment you'll be asked for input on host name, storage
path and other relevant information , it is how to set up the
environment for answering these questions that I would like assistance
with (e.g. a HowTo ?)


I have once before installed the ovirt-engine-setup-plugin-allinone
in a VMware Workstation VM, but not without many challenges.

I would now like to install the ovirt-hosted-engine-ha

The second prompt said Please specify the full shared storage
connection path to use (example: host:/path):, however it does not
say that it will create this or whether you need to have this created
earlier ?  At this time I don't have a static IP address nor the
hosts file containing the host name, this is just a newly built CentOS
server with minimum GUI, updates applied and no other changes.  So is
there any documentation which would explain what other changes are
needed and how to do this?

http://www.ovirt.org/Quick_Start_Guide
Two packages, ovirt-hosted-engine-setup and ovirt-hosted-engine-ha
provide the setup and services necessary to deploy a
self-hosted-engine oVirt environment. For more on the oVirt
Self-Hosted Engine, see the oVirt Installation Guide. 

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.3/html/Installation_Guide/Configuring_the_Self-Hosted_Engine.html

http://blog.gluster.org/2014/05/ovirt-3-4-glusterized/
The Hosted Engine feature relies on NFS storage to house the
management VM.





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] list of answer file parameters?

2014-08-17 Thread Jorick Astrego


On 08/17/2014 02:01 PM, Yedidyah Bar David wrote:

- Original Message -

From: Jorick Astrego j.astr...@netbulae.eu
To: users@ovirt.org
Sent: Friday, August 15, 2014 5:24:04 PM
Subject: Re: [ovirt-users] list of answer file parameters?

[snip]

As ovirt-cleanup is not working and reinstall fails with detail: Cannot
create Data Center. The Data Center name is already in use., I'd like to
drop the database when I rerun the installer. I found:

OVESETUP_REMOVE

But I don't know what to tell it..

Kind regards,
Jorick Astrego


Just to head you off, I can drop the database myself that's no problem. But I
like to do less and less manual work ;-)

If that's your goal you should use engine-cleanup. When does it say when 
failing?

What version(s)?
That was one off the goals. For the rest I just want to skip manual 
install in the future... I've been installing ovirt so many times the 
last year that I'm getting bored with it. And that is where I use 
answer files for when they are used. When I did IBM work in the past, I 
exclusively used answer files as they were very extensively documented 
and installations could run for hours. I even built scripts that 
generated the needed answer files to make installation easy and without 
errors.


For the cleanup bug
https://bugzilla.redhat.com/show_bug.cgi?id=1130137

Kind regards,

Jorick Astrego
Netbulae B.V.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] list of answer file parameters?

2014-08-17 Thread Jorick Astrego


On 08/17/2014 02:23 PM, Jorick Astrego wrote:


On 08/17/2014 02:01 PM, Yedidyah Bar David wrote:

- Original Message -

From: Jorick Astrego j.astr...@netbulae.eu
To: users@ovirt.org
Sent: Friday, August 15, 2014 5:24:04 PM
Subject: Re: [ovirt-users] list of answer file parameters?

[snip]
As ovirt-cleanup is not working and reinstall fails with detail: 
Cannot
create Data Center. The Data Center name is already in use., I'd 
like to

drop the database when I rerun the installer. I found:

OVESETUP_REMOVE

But I don't know what to tell it..

Kind regards,
Jorick Astrego


Just to head you off, I can drop the database myself that's no 
problem. But I

like to do less and less manual work ;-)
If that's your goal you should use engine-cleanup. When does it say 
when failing?


What version(s)?
That was one off the goals. For the rest I just want to skip manual 
install in the future... I've been installing ovirt so many times the 
last year that I'm getting bored with it. And that is where I use 
answer files for when they are used. When I did IBM work in the past, 
I exclusively used answer files as they were very extensively 
documented and installations could run for hours. I even built scripts 
that generated the needed answer files to make installation easy and 
without errors.


For the cleanup bug
https://bugzilla.redhat.com/show_bug.cgi?id=1130137

Kind regards,

Jorick Astrego
Netbulae B.V.

Would it be an option to have a parameter so the installer only 
generates the answer file and doesn't do any changes/installation.


Kind regards,

Jorick Astrego


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] list of answer file parameters?

2014-08-17 Thread Yedidyah Bar David
- Original Message -
 From: Jorick Astrego j.astr...@netbulae.eu
 Cc: users@ovirt.org
 Sent: Sunday, August 17, 2014 3:23:05 PM
 Subject: Re: [ovirt-users] list of answer file parameters?
 
 
 On 08/17/2014 02:01 PM, Yedidyah Bar David wrote:
  - Original Message -
  From: Jorick Astrego j.astr...@netbulae.eu
  To: users@ovirt.org
  Sent: Friday, August 15, 2014 5:24:04 PM
  Subject: Re: [ovirt-users] list of answer file parameters?
  [snip]
  As ovirt-cleanup is not working and reinstall fails with detail: Cannot
  create Data Center. The Data Center name is already in use., I'd like to
  drop the database when I rerun the installer. I found:
 
  OVESETUP_REMOVE
 
  But I don't know what to tell it..
 
  Kind regards,
  Jorick Astrego
 
 
  Just to head you off, I can drop the database myself that's no problem.
  But I
  like to do less and less manual work ;-)
  If that's your goal you should use engine-cleanup. When does it say when
  failing?
 
  What version(s)?
 That was one off the goals. For the rest I just want to skip manual
 install in the future... I've been installing ovirt so many times the
 last year that I'm getting bored with it. And that is where I use

If it's for non-production work, I think you can simply use the existing
files you created, and recreate them for newer versions if the old ones
break...

 answer files for when they are used. When I did IBM work in the past, I
 exclusively used answer files as they were very extensively documented
 and installations could run for hours. I even built scripts that
 generated the needed answer files to make installation easy and without
 errors.
 
 For the cleanup bug
 https://bugzilla.redhat.com/show_bug.cgi?id=1130137

Thanks for the report. Already solved in the code, should be fixed soon
in a new build. Or use the nightly builds...
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
here are the results of the queries you asked for


group_ids

  |

 groups

---+-
-

 
----,----,----,----,----,----
| core.ux.medi
a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain
here/groups/pd managers,domain here/groups/qa managers,domain
here/groups/accounting managers,domain here/directory administrat
ors
(1 row)


engine=# select id, name from ad_groups;
  id  | name
--+---
 eee0----123456789eee | Everyone
 2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
(2 rows)



On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Wednesday, August 13, 2014 11:47:40 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 Ok so before I open a bug ticket I want to confirm I'm not doing any
 thing wrong here.
 I upgraded to 3.4
 now it says Active:false  on LDAP groups.

 Again I tried to add the sysadmin group from the directory server and
 set the power user and super user roles on the group
 it shows up as domain name/Groups/sysadmin
 I adder the permisions by clicking on the configure link on the top of
 the screen and set them in the System Permissions tab

 Sounds good so far.
 I assume also you see the permissiosn in the permissions sub tab when you 
 click the group.


 I added a user (pmarino) to the system which shows in the Directory
 Group tab shows sysadmingroups   domian name among others
 however it only shows in the Permissions tab the permissions inherited
 by Everyone it does not show any permissions inherited by the
 sysadmin group.

 This is not good - I mean, should have worked.


 just to prove it didnt work I logged out and attempted to log back in
 as the user (pmarino) it wouldn't let me log in

 I logged back in as the internal admin user then I added the SuperUser
 permissions directly to the pmarino account and logged back out again.
 Now when I logged in as pmarino it gave me the access I expected.

 Can I please ask you to provide some database info ?

 It will be awesome if you can provide the following SQL queries results -

 select group_ids, groups from users where username ilike '%pmarino%';

 In addition, please perform - select id, name from ad_groups;

 Thanks for your help.

 P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the 
 solution to the bugs) should have fixed your issue as well.






 Here is the relevant portion of the engine log
 
 2014-08-13 16:00:38,801 INFO
 [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5)
 [1e7fa420] Running command: AddGroupCommand internal: false. Entities
 affected :  ID: aaa0----123456789aaa Type: System
 2014-08-13 16:00:38,813 INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call
 Stack: null, Custom Event ID: -1, Message: User 'domain
 name/Groups/sysadmin' was added successfully to the system.
 2014-08-13 16:09:01,352 INFO
 [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
 (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command:
 AddSystemPermissionCommand internal: false. Entities affected :  ID:
 aaa0----123456789aaa Type: System,  ID:
 aaa0----123456789aaa Type: System
 2014-08-13 16:09:01,371 INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (org.ovirt.thread.pool-4-thread-24) [75cab17c] Correlation ID:
 75cab17c, Call Stack: null, Custom Event ID: -1, Message: User/Group
 domain name/Groups/sysadmin was granted permission for Role
 SuperUser on System by admin.
 2014-08-13 16:10:40,963 INFO
 [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
 (org.ovirt.thread.pool-4-thread-26) [b42abcb] Running command:
 AddSystemPermissionCommand internal: false. Entities affected :  ID:
 aaa0----123456789aaa Type: System,  ID:
 aaa0----123456789aaa Type: System
 2014-08-13 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
Just for the sake of testing even though some one said previously to
ignore it I set the active = t on the group in ad_group on the
sysadmin group it had no effect other than changing Active: to true in
the iterface

and in answer to this  I assume also you see the permissiosn in the
permissions sub tab when you click the group. yes

On Sun, Aug 17, 2014 at 9:33 AM, Paul Robert Marino prmari...@gmail.com wrote:
 here are the results of the queries you asked for


 group_ids

   |

  groups

 ---+-
 -
 
  
 ----,----,----,----,----,----
 | core.ux.medi
 a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)


 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)



 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Wednesday, August 13, 2014 11:47:40 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 Ok so before I open a bug ticket I want to confirm I'm not doing any
 thing wrong here.
 I upgraded to 3.4
 now it says Active:false  on LDAP groups.

 Again I tried to add the sysadmin group from the directory server and
 set the power user and super user roles on the group
 it shows up as domain name/Groups/sysadmin
 I adder the permisions by clicking on the configure link on the top of
 the screen and set them in the System Permissions tab

 Sounds good so far.
 I assume also you see the permissiosn in the permissions sub tab when you 
 click the group.


 I added a user (pmarino) to the system which shows in the Directory
 Group tab shows sysadmingroups   domian name among others
 however it only shows in the Permissions tab the permissions inherited
 by Everyone it does not show any permissions inherited by the
 sysadmin group.

 This is not good - I mean, should have worked.


 just to prove it didnt work I logged out and attempted to log back in
 as the user (pmarino) it wouldn't let me log in

 I logged back in as the internal admin user then I added the SuperUser
 permissions directly to the pmarino account and logged back out again.
 Now when I logged in as pmarino it gave me the access I expected.

 Can I please ask you to provide some database info ?

 It will be awesome if you can provide the following SQL queries results -

 select group_ids, groups from users where username ilike '%pmarino%';

 In addition, please perform - select id, name from ad_groups;

 Thanks for your help.

 P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the 
 solution to the bugs) should have fixed your issue as well.






 Here is the relevant portion of the engine log
 
 2014-08-13 16:00:38,801 INFO
 [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5)
 [1e7fa420] Running command: AddGroupCommand internal: false. Entities
 affected :  ID: aaa0----123456789aaa Type: System
 2014-08-13 16:00:38,813 INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call
 Stack: null, Custom Event ID: -1, Message: User 'domain
 name/Groups/sysadmin' was added successfully to the system.
 2014-08-13 16:09:01,352 INFO
 [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
 (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command:
 AddSystemPermissionCommand internal: false. Entities affected :  ID:
 aaa0----123456789aaa Type: System,  ID:
 aaa0----123456789aaa Type: System
 2014-08-13 16:09:01,371 INFO
 [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
 (org.ovirt.thread.pool-4-thread-24) [75cab17c] Correlation ID:
 75cab17c, Call Stack: null, Custom Event ID: -1, Message: User/Group
 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Yair Zaslavsky


- Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Sunday, August 17, 2014 4:33:30 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
 here are the results of the queries you asked for
 
 
 group_ids
 
   |
 
  groups
 
 ---+-
 -
 
  
 ----,----,----,----,----,----
 | core.ux.medi
 a.cbs.net/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)
 
 
 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)

It does look that there is something wrong in the association of users to their 
group IDS.
Just to make sure I'm not missing anything -
Did you first add the goup, and then added users (that belong to a group) 
either by adding users, or by adding a permission?

Yair

 
 
 
 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Wednesday, August 13, 2014 11:47:40 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  Ok so before I open a bug ticket I want to confirm I'm not doing any
  thing wrong here.
  I upgraded to 3.4
  now it says Active:false  on LDAP groups.
 
  Again I tried to add the sysadmin group from the directory server and
  set the power user and super user roles on the group
  it shows up as domain name/Groups/sysadmin
  I adder the permisions by clicking on the configure link on the top of
  the screen and set them in the System Permissions tab
 
  Sounds good so far.
  I assume also you see the permissiosn in the permissions sub tab when you
  click the group.
 
 
  I added a user (pmarino) to the system which shows in the Directory
  Group tab shows sysadmingroups   domian name among others
  however it only shows in the Permissions tab the permissions inherited
  by Everyone it does not show any permissions inherited by the
  sysadmin group.
 
  This is not good - I mean, should have worked.
 
 
  just to prove it didnt work I logged out and attempted to log back in
  as the user (pmarino) it wouldn't let me log in
 
  I logged back in as the internal admin user then I added the SuperUser
  permissions directly to the pmarino account and logged back out again.
  Now when I logged in as pmarino it gave me the access I expected.
 
  Can I please ask you to provide some database info ?
 
  It will be awesome if you can provide the following SQL queries results -
 
  select group_ids, groups from users where username ilike '%pmarino%';
 
  In addition, please perform - select id, name from ad_groups;
 
  Thanks for your help.
 
  P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the
  solution to the bugs) should have fixed your issue as well.
 
 
 
 
 
 
  Here is the relevant portion of the engine log
  
  2014-08-13 16:00:38,801 INFO
  [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5)
  [1e7fa420] Running command: AddGroupCommand internal: false. Entities
  affected :  ID: aaa0----123456789aaa Type: System
  2014-08-13 16:00:38,813 INFO
  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
  (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call
  Stack: null, Custom Event ID: -1, Message: User 'domain
  name/Groups/sysadmin' was added successfully to the system.
  2014-08-13 16:09:01,352 INFO
  [org.ovirt.engine.core.bll.AddSystemPermissionCommand]
  (org.ovirt.thread.pool-4-thread-24) [75cab17c] Running command:
  AddSystemPermissionCommand internal: false. Entities affected :  ID:
  aaa0----123456789aaa Type: System,  ID:
  aaa0----123456789aaa Type: System
  2014-08-13 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
confirmed that does seem to be the cause I updated the group_ids field
of a user to the appropriate Id's from ad_groups and it fixed that
user.
in answer to your question Did you first add the goup, and then added
users (that belong to a group) either by adding users, or by adding a
permission? Ive tried it ever different way I can think of the
results are always the same.


On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Sunday, August 17, 2014 4:33:30 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 here are the results of the queries you asked for


 group_ids

   |

  groups

 ---+-
 -
 
  
 ----,----,----,----,----,----
 | domain here/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)


 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)

 It does look that there is something wrong in the association of users to 
 their group IDS.
 Just to make sure I'm not missing anything -
 Did you first add the goup, and then added users (that belong to a group) 
 either by adding users, or by adding a permission?

 Yair




 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Wednesday, August 13, 2014 11:47:40 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  Ok so before I open a bug ticket I want to confirm I'm not doing any
  thing wrong here.
  I upgraded to 3.4
  now it says Active:false  on LDAP groups.
 
  Again I tried to add the sysadmin group from the directory server and
  set the power user and super user roles on the group
  it shows up as domain name/Groups/sysadmin
  I adder the permisions by clicking on the configure link on the top of
  the screen and set them in the System Permissions tab
 
  Sounds good so far.
  I assume also you see the permissiosn in the permissions sub tab when you
  click the group.
 
 
  I added a user (pmarino) to the system which shows in the Directory
  Group tab shows sysadmingroups   domian name among others
  however it only shows in the Permissions tab the permissions inherited
  by Everyone it does not show any permissions inherited by the
  sysadmin group.
 
  This is not good - I mean, should have worked.
 
 
  just to prove it didnt work I logged out and attempted to log back in
  as the user (pmarino) it wouldn't let me log in
 
  I logged back in as the internal admin user then I added the SuperUser
  permissions directly to the pmarino account and logged back out again.
  Now when I logged in as pmarino it gave me the access I expected.
 
  Can I please ask you to provide some database info ?
 
  It will be awesome if you can provide the following SQL queries results -
 
  select group_ids, groups from users where username ilike '%pmarino%';
 
  In addition, please perform - select id, name from ad_groups;
 
  Thanks for your help.
 
  P.S - As far as I understand the two bugs mentioend by Itamar (I mean, the
  solution to the bugs) should have fixed your issue as well.
 
 
 
 
 
 
  Here is the relevant portion of the engine log
  
  2014-08-13 16:00:38,801 INFO
  [org.ovirt.engine.core.bll.AddGroupCommand] (ajp-/127.0.0.1:8702-5)
  [1e7fa420] Running command: AddGroupCommand internal: false. Entities
  affected :  ID: aaa0----123456789aaa Type: System
  2014-08-13 16:00:38,813 INFO
  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
  (ajp-/127.0.0.1:8702-5) [1e7fa420] Correlation ID: 1e7fa420, Call
  Stack: null, Custom Event ID: -1, 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
I found why the group_ids field is wrong

If you look at the ad_groups table then mane for the group is domain
here/Groups/sysadmin however if you look at the groups field in the
users table it says domain here/groups/sysadmin
I tried updating the name field in the ad_groups table to match
domain here/groups/sysadmin then removed and added a user now the
if for that group in the group_ids field is being set correctly.

This is at least a usable workaround for now. now we need to find the
root cause.


On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino
prmari...@gmail.com wrote:
 confirmed that does seem to be the cause I updated the group_ids field
 of a user to the appropriate Id's from ad_groups and it fixed that
 user.
 in answer to your question Did you first add the goup, and then added
 users (that belong to a group) either by adding users, or by adding a
 permission? Ive tried it ever different way I can think of the
 results are always the same.


 On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Sunday, August 17, 2014 4:33:30 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 here are the results of the queries you asked for


 group_ids

   |

  groups

 ---+-
 -
 
  
 ----,----,----,----,----,----
 | domain here/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)


 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)

 It does look that there is something wrong in the association of users to 
 their group IDS.
 Just to make sure I'm not missing anything -
 Did you first add the goup, and then added users (that belong to a group) 
 either by adding users, or by adding a permission?

 Yair




 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com 
 wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Wednesday, August 13, 2014 11:47:40 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  Ok so before I open a bug ticket I want to confirm I'm not doing any
  thing wrong here.
  I upgraded to 3.4
  now it says Active:false  on LDAP groups.
 
  Again I tried to add the sysadmin group from the directory server and
  set the power user and super user roles on the group
  it shows up as domain name/Groups/sysadmin
  I adder the permisions by clicking on the configure link on the top of
  the screen and set them in the System Permissions tab
 
  Sounds good so far.
  I assume also you see the permissiosn in the permissions sub tab when you
  click the group.
 
 
  I added a user (pmarino) to the system which shows in the Directory
  Group tab shows sysadmingroups   domian name among others
  however it only shows in the Permissions tab the permissions inherited
  by Everyone it does not show any permissions inherited by the
  sysadmin group.
 
  This is not good - I mean, should have worked.
 
 
  just to prove it didnt work I logged out and attempted to log back in
  as the user (pmarino) it wouldn't let me log in
 
  I logged back in as the internal admin user then I added the SuperUser
  permissions directly to the pmarino account and logged back out again.
  Now when I logged in as pmarino it gave me the access I expected.
 
  Can I please ask you to provide some database info ?
 
  It will be awesome if you can provide the following SQL queries results -
 
  select group_ids, groups from users where username ilike '%pmarino%';
 
  In addition, please perform - select id, name from ad_groups;
 
  Thanks for your help.
 
  P.S - As far as I understand the two bugs mentioend by 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
Ok
I dug in a little further it looks like them memberof plugin in 389
server is making them lowercase which from an LDAP and or Posix
perspective is not a problem but this seems to be the root cause of
the issue of the difference.
while this behavior is strange it is not invalid because DN's are case
insensitive.

The easiest way to fix this is to change the query of the group from
the ad_groups table to an ilike. The potential problem here is it
conflicts with SAM in windows where group names are case sensitive.
This is definitely a conflict in design between AD and LDAP's core design.
Interestingly I can add roles to the group and there is no problem it
sets it correctly so somewhere else in the code an ilike is being uses
to query the groups table.


On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino
prmari...@gmail.com wrote:
 I found why the group_ids field is wrong

 If you look at the ad_groups table then mane for the group is domain
 here/Groups/sysadmin however if you look at the groups field in the
 users table it says domain here/groups/sysadmin
 I tried updating the name field in the ad_groups table to match
 domain here/groups/sysadmin then removed and added a user now the
 if for that group in the group_ids field is being set correctly.

 This is at least a usable workaround for now. now we need to find the
 root cause.


 On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino
 prmari...@gmail.com wrote:
 confirmed that does seem to be the cause I updated the group_ids field
 of a user to the appropriate Id's from ad_groups and it fixed that
 user.
 in answer to your question Did you first add the goup, and then added
 users (that belong to a group) either by adding users, or by adding a
 permission? Ive tried it ever different way I can think of the
 results are always the same.


 On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Sunday, August 17, 2014 4:33:30 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 here are the results of the queries you asked for


 group_ids

   |

  groups

 ---+-
 -
 
  
 ----,----,----,----,----,----
 | domain here/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)


 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)

 It does look that there is something wrong in the association of users to 
 their group IDS.
 Just to make sure I'm not missing anything -
 Did you first add the goup, and then added users (that belong to a group) 
 either by adding users, or by adding a permission?

 Yair




 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com 
 wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Wednesday, August 13, 2014 11:47:40 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  Ok so before I open a bug ticket I want to confirm I'm not doing any
  thing wrong here.
  I upgraded to 3.4
  now it says Active:false  on LDAP groups.
 
  Again I tried to add the sysadmin group from the directory server and
  set the power user and super user roles on the group
  it shows up as domain name/Groups/sysadmin
  I adder the permisions by clicking on the configure link on the top of
  the screen and set them in the System Permissions tab
 
  Sounds good so far.
  I assume also you see the permissiosn in the permissions sub tab when you
  click the group.
 
 
  I added a user (pmarino) to the system which shows in the Directory
  Group tab shows sysadmingroups   domian name among others
  however it only shows in the Permissions tab the 

Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Paul Robert Marino
I think we now have enough for a proper ticket.
I will create one latter today. also since I have RHEV support for my
production instances I will also create a matching case with Red Hat.



On Sun, Aug 17, 2014 at 11:27 AM, Paul Robert Marino
prmari...@gmail.com wrote:
 Ok
 I dug in a little further it looks like them memberof plugin in 389
 server is making them lowercase which from an LDAP and or Posix
 perspective is not a problem but this seems to be the root cause of
 the issue of the difference.
 while this behavior is strange it is not invalid because DN's are case
 insensitive.

 The easiest way to fix this is to change the query of the group from
 the ad_groups table to an ilike. The potential problem here is it
 conflicts with SAM in windows where group names are case sensitive.
 This is definitely a conflict in design between AD and LDAP's core design.
 Interestingly I can add roles to the group and there is no problem it
 sets it correctly so somewhere else in the code an ilike is being uses
 to query the groups table.


 On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino
 prmari...@gmail.com wrote:
 I found why the group_ids field is wrong

 If you look at the ad_groups table then mane for the group is domain
 here/Groups/sysadmin however if you look at the groups field in the
 users table it says domain here/groups/sysadmin
 I tried updating the name field in the ad_groups table to match
 domain here/groups/sysadmin then removed and added a user now the
 if for that group in the group_ids field is being set correctly.

 This is at least a usable workaround for now. now we need to find the
 root cause.


 On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino
 prmari...@gmail.com wrote:
 confirmed that does seem to be the cause I updated the group_ids field
 of a user to the appropriate Id's from ad_groups and it fixed that
 user.
 in answer to your question Did you first add the goup, and then added
 users (that belong to a group) either by adding users, or by adding a
 permission? Ive tried it ever different way I can think of the
 results are always the same.


 On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com wrote:


 - Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
 Sent: Sunday, August 17, 2014 4:33:30 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups

 here are the results of the queries you asked for


 group_ids

   |

  groups

 ---+-
 -
 
  
 ----,----,----,----,----,----
 | domain here/groups/sysadmin,domain here/groups/pmarino,domain
 here/groups/pd managers,domain here/groups/qa managers,domain
 here/groups/accounting managers,domain here/directory administrat
 ors
 (1 row)


 engine=# select id, name from ad_groups;
   id  | name
 --+---
  eee0----123456789eee | Everyone
  2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
 (2 rows)

 It does look that there is something wrong in the association of users to 
 their group IDS.
 Just to make sure I'm not missing anything -
 Did you first add the goup, and then added users (that belong to a group) 
 either by adding users, or by adding a permission?

 Yair




 On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com 
 wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Wednesday, August 13, 2014 11:47:40 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  Ok so before I open a bug ticket I want to confirm I'm not doing any
  thing wrong here.
  I upgraded to 3.4
  now it says Active:false  on LDAP groups.
 
  Again I tried to add the sysadmin group from the directory server and
  set the power user and super user roles on the group
  it shows up as domain name/Groups/sysadmin
  I adder the permisions by clicking on the configure link on the top of
  the screen and set them in the System Permissions tab
 
  Sounds good so far.
  

[ovirt-users] Reactivate a storage domain

2014-08-17 Thread Dwight Schauer
Hello Ovirt users,

How do I unlock a storage domain? The underlying NFS volume had filled up (I 
corrected that).

I tried to reactivate the storage domain (it had deactivated to the volume 
filling up)  but then it went into a locked state

According to df -h: 8.0T  6.0T  2.1T  75%   # 6T used, 2.1T free

Ovirt thinks it only has 6.0T as is full (well, 1GB free, which is now false, 
but I can't convince it other wise). (I increased the size of the volume after 
VMs went into pause due to it filling up).

Now no hosts wants to be the SPM... So my ovirt managed data center is down 
until I reactivate the NFS storage domain (that is the master).

The storage domain reverts back to an inactive state after a while, but 
whenever I try to reactivate it goes to the locked state.

Sincerely,
Dwight Schauer
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Self-hosted engine won't start

2014-08-17 Thread John Gardeniers
Hi Jirka,

Thanks for the update. It sounds like the same bug but with a few extra
issues thrown in. e.g. Comment 9 seems to me to be a completely separate
bug, although it may affect the issue I reported.

I can't see any mention of how the problem is being resolved, which I am
interested in, but will keep an eye on it.

I'll try the patched version when I get the time and enthusiasm to give
it another crack.

regards,
John


On 14/08/14 22:57, Jiri Moskovcak wrote:
 Hi John,
 after a deeper look I realized that you're probably facing [1]. The
 patch is ready and I will also backport it to 3.4 branch.

 --Jirka

 [1] https://bugzilla.redhat.com/show_bug.cgi?id=1093638

 On 07/29/2014 11:41 PM, John Gardeniers wrote:
 Hi Jiri,

 Sorry, I can't supply the log because the hosts have been recycled but
 I'm sure it would have contained exactly the same information that you
 already have from host2. It's a classic deadlock situation that should
 never be allowed to happen. A simple and time proven solution was in my
 original post.

 The reason for recycling the hosts is that I discovered yesterday that
 although the engine was still running it could not be accessed in any
 way. Upon further finding that there was no way to get it restarted I
 decided to abandon the whole idea of self-hosting until such time as I
 see an indication that it's production ready.

 regards,
 John


 On 29/07/14 22:52, Jiri Moskovcak wrote:
 Hi John,
 thanks for the logs. Seems like the engine is running on host2 and it
 decides that it doesn't have the best score and shuts the engine down
 and then neither of them want's to start the vm until you restart the
 host2. Unfortunately the logs doesn't contain the part from host1 from
 2014-07-24 09:XX which I'd like to investigate because it might
 contain the information why host1 refused to start the vm when host2
 killed it.

 Regards,
 Jirka

 On 07/28/2014 02:57 AM, John Gardeniers wrote:
 Hi Jira,

 Version: ovirt-hosted-engine-ha-1.1.5-1.el6.noarch

 Attached are the logs. Thanks for looking.

 Regards,
 John


 On 25/07/14 17:47, Jiri Moskovcak wrote:
 On 07/24/2014 11:37 PM, John Gardeniers wrote:
 Hi Jiri,

 Perhaps you can tell me how to determine the exact version of
 ovirt-hosted-engine-ha.

 Centos/RHEL/Fedora: rpm -q ovirt-hosted-engine-ha

 As for the logs, I am not going to attach 60MB
 of logs to an email,

 - there are other ways to share the logs

 nor can I see any imaginagle reason for you wanting
 to see them all, as the bulk is historical. I have already included
 the
 *relevant* sections. However, if you think there may be some other
 section that may help you feel free to be more explicit about
 what you
 are looking for. Right now I fail to understand what you might
 hope to
 see in logs from several weeks ago that you can't get from the last
 day
 or so.


 It's a standard way, people tend to think that they know what is a
 relevant part of a log, but in many cases they fail. Asking for the
 whole logs has proven to be faster than trying to find the relevant
 part through the user. And you're right, I don't need the logs from
 last week, just logs since the last start of the services when you
 observed the problem.

 Regards,
 Jirka

 regards,
 John


 On 24/07/14 19:10, Jiri Moskovcak wrote:
 Hi, please provide the the exact versions of ovirt-hosted-engine-ha
 and all logs from /var/log/ovirt-hosted-engine-ha/

 Thank you,
 Jirka

 On 07/24/2014 01:29 AM, John Gardeniers wrote:
 Hi All,

 I have created a lab with 2 hypervisors and a self-hosted engine.
 Today
 I followed the upgrade instructions as described in
 http://www.ovirt.org/Hosted_Engine_Howto and rebooted the
 engine. I
 didn't really do an upgrade but simply wanted to test what would
 happen
 when the engine was rebooted.

 When the engine didn't restart I re-ran hosted-engine
 --set-maintenance=none and restarted the vdsm, ovirt-ha-agent and
 ovirt-ha-broker services on both nodes. 15 minutes later it still
 hadn't
 restarted, so I then tried rebooting both hypervisers. After an
 hour
 there was still no sign of the engine starting. The agent logs
 don't
 help me much. The following bits are repeated over and over.

 ovirt1 (192.168.19.20):

 MainThread::INFO::2014-07-24
 09:18:40,272::brokerlink::108::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify)




 Trying: notify time=1406157520.27 type=state_transition
 detail=EngineDown-EngineDown hostname='ovirt1.om.net'
 MainThread::INFO::2014-07-24
 09:18:40,272::brokerlink::117::ovirt_hosted_engine_ha.lib.brokerlink.BrokerLink::(notify)




 Success, was notification of state_transition
 (EngineDown-EngineDown)
 sent? ignored
 MainThread::INFO::2014-07-24
 09:18:40,594::hosted_engine::327::ovirt_hosted_engine_ha.agent.hosted_engine.HostedEngine::(start_monitoring)




 Current state EngineDown (score: 2400)
 MainThread::INFO::2014-07-24
 

[ovirt-users] Master Storage goes Inactive - Failed to activate Storage Domain

2014-08-17 Thread Chris @ VeeroTech.net
Hello All,

 

I am having an issue on my test setup, the master storage goes inactive.  It
is set up as to use Gluster and the volume is up and running without issues.
Here is a snippet of /var/log/ovirt-engine/engine.log (these are just the
ERRORs):

 

2014-08-18 01:47:04,173 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-98) [40e8ae30] Failed in SpmStatusVDS method

2014-08-18 01:47:04,174 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-98) [40e8ae30] Command
SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId =
4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:47:14,286 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-68) [357af14e] Failed in SpmStatusVDS method

2014-08-18 01:47:14,287 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-68) [357af14e] Command
SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId =
4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:47:24,400 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-51) [11269c17] Failed in SpmStatusVDS method

2014-08-18 01:47:24,400 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-51) [11269c17] Command
SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId =
4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:47:34,514 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-59) [40622d60] Failed in SpmStatusVDS method

2014-08-18 01:47:34,515 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-59) [40622d60] Command
SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId =
4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:47:44,651 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-97) Failed in SpmStatusVDS method

2014-08-18 01:47:44,652 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-97) Command SpmStatusVDSCommand(HostName =
u5.veerotech.net, HostId = 57dac47a-8db9-4d64-86c2-6f9b2a89b3f5,
storagePoolId = 83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed.
Exception: VDSErrorException: VDSGenericException: VDSErrorException: Failed
to SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:47:54,765 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-73) [44b5af81] Failed in SpmStatusVDS method

2014-08-18 01:47:54,766 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-73) [44b5af81] Command
SpmStatusVDSCommand(HostName = u6.veerotech.net, HostId =
4105003a-d04b-4838-89d9-fcdd8953c98e, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:48:04,881 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-19) [7bf1ea79] Failed in SpmStatusVDS method

2014-08-18 01:48:04,883 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-19) [7bf1ea79] Command
SpmStatusVDSCommand(HostName = u5.veerotech.net, HostId =
57dac47a-8db9-4d64-86c2-6f9b2a89b3f5, storagePoolId =
83ff2f2d-3c8e-4865-8656-c01d867cff06) execution failed. Exception:
VDSErrorException: VDSGenericException: VDSErrorException: Failed to
SpmStatusVDS, error = [Errno 5] Input/output error, code = 100

2014-08-18 01:48:14,994 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-20) [4fed0eac] Failed in SpmStatusVDS method

2014-08-18 01:48:14,995 ERROR
[org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand]
(DefaultQuartzScheduler_Worker-20) [4fed0eac] Command
SpmStatusVDSCommand(HostName 

[ovirt-users] [SOLVED] RE: Reactivate a storage domain

2014-08-17 Thread Dwight Schauer
Hello Ovirt users,

Well, I solved the problem. When the NFS volume had filled up that knocked out 
non Ovirt managed VMs as well including DHCP servers.

I'd been using DHCP for the management network.  The Ovirt hypervisors never 
refreshed when I brought the DHCP servers back. (The management network was no 
longer connected).

I went into one Ovirt hypervisor, configured it with static, and after a couple 
of minutes it become the SPM on its own without my involvement and the storage 
domains came back.

Sincerely,
Dwight Schauer

-Original Message-
From: users-boun...@ovirt.org [mailto:users-boun...@ovirt.org] On Behalf Of 
Dwight Schauer
Sent: Sunday, August 17, 2014 12:37 PM
To: users@ovirt.org
Subject: [ovirt-users] Reactivate a storage domain

Hello Ovirt users,

How do I unlock a storage domain? The underlying NFS volume had filled up (I 
corrected that).

I tried to reactivate the storage domain (it had deactivated to the volume 
filling up)  but then it went into a locked state

According to df -h: 8.0T  6.0T  2.1T  75%   # 6T used, 2.1T free

Ovirt thinks it only has 6.0T as is full (well, 1GB free, which is now false, 
but I can't convince it other wise). (I increased the size of the volume after 
VMs went into pause due to it filling up).

Now no hosts wants to be the SPM... So my ovirt managed data center is down 
until I reactivate the NFS storage domain (that is the master).

The storage domain reverts back to an inactive state after a while, but 
whenever I try to reactivate it goes to the locked state.

Sincerely,
Dwight Schauer
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt with 389 server inactive groups

2014-08-17 Thread Yair Zaslavsky


- Original Message -
 From: Paul Robert Marino prmari...@gmail.com
 To: Yair Zaslavsky yzasl...@redhat.com
 Cc: users@ovirt.org
 Sent: Sunday, August 17, 2014 6:32:15 PM
 Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
 I think we now have enough for a proper ticket.
 I will create one latter today. also since I have RHEV support for my
 production instances I will also create a matching case with Red Hat.

Thank you very much for your help here!
Please add a link to this mailing list thread when you open the ticket.

Many thanks,
Yair

 
 
 
 On Sun, Aug 17, 2014 at 11:27 AM, Paul Robert Marino
 prmari...@gmail.com wrote:
  Ok
  I dug in a little further it looks like them memberof plugin in 389
  server is making them lowercase which from an LDAP and or Posix
  perspective is not a problem but this seems to be the root cause of
  the issue of the difference.
  while this behavior is strange it is not invalid because DN's are case
  insensitive.
 
  The easiest way to fix this is to change the query of the group from
  the ad_groups table to an ilike. The potential problem here is it
  conflicts with SAM in windows where group names are case sensitive.
  This is definitely a conflict in design between AD and LDAP's core design.
  Interestingly I can add roles to the group and there is no problem it
  sets it correctly so somewhere else in the code an ilike is being uses
  to query the groups table.
 
 
  On Sun, Aug 17, 2014 at 11:05 AM, Paul Robert Marino
  prmari...@gmail.com wrote:
  I found why the group_ids field is wrong
 
  If you look at the ad_groups table then mane for the group is domain
  here/Groups/sysadmin however if you look at the groups field in the
  users table it says domain here/groups/sysadmin
  I tried updating the name field in the ad_groups table to match
  domain here/groups/sysadmin then removed and added a user now the
  if for that group in the group_ids field is being set correctly.
 
  This is at least a usable workaround for now. now we need to find the
  root cause.
 
 
  On Sun, Aug 17, 2014 at 10:39 AM, Paul Robert Marino
  prmari...@gmail.com wrote:
  confirmed that does seem to be the cause I updated the group_ids field
  of a user to the appropriate Id's from ad_groups and it fixed that
  user.
  in answer to your question Did you first add the goup, and then added
  users (that belong to a group) either by adding users, or by adding a
  permission? Ive tried it ever different way I can think of the
  results are always the same.
 
 
  On Sun, Aug 17, 2014 at 9:46 AM, Yair Zaslavsky yzasl...@redhat.com
  wrote:
 
 
  - Original Message -
  From: Paul Robert Marino prmari...@gmail.com
  To: Yair Zaslavsky yzasl...@redhat.com
  Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
  Sent: Sunday, August 17, 2014 4:33:30 PM
  Subject: Re: [ovirt-users] ovirt with 389 server inactive groups
 
  here are the results of the queries you asked for
 
 
  group_ids
 
|
 
   groups
 
  ---+-
  -
  
   
  ----,----,----,----,----,----
  | domain here/groups/sysadmin,domain here/groups/pmarino,domain
  here/groups/pd managers,domain here/groups/qa managers,domain
  here/groups/accounting managers,domain here/directory administrat
  ors
  (1 row)
 
 
  engine=# select id, name from ad_groups;
id  | name
  --+---
   eee0----123456789eee | Everyone
   2a8a8401-fc9e-11e3-8742-861538ea406a | domain here/Groups/sysadmin
  (2 rows)
 
  It does look that there is something wrong in the association of users
  to their group IDS.
  Just to make sure I'm not missing anything -
  Did you first add the goup, and then added users (that belong to a
  group) either by adding users, or by adding a permission?
 
  Yair
 
 
 
 
  On Wed, Aug 13, 2014 at 10:49 PM, Yair Zaslavsky yzasl...@redhat.com
  wrote:
  
  
   - Original Message -
   From: Paul Robert Marino prmari...@gmail.com
   To: Yair Zaslavsky yzasl...@redhat.com
   Cc: Itamar Heim ih...@redhat.com, users@ovirt.org
   Sent: Wednesday, August 13, 2014 11:47:40 PM
   Subject: Re: [ovirt-users] ovirt with 389 server inactive groups