Re: [ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Yair Zaslavsky 


- Original Message -
> From: "Lior Vernia" 
> To: "Greg Sheremeta" 
> Cc: "Dave Neary" , "users" 
> Sent: Wednesday, October 15, 2014 2:51:16 AM
> Subject: Re: [ovirt-users] ovirt presentation template -- google docs format?
> 
> Speaking of which, may I hijack this thread in order to ask why we don't
> have a slideshow template that looks like a slideshow template? With
> non-white background, colors in general, some graphics/patterns,
> thought-out bullet design, etc.?

+1 here, you're more UI oriented person than I am , Lior , but now that you 
raised it, it suddenly popped into me as well - I would also like to see some 
improvement in that area.
Thanks for the initiative!

Yair

> 
> This template just doesn't look like it means "business". Not business
> as in the money-making way, business as in talking about a serious
> project with a serious brand. But maybe that's just me...
> 
> On 14/10/14 16:06, Greg Sheremeta wrote:
> > Anyone have a Google Docs format of this? [1]
> > 
> > Alternatively, I can make one if someone can find me that logo. I can't
> > find a
> > high-res logo anywhere.
> > 
> > [1] http://www.ovirt.org/File:OVirt-Template.odp
> > 
> > Thanks,
> > Greg
> > 
> > Greg Sheremeta
> > Red Hat, Inc.
> > Sr. Software Engineer, RHEV
> > Cell: 919-807-1086
> > gsher...@redhat.com
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> > 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Lior Vernia 
Speaking of which, may I hijack this thread in order to ask why we don't
have a slideshow template that looks like a slideshow template? With
non-white background, colors in general, some graphics/patterns,
thought-out bullet design, etc.?

This template just doesn't look like it means "business". Not business
as in the money-making way, business as in talking about a serious
project with a serious brand. But maybe that's just me...

On 14/10/14 16:06, Greg Sheremeta wrote:
> Anyone have a Google Docs format of this? [1]
> 
> Alternatively, I can make one if someone can find me that logo. I can't find a
> high-res logo anywhere.
> 
> [1] http://www.ovirt.org/File:OVirt-Template.odp
> 
> Thanks,
> Greg
> 
> Greg Sheremeta
> Red Hat, Inc.
> Sr. Software Engineer, RHEV
> Cell: 919-807-1086
> gsher...@redhat.com
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Vlans and subnets

2014-10-14 Thread Lior Vernia 
Hi Demeter,

This is an issue others have stumbled onto before, so it probably needs
to be fixed; it's sort of a chicken-and-egg problem.

For the time being, I think the workaround is to set up your storage
network manually on the host as vlan101 (in an oVirt-compatible manner)
before running engine-setup. In engine-setup you would then name the
vlan102 device for the management network (which is used to communicate
with hosts).

Setting up the storage network in an oVirt-compatible manner can be
performed by pre-installing vdsm (i.e. "yum install vdsm") yourself on
your first host, then run something like:

vdsClient -s 0 addNetwork bridge=storageNetworkName vlan=101 nic=eth0 \
BOOTPROTO=dhcp

I hope I got it approximately right, can't commit that it's accurate :)
I've also added specific answers to your questions below, please let us
know if this does the trick or if you require more assistance.

On 14/10/14 19:58, Demeter Tibor wrote:
> Hello all,
> 
> I've created a self-hosted ovirt engine with two node, but on the last
> steps the engine-setup could not attach the node to the "default" cluster.
> I think it was because I have different services on different vlans.
> I  have vlan100 for glusterfs and vlan101 for vdsm hosts with different
> subnets. Also, I have an another connection (eth1) with different subnet
> for internet acces and this is the default route.
> 
> I would like to separate ovirt services, networks and glusterfs to
> different vlans/subnets by security reasons.
> But I don't know what services need to be on same vlan/subnets.
> 
> My questions/goals
> 
> - which services need to connect to another ?

Could you be more specific? The management network is used to
communicate between the engine and the hosts, the storage network is
only used by the hosts (and not the engine) as far as I know.

> - Is hosted engine's vm need to be on same network with gluster ? 

To my understanding no, see above point.

> - Is hosted engine's vm need to be on same network with vdsm hosts?

Yes, see above point :)

> - I want to separate ovirt/gluster networks from ovirt VM-s/public
> internet access

Not sure how much "separation" you're looking to get, but shouldn't be a
problem. For example, You can put the additional ("public") networks on
different VLANs and make sure to tag/untag packets as they enter/leave
your oVirt deployment. Keep in mind to also configure the additional
networks on the hosts and VMs.

> - I don't want to extra traffic on router 

Not sure about your topology, but if your hosts are on the same
broadcast domain then there's no reason why this traffic will put
unnecessary load on your router.

> 
> Does anyone experience with this way?
> 
> Thanks in advance
> 
> Tibor 
> 
> 
> 
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Packet loss

2014-10-14 Thread Kyle Gordon 
Evening all,

I'm having major issues with a self hosted setup (oVirt 3.4.4 & CentOS
6.5) on Hetzner, with 2 subnets allocated to the server. Routing to
and from the additional IP ranges is working as expected, and I can
allocate any of the IPs to a virtual interface on the host and get
connectivity, so from what I can tell the network routing side of
things is correct.

However, when I move any of the allocated IPs to any of the guests, I
get 1 ICMP response before complete packet loss. This happens at all
times, even with iptables completely unloaded and an Accept policy
thoughout. The structure is just a basic bridge called ovirtmgmt that
all interfaces are bound to. Guests that are affected can communicate
with other guests on either of the two subnets, and also with the
host, so the bridge is up and running, but when it comes to any
traffic trying to egress by the default route, it comes to a halt.

In addition, all the hosts have unique MACs, dmesg shows that the
appropriate vnets are entering forwarding states and STP is disabled
on the bridge. And just to confuse matters, one guest is working just
fine - yet when the settings are replicated to any other host the new
host still fails to work. Even if I put the working IP onto another
guest, it fails to transfer any data. All I get is constant who-has
requests on the host bridge whilst the guest looks for the next-hop.

Has anyone experienced this before? Where's next on the list of places to look?!

Regards

Kyle

-- 
Kyle Gordon - 2M1DIQ
Web: http://lodge.glasgownet.com
Jabber/Email/SIP: k...@lodge.glasgownet.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ISO_DOMAIN as iscsi storage type

2014-10-14 Thread Itamar Heim 

On 10/13/2014 11:23 AM, ml ml wrote:

Hello List,

i am very unhappy with NFS for my ISO_DOMAIN domain.

Can i simply remove my ISO_DOMAIN via NFS and add a ISO_DOMAIN via isci?

My Setup: http://oi60.tinypic.com/2cmu7nm.jpg

I once ran into a pitfall where i was not able to add a ISO DOMAIN
anymore, so i would rather ask in advance if i can remove the
ISO_DOMAIN and simply add it again via iscsi.

Do i need to take care of anything here?

Thanks,
Mario
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



I'm pretty sure we don't support iscsi for iso domain. we want to make 
iso a simple posix path, not a storage domain

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt status in EL7

2014-10-14 Thread Gianluca Cecchi 
>
> Sent from my iPhone, while driving!

I hope at least through voice assistant or while in the middle of a desert
;-)
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] html slideshow (was: Re: ovirt presentation template -- google docs format?)

2014-10-14 Thread Greg Sheremeta 


- Original Message -
> From: "Yedidyah Bar David" 
> To: "Greg Sheremeta" 
> Cc: "Brian Proffitt" , "Dave Neary" , 
> "users" 
> Sent: Tuesday, October 14, 2014 12:48:55 PM
> Subject: html slideshow (was: Re: [ovirt-users] ovirt presentation template 
> -- google docs format?)
> 
> I prepared a presentation about separate engine/dwh/reports hosts
> using slidy [1] and pandoc [2] to convert markdown to an html slideshow
> and am trying preparing an ovirt template for that. Any opinions
> about that? Client side web developers are welcome to help and/or
> take over...
> 
> You can see the current presentation (unstyled) at [3]. Note that the
> content is also not uptodate, stay tuned.
> 
> [1] http://www.w3.org/Talks/Tools/Slidy2/
> [2] http://johnmacfarlane.net/pandoc/
> [3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation
> 
> Best,
> --
> Didi
> 
My opinion: the more template formats, the better -- as long as they all look
the same.

I, however, prefer point-and-click over markdown / latex / etc.

Greg
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for Women

2014-10-14 Thread Greg Sheremeta 
Sorry for the late response --
I am also mentoring two people at the moment. I am registered on the OPW page
and on our wiki page.

Any interested candidates (specifically in UX or ovirt.js work), feel free to
reach out! I hear I'm a great teacher ;)

Greg

- Original Message -
> From: "Brian Proffitt" 
> To: "Tomas Jelinek" 
> Cc: "users" , de...@ovirt.org
> Sent: Thursday, October 2, 2014 7:53:53 AM
> Subject: Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for 
> Women
> 
> Just one: notifying the coordinator so I know you're in! :)
> 
> Thank you very much for doing all of this. I will be more proactive in the
> future at checking the page first!
> 
> BKP
> 
> - Original Message -
> > From: "Tomas Jelinek" 
> > To: "Brian Proffitt" 
> > Cc: "users" , de...@ovirt.org
> > Sent: Thursday, October 2, 2014 7:45:14 AM
> > Subject: Re: [ovirt-users] [Request for Mentors] oVirt Outreach Program for
> > Women
> > 
> > Hi Brian,
> > 
> > what do you mean by no responses?
> > 
> > I have:
> > - sent an intro mail to opw-l...@gnome.org
> > - registered here as mentor: https://opw.gnome.org/?q=program_home&prg=3 -
> > it
> > is waiting for approval now
> > - filled myself here: http://www.ovirt.org/Outreach_Program_for_Women
> > 
> > Did I miss some step?
> > 
> > Thanx,
> > Tomas
> > 
> > - Original Message -
> > > From: "Brian Proffitt" 
> > > To: "users" , de...@ovirt.org
> > > Sent: Wednesday, October 1, 2014 9:46:16 PM
> > > Subject: [ovirt-users] [Request for Mentors] oVirt Outreach Program for
> > > Women
> > > 
> > > All:
> > > 
> > > Since my Sept. 19 request for mentors for the GNOME OPW project[1], I
> > > have
> > > had no responses from anyone to lend an effort on mentoring potential
> > > applicants. The application process has been opened and I know we have
> > > had
> > > at least one potential candidate[2] interested, and I would hate to turn
> > > people away because we did not have mentor(s) to assist them.
> > > 
> > > The application deadline for OPW is Oct. 22, but because potential
> > > applicants
> > > are required to get involved with the community before they formally
> > > apply,
> > > it is very important we have some mentors in place as soon as possible.
> > > 
> > > oVirt has an excellent community in place, and here's another chance to
> > > show
> > > that off!
> > > 
> > > Peace,
> > > Brian
> > > 
> > > 
> > > [1] http://lists.ovirt.org/pipermail/devel/2014-September/008829.html
> > > [2] http://lists.ovirt.org/pipermail/devel/2014-September/008896.html
> > > 
> > > --
> > > Brian Proffitt
> > > 
> > > Community Liaison
> > > oVirt
> > > Open Source and Standards, Red Hat - http://community.redhat.com
> > > Phone: +1 574 383 9BKP
> > > IRC: bkp @ OFTC
> > > ___
> > > Users mailing list
> > > Users@ovirt.org
> > > http://lists.ovirt.org/mailman/listinfo/users
> > > 
> > 
> 
> --
> Brian Proffitt
> 
> Community Liaison
> oVirt
> Open Source and Standards, Red Hat - http://community.redhat.com
> Phone: +1 574 383 9BKP
> IRC: bkp @ OFTC
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt status in EL7

2014-10-14 Thread Nathan Llaneza 
Hey all,

I dont know if it is "supported" but I am using a CentOS 7 hypervisor with 
oVirt 3.4.4. This gave me the ability to use live snapshots. The only trouble I 
have had is remembering not to live migrate from the 7 hypervisor to the 6.5. 

Sent from my iPhone, while driving!

> On Oct 14, 2014, at 1:56 PM, Itamar Heim  wrote:
> 
>> On 10/14/2014 07:50 PM, Gianluca Cecchi wrote:
>> 
>> Il 14/ott/2014 18:08 "Phil Daws" > > ha scritto:
>> >
>> > Waiting on 3.5 release I believe (like myself :))
>> >
>> > - Original Message -
>> > From: "Igor Gnatenko" > >
>> > To: users@ovirt.org 
>> > Sent: Tuesday, 14 October, 2014 4:33:50 PM
>> > Subject: [ovirt-users] oVirt status in EL7
>> >
>> >
>> > Hi,
>> > What status of support EL7 in oVirt? I mean as host OS.
>> 
>> Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in
>> the same cluster?
>> Supposing to have  3.5rc4?
>> 
>> 
>> 
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
> 
> yes, but live migration may/would work only one way to 7.0, so only as a 
> migration path probably.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt status in EL7

2014-10-14 Thread Itamar Heim 

On 10/14/2014 07:50 PM, Gianluca Cecchi wrote:


Il 14/ott/2014 18:08 "Phil Daws" mailto:ux...@splatnix.net>> ha scritto:
 >
 > Waiting on 3.5 release I believe (like myself :))
 >
 > - Original Message -
 > From: "Igor Gnatenko" mailto:ignatenkobr...@fedoraproject.org>>
 > To: users@ovirt.org 
 > Sent: Tuesday, 14 October, 2014 4:33:50 PM
 > Subject: [ovirt-users] oVirt status in EL7
 >
 >
 > Hi,
 > What status of support EL7 in oVirt? I mean as host OS.

Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in
the same cluster?
Supposing to have  3.5rc4?



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users



yes, but live migration may/would work only one way to 7.0, so only as 
a migration path probably.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Vlans and subnets

2014-10-14 Thread Demeter Tibor 
Hello all, 

I've created a self-hosted ovirt engine with two node, but on the last steps 
the engine-setup could not attach the node to the "default" cluster. 
I think it was because I have different services on different vlans. 
I have vlan100 for glusterfs and vlan101 for vdsm hosts with different subnets. 
Also, I have an another connection (eth1) with different subnet for internet 
acces and this is the default route. 

I would like to separate ovirt services, networks and glusterfs to different 
vlans/subnets by security reasons. 
But I don't know what services need to be on same vlan/subnets. 

My questions/goals 

- which services need to connect to another ? 
- Is hosted engine's vm need to be on same network with gluster ? 
- Is hosted engine's vm need to be on same network with vdsm hosts? 
- I want to separate ovirt/gluster networks from ovirt VM-s/public internet 
access 
- I don't want to extra traffic on router 

Does anyone experience with this way? 

Thanks in advance 

Tibor 


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] html slideshow

2014-10-14 Thread Jorick Astrego 

On 10/14/2014 06:48 PM, Yedidyah Bar David wrote:
> I prepared a presentation about separate engine/dwh/reports hosts
> using slidy [1] and pandoc [2] to convert markdown to an html slideshow
> and am trying preparing an ovirt template for that. Any opinions
> about that? Client side web developers are welcome to help and/or
> take over...
>
> You can see the current presentation (unstyled) at [3]. Note that the
> content is also not uptodate, stay tuned.
>
> [1] http://www.w3.org/Talks/Tools/Slidy2/
> [2]
> [3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation
>
> Best,
And I thought I was having trouble with LibreOffice Presenter 
(Powerpoint) ;->

I hope you can make it work, sorry I don't have the knowledge to help 
you out!







Met vriendelijke groet, With kind regards,
Jorick Astrego

Netbulae Virtualization Experts 



Tel: 053 20 30 270  i...@netbulae.euStaalsteden 4-3A
KvK 08198180
Fax: 053 20 30 271  www.netbulae.eu 7547 TA Enschede
BTW NL821234584B01



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt status in EL7

2014-10-14 Thread Gianluca Cecchi 
Il 14/ott/2014 18:08 "Phil Daws"  ha scritto:
>
> Waiting on 3.5 release I believe (like myself :))
>
> - Original Message -
> From: "Igor Gnatenko" 
> To: users@ovirt.org
> Sent: Tuesday, 14 October, 2014 4:33:50 PM
> Subject: [ovirt-users] oVirt status in EL7
>
>
> Hi,
> What status of support EL7 in oVirt? I mean as host OS.

Btw: is it possibile/advisable to have a mix CentOS 6.5 and 7.0 hosts in
the same cluster?
Supposing to have  3.5rc4?
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] html slideshow (was: Re: ovirt presentation template -- google docs format?)

2014-10-14 Thread Yedidyah Bar David 
I prepared a presentation about separate engine/dwh/reports hosts
using slidy [1] and pandoc [2] to convert markdown to an html slideshow
and am trying preparing an ovirt template for that. Any opinions
about that? Client side web developers are welcome to help and/or
take over...

You can see the current presentation (unstyled) at [3]. Note that the
content is also not uptodate, stay tuned.

[1] http://www.w3.org/Talks/Tools/Slidy2/
[2] http://johnmacfarlane.net/pandoc/
[3] http://www.ovirt.org/Features/Separate-Reports-Host#Presentation

Best,
-- 
Didi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] oVirt status in EL7

2014-10-14 Thread Phil Daws 
Waiting on 3.5 release I believe (like myself :))

- Original Message - 
From: "Igor Gnatenko"  
To: users@ovirt.org 
Sent: Tuesday, 14 October, 2014 4:33:50 PM 
Subject: [ovirt-users] oVirt status in EL7 


Hi, 
What status of support EL7 in oVirt? I mean as host OS. 
-- 
-Igor Gnatenko 
___ 
Users mailing list 
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Greg Sheremeta 
I also updated the wikipedia page with this higher-res logo. The old one looked 
bad.

- Original Message -
> From: "Greg Sheremeta" 
> To: "Brian Proffitt" 
> Cc: "Dave Neary" , "users" 
> Sent: Tuesday, October 14, 2014 10:34:29 AM
> Subject: Re: ovirt presentation template -- google docs format?
> 
> Thanks. I added it to http://www.ovirt.org/Templates
> 
> - Original Message -
> > From: "Brian Proffitt" 
> > To: "Greg Sheremeta" 
> > Cc: "Dave Neary" , "users" 
> > Sent: Tuesday, October 14, 2014 10:20:37 AM
> > Subject: Re: ovirt presentation template -- google docs format?
> > 
> > Here you go! (And for everyone else!)
> > 
> > BKP
> > 
> > - Original Message -
> > > From: "Greg Sheremeta" 
> > > To: "Dave Neary" , "Brian Proffitt"
> > > , "users" 
> > > Sent: Tuesday, October 14, 2014 4:06:49 PM
> > > Subject: ovirt presentation template -- google docs format?
> > > 
> > > Anyone have a Google Docs format of this? [1]
> > > 
> > > Alternatively, I can make one if someone can find me that logo. I can't
> > > find
> > > a
> > > high-res logo anywhere.
> > > 
> > > [1] http://www.ovirt.org/File:OVirt-Template.odp
> > > 
> > > Thanks,
> > > Greg
> > > 
> > > Greg Sheremeta
> > > Red Hat, Inc.
> > > Sr. Software Engineer, RHEV
> > > Cell: 919-807-1086
> > > gsher...@redhat.com
> > > 
> > 
> > --
> > Brian Proffitt
> > 
> > Community Liaison
> > oVirt
> > Open Source and Standards, Red Hat - http://community.redhat.com
> > Phone: +1 574 383 9BKP
> > IRC: bkp @ OFTC
> > 
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] oVirt status in EL7

2014-10-14 Thread Igor Gnatenko 
Hi,

What status of support EL7 in oVirt? I mean as host OS.
--
-Igor Gnatenko
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] async vm start (python)

2014-10-14 Thread Juan Hernandez 
On 10/14/2014 01:04 PM, Giulio Casella wrote:
> Hi everybody,
> I'm trying to start a VM (using python sdk) asynchronously, but I obtain 
> synchronous behaviour.
> The engine is RHEV-M version 3.4.1-0.31.el6ev.
> Here a snippet of code:
> 
> -
> myvm = api.vms.get(name="VMNAME")
> retval = myvm.start(params.Action(async=True))
> print ParseHelper.toXml(retval)
> -
> 
> and this is what I get (retval):
> 
> -
> 
>  true
>   id="5aa66e96-5fdd-4562-9c7d-ae6f88e6805d">
> [...cut..]
>  
>   id="5c2326c7-f25c-432f-8848-c94e80dd173b"/>
>  
>  complete
>  
> 
> -
> 
> status of task is always "complete" and the operation take some time, 
> few seconds to some tens of seconds (sync behaviour).
> 
> Any ideas?
> 
> Thanks in advance,
> Giulio
> 

The "async" parameter that you are passing to the REST API is only a
hint. It means that *if* the action performed by the backend has
associated async tasks then the REST API will not wait for them to
finish. In this particular case, the action performed by the backend
doesn't have async tasks, so the parameter is just ignored.

-- 
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3ºD, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Greg Sheremeta 
Thanks. I added it to http://www.ovirt.org/Templates

- Original Message -
> From: "Brian Proffitt" 
> To: "Greg Sheremeta" 
> Cc: "Dave Neary" , "users" 
> Sent: Tuesday, October 14, 2014 10:20:37 AM
> Subject: Re: ovirt presentation template -- google docs format?
> 
> Here you go! (And for everyone else!)
> 
> BKP
> 
> - Original Message -
> > From: "Greg Sheremeta" 
> > To: "Dave Neary" , "Brian Proffitt"
> > , "users" 
> > Sent: Tuesday, October 14, 2014 4:06:49 PM
> > Subject: ovirt presentation template -- google docs format?
> > 
> > Anyone have a Google Docs format of this? [1]
> > 
> > Alternatively, I can make one if someone can find me that logo. I can't
> > find
> > a
> > high-res logo anywhere.
> > 
> > [1] http://www.ovirt.org/File:OVirt-Template.odp
> > 
> > Thanks,
> > Greg
> > 
> > Greg Sheremeta
> > Red Hat, Inc.
> > Sr. Software Engineer, RHEV
> > Cell: 919-807-1086
> > gsher...@redhat.com
> > 
> 
> --
> Brian Proffitt
> 
> Community Liaison
> oVirt
> Open Source and Standards, Red Hat - http://community.redhat.com
> Phone: +1 574 383 9BKP
> IRC: bkp @ OFTC
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Brian Proffitt 
Here you go! (And for everyone else!)

BKP

- Original Message -
> From: "Greg Sheremeta" 
> To: "Dave Neary" , "Brian Proffitt" , 
> "users" 
> Sent: Tuesday, October 14, 2014 4:06:49 PM
> Subject: ovirt presentation template -- google docs format?
> 
> Anyone have a Google Docs format of this? [1]
> 
> Alternatively, I can make one if someone can find me that logo. I can't find
> a
> high-res logo anywhere.
> 
> [1] http://www.ovirt.org/File:OVirt-Template.odp
> 
> Thanks,
> Greg
> 
> Greg Sheremeta
> Red Hat, Inc.
> Sr. Software Engineer, RHEV
> Cell: 919-807-1086
> gsher...@redhat.com
> 

-- 
Brian Proffitt

Community Liaison
oVirt
Open Source and Standards, Red Hat - http://community.redhat.com
Phone: +1 574 383 9BKP
IRC: bkp @ OFTC
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] ovirt presentation template -- google docs format?

2014-10-14 Thread Greg Sheremeta 
Anyone have a Google Docs format of this? [1]

Alternatively, I can make one if someone can find me that logo. I can't find a
high-res logo anywhere.

[1] http://www.ovirt.org/File:OVirt-Template.odp

Thanks,
Greg

Greg Sheremeta
Red Hat, Inc.
Sr. Software Engineer, RHEV
Cell: 919-807-1086
gsher...@redhat.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Enabling GlusterFS in production

2014-10-14 Thread Eduardo Ramos 

Hi friends!

I have just upgraded from 3.2 to 3.4 and it was very nice. Everything 
ok! Now I want to enable Gluster Service to my cluster in production.


I think follow this steps:

* Install manually vdsm-gluster
* Restart supervdsm and vdsmd
* Enable Gluster Service in my Cluster.

Could it cause any problem or downtime?

Thanks.

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] async vm start (python)

2014-10-14 Thread Giulio Casella 

Hi everybody,
I'm trying to start a VM (using python sdk) asynchronously, but I obtain 
synchronous behaviour.

The engine is RHEV-M version 3.4.1-0.31.el6ev.
Here a snippet of code:

-
myvm = api.vms.get(name="VMNAME")
retval = myvm.start(params.Action(async=True))
print ParseHelper.toXml(retval)
-

and this is what I get (retval):

-

true
id="5aa66e96-5fdd-4562-9c7d-ae6f88e6805d">

[...cut..]

id="5c2326c7-f25c-432f-8848-c94e80dd173b"/>


complete


-

status of task is always "complete" and the operation take some time, 
few seconds to some tens of seconds (sync behaviour).


Any ideas?

Thanks in advance,
Giulio

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Spice on Ovirt 3.4.4 Windows 2012 Guests

2014-10-14 Thread David Jaša 
Hi Gary,

I can't tell you what happens on upgrade but in order to be able to
choose Spice consoles for win8/win2012 guests, drop this file
to /etc/ovirt-engine/osinfo.conf.d:


cat > /etc/ovirt-engine/osinfo.conf.d/99-spice_for_win8_and_win2012.properties 
<< EOF
os.windows_8.devices.display.protocols.value = qxl/qxl,vnc/cirrus
os.windows_8x64.devices.display.protocols.value = qxl/qxl,vnc/cirrus
os.windows_2012x64.devices.display.protocols.value = qxl/qxl,vnc/cirrus
EOF

and restart the engine.

You won't be able to use qxl driver (and by extension multi-monitor and
continuous resolution change) but the features provided by spice-vdagent
should continue to work for you.

Regards,

David

On Út, 2014-10-14 at 11:07 +0100, Gary Lloyd wrote:
> Hi
> 
> 
> We are currently running Ovirt 3.3.5 in production, currently our
> Windows Guests are using spice for the console. I have noticed that in
> our test environment running 3.4.4 that this option cannot be selected
> for Windows 2012 guests.
> 
> 
> Does anyone know what will happen to the console on VMs running
> windows 2012 if we upgrade to 3.4.4 on our production environment ?
> 
> 
> Will it simply not work resulting in us having to power down the
> affected VMs or will the existing VMs carry on working with the spice
> console setting ?
> 
> 
> Thanks
> 
> 
> Gary Lloyd
> --
> IT Services
> Keele University
> ---
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Spice on Ovirt 3.4.4 Windows 2012 Guests

2014-10-14 Thread Gary Lloyd 
Hi

We are currently running Ovirt 3.3.5 in production, currently our Windows
Guests are using spice for the console. I have noticed that in our test
environment running 3.4.4 that this option cannot be selected for Windows
2012 guests.

Does anyone know what will happen to the console on VMs running windows
2012 if we upgrade to 3.4.4 on our production environment ?

Will it simply not work resulting in us having to power down the affected
VMs or will the existing VMs carry on working with the spice console
setting ?

Thanks

*Gary Lloyd*
--
IT Services
Keele University
---
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How to mapping LDAP users in AAA

2014-10-14 Thread Alon Bar-Lev 

Hi,

In order to help and create a profile for this variant I need the full output 
of:

$ ldapsearch  -E pr=100/noprompt -o ldif-wrap=no -H ldap://ids.sdju.edu.cn -x 
-D 'cn=directory manager' -w mypassword -b 'dc=sdju,dc=edu,dc=cn'

Please do not paste but paste.

You can send me privately.

Regards,
Alon

- Original Message -
> From: "lofyer" 
> To: "Alon Bar-Lev" 
> Cc: "Yair Zaslavsky" , "users" 
> Sent: Tuesday, October 14, 2014 12:22:03 PM
> Subject: Re: [ovirt-users] How to mapping LDAP users in AAA
> 
> Yes, I do add authz and authn in /etc/ovirt-engine/extension.d/ like this
> 
> ==
> /etc/ovirt-engine/extensions.d/authn-sdju.edu.cn.properties:
> 
> ovirt.engine.extension.name = authn-sdju.edu.cn
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module =
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class =
> org.ovirt.engineextensions.aaa.ldap.AuthnExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
> ovirt.engine.aaa.authn.profile.name = sdju.edu.cn
> ovirt.engine.aaa.authn.authz.plugin = authz-sdju.edu.cn
> config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties
> ==
> /etc/ovirt-engine/extensions.d/authz-sdju.edu.cn.properties:
> 
> ovirt.engine.extension.name = authz-sdju.edu.cn
> ovirt.engine.extension.bindings.method = jbossmodule
> ovirt.engine.extension.binding.jbossmodule.module =
> org.ovirt.engine-extensions.aaa.ldap
> ovirt.engine.extension.binding.jbossmodule.class =
> org.ovirt.engineextensions.aaa.ldap.AuthzExtension
> ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
> config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties
> ==
> 
> And here's my log:
> 
> ldapsearch -H ldap://ids.sdju.edu.cn -b '' -D 'cn=directory manager' -w
> mypassword -s BASE
> # extended LDIF
> #
> # LDAPv3
> # base <> with scope baseObject
> # filter: (objectclass=*)
> # requesting: ALL
> #
> 
> #
> dn:
> objectClass: top
> namingContexts: dc=sdju,dc=edu,dc=cn
> namingContexts: o=NetscapeRoot
> supportedExtension: 2.16.840.1.113730.3.5.7
> supportedExtension: 2.16.840.1.113730.3.5.8
> supportedExtension: 2.16.840.1.113730.3.5.3
> supportedExtension: 2.16.840.1.113730.3.5.5
> supportedExtension: 2.16.840.1.113730.3.5.6
> supportedExtension: 2.16.840.1.113730.3.5.4
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.1
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.2
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.3
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.4
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.5
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.6
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.7
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.8
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.9
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.11
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.12
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.13
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.14
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.15
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.16
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.17
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.18
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.19
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.21
> supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.22
> supportedExtension: 1.3.6.1.4.1.4203.1.11.3
> supportedControl: 2.16.840.1.113730.3.4.2
> supportedControl: 2.16.840.1.113730.3.4.3
> supportedControl: 2.16.840.1.113730.3.4.4
> supportedControl: 2.16.840.1.113730.3.4.5
> supportedControl: 1.2.840.113556.1.4.473
> supportedControl: 2.16.840.1.113730.3.4.9
> supportedControl: 2.16.840.1.113730.3.4.16
> supportedControl: 2.16.840.1.113730.3.4.15
> supportedControl: 2.16.840.1.113730.3.4.17
> supportedControl: 2.16.840.1.113730.3.4.19
> supportedControl: 1.3.6.1.4.1.42.2.27.9.5.2
> supportedControl: 1.3.6.1.4.1.42.2.27.9.5.6
> supportedControl: 1.3.6.1.4.1.42.2.27.9.5.8
> supportedControl: 2.16.840.1.113730.3.4.14
> supportedControl: 1.3.6.1.4.1.1466.29539.12
> supportedControl: 2.16.840.1.113730.3.4.12
> supportedControl: 2.16.840.1.113730.3.4.18
> supportedControl: 2.16.840.1.113730.3.4.13
> supportedSASLMechanisms: EXTERNAL
> supportedSASLMechanisms: DIGEST-MD5
> supportedLDAPVersion: 2
> supportedLDAPVersion: 3
> vendorName: Sun Microsystems, Inc.
> vendorVersion: Sun Java(TM) System Directory Server/5.2_Patch_4
> dataversion: 020121212071504020121212071504
> netscapemdsuffix: cn=ldap://dc=ids1,dc=sdju,dc=edu,dc=cn:389
> 
> # search result
> search: 2
> result: 0 Success
> 
> # numResponses: 2
> # numEntries: 1
> ==
>   ldapsearch  -E pr=100/noprompt -H ldap://ids.sdju.edu.cn -x -D
> 'cn=directory manager' -w mypassword -b ou=JZG,dc=sdju,dc=edu,dc=cn
> # extended LDIF
> #
> # LDAPv3
> # base  with scope subtree
> # filter: (objectclass=*)
> # request

Re: [ovirt-users] How to mapping LDAP users in AAA

2014-10-14 Thread lofyer 

Yes, I do add authz and authn in /etc/ovirt-engine/extension.d/ like this

==
/etc/ovirt-engine/extensions.d/authn-sdju.edu.cn.properties:

ovirt.engine.extension.name = authn-sdju.edu.cn
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module = 
org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class = 
org.ovirt.engineextensions.aaa.ldap.AuthnExtension

ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authn
ovirt.engine.aaa.authn.profile.name = sdju.edu.cn
ovirt.engine.aaa.authn.authz.plugin = authz-sdju.edu.cn
config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties
==
/etc/ovirt-engine/extensions.d/authz-sdju.edu.cn.properties:

ovirt.engine.extension.name = authz-sdju.edu.cn
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module = 
org.ovirt.engine-extensions.aaa.ldap
ovirt.engine.extension.binding.jbossmodule.class = 
org.ovirt.engineextensions.aaa.ldap.AuthzExtension

ovirt.engine.extension.provides = org.ovirt.engine.api.extensions.aaa.Authz
config.profile.file.1 = /etc/ovirt-engine/aaa/sdju.edu.cn.properties
==

And here's my log:

ldapsearch -H ldap://ids.sdju.edu.cn -b '' -D 'cn=directory manager' -w 
mypassword -s BASE

# extended LDIF
#
# LDAPv3
# base <> with scope baseObject
# filter: (objectclass=*)
# requesting: ALL
#

#
dn:
objectClass: top
namingContexts: dc=sdju,dc=edu,dc=cn
namingContexts: o=NetscapeRoot
supportedExtension: 2.16.840.1.113730.3.5.7
supportedExtension: 2.16.840.1.113730.3.5.8
supportedExtension: 2.16.840.1.113730.3.5.3
supportedExtension: 2.16.840.1.113730.3.5.5
supportedExtension: 2.16.840.1.113730.3.5.6
supportedExtension: 2.16.840.1.113730.3.5.4
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.1
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.2
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.3
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.4
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.5
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.6
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.7
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.8
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.9
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.11
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.12
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.13
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.14
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.15
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.16
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.17
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.18
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.19
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.21
supportedExtension: 1.3.6.1.4.1.42.2.27.9.6.22
supportedExtension: 1.3.6.1.4.1.4203.1.11.3
supportedControl: 2.16.840.1.113730.3.4.2
supportedControl: 2.16.840.1.113730.3.4.3
supportedControl: 2.16.840.1.113730.3.4.4
supportedControl: 2.16.840.1.113730.3.4.5
supportedControl: 1.2.840.113556.1.4.473
supportedControl: 2.16.840.1.113730.3.4.9
supportedControl: 2.16.840.1.113730.3.4.16
supportedControl: 2.16.840.1.113730.3.4.15
supportedControl: 2.16.840.1.113730.3.4.17
supportedControl: 2.16.840.1.113730.3.4.19
supportedControl: 1.3.6.1.4.1.42.2.27.9.5.2
supportedControl: 1.3.6.1.4.1.42.2.27.9.5.6
supportedControl: 1.3.6.1.4.1.42.2.27.9.5.8
supportedControl: 2.16.840.1.113730.3.4.14
supportedControl: 1.3.6.1.4.1.1466.29539.12
supportedControl: 2.16.840.1.113730.3.4.12
supportedControl: 2.16.840.1.113730.3.4.18
supportedControl: 2.16.840.1.113730.3.4.13
supportedSASLMechanisms: EXTERNAL
supportedSASLMechanisms: DIGEST-MD5
supportedLDAPVersion: 2
supportedLDAPVersion: 3
vendorName: Sun Microsystems, Inc.
vendorVersion: Sun Java(TM) System Directory Server/5.2_Patch_4
dataversion: 020121212071504020121212071504
netscapemdsuffix: cn=ldap://dc=ids1,dc=sdju,dc=edu,dc=cn:389

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1
==
 ldapsearch  -E pr=100/noprompt -H ldap://ids.sdju.edu.cn -x -D 
'cn=directory manager' -w mypassword -b ou=JZG,dc=sdju,dc=edu,dc=cn

# extended LDIF
#
# LDAPv3
# base  with scope subtree
# filter: (objectclass=*)
# requesting: ALL
# with pagedResults control: size=100
#

# JZG, sdju.edu.cn
dn: ou=JZG,dc=sdju,dc=edu,dc=cn
ou: JZG
objectClass: organizationalUnit
objectClass: iplanet-am-managed-people-container
objectClass: top

# 30419, JZG, sdju.edu.cn
dn: uid=30419,ou=JZG,dc=sdju,dc=edu,dc=cn
eduPersonCardID: X219631030057X
uid: 30419
...
...
...
userPassword:: 
e1NTSEF9OUNWcXMxbnA0YjFsU0NzZDNqODRIOTVBQ1VQTlR1cEI0UmNnSEE9PQ=

 =

# search result
search: 2
result: 0 Success

# numResponses: 1251
# numEntries: 1250


在 14-10-14 下午3:18, Alon Bar-Lev 写道:


- Original Message -

From: "lofyer" 
To: "Yair Zaslavsky" 
Cc: "users" 
Sent: Tuesday, October 14, 2014 9:29:57 AM
Subject: Re: [ovirt-users] How to mapping LDAP users in AAA

Sun Java Acce

Re: [ovirt-users] How to mapping LDAP users in AAA

2014-10-14 Thread Alon Bar-Lev 


- Original Message -
> From: "lofyer" 
> To: "Yair Zaslavsky" 
> Cc: "users" 
> Sent: Tuesday, October 14, 2014 9:29:57 AM
> Subject: Re: [ovirt-users] How to mapping LDAP users in AAA
> 
> Sun Java Access System Manager

this is not openldap... why do you use openldap profile?

please attach full export of this ldap server, output of:

rootdse:
$ ldapsearch -H ldap://example.com -b '' -x -D 'cn=directory manager' -w 
mypassword -s BASE

entities:
$ ldapsearch -o ldif-wrap=no -E pr=100/noprompt -H ldap://example.com -x -D 
'cn=directory manager' -w mypassword -b 

> 
> 
> 在 14-10-14 下午1:52, Yair Zaslavsky 写道:
> >
> > - Original Message -
> >> From: "lofyer" 
> >> To: "users" 
> >> Sent: Tuesday, October 14, 2014 5:10:56 AM
> >> Subject: [ovirt-users] How to mapping LDAP users in AAA
> >>
> >> I've got a LDAP server without kerberos and I am trying to intergrate
> >> its users to oVirt-3.5 with AAA.
> >> ==
> > Which ldap server is that, what vendor?
> >
> >> /etc/ovirt-engine/aaa/example.properties:
> >>
> >> include = 
> >>
> >> vars.user = cn=directory manager
> >> vars.password = mypassword
> >> vars.server = example.com
> >>
> >> #pool.default.ssl.startTLS = false
> >> #pool.default.ssl.truststore.file = /etc/ldap_tls/ca_cert.pem
> >> #pool.default.ssl.truststore.password = admin
> >>
> >> pool.default.serverset.single.server = ${global:vars.server}
> >> pool.default.auth.simple.bindDN = ${global:vars.user}
> >> pool.default.auth.simple.password = ${global:vars.password}
> >> ==
> >>
> >> This is my basic ldap infomation:
> >>
> >> ou=Groups
> >> |
> >> + cn=UserGroup1
> >> |
> >> + cn=UserGroup2
> >>
> >> ou=UserGroup1
> >> |
> >> + cn=user1
> >> |
> >> + cn=user2
> >>
> >>
> >> ou=UserGroup2
> >> |
> >> + cn=user3
> >> |
> >> + cn=user4
> >>
> >> ==
> >>
> >> Now I can see example.com in web portal but I cannot list users in UG1
> >> or UG2.
> >>
> >> I find that I could map DN, ID NAME, DISPLAY in the config file. What
> >> should I add in the config file then?
> >> ___
> >> Users mailing list
> >> Users@ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> >>
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] How to mapping LDAP users in AAA

2014-10-14 Thread Alon Bar-Lev 


- Original Message -
> From: "lofyer" 
> To: "users" 
> Sent: Tuesday, October 14, 2014 5:10:56 AM
> Subject: [ovirt-users] How to mapping LDAP users in AAA
> 
> I've got a LDAP server without kerberos and I am trying to intergrate
> its users to oVirt-3.5 with AAA.
> ==
> /etc/ovirt-engine/aaa/example.properties:

You need to create two extensions, one for authentication and another for 
authorization at /etc/ovirt-engine/extensions.d/ see[1], both should refer to 
your example.properties.

But I see you created these based on bellow.

[1] 
http://gerrit.ovirt.org/gitweb?p=ovirt-engine-extension-aaa-ldap.git;a=blob;f=README;hb=HEAD#l17

> 
> include = 
> 
> vars.user = cn=directory manager

are you sure this ^ is the full dn of the user?

> vars.password = mypassword
> vars.server = example.com
> 
> #pool.default.ssl.startTLS = false
> #pool.default.ssl.truststore.file = /etc/ldap_tls/ca_cert.pem
> #pool.default.ssl.truststore.password = admin
> 
> pool.default.serverset.single.server = ${global:vars.server}
> pool.default.auth.simple.bindDN = ${global:vars.user}
> pool.default.auth.simple.password = ${global:vars.password}
> ==
> 
> This is my basic ldap infomation:
> 
> ou=Groups
> |
> + cn=UserGroup1
> |
> + cn=UserGroup2
> 
> ou=UserGroup1
> |
> + cn=user1
> |
> + cn=user2
> 
> 
> ou=UserGroup2
> |
> + cn=user3
> |
> + cn=user4
> 
> ==
> 
> Now I can see example.com in web portal but I cannot list users in UG1
> or UG2.

in admin portal?

> 
> I find that I could map DN, ID NAME, DISPLAY in the config file. What
> should I add in the config file then?

you do not need to touch these...

1. which version of ovirt-engine do you use?
2. which version of ovirt-engine-extension-aaa-ldap do you use?

what is your root dse?

$ ldapsearch -H ldap://example.com -b '' -x -D 'cn=directory manager' -w 
mypassword -s BASE 

seek namingContexts it should contain first entry a suffix for all objects.

if you try to search users within "Users" add tab within webadmin and find 
nothing and rootdse is ok please modify 
/usr/share/ovirt-engine/services/ovirt-engine/ovirt-engine.xml.in and set:

 <--- find this
   <--- modify this


 <--- add this
   <--- add this
<--- add this
   <--- find this


stop engine
remove /var/log/ovirt-engine/engine.log
start engine
try to search
send me engine.log

Regards,
Alon
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users