Re: [ovirt-users] moVirt 1.6 released!

2016-09-21 Thread NUNIN Roberto

>Also tested that aSPICE works, which is >awesome! Keep up the great work!

Interesting: did you have used aSpice to act as a console viewer ?
Could you share basics ?

TIA

Roberto



Questo messaggio e' indirizzato esclusivamente al destinatario indicato e 
potrebbe contenere informazioni confidenziali, riservate o proprietarie. 
Qualora la presente venisse ricevuta per errore, si prega di segnalarlo 
immediatamente al mittente, cancellando l'originale e ogni sua copia e 
distruggendo eventuali copie cartacee. Ogni altro uso e' strettamente proibito 
e potrebbe essere fonte di violazione di legge.

This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise private information. If you have received it in 
error, please notify the sender immediately, deleting the original and all 
copies and destroying any hard copies. Any other use is strictly prohibited and 
may be unlawful.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] VMs get paused when FC port in any host get online

2016-09-21 Thread Nir Soffer
On Wed, Sep 21, 2016 at 9:19 PM, Federico Alberto Sayd 
wrote:

> Hello:
>
> Since I upgraded to 4.0 I have troubles with the storage of my oVirt
> setup. I have 2 IBM 3512 arrays connected to 8 ovirt hosts through FC.
> When a host is rebooted or when a new port get online in the FC switchs
> although the port isn't connected to storage or oVirt hosts; oVirt reports
> I/O problems and pause some vm's. I have to manually resume the vm's. It
> seem that any change (even non disruptive changes) to FC switchs and HBAs
> causes that ovirt detects I/O problems.
>
> How I can debug this issue. How can I know if It is related to vdsm/ovirt,
> mulitpathd..?
>

We need to inspect engine log, vdsm log, supervdsm.log, sanlock log, and
/var/log/messages.

If ovirt detect io problems it is probably because they are problems.

Can you file a bug and attach the logs?

Nir
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] moVirt 1.6 released!

2016-09-21 Thread Karli Sjöberg

Den 21 sep 2016 11:38 skrev Tomas Jelinek :
>
> Dear all,
>
> a new release of moVirt (Android client for oVirt) 1.6 has just been released!
>
> The main aim of this version was to move fully to the 4.0 API (changelog: 
> [1]).
>
> If you have it already installed on your device, stay tuned and it will 
> arrive soon.
> If you don't, you can either install it from google play store [2] or from 
> direct link [3].
>
> Please share any feedback!

Hi!

Works like a charm with our 3.6 engine! Just confusing that I had to swipe down 
(refresh) to get a listing of VM's and such, I thought it did that by itself? 
That is, if I open up the app and do nothing, just wait, the list stays empty 
regardless of how long I waited. I started to think there was something wrong 
and began to troubleshoot, first the app-settings (address, login, password) 
and then from the engine before I realized I had to swipe down to see 
anything:) Is that by design or a bug?

Also tested that aSPICE works, which is awesome! Keep up the great work!

/K

> Tomas
>
> [1]: https://github.com/matobet/movirt#v16
> [2]: https://play.google.com/store/apps/details?id=org.ovirt.mobile.movirt
> [3]: 
> https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-release.apk?raw=true
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ansible oVirt storage management module

2016-09-21 Thread Ondra Machacek

Hi,

yes, correct. Feel free to open issue/PR if you miss there any
functionality.

Thanks,
Ondra

On 09/21/2016 06:57 PM, Groten, Ryan wrote:

Hey guys,



Just wondering if this PR is the oVirt module you are referring to?
https://github.com/ansible/ansible-modules-extras/pull/2836



If so looks like it can replace (and then some!) the module I opened a
while back so I can cancel that PR.



Thanks,

Ryan



*From:*Oved Ourfali [mailto:oourf...@redhat.com]
*Sent:* Thursday, July 28, 2016 12:40 AM
*To:* Groten, Ryan ; Juan Antonio Hernandez
Fernandez ; Ondra Machacek 
*Cc:* Yaniv Kaul ; users 
*Subject:* Re: [ovirt-users] Ansible oVirt storage management module



Hi



Adding some relevant folks here.

Until our module is ready I don't think there should be an issue with
pushing this.

However, there might be a name collision in the future.



Juan/Ondra - thoughts?



Thanks,

Oved





On Wed, Jul 27, 2016 at 8:07 PM, Groten, Ryan > wrote:

Thanks for the feedback Yaniv, I’d love to see a python module for
ovirt actions.  What I’ve built is simple and a bit limited to the
features I needed, so if we can implement an existing library that
has all the features and is proven to work then the automation tasks
would be much simpler.

And of course, a supported Ansible module would be even better, it
would probably get more traction towards being added as an extra or
core module that way too.



If you think this would be a valuable addition to the extra modules
that ship with Ansible (at least temporarily), I’d appreciate if you
comment ‘shipit’ on the pull request to mark it for inclusion!



Thanks,

Ryan



*From:*Yaniv Kaul [mailto:yk...@redhat.com ]
*Sent:* Sunday, July 24, 2016 4:52 AM
*To:* Groten, Ryan >
*Cc:* users >
*Subject:* Re: [ovirt-users] Ansible oVirt storage management module







On Wed, Jul 20, 2016 at 12:00 AM, Groten, Ryan
> wrote:

Hey Ansible users,



I wrote a module for storage management and created a pull
request to have it added as an Extra module in Ansible.  It can
be used to create/delete/attach/destroy pool disks.



https://github.com/ansible/ansible-modules-extras/pull/2509



Ryan



Hi Ryan,



This looks really interesting and surely is useful.

My only comment would be that I think we should start to think about
some Python module for oVirt actions.

Otherwise, every project (this, ovirt-system-tests, others) that use
the ovirt Python SDK for oVirt automation more or less re-implement
the same functions.

What do you think?



Also, we are thinking about auto-generating such Ansible playbook
(same way as the SDKs are generated).

It might look less 'human', but it will always be complete and
up-to-date with all features.

Thanks,

Y.




___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users




___
Users mailing list
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] VMs get paused when FC port in any host get online

2016-09-21 Thread Federico Alberto Sayd

Hello:

Since I upgraded to 4.0 I have troubles with the storage of my oVirt 
setup. I have 2 IBM 3512 arrays connected to 8 ovirt hosts through FC.
When a host is rebooted or when a new port get online in the FC switchs 
although the port isn't connected to storage or oVirt hosts; oVirt 
reports I/O problems and pause some vm's. I have to manually resume the 
vm's. It seem that any change (even non disruptive changes) to FC 
switchs and HBAs causes that ovirt detects I/O problems.


How I can debug this issue. How can I know if It is related to 
vdsm/ovirt, mulitpathd..?


Thanks in advance


Federico

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Ansible oVirt storage management module

2016-09-21 Thread Groten, Ryan
Hey guys,

Just wondering if this PR is the oVirt module you are referring to?  
https://github.com/ansible/ansible-modules-extras/pull/2836

If so looks like it can replace (and then some!) the module I opened a while 
back so I can cancel that PR.

Thanks,
Ryan

From: Oved Ourfali [mailto:oourf...@redhat.com]
Sent: Thursday, July 28, 2016 12:40 AM
To: Groten, Ryan ; Juan Antonio Hernandez Fernandez 
; Ondra Machacek 
Cc: Yaniv Kaul ; users 
Subject: Re: [ovirt-users] Ansible oVirt storage management module

Hi

Adding some relevant folks here.
Until our module is ready I don't think there should be an issue with pushing 
this.
However, there might be a name collision in the future.

Juan/Ondra - thoughts?

Thanks,
Oved


On Wed, Jul 27, 2016 at 8:07 PM, Groten, Ryan 
> wrote:
Thanks for the feedback Yaniv, I’d love to see a python module for ovirt 
actions.  What I’ve built is simple and a bit limited to the features I needed, 
so if we can implement an existing library that has all the features and is 
proven to work then the automation tasks would be much simpler.
And of course, a supported Ansible module would be even better, it would 
probably get more traction towards being added as an extra or core module that 
way too.

If you think this would be a valuable addition to the extra modules that ship 
with Ansible (at least temporarily), I’d appreciate if you comment ‘shipit’ on 
the pull request to mark it for inclusion!

Thanks,
Ryan

From: Yaniv Kaul [mailto:yk...@redhat.com]
Sent: Sunday, July 24, 2016 4:52 AM
To: Groten, Ryan >
Cc: users >
Subject: Re: [ovirt-users] Ansible oVirt storage management module



On Wed, Jul 20, 2016 at 12:00 AM, Groten, Ryan 
> wrote:
Hey Ansible users,

I wrote a module for storage management and created a pull request to have it 
added as an Extra module in Ansible.  It can be used to 
create/delete/attach/destroy pool disks.

https://github.com/ansible/ansible-modules-extras/pull/2509

Ryan

Hi Ryan,

This looks really interesting and surely is useful.
My only comment would be that I think we should start to think about some 
Python module for oVirt actions.
Otherwise, every project (this, ovirt-system-tests, others) that use the ovirt 
Python SDK for oVirt automation more or less re-implement the same functions.
What do you think?

Also, we are thinking about auto-generating such Ansible playbook (same way as 
the SDKs are generated).
It might look less 'human', but it will always be complete and up-to-date with 
all features.
Thanks,
Y.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt 4.0.3 and Active directory

2016-09-21 Thread Ondra Machacek

On 09/21/2016 04:53 PM, nicola.gentile.to wrote:

Hi,

I have installed ovirt 4.0.3 on my servers. Now I would add
authentication with active directory, for user portal.

In the previous version I have used the following command:

engine-manage-domains add --domain=mydomain --provider=ad
--user=myuser --add-permissions

but now this command there isn't.

I found this command ovirt-engine-extension-aaa-ldap-setup and now I ask
you if this command is the substitute, this command is not present on my
installation, I must add it I suppose.

Is there an howto page on the documentation to help me?


There is README in the 'ovirt-engine-extension-aaa-ldap' package.

 $ rpm -qd ovirt-engine-extension-aaa-ldap

What you need to do is just to install setup package:

 $ yum install ovirt-engine-extension-aaa-ldap-setup

And then run command:

 $ ovirt-engine-extension-aaa-ldap-setup

The setup will guide you throughout the process.



How to I proceede?

Thank you for your help

Regard

Nicola
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] ovirt 4.0.3 and Active directory

2016-09-21 Thread nicola.gentile.to

Hi,

I have installed ovirt 4.0.3 on my servers. Now I would add 
authentication with active directory, for user portal.


In the previous version I have used the following command:

engine-manage-domains add --domain=mydomain --provider=ad 
--user=myuser --add-permissions


but now this command there isn't.

I found this command ovirt-engine-extension-aaa-ldap-setup and now I ask 
you if this command is the substitute, this command is not present on my 
installation, I must add it I suppose.


Is there an howto page on the documentation to help me?

How to I proceede?

Thank you for your help

Regard

Nicola
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] [Review-request] feature page for gdeploy cockpit integration

2016-09-21 Thread Ramesh Nachimuthu


Hi, 

We are planning to integrate gdeploy with cockpit-ovirt plugin to improve the 
deployment of Hyper-Converged oVrt-Gluster solution. I have sent a pull request 
to add a feature page for the same. It will helpful if you can review and 
provide your valuable feedback. 


Pull request : https://github.com/oVirt/ovirt-site/pull/480 
Regards, 
Ramesh 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can't add logical network

2016-09-21 Thread Davide Ferrari
Ok, just saw that if I go to

Networks -> br20 -> Hosts -> Unattached -> right click on  vm04 -> setup
host networks

But there I cannot see the bond0.20 interface, just bond0 and bond1

2016-09-21 15:08 GMT+02:00 Davide Ferrari :

> By the way, what are the exact steps to add a new network in oVirt?
> Because I was following this guide
>
> https://www.ovirt.org/documentation/how-to/networking/bonding-vlan-bridge/
>
> that basically explains how to create manually a standard
> bond+vlan+bridge, that I already did on my ovirt hosts, but I can't manage
> to get the network working in the VMs. Ovirt always complains about that
> the network is not available on that host.
> I created a network named "br20" in my case.
> My ifcfg-* files:
>
> [root@vm04 network-scripts]# cat ifcfg-bond0.20
> DEVICE=bond0.20
> VLAN=yes
> BOOTPROTO=none
> NM_CONTROLLED=no
> BRIDGE=br20
> MTU=1500
> [root@vm04 network-scripts]# cat ifcfg-br20
> TYPE=Bridge
> NM_CONTROLLED="no"
> BOOTPROTO="none"
> DEVICE="br20"
> IPADDR=192.168.9.228
> NETMASK=255.255.255.0
> ONBOOT="yes"
> DEFROUTE=no
>
> What am I missing?
>
> 2016-09-21 7:53 GMT+02:00 Edward Haas :
>
>>
>>
>> On Tue, Sep 20, 2016 at 12:13 PM, Maxence Sartiaux 
>> wrote:
>>
>>> Okay, i found a workaround.
>>>
>>> - Create empty ifcfg-lan on all hosts (touch
>>> /etc/sysconfig/network-scripts/ifcfg-lan)
>>> - Assign the bridge to the bond (Ovirt only add MTU=1500 in the file)
>>> - Unassign the bridge (Ovirt rewrite the bond configuration files)
>>> - Re-assign the bridge on the bond
>>> - yay it work !
>>>
>>
>> I would recommend describing the exact steps you do, provide output of the
>> ifcfg list of files at each step + vdsm and supervdsm logs.
>>
>> I am not clear what is the 'lan' device is representing, is this your
>> bond name?
>> network name?
>>
>>
>>
>>>
>>> On Tue, 2016-09-20 at 10:08 +0200, Maxence Sartiaux wrote:
>>>
>>> I configured the bond manually by editing the ifcfg file like i did in
>>> my old install on ovirt 3.6 and 4.0
>>>
>>> the only ifcfg file i have are the 4 for the physical interfaces, two
>>> for the bonds and one for the ovirtmgmt bridge.
>>>
>>> I'll send the vdsm log later.
>>>
>>> On Mon, 2016-09-19 at 10:14 -0400, Francesco Romani wrote:
>>>
>>>
>>> From: "Maxence Sartiaux" 
>>> To: "users" 
>>> Sent: Monday, September 19, 2016 11:53:12 AM
>>> Subject: [ovirt-users] Can't add logical network
>>>
>>> Hello,
>>>
>>> On a clean install ovirt 4.0.3-1, i've configured my bond on my
>>> hypervisor, created a new network on the engine and now i try to
>>> assign the logical network to my bond in the host network settings.
>>>
>>> When i save the configuration, the engine throw me an error and the
>>> following event
>>>
>>> VDSM hypervisor1 command failed: [Errno 2] No such file or directory:
>>> u'/etc/sysconfig/network-scripts/ifcfg-lan'
>>>
>>> if i "touch" the file manually i don't have this error but my file
>>> only contain "MTU=1500" nothing more.
>>>
>>> Engine bug or i miss something ?
>>>
>>> How you configured the bond on your hypervisor?
>>> Seems like Vdsm doesn't like your changes, perhaps it cannot just
>>> identify the interface configuration
>>>
>>> Edward, do you have any recommendations about this flow?
>>>
>>> --
>>> Francesco Romani
>>> RedHat Engineering Virtualization R & D
>>> Phone: 8261328
>>> IRC: fromani
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>
> --
> Davide Ferrari
> Senior Systems Engineer
>



-- 
Davide Ferrari
Senior Systems Engineer
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Can't add logical network

2016-09-21 Thread Davide Ferrari
By the way, what are the exact steps to add a new network in oVirt?
Because I was following this guide

https://www.ovirt.org/documentation/how-to/networking/bonding-vlan-bridge/

that basically explains how to create manually a standard bond+vlan+bridge,
that I already did on my ovirt hosts, but I can't manage to get the network
working in the VMs. Ovirt always complains about that the network is not
available on that host.
I created a network named "br20" in my case.
My ifcfg-* files:

[root@vm04 network-scripts]# cat ifcfg-bond0.20
DEVICE=bond0.20
VLAN=yes
BOOTPROTO=none
NM_CONTROLLED=no
BRIDGE=br20
MTU=1500
[root@vm04 network-scripts]# cat ifcfg-br20
TYPE=Bridge
NM_CONTROLLED="no"
BOOTPROTO="none"
DEVICE="br20"
IPADDR=192.168.9.228
NETMASK=255.255.255.0
ONBOOT="yes"
DEFROUTE=no

What am I missing?

2016-09-21 7:53 GMT+02:00 Edward Haas :

>
>
> On Tue, Sep 20, 2016 at 12:13 PM, Maxence Sartiaux 
> wrote:
>
>> Okay, i found a workaround.
>>
>> - Create empty ifcfg-lan on all hosts (touch
>> /etc/sysconfig/network-scripts/ifcfg-lan)
>> - Assign the bridge to the bond (Ovirt only add MTU=1500 in the file)
>> - Unassign the bridge (Ovirt rewrite the bond configuration files)
>> - Re-assign the bridge on the bond
>> - yay it work !
>>
>
> I would recommend describing the exact steps you do, provide output of the
> ifcfg list of files at each step + vdsm and supervdsm logs.
>
> I am not clear what is the 'lan' device is representing, is this your bond
> name?
> network name?
>
>
>
>>
>> On Tue, 2016-09-20 at 10:08 +0200, Maxence Sartiaux wrote:
>>
>> I configured the bond manually by editing the ifcfg file like i did in
>> my old install on ovirt 3.6 and 4.0
>>
>> the only ifcfg file i have are the 4 for the physical interfaces, two
>> for the bonds and one for the ovirtmgmt bridge.
>>
>> I'll send the vdsm log later.
>>
>> On Mon, 2016-09-19 at 10:14 -0400, Francesco Romani wrote:
>>
>>
>> From: "Maxence Sartiaux" 
>> To: "users" 
>> Sent: Monday, September 19, 2016 11:53:12 AM
>> Subject: [ovirt-users] Can't add logical network
>>
>> Hello,
>>
>> On a clean install ovirt 4.0.3-1, i've configured my bond on my
>> hypervisor, created a new network on the engine and now i try to
>> assign the logical network to my bond in the host network settings.
>>
>> When i save the configuration, the engine throw me an error and the
>> following event
>>
>> VDSM hypervisor1 command failed: [Errno 2] No such file or directory:
>> u'/etc/sysconfig/network-scripts/ifcfg-lan'
>>
>> if i "touch" the file manually i don't have this error but my file
>> only contain "MTU=1500" nothing more.
>>
>> Engine bug or i miss something ?
>>
>> How you configured the bond on your hypervisor?
>> Seems like Vdsm doesn't like your changes, perhaps it cannot just
>> identify the interface configuration
>>
>> Edward, do you have any recommendations about this flow?
>>
>> --
>> Francesco Romani
>> RedHat Engineering Virtualization R & D
>> Phone: 8261328
>> IRC: fromani
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


-- 
Davide Ferrari
Senior Systems Engineer
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Samba 4 Active Directory & ovirt 4

2016-09-21 Thread Maxence Sartiaux
Thank you for the response, with the log level i saw my error.

I had an authorization problem, i've configure the "Search user" and it
worked.

Sorry for the inconvenience.

On Wed, 2016-09-21 at 12:16 +0200, Ondra Machacek wrote:
> On 09/21/2016 12:03 PM, Maxence Sartiaux wrote:
> > 
> > Hello,
> > 
> > I try to connect ovirt 4.0.3 to my Samba 4.5 Active Directory to
> > permit
> > the login of AD users to ovirt.
> > 
> > For now i installed ovirt-engine-extension-aaa-ldap-setup.noarch
> > and ovirt-engine-extension-aaa-misc.noarch
> > 
> > # ovirt-engine-extension-aaa-ldap-setup
> > - selected "Active Directory"
> > - Anonymous search user
> > 
> > I can run a search but when i try to login with the username alone
> > "testuser" -> error "CREDENTIALS_INCORRECT", if i login with the
> > user+domain "testu...@abc.lan " my auth
> > succeed
> > but -> "Cannot resolve principal 'testu...@abc.lan'"
> > 
> > 
> > # ovirt-engine-extensions-tool aaa login-user --profile=abc.lan
> > --user-name=testuser 
> > 
> > ...
> > 2016-09-21 09:53:29 INFOAPI:
> > <--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='abc.lan'
> > result=CREDENTIALS_INCORRECT
> > 2016-09-21 09:53:29 SEVERE  Authn.Result code is:
> > CREDENTIALS_INCORRECT
> > 
> > # ovirt-engine-extensions-tool aaa login-user --profile=abc.lan
> > --user-name=testu...@abc.lan
> > 
> > ...
> > 2016-09-21 09:52:02 INFOAPI:
> > -->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
> > principal='testu...@abc.lan '
> > 2016-09-21 09:52:02 SEVERE  Cannot resolve principal 'testuser@abc.
> > lan'
> > 
> > 
> > After some search i configured the mapping plugin to automaticaly
> > add
> > @abc.lan to the user like that i don't need to add the @abc.lan to
> > connect but still the same error, cannot resolve principal ...
> > 
> > /# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties/
> > 
> > ovirt.engine.extension.name = mapping-suffix
> > ovirt.engine.extension.bindings.method = jbossmodule
> > ovirt.engine.extension.binding.jbossmodule.module =
> > org.ovirt.engine-extensions.aaa.misc
> > ovirt.engine.extension.binding.jbossmodule.class =
> > org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
> > ovirt.engine.extension.provides =
> > org.ovirt.engine.api.extensions.aaa.Mapping
> > config.mapUser.type = regex
> > config.mapUser.regex.pattern = ^(?[^@]*)$
> > config.mapUser.regex.replacement = ${user}@abc.lan  > abc.lan>
> > config.mapUser.regex.mustMatch = false
> > 
> > /# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties/
> > 
> > ...
> > ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix
> > 
> > Any ideas ?
> 
> What's the user principal name of the user 'testuser'?
> You can check out as follows:
> 
>   $ ldapsearch -x -b 'DC=abc,DC=lan -H 'ldap://abc.lan' 
> 'sAMAccountName=testuser' userPrincipalName
> 
> Is it indeed 'testu...@abc.lan' or different? If different then you
> need 
> to use that UPN.
> 
> Anyway debug log of test tool of login command would be helpful.
> 
>   $ ovirt-engine-extensions-tool --log-level=FINEST 
> --log-file=/tmp/aaa.log aaa login-user --profile=abc.lan 
> --user-name=testuser
> 
> > 
> > 
> > Thank you.
> > 
> > 
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> > 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Samba 4 Active Directory & ovirt 4

2016-09-21 Thread Ondra Machacek

On 09/21/2016 12:03 PM, Maxence Sartiaux wrote:

Hello,

I try to connect ovirt 4.0.3 to my Samba 4.5 Active Directory to permit
the login of AD users to ovirt.

For now i installed ovirt-engine-extension-aaa-ldap-setup.noarch
and ovirt-engine-extension-aaa-misc.noarch

# ovirt-engine-extension-aaa-ldap-setup
- selected "Active Directory"
- Anonymous search user

I can run a search but when i try to login with the username alone
"testuser" -> error "CREDENTIALS_INCORRECT", if i login with the
user+domain "testu...@abc.lan " my auth succeed
but -> "Cannot resolve principal 'testu...@abc.lan'"


# ovirt-engine-extensions-tool aaa login-user --profile=abc.lan
--user-name=testuser 

...
2016-09-21 09:53:29 INFOAPI:
<--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='abc.lan'
result=CREDENTIALS_INCORRECT
2016-09-21 09:53:29 SEVERE  Authn.Result code is: CREDENTIALS_INCORRECT

# ovirt-engine-extensions-tool aaa login-user --profile=abc.lan
--user-name=testu...@abc.lan

...
2016-09-21 09:52:02 INFOAPI:
-->Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD
principal='testu...@abc.lan '
2016-09-21 09:52:02 SEVERE  Cannot resolve principal 'testu...@abc.lan'


After some search i configured the mapping plugin to automaticaly add
@abc.lan to the user like that i don't need to add the @abc.lan to
connect but still the same error, cannot resolve principal ...

/# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties/

ovirt.engine.extension.name = mapping-suffix
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module =
org.ovirt.engine-extensions.aaa.misc
ovirt.engine.extension.binding.jbossmodule.class =
org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
ovirt.engine.extension.provides =
org.ovirt.engine.api.extensions.aaa.Mapping
config.mapUser.type = regex
config.mapUser.regex.pattern = ^(?[^@]*)$
config.mapUser.regex.replacement = ${user}@abc.lan 
config.mapUser.regex.mustMatch = false

/# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties/

...
ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix

Any ideas ?


What's the user principal name of the user 'testuser'?
You can check out as follows:

 $ ldapsearch -x -b 'DC=abc,DC=lan -H 'ldap://abc.lan' 
'sAMAccountName=testuser' userPrincipalName


Is it indeed 'testu...@abc.lan' or different? If different then you need 
to use that UPN.


Anyway debug log of test tool of login command would be helpful.

 $ ovirt-engine-extensions-tool --log-level=FINEST 
--log-file=/tmp/aaa.log aaa login-user --profile=abc.lan 
--user-name=testuser




Thank you.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] Samba 4 Active Directory & ovirt 4

2016-09-21 Thread Maxence Sartiaux
Hello,

I try to connect ovirt 4.0.3 to my Samba 4.5 Active Directory to permit
the login of AD users to ovirt.

For now i installed ovirt-engine-extension-aaa-ldap-setup.noarch
and ovirt-engine-extension-aaa-misc.noarch

# ovirt-engine-extension-aaa-ldap-setup
- selected "Active Directory"
- Anonymous search user

I can run a search but when i try to login with the username alone
"testuser" -> error "CREDENTIALS_INCORRECT", if i login with the
user+domain "testu...@abc.lan" my auth succeed but -> "Cannot resolve
principal 'testu...@abc.lan'"


# ovirt-engine-extensions-tool aaa login-user --profile=abc.lan --user-
name=testuser

...
2016-09-21 09:53:29 INFOAPI: <
--Authn.InvokeCommands.AUTHENTICATE_CREDENTIALS profile='abc.lan'
result=CREDENTIALS_INCORRECT
2016-09-21 09:53:29 SEVERE  Authn.Result code is:
CREDENTIALS_INCORRECT

# ovirt-engine-extensions-tool aaa login-user --profile=abc.lan --user-
name=testu...@abc.lan

...
2016-09-21 09:52:02 INFOAPI: --
>Authz.InvokeCommands.FETCH_PRINCIPAL_RECORD principal='testu...@abc.la
n'
2016-09-21 09:52:02 SEVERE  Cannot resolve principal 'testuser@
abc.lan'


After some search i configured the mapping plugin to automaticaly add
@abc.lan to the user like that i don't need to add the @abc.lan to
connect but still the same error, cannot resolve principal ...

# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties

ovirt.engine.extension.name = mapping-suffix
ovirt.engine.extension.bindings.method = jbossmodule
ovirt.engine.extension.binding.jbossmodule.module =
org.ovirt.engine-extensions.aaa.misc
ovirt.engine.extension.binding.jbossmodule.class =
org.ovirt.engineextensions.aaa.misc.mapping.MappingExtension
ovirt.engine.extension.provides =
org.ovirt.engine.api.extensions.aaa.Mapping
config.mapUser.type = regex
config.mapUser.regex.pattern = ^(?[^@]*)$
config.mapUser.regex.replacement = ${user}@abc.lan
config.mapUser.regex.mustMatch = false

# cat /etc/ovirt-engine/extensions.d/mapping-suffix.properties

...
ovirt.engine.aaa.authn.mapping.plugin = mapping-suffix

Any ideas ?

Thank you.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] High CPU Usage caused by migration thread on Node

2016-09-21 Thread jaumotte, styve
Hi,

We've got a problem with a critical machine which running Oracle Database and 
if someone can help us it would be very nice.

Our VM is running rhel 6.5 and is configuring with 16 cores (2 virtual socket 
with 8 virtual cores) and 240Gb.

This virtual machine is running perfectly on the first host R620 : two cpu 
E5-2695 v2 - 12 cores on each cpu -  and 384Gb of memory.

We wan't to move this virtual machine on a new server, Transtec with two  
E5-2650 v3 - 10 cores on each cpu - and 256Gb of memory. We have encountered 
high cpu usage on this host.

Both servers are running centOS 7.2 and ovirt 3.6. We have already identified 
that on the node, many < migrate/N > are causing high cpu usage.

We have tried few options :

-   Pass-Through Host CPU

-   Configure NUMA : numa node count = 2, numa pinning
The first day the machine was running, everything is ok and migrate threads 
disapeared, but on the second day, high cpu and migration thread were back. 
Oracle services are being restarted everyday for cold backup but not the 
virtual machines.

I don't know if looking in the Numa options is a good idea and I don't why the 
everything is running ok on the R620 (perhaps the available memory)

Thank you for your advices.

Styve


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Remove Export storage domain

2016-09-21 Thread Danny Rehelis
Missed this one, my bad.

Procedure is right there in admin guide - Procedure 7.11. Moving storage
domains to maintenance mode
http://www.ovirt.org/documentation/admin-guide/administration-guide/



On Wed, Sep 21, 2016 at 10:38 AM, Liron Aravot  wrote:

> On Tue, Sep 20, 2016 at 8:02 PM, Danny Rehelis  wrote:
> > Hi,
> >
> > I've added NFS Export storage domain and now, can't seems to remove it.
> > Remove option is greyed out. Also, am I limited to only one Export
> domain?
> > Can't add another one. No option in drop-down box other then Data
> >
> > 3 hosts, ovirt-engine Version 4.0.3-1.el7.centos
> >
> What is the status of the domain? please put it in maintenance and try
> again.
> thanks,
> Liron.
> > Thanks,
> > D
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>



-- 
Danny Rehelis - autogun [AT] gmail.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


[ovirt-users] moVirt 1.6 released!

2016-09-21 Thread Tomas Jelinek
Dear all,

a new release of moVirt (Android client for oVirt) 1.6 has just been released!

The main aim of this version was to move fully to the 4.0 API (changelog: [1]).

If you have it already installed on your device, stay tuned and it will arrive 
soon.
If you don't, you can either install it from google play store [2] or from 
direct link [3].

Please share any feedback!
Tomas

[1]: https://github.com/matobet/movirt#v16
[2]: https://play.google.com/store/apps/details?id=org.ovirt.mobile.movirt
[3]: 
https://github.com/matobet/moVirt/blob/master/moVirt/moVirt-release.apk?raw=true
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] can't import vm from KVM host

2016-09-21 Thread Shahar Havivi
On 20.09.16 10:24, Nelson Lameiras wrote:
> Here is the disk section of my vm,
> 
> ...
> 
>   
>   
>   
>function='0x0'/>
> 
> 
>   
>   
>   
>function='0x0'/>
> 
> ...
> 
> nelson
Thanks Nelson,
bz 1362525 will not solve your issue.
We will start work on that block device issue shortly and I hope that it will
make it to the next release.

Thank you,
 Shahar.

> 
> 
> - Original Message -
> From: "Shahar Havivi" 
> To: "Nelson Lameiras" 
> Cc: "Nisim Simsolo" , users@ovirt.org
> Sent: Tuesday, September 20, 2016 8:04:41 AM
> Subject: Re: [ovirt-users] can't import vm from KVM host
> 
> On 19.09.16 18:11, Nelson Lameiras wrote:
> > Well I think I have a rather "classical" environment :
> > 
> > This is the test setup I created (from scratch) in order to simulate future 
> > migrations (which will be used to migrate our hundreds of vm in production)
> > 
> > On one side, I have a x86_64 centos7.2+KVM hosting one VM with 2 iscsi 
> > disks : 
> >   1 LVM block device /dev/mapper/vg_01-lv_sys, using virtio
> >   1 block device /dev/sdc, using virtio
> > 
> > on the other side, I have a x86_64 centos 7.2 oVirt cluster (2 hosts, same 
> > hardware as KVM hosts) installed with 4.0.3 oVirt (hosts and engine) fully 
> > upgraded to 4.0.4RC1 (hosts and engine)
> > Target would be oVirt iscsi Data Domain disk (which is irrelevant because 
> > the problem I'm describing arises before selecting oVirt target)
> > 
> > I'm using the GUI to test the native import capabilities of oVirt "Import 
> > VM"
> > When selecting KVM import, putting correct URL data (using either tcp or 
> > ssh transport), I get a list of VM machines running in the KVM cluster (for 
> > this exemple, only the one VM described above), but the disk count is 
> > always 0. Which makes it impossible to import the VM.
> > 
> > I should add that I made the same VM import using "local hard drives" (ie. 
> > local raw file) and it works as expected, I can see one or multiple disks 
> > and import them easily to oVirt. The problem seems to manifest itself only 
> > when importing disks using block devices directly.
> > 
> > Do you need more information from me, or make more tests?
> > 
> > thanks a lot,
> > nelson
> Can you post the libvirt xml as attachment here (at least the disks sections):
> 
> $ virsh -r dumpxml 
> 
>  Shahar.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Remove Export storage domain

2016-09-21 Thread Liron Aravot
On Tue, Sep 20, 2016 at 8:02 PM, Danny Rehelis  wrote:
> Hi,
>
> I've added NFS Export storage domain and now, can't seems to remove it.
> Remove option is greyed out. Also, am I limited to only one Export domain?
> Can't add another one. No option in drop-down box other then Data
>
> 3 hosts, ovirt-engine Version 4.0.3-1.el7.centos
>
What is the status of the domain? please put it in maintenance and try again.
thanks,
Liron.
> Thanks,
> D
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] iSCSI

2016-09-21 Thread Aharon Canan
Does it happen on all your hosts ?

Did you check the lunmasking ? (that the server IQN is the one you set on
the storage array? )


On Tue, Sep 20, 2016 at 6:31 PM, Dan Yasny  wrote:

> Maybe it's an EMC thing? I know they always recommend using their own
> multipathing client (aka powerpath), so you either need to make sure the
> SAN accepts Linux multipath, and that EMC devices aren't blocked in your
> multipath.conf
>
> I remember Clariions used to require some explicit aLUA related settings,
> should be easy enough to google or maybe call the SAN vendor
>
> On Tue, Sep 20, 2016 at 11:26 AM, Budur Nagaraju 
> wrote:
>
>> Noting more configuration ,if I configure openfiler  as a iSCSI Lun able
>> to detect the lun , moment I configure EMC Lun unable to detect the Lun ID .
>>
>> Any other configs do I need to do in Host ? any comands to delete the old
>> Lun ID ?
>>
>> .[root@pbuovirt3 ~]# cat /proc/scsi/scsi
>> Attached devices:
>> Host: scsi0 Channel: 03 Id: 00 Lun: 00
>>   Vendor: HP   Model: P410iRev: 2.00
>>   Type:   RAID ANSI  SCSI revision: 00
>> Host: scsi0 Channel: 00 Id: 00 Lun: 00
>>   Vendor: HP   Model: LOGICAL VOLUME   Rev: 2.00
>>   Type:   Direct-AccessANSI  SCSI revision: 05
>> Host: scsi1 Channel: 00 Id: 00 Lun: 00
>>   Vendor: Optiarc  Model: DVD RW AD-7561S  Rev: AH52
>>   Type:   CD-ROM   ANSI  SCSI revision: 05
>> Host: scsi8 Channel: 00 Id: 00 Lun: 00
>>   Vendor: DGC  Model: LUNZ Rev: 3103
>>   Type:   Direct-AccessANSI  SCSI revision: 04
>> [root@pbuovirt3 ~]#
>>
>>
>>
>>
>>
>> On Tue, Sep 20, 2016 at 8:51 PM, Dan Yasny  wrote:
>>
>>> It looks like iscsi does the job, bu multipath doesn't. What do you use
>>> on the hosts? How is multipath.conf configured? Any other special
>>> configuration you use?
>>>
>>> Also, can you paste /proc/scsi/scsi and blkid
>>>
>>> On Tue, Sep 20, 2016 at 11:18 AM, Budur Nagaraju 
>>> wrote:
>>>

 Below are the details,

 http://pastebin.com/aLBMH3Q6

 On Tue, Sep 20, 2016 at 8:27 PM, Dan Yasny  wrote:

> Try this on the host:
>
> iscsiadm -m discovery -t st -p 10.206.67.46
> iscsiadm -m node -L all
> iscsiadm -m node
> iscsiadm -m session
> multipath -ll
>
> and pastebin the output
>
> On Tue, Sep 20, 2016 at 10:54 AM, Budur Nagaraju 
> wrote:
>
>> Yes I did that too but no luck :(
>>
>> Thanks,
>> Nagaraju
>>
>>
>> On Tue, Sep 20, 2016 at 8:06 PM, Dan Yasny  wrote:
>>
>>> After you discover, did you also click the login button?
>>>
>>> On Tue, Sep 20, 2016 at 10:28 AM, Budur Nagaraju 
>>> wrote:
>>>
 Below are the Steps,

 Under Storage Tab:New Domain -->Name>Domain
 Type-->Data/iSCSi-->Select the Host -->Discover the Targets ,

 After giving all the info able to detect the iSCSI targets but
 uable to get the Lun id ,below are the details of the logs.


 http://pastebin.com/ph1YSqhH

 Thanks,
 Nagaraju


 On Tue, Sep 20, 2016 at 6:47 PM, Dan Yasny 
 wrote:

> Can you describe what you tried to do and how it failed?
>
> On Tue, Sep 20, 2016 at 5:54 AM, Budur Nagaraju  > wrote:
>
>> HI All,
>>
>> While configuring iSCSI LUN is not getting detected any documents
>> to configure iSCSI in oVirt ?
>>
>> Thanks,
>> Nagaraju
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>

>>>
>>
>

>>>
>>
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users