Re: [ovirt-users] moVirt 1.6 released!
>You may hitting an issue that we do not >support SPICE proxy: >https://github.com/>matobet/moVirt/issues/188 >Is that the case? No, honestly speaking I have read somewhere that aSpice don't support console session due to missed security reqirements in handshake. I really do not remember where, but it was around first moVirt release date. Thanks Questo messaggio e' indirizzato esclusivamente al destinatario indicato e potrebbe contenere informazioni confidenziali, riservate o proprietarie. Qualora la presente venisse ricevuta per errore, si prega di segnalarlo immediatamente al mittente, cancellando l'originale e ogni sua copia e distruggendo eventuali copie cartacee. Ogni altro uso e' strettamente proibito e potrebbe essere fonte di violazione di legge. This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately, deleting the original and all copies and destroying any hard copies. Any other use is strictly prohibited and may be unlawful. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] Question about Bridge and macvtap
Hi. Quick question between Linux Bridge which is used by default in oVirt and macvtap which can be used in libvirt/KVM. What are the downsides or limitations of using macvtap ? Does it have any significa performance improvement over bridge ? Thanks Fernando ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] ovirt 4.0.3 and Active directory
I have tried what you suggests me and it works fine but I ask you an explanation. During the setup, before finish the procedure I have tested with two account the Login. The forest domain is: domain.com The accounts are like these: 1) s000...@subdomain.domain.com 2) name.surn...@domain.com This procedure works fine but I have specified the domain or subdomain in the Login Test. My question is: from the user portal is possible specify subdomain? For example: username: s000...@subdomain.domain.com password: xxx Profile: domain.com I hope I explained it well Best regards Nicola Il 21/09/2016 17:13, Ondra Machacek ha scritto: On 09/21/2016 04:53 PM, nicola.gentile.to wrote: Hi, I have installed ovirt 4.0.3 on my servers. Now I would add authentication with active directory, for user portal. In the previous version I have used the following command: engine-manage-domains add --domain=mydomain --provider=ad --user=myuser --add-permissions but now this command there isn't. I found this command ovirt-engine-extension-aaa-ldap-setup and now I ask you if this command is the substitute, this command is not present on my installation, I must add it I suppose. Is there an howto page on the documentation to help me? There is README in the 'ovirt-engine-extension-aaa-ldap' package. $ rpm -qd ovirt-engine-extension-aaa-ldap What you need to do is just to install setup package: $ yum install ovirt-engine-extension-aaa-ldap-setup And then run command: $ ovirt-engine-extension-aaa-ldap-setup The setup will guide you throughout the process. How to I proceede? Thank you for your help Regard Nicola ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Cannot create a non vm network using ovirtsdk
Hi, Thanks ondra. It works . When i specify the "usages=types.NetworkUsage.Migration" it was throwing me an error. I was missing [] braces. Thanks kasturi. On 09/22/2016 06:45 PM, knarra wrote: Hi, I am trying to create a non vm network using the following code, but it still go a head and creates vm network. Can some one please help me to resolve this? Or can you let me know in case i am missing some parameter to add here? def create_gluster_network(network_name): networks_service = connection.system_service().networks_service() network = networks_service.add(types.Network(name=network_name,data_center=types.DataCenter(name='Default'),description='new gluster network' )) Thanks kasturi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Cannot create a non vm network using ovirtsdk
Hi, the VM network network is the default one, so in order to create different network type you have to pass what you need explicitly, for example: network = networks_service.add( types.Network( name='mynetwork', data_center=types.DataCenter( name='mydatacenter' ), usages=[ types.NetworkUsage.MANAGEMENT, ], ), ) Will create management network. Other options are: DISPLAY, MIGRATION, VM So just past explicitly what you need. Ondra On 09/22/2016 03:15 PM, knarra wrote: Hi, I am trying to create a non vm network using the following code, but it still go a head and creates vm network. Can some one please help me to resolve this? Or can you let me know in case i am missing some parameter to add here? def create_gluster_network(network_name): networks_service = connection.system_service().networks_service() network = networks_service.add(types.Network(name=network_name, data_center=types.DataCenter(name='Default'), description='new gluster network' )) Thanks kasturi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Can't import export domain
Hi Idan, I certainly did select 'Export' before trying to import. I gave up trying and created a new Export Domain and copied the images and master directories from the old location into the new Export Domain. I could then import my backed up VM's On 22 September 2016 at 13:46, Idan Shaby wrote: > Hi, > > Just to make sure - when you tried to import the export domain, did you > choose "Export" from the "Domain Function" field in the "Import > Pre-Configured Domain" window? > You need to select this option in order to tell the engine that it is a > special domain (export, in this case), and not a data domain. > > Regards, > Idan > > On Mon, Sep 19, 2016 at 8:08 PM, Maton, Brett > wrote: > >> I basically scrubbed my 'old' cluster after a number of failures trying >> to convert a physical engine to a self hosted engine, anyway >> >> I'm now trying to import the 'old' export domain but I'm getting this >> message: >> >> There is no storage domain under the specified path. Check event pane for >> more details. >> >> I did see this in the logs if it helps at all: >> 2016-09-19 18:05:23,584 INFO [org.ovirt.engine.core.vdsbrok >> er.vdsbroker.DisconnectStorageServerVDSCommand] (default task-28) >> [171c3ebf] FINISH, DisconnectStorageServerVDSCommand, return: >> {5c4ae7b4-b87b-4ef1-910c-cb338232098c=0}, log id: 7d3bbb38 >> 2016-09-19 18:05:23,589 INFO [org.ovirt.engine.core.bll.sto >> rage.connection.RemoveStorageServerConnectionCommand] (default task-28) >> [171c3ebf] Lock freed to object 'EngineLock:{exclusiveLocks='[ >> nfs.example.com:/exports/export=> ACTION_TYPE_FAILED_OBJECT_LOCKED>, >> 5c4ae7b4-b87b-4ef1-910c-cb338232098c=> ACTION_TYPE_FAILED_OBJECT_LOCKED>]', sharedLocks='null'}' >> 2016-09-19 18:05:25,587 INFO [org.ovirt.engine.core.vdsbrok >> er.vdsbroker.DisconnectStorageServerVDSCommand] (default task-18) >> [35dda2c9] FINISH, DisconnectStorageServerVDSCommand, return: >> {5c4ae7b4-b87b-4ef1-910c-cb338232098c=0}, log id: 151ff1bd >> >> >> >> dom_md/metadata file on the export NFS directory begins with >> >> CLASS=Backup >> DESCRIPTION=export >> >> Any suggestions ? >> >> ___ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] iSCSI
Hi, It looks like you've been trying to configure the iSCSI bond with a network which was configured as 'required'. This is not allowed by design. Please do the following: Navigate to 'Networks' tab, pick the storage network, navigate to the 'Clusters' sub-tab and click on 'Manage Networks' and uncheck the 'Required' check box. On Thu, Sep 22, 2016 at 6:27 AM, Budur Nagaraju wrote: > Yes ,After reboot the Host able to detect the Lun IS , while configuring > the iSCSI bond getting the below error. > > I have configured a separate network for iSCSI configuration. > > > 2016-09-22 08:53:56,603 WARN > [org.ovirt.engine.core.bll.storage.AddIscsiBondCommand] > (ajp--127.0.0.1-8702-11) [24aae7bf] CanDoAction of action AddIscsiBond > failed for user admin@internal. Reasons: VAR__ACTION__ADD,VAR__TYPE__ > ISCSI_BOND,ACTION_TYPE_FAILED_ISCSI_BOND_NETWORK_CANNOT_BE_REQUIRED > 2016-09-22 08:54:16,957 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] > (DefaultQuartzScheduler_Worker-64) [58e32f2b] Failed in SpmStatusVDS > method > 2016-09-22 08:54:16,958 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] > (DefaultQuartzScheduler_Worker-64) [58e32f2b] Command > SpmStatusVDSCommand(HostName = pbuovirt2, HostId = > d26d3cb1-df70-472e-964b-546ea4dc8bc7, > storagePoolId = eb13e6d4-cf50-46e6-a43a-234862f1adad) execution failed. > Exception: VDSErrorException: VDSGenericException: VDSErrorException: > Failed to SpmStatusVDS, error = (-202, 'Unable to read resource owners', > 'Sanlock exception'), code = 100 > 2016-09-22 08:54:16,960 INFO > [org.ovirt.engine.core.bll.storage.SetStoragePoolStatusCommand] > (DefaultQuartzScheduler_Worker-64) [79193574] Running command: > SetStoragePoolStatusCommand internal: true. Entities affected : ID: > eb13e6d4-cf50-46e6-a43a-234862f1adad Type: StoragePool > 2016-09-22 08:54:16,962 INFO > [org.ovirt.engine.core.vdsbroker.storage.StoragePoolDomainHelper] > (DefaultQuartzScheduler_Worker-64) [79193574] Storage Pool > eb13e6d4-cf50-46e6-a43a-234862f1adad - Updating Storage Domain > 3511c340-acbb-4c40-aeb2-9f4727107a46 status from Active to Unknown, > reason : null > 2016-09-22 08:54:16,968 WARN [org.ovirt.engine.core.dal. > dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-64) > [79193574] Correlation ID: 79193574, Call Stack: null, Custom Event ID: -1, > Message: Invalid status on Data Center EMC. Setting Data Center status to > Non Responsive (On host pbuovirt2, Error: General Exception). > 2016-09-22 08:54:17,355 INFO > [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] > (DefaultQuartzScheduler_Worker-6) VM child1-leema > 29ab1bb4-235d-4b47-ad6a-aa7709020327 > moved from NotResponding --> Up > 2016-09-22 08:54:26,992 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] > (DefaultQuartzScheduler_Worker-64) [79193574] Failed in SpmStatusVDS > method > 2016-09-22 08:54:26,997 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.SpmStatusVDSCommand] > (DefaultQuartzScheduler_Worker-64) [79193574] Command > SpmStatusVDSCommand(HostName = pbuovirt2, HostId = > d26d3cb1-df70-472e-964b-546ea4dc8bc7, > storagePoolId = eb13e6d4-cf50-46e6-a43a-234862f1adad) execution failed. > Exception: VDSErrorException: VDSGenericException: VDSErrorException: > Failed to SpmStatusVDS, error = (-202, 'Sanlock resource read failure', > 'Sanlock exception'), code = 100 > 2016-09-22 08:54:26,997 INFO > [org.ovirt.engine.core.vdsbroker.irsbroker.IrsProxyData] > (DefaultQuartzScheduler_Worker-64) [79193574] hostFromVds::selectedVds - > pbuovirt2, spmStatus returned null! > ^C > [root@pscloud ~]# > > > On Wed, Sep 21, 2016 at 6:19 PM, Kevin Goldblatt > wrote: > >> Hi Badur, >> >> >> >> I would like to understand what you are trying to configure. >> >> Are you trying to expose a LUN to your vdsm host to use in order to >> create an ISCSI storage domain? >> If so please verify the following: >> >> 1. Have you correctly mapped the LUN to your vdsm host initiator via your >> storage provider >> >> 2. Is the LUN visible via the vdsm host. For this run: >> a. "multipath -ll" on the vdsm host. Your output for a LUN should look >> something like this: >> >> 1600024 dm-6 XIO ,XApp >> size=80G features='0' hwhandler='0' wp=rw >> `-+- policy='queue-length 0' prio=1 status=active >> |- 0:0:0:8 sdh 8:112 active ready running >> |- 0:0:1:8 sdp 8:240 active ready running >> |- 5:0:0:8 sdx 65:112 active ready running >> `- 5:0:1:8 sdaf 65:240 active ready running >> >> 3. Have you edited your /etc/iscsi/initiatorname.iscsi >> You should have something like this: >> InitiatorName=iqn.1xxx-xx.com.redhat:host1-vds1 (replace the string >> after the : with the iqn given in the storage provider) >> >> >> 4. Reboot your host after making any changes >> >> >> 5. Once you the LUN is visible to the host you can create a Storage >> Domain via the Ovirt GUI" >> a. Select the ISCSI Storage Type >>
[ovirt-users] Cannot create a non vm network using ovirtsdk
Hi, I am trying to create a non vm network using the following code, but it still go a head and creates vm network. Can some one please help me to resolve this? Or can you let me know in case i am missing some parameter to add here? def create_gluster_network(network_name): networks_service = connection.system_service().networks_service() network = networks_service.add(types.Network(name=network_name,data_center=types.DataCenter(name='Default'),description='new gluster network' )) Thanks kasturi ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Can't import export domain
Hi, Just to make sure - when you tried to import the export domain, did you choose "Export" from the "Domain Function" field in the "Import Pre-Configured Domain" window? You need to select this option in order to tell the engine that it is a special domain (export, in this case), and not a data domain. Regards, Idan On Mon, Sep 19, 2016 at 8:08 PM, Maton, Brett wrote: > I basically scrubbed my 'old' cluster after a number of failures trying to > convert a physical engine to a self hosted engine, anyway > > I'm now trying to import the 'old' export domain but I'm getting this > message: > > There is no storage domain under the specified path. Check event pane for > more details. > > I did see this in the logs if it helps at all: > 2016-09-19 18:05:23,584 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker. > DisconnectStorageServerVDSCommand] (default task-28) [171c3ebf] FINISH, > DisconnectStorageServerVDSCommand, return: > {5c4ae7b4-b87b-4ef1-910c-cb338232098c=0}, > log id: 7d3bbb38 > 2016-09-19 18:05:23,589 INFO [org.ovirt.engine.core.bll. > storage.connection.RemoveStorageServerConnectionCommand] (default > task-28) [171c3ebf] Lock freed to object 'EngineLock:{exclusiveLocks='[ > nfs.example.com:/exports/export= ACTION_TYPE_FAILED_OBJECT_LOCKED>, 5c4ae7b4-b87b-4ef1-910c- > cb338232098c=]', > sharedLocks='null'}' > 2016-09-19 18:05:25,587 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker. > DisconnectStorageServerVDSCommand] (default task-18) [35dda2c9] FINISH, > DisconnectStorageServerVDSCommand, return: > {5c4ae7b4-b87b-4ef1-910c-cb338232098c=0}, > log id: 151ff1bd > > > > dom_md/metadata file on the export NFS directory begins with > > CLASS=Backup > DESCRIPTION=export > > Any suggestions ? > > ___ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
[ovirt-users] VM incremental backup
Hello! I would like to understand the existence of the possibility of incremental VM backups. And if it is, the means by which it is achieved. While I was only able to achieve a complete backup of the virtual machine (but it is a very large amount of information and time) by cloning a snapshot of the VM and export to data domain. Ламыкин Василий Старший инженер по эксплуатации сервисных платформ Столичный ф-ал ПАО "МегаФон +7 (926) 500-3308 [МегаФон лого+знак РУС B2C] Информация в этом сообщении предназначена исключительно для конкретных лиц, которым она адресована. В сообщении может содержаться конфиденциальная информация, которая не может быть раскрыта или использована кем-либо, кроме адресатов. Если вы не адресат этого сообщения, то использование, переадресация, копирование или распространение содержания сообщения или его части незаконно и запрещено. Если Вы получили это сообщение ошибочно, пожалуйста, незамедлительно сообщите отправителю об этом и удалите со всем содержимым само сообщение и любые возможные его копии и приложения. The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. The contents may not be disclosed or used by anyone other than the addressee. If you are not the intended recipient(s), any use, disclosure, copying, distribution or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you have received this communication in error please notify us immediately by responding to this email and then delete the e-mail and all attachments and any copies thereof. (c)20mf50 ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] Can't add logical network
Ok, didn't read the doc properly, now it works as expected. Sorry for the noise! 2016-09-21 15:55 GMT+02:00 Davide Ferrari : > Ok, just saw that if I go to > > Networks -> br20 -> Hosts -> Unattached -> right click on vm04 -> setup > host networks > > But there I cannot see the bond0.20 interface, just bond0 and bond1 > > 2016-09-21 15:08 GMT+02:00 Davide Ferrari : > >> By the way, what are the exact steps to add a new network in oVirt? >> Because I was following this guide >> >> https://www.ovirt.org/documentation/how-to/networking/ >> bonding-vlan-bridge/ >> >> that basically explains how to create manually a standard >> bond+vlan+bridge, that I already did on my ovirt hosts, but I can't manage >> to get the network working in the VMs. Ovirt always complains about that >> the network is not available on that host. >> I created a network named "br20" in my case. >> My ifcfg-* files: >> >> [root@vm04 network-scripts]# cat ifcfg-bond0.20 >> DEVICE=bond0.20 >> VLAN=yes >> BOOTPROTO=none >> NM_CONTROLLED=no >> BRIDGE=br20 >> MTU=1500 >> [root@vm04 network-scripts]# cat ifcfg-br20 >> TYPE=Bridge >> NM_CONTROLLED="no" >> BOOTPROTO="none" >> DEVICE="br20" >> IPADDR=192.168.9.228 >> NETMASK=255.255.255.0 >> ONBOOT="yes" >> DEFROUTE=no >> >> What am I missing? >> >> 2016-09-21 7:53 GMT+02:00 Edward Haas : >> >>> >>> >>> On Tue, Sep 20, 2016 at 12:13 PM, Maxence Sartiaux >>> wrote: >>> Okay, i found a workaround. - Create empty ifcfg-lan on all hosts (touch /etc/sysconfig/network-scripts/ifcfg-lan) - Assign the bridge to the bond (Ovirt only add MTU=1500 in the file) - Unassign the bridge (Ovirt rewrite the bond configuration files) - Re-assign the bridge on the bond - yay it work ! >>> >>> I would recommend describing the exact steps you do, provide output of >>> the >>> ifcfg list of files at each step + vdsm and supervdsm logs. >>> >>> I am not clear what is the 'lan' device is representing, is this your >>> bond name? >>> network name? >>> >>> >>> On Tue, 2016-09-20 at 10:08 +0200, Maxence Sartiaux wrote: I configured the bond manually by editing the ifcfg file like i did in my old install on ovirt 3.6 and 4.0 the only ifcfg file i have are the 4 for the physical interfaces, two for the bonds and one for the ovirtmgmt bridge. I'll send the vdsm log later. On Mon, 2016-09-19 at 10:14 -0400, Francesco Romani wrote: From: "Maxence Sartiaux" To: "users" Sent: Monday, September 19, 2016 11:53:12 AM Subject: [ovirt-users] Can't add logical network Hello, On a clean install ovirt 4.0.3-1, i've configured my bond on my hypervisor, created a new network on the engine and now i try to assign the logical network to my bond in the host network settings. When i save the configuration, the engine throw me an error and the following event VDSM hypervisor1 command failed: [Errno 2] No such file or directory: u'/etc/sysconfig/network-scripts/ifcfg-lan' if i "touch" the file manually i don't have this error but my file only contain "MTU=1500" nothing more. Engine bug or i miss something ? How you configured the bond on your hypervisor? Seems like Vdsm doesn't like your changes, perhaps it cannot just identify the interface configuration Edward, do you have any recommendations about this flow? -- Francesco Romani RedHat Engineering Virtualization R & D Phone: 8261328 IRC: fromani ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users >>> >>> ___ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >> >> >> -- >> Davide Ferrari >> Senior Systems Engineer >> > > > > -- > Davide Ferrari > Senior Systems Engineer > -- Davide Ferrari Senior Systems Engineer ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Re: [ovirt-users] can't import vm from KVM host
Nelson, I opened a bug regarding your issue https://bugzilla.redhat.com/show_bug.cgi?id=1378340 And send a fix: https://gerrit.ovirt.org/#/c/64272/ Thank you for your help! Shahar. On 21.09.16 10:57, Shahar Havivi wrote: > On 20.09.16 10:24, Nelson Lameiras wrote: > > Here is the disk section of my vm, > > > > ... > > > > > > > > > >> function='0x0'/> > > > > > > > > > > > >> function='0x0'/> > > > > ... > > > > nelson > Thanks Nelson, > bz 1362525 will not solve your issue. > We will start work on that block device issue shortly and I hope that it will > make it to the next release. > > Thank you, > Shahar. > > > > > > > - Original Message - > > From: "Shahar Havivi" > > To: "Nelson Lameiras" > > Cc: "Nisim Simsolo" , users@ovirt.org > > Sent: Tuesday, September 20, 2016 8:04:41 AM > > Subject: Re: [ovirt-users] can't import vm from KVM host > > > > On 19.09.16 18:11, Nelson Lameiras wrote: > > > Well I think I have a rather "classical" environment : > > > > > > This is the test setup I created (from scratch) in order to simulate > > > future migrations (which will be used to migrate our hundreds of vm in > > > production) > > > > > > On one side, I have a x86_64 centos7.2+KVM hosting one VM with 2 iscsi > > > disks : > > > 1 LVM block device /dev/mapper/vg_01-lv_sys, using virtio > > > 1 block device /dev/sdc, using virtio > > > > > > on the other side, I have a x86_64 centos 7.2 oVirt cluster (2 hosts, > > > same hardware as KVM hosts) installed with 4.0.3 oVirt (hosts and engine) > > > fully upgraded to 4.0.4RC1 (hosts and engine) > > > Target would be oVirt iscsi Data Domain disk (which is irrelevant because > > > the problem I'm describing arises before selecting oVirt target) > > > > > > I'm using the GUI to test the native import capabilities of oVirt "Import > > > VM" > > > When selecting KVM import, putting correct URL data (using either tcp or > > > ssh transport), I get a list of VM machines running in the KVM cluster > > > (for this exemple, only the one VM described above), but the disk count > > > is always 0. Which makes it impossible to import the VM. > > > > > > I should add that I made the same VM import using "local hard drives" > > > (ie. local raw file) and it works as expected, I can see one or multiple > > > disks and import them easily to oVirt. The problem seems to manifest > > > itself only when importing disks using block devices directly. > > > > > > Do you need more information from me, or make more tests? > > > > > > thanks a lot, > > > nelson > > Can you post the libvirt xml as attachment here (at least the disks > > sections): > > > > $ virsh -r dumpxml > > > > Shahar. ___ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users