Re: [ovirt-users] ovirt 3.6.7 and gluster 3.7.14

2016-10-24 Thread Sahina Bose
On Tue, Oct 25, 2016 at 6:10 AM, Luiz Claudio Prazeres Goncalves <
luiz...@gmail.com> wrote:

> Hi Sahina,
>
> I've tried to upgrade to Gluster 3.7.16, but it seems the yum repo
> https://download.gluster.org/pub/gluster/glusterfs/3.7/
> 3.7.16/EPEL.repo/epel-7.2/x86_64/ is not working
>
> Two questions:
>
> 1 - Should I switch to the following repo ? This one seems to be working.
>
> [centos-gluster37]
>
> name=CentOS-$releasever - Gluster 3.7
>
> baseurl=http://mirror.centos.org/centos/$releasever/
> storage/$basearch/gluster-3.7/
>
> gpgcheck=1
>
> enabled=1
>
> gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Storage
>

Yes, CentOS SIG repo is the right one.

>
> 2 - I'm using Centos7.2 + oVirt 3.6.6 with external gluster replica 3
> storage. Is safe to upgrade to gluster 3.7.16 my external gluster server's
> ? The plan is to upgrade to oVirt 3.6.7 after this gluster server's upgrade.
>
>
>
Yes, it is safe.


>
> Thanks
>
> -Luiz
>
>
>
>
> 2016-08-08 4:26 GMT-03:00 Sahina Bose :
>
>>
>>
>> On Mon, Aug 8, 2016 at 3:37 AM, Luiz Claudio Prazeres Goncalves <
>> luiz...@gmail.com> wrote:
>>
>>> Hi, it seems the ovirt-3.6-dependencies.repo is pointing the yum repo to
>>>  http://download.gluster.org/pub/gluster/glusterfs/LATEST/EP
>>> EL.repo/epel-$releasever/$basearch/ and http://download.gluster.org/pu
>>> b/gluster/glusterfs/LATEST/EPEL.repo/epel-$releasever/noarch, however
>>> the "LATEST" is now pointing to gluster 3.8.x and not to 3.7.x anymore.
>>>
>>
>>
>> I checked the ovirt-release project and the dependency points to CentOS
>> SIG repo - http://mirror.centos.org/centos/7/storage/$basearch/gluster-
>> 3.7/
>>
>>
>>>
>>> So, in order to fix it I was forced to manually adjust the yum repo
>>> paths as you can see below.  Is this procedure correct? I would say yes,
>>> but it's always good to double check :)
>>>
>>
>>
>> The procedure is correct.
>>
>>
>>>
>>> Also, It's currently running centos 7.2 + ovirt 3.6.6 + gluster 3.7.11
>>> (client) and I'm planning to upgrade to ovirt 3.6.7 and gluster 3.7.14
>>> (client).
>>>
>>> The oVirt Cluster is running on top of an external gluster replica 3
>>> cluster, hosting the engine storage domain and vms storage domain, running
>>> the version 3.7.11 which I'm also planning to move to 3.7.14 as well.  I'm
>>> using XFS and not ZFS, which seems to have issues with gluster 3.7.13
>>>
>>> Is this upgrade safe and recommended?
>>>
>>
>> Update the gluster servers first and then the clients.
>>
>>
>>>
>>> Thanks
>>> -Luiz
>>>
>>> [ovirt-3.6-glusterfs-epel]
>>>
>>> name=GlusterFS is a clustered file-system capable of scaling to several
>>> petabytes.
>>>
>>> #baseurl=http://download.gluster.org/pub/gluster/glusterfs/L
>>> ATEST/EPEL.repo/epel-$releasever/$basearch/
>>>
>>> baseurl=https://download.gluster.org/pub/gluster/glusterfs/3.7/3.7.14
>>> /EPEL.repo/epel-7.2/x86_64/
>>>
>>> enabled=1
>>>
>>> skip_if_unavailable=1
>>>
>>> gpgcheck=1
>>>
>>> gpgkey=https://download.gluster.org/pub/gluster/glusterfs/LATEST/pub.key
>>>
>>>
>>> [ovirt-3.6-glusterfs-noarch-epel]
>>>
>>> name=GlusterFS is a clustered file-system capable of scaling to several
>>> petabytes.
>>>
>>> #baseurl=http://download.gluster.org/pub/gluster/glusterfs/L
>>> ATEST/EPEL.repo/epel-$releasever/noarch
>>>
>>> baseurl=https://download.gluster.org/pub/gluster/glusterfs/3.7/3.7.14
>>> /EPEL.repo/epel-7.2/noarch
>>>
>>> enabled=1
>>>
>>> skip_if_unavailable=1
>>>
>>> gpgcheck=1
>>>
>>> gpgkey=https://download.gluster.org/pub/gluster/glusterfs/LATEST/pub.key
>>>
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] ovirt 3.6.7 and gluster 3.7.14

2016-10-24 Thread Luiz Claudio Prazeres Goncalves
Hi Sahina,

I've tried to upgrade to Gluster 3.7.16, but it seems the yum repo
https://download.gluster.org/pub/gluster/glusterfs/3
.7/3.7.16/EPEL.repo/epel-7.2/x86_64/ is not working

Two questions:

1 - Should I switch to the following repo ? This one seems to be working.

[centos-gluster37]

name=CentOS-$releasever - Gluster 3.7

baseurl=
http://mirror.centos.org/centos/$releasever/storage/$basearch/gluster-3.7/

gpgcheck=1

enabled=1

gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-SIG-Storage


2 - I'm using Centos7.2 + oVirt 3.6.6 with external gluster replica 3
storage. Is safe to upgrade to gluster 3.7.16 my external gluster server's
? The plan is to upgrade to oVirt 3.6.7 after this gluster server's upgrade.



Thanks

-Luiz




2016-08-08 4:26 GMT-03:00 Sahina Bose :

>
>
> On Mon, Aug 8, 2016 at 3:37 AM, Luiz Claudio Prazeres Goncalves <
> luiz...@gmail.com> wrote:
>
>> Hi, it seems the ovirt-3.6-dependencies.repo is pointing the yum repo to
>> http://download.gluster.org/pub/gluster/glusterfs/LATEST/EP
>> EL.repo/epel-$releasever/$basearch/ and http://download.gluster.org/pu
>> b/gluster/glusterfs/LATEST/EPEL.repo/epel-$releasever/noarch, however
>> the "LATEST" is now pointing to gluster 3.8.x and not to 3.7.x anymore.
>>
>
>
> I checked the ovirt-release project and the dependency points to CentOS
> SIG repo - http://mirror.centos.org/centos/7/storage/$basearch/
> gluster-3.7/
>
>
>>
>> So, in order to fix it I was forced to manually adjust the yum repo paths
>> as you can see below.  Is this procedure correct? I would say yes, but it's
>> always good to double check :)
>>
>
>
> The procedure is correct.
>
>
>>
>> Also, It's currently running centos 7.2 + ovirt 3.6.6 + gluster 3.7.11
>> (client) and I'm planning to upgrade to ovirt 3.6.7 and gluster 3.7.14
>> (client).
>>
>> The oVirt Cluster is running on top of an external gluster replica 3
>> cluster, hosting the engine storage domain and vms storage domain, running
>> the version 3.7.11 which I'm also planning to move to 3.7.14 as well.  I'm
>> using XFS and not ZFS, which seems to have issues with gluster 3.7.13
>>
>> Is this upgrade safe and recommended?
>>
>
> Update the gluster servers first and then the clients.
>
>
>>
>> Thanks
>> -Luiz
>>
>> [ovirt-3.6-glusterfs-epel]
>>
>> name=GlusterFS is a clustered file-system capable of scaling to several
>> petabytes.
>>
>> #baseurl=http://download.gluster.org/pub/gluster/glusterfs/
>> LATEST/EPEL.repo/epel-$releasever/$basearch/
>>
>> baseurl=https://download.gluster.org/pub/gluster/glusterfs/3.7/3.7.14
>> /EPEL.repo/epel-7.2/x86_64/
>>
>> enabled=1
>>
>> skip_if_unavailable=1
>>
>> gpgcheck=1
>>
>> gpgkey=https://download.gluster.org/pub/gluster/glusterfs/LATEST/pub.key
>>
>>
>> [ovirt-3.6-glusterfs-noarch-epel]
>>
>> name=GlusterFS is a clustered file-system capable of scaling to several
>> petabytes.
>>
>> #baseurl=http://download.gluster.org/pub/gluster/glusterfs/
>> LATEST/EPEL.repo/epel-$releasever/noarch
>>
>> baseurl=https://download.gluster.org/pub/gluster/glusterfs/3.7/3.7.14
>> /EPEL.repo/epel-7.2/noarch
>>
>> enabled=1
>>
>> skip_if_unavailable=1
>>
>> gpgcheck=1
>>
>> gpgkey=https://download.gluster.org/pub/gluster/glusterfs/LATEST/pub.key
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] VMware import, username with '.' not accepted

2016-10-24 Thread Tomáš Golembiovský
Hi,

unfortunately the mentioned bug is related only to DC and Cluster
fields. The problem with dot in user name is still present in oVirt 4.0.

Martijn, can you please open a bug for us?

Thanks,

Tomas


On Mon, 24 Oct 2016 16:33:25 +0200
Martijn Grendelman  wrote:

> Op 24-10-2016 om 16:06 schreef Michal Skrivanek:
> >> On 24 Oct 2016, at 11:21, Martijn Grendelman  
> >> wrote:
> >>
> >> Hi,
> >>
> >> I'm trying to import a VM from VMware. On the "Import Virtual
> >> Machine(s)" screen, my VCenter username is not accepted, because "Name
> >> can only contain 'A-Z', 'a-z', '0-9', '_' or '-' characters" and it
> >> contains a '.', which should be perfectly fine.  
> > What is the exact version?
> > There were improvements in bug 1377271 which is in 4.0.5 RC2  
> 
> This is 4.0.3.
> 
> Thanks,
> Martijn.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users


-- 
Tomáš Golembiovský 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] low level Image copy failed

2016-10-24 Thread Nir Soffer
On Sun, Oct 23, 2016 at 8:57 PM, Jonas Israelsson
 wrote:
> On 23/10/16 20:06, Nir Soffer wrote:
>
>> On Sun, Oct 23, 2016 at 5:34 PM, Jonas Israelsson
>>  wrote:
>>>
>>> Greetings.
>>>
>>> We are in the process of migrating from oVirt 3.6 to 4.0. To properly
>>> test
>>> 4.0 we have setup a parallel 4.0 environment.
>>>
>>> For the non critical vm:s we thought we try the "export vms --> move
>>> storage
>>> domain to the other DC --> import vms" method.
>>>
>>> While many imports are successful quite a few fails with 'low level Image
>>> copy failed'
>>>
>>> One of these vm impossible to import have the following disk layout.
>>>
>>> * Disk 1 - 100GB  (Thin)
>>>
>>> * Disk2 - 32GB (Preallocated)
>>
>> According to the volume .meta file bellow, this is COW/SPARSE,
>> not preallocated.
>
> It's because I'm an idiot and gave you information about the wrong disk. My
> apologizes..
>
> $ /usr/bin/qemu-img.org info
> /rhev/data-center/9d200b26-359e-48b6-972a-90da179e4829/61842ad9-42da-40a9-8ec8-dd7807a82916/images/9eb60288-27b6-4fb1-aef1-4246455d588e/ddf8b402-514c-4a3c-9683-26810a7c41c0
>
> image:
> /rhev/data-center/9d200b26-359e-48b6-972a-90da179e4829/61842ad9-42da-40a9-8ec8-dd7807a82916/images/9eb60288-27b6-4fb1-aef1-4246455d588e/ddf8b402-514c-4a3c-9683-26810a7c41c0
> file format: raw
> virtual size: 35G (37849399296 bytes)
> disk size: 35G
>
>
> [root@patty tmp]# cat
> /rhev/data-center/9d200b26-359e-48b6-972a-90da179e4829/61842ad9-42da-40a9-8ec8-dd7807a82916/images/9eb60288-27b6-4fb1-aef1-4246455d588e/ddf8b402-514c-4a3c-9683-26810a7c41c0.meta
> DOMAIN=61842ad9-42da-40a9-8ec8-dd7807a82916
> VOLTYPE=LEAF
> CTIME=1476880543
> FORMAT=RAW
> IMAGE=9eb60288-27b6-4fb1-aef1-4246455d588e
> DISKTYPE=2
> PUUID=----
> LEGALITY=LEGAL
> MTIME=0
> POOL_UUID=
> SIZE=67108864

This is 32G (34359738368 bytes), but qemu-img says this is 35G image...

> TYPE=PREALLOCATED
> DESCRIPTION=
> EOF
>
>
>
>>
>> Can you share the original vm disk metadata before the export?
>
> Could you please instruct me how to ? It's on a FC-LUN so it's then hiding
> on a lv somewhere. I could perhaps just move it to an nfs data domain .. ?

On block storage the volume metadata is in /dev/vg-uuid/metadata lv.

To locate the metadata, get the MD_NNN tag from the lv:

# lvs -o tags vg-uuid/lv-uuid
... MD_42 ...

This volume metadata is in block 42 in the metadata lv.

To extract the metadata, use:

# dd if=/dev/vg-uuid/metadata bs=512 count=1 seek=42

The format is the same as in file storage .meta file.

>> Looking at the metadata before the export, after the export, and after
>> the import, we can understand what is the root cause.
>>
>> It will be hard to find the metadata after the failed copy since vdsm try
>> hard to clean up after errors, but the information should be available
>> in vdsm log.
>
> Yes I noticed, hence the qemu-img wrapper
>>>
>>> * Disk3 - 32GB (Thin)
>>>
>>> Where the two thin disk (1 & 3) are successfully imported but disk2, the
>>> preallocated always fail.
>>>
>> ...
>>>
>>> and from vdsm.log
>>>
>> ...
>>>
>>> CopyImageError: low level Image copy failed: ('ecode=1, stdout=,
>>> stderr=qemu-img: error while writing sector 73912303: No space left on
>>> device\n, message=None',)
>>
>> We need log from the entire flow, starting at "Run and protect:
>> copyImage..."
>>
>> ...
>>>
>>> The first checking the size of the image (37849399296) , and the second
>>> the
>>> size of logical volume (34359738368) just created to hold this image.
>>> And as you can see the volume is smaller in size than the image it should
>>> hold, whereas we are under the impression something made an incorrect
>>> decision when creating that volume.
>>
>> The destination image size depend on the destination format. If the
>> destination
>> is preallocated, the logical volume size *must* be the virtual size
>> (32G). If it is
>> sparse, the logical volume should be the file size on the export domain
>> (35G).
>>
>> According to your findings, we created a destination image for a
>> preallocated
>> disk (32G), and then tried to run "qemu-img convert" with qcow2 format as
>> both source and destination. However this is only a guess, since I don't
>> have
>> the log showing the actual qemu-img command.
>
> 12:37:15 685557156   ---   Identifier: 51635 , Arguments: convert -p -t none
> -T none -f raw
> /rhev/data-center/9d200b26-359e-48b6-972a-90da179e4829/61842ad9-42da-40a9-8ec8-dd7807a82916/images/9eb60288-27b6-4fb1-aef1-4246455d588e/ddf8b402-514c-4a3c-9683-26810a7c41c0
> -O raw
> /rhev/data-center/mnt/blockSD/cb64e1fc-98b6-4b8c-916e-418d05bcd467/images/a1d70c22-cace-48d2-9809-caadc70b77e7/71f5fe82-81dd-47e9-aa3f-1a66622db4cb

So we are copying raw volume to raw volume and this cannot succeed
if the device is smaller than the image.

We need the original volume metadata, and the vdsm logs showing
the copy image from the original volume to the export 

Re: [ovirt-users] VMware import, username with '.' not accepted

2016-10-24 Thread Martijn Grendelman

Op 24-10-2016 om 16:06 schreef Michal Skrivanek:
>> On 24 Oct 2016, at 11:21, Martijn Grendelman  
>> wrote:
>>
>> Hi,
>>
>> I'm trying to import a VM from VMware. On the "Import Virtual
>> Machine(s)" screen, my VCenter username is not accepted, because "Name
>> can only contain 'A-Z', 'a-z', '0-9', '_' or '-' characters" and it
>> contains a '.', which should be perfectly fine.
> What is the exact version?
> There were improvements in bug 1377271 which is in 4.0.5 RC2

This is 4.0.3.

Thanks,
Martijn.
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] VMware import, username with '.' not accepted

2016-10-24 Thread Michal Skrivanek

> On 24 Oct 2016, at 11:21, Martijn Grendelman  
> wrote:
> 
> Hi,
> 
> I'm trying to import a VM from VMware. On the "Import Virtual
> Machine(s)" screen, my VCenter username is not accepted, because "Name
> can only contain 'A-Z', 'a-z', '0-9', '_' or '-' characters" and it
> contains a '.', which should be perfectly fine.

What is the exact version?
There were improvements in bug 1377271 which is in 4.0.5 RC2

Thanks,
michal

> 
> Now what?
> 
> Regards,
> Martijn.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Non responsive vms, how to reconnect hosts

2016-10-24 Thread Michal Skrivanek

> On 24 Oct 2016, at 13:52, andreas.ew...@cbc.de wrote:
> 
> Hi there,
> 
> currently our vms are in a non responsive state.
> Due fibre channel storage problems every machine is tagged by a question mark.
> Datacenter is in non operational mode.
> Good news is that the machines are running. I verrified by „virsh list“ on 
> the hypervisors.
> I know if I reboot the hypervisors then the problem will be solved. But is 
> there any other way to connect the hypervisor hosts to the datacenter?
> Now storage problems are over and I already tried to restart the vdsm daemon 
> … but no success. Do I really need to reboot the hosts?

There were related fixes all the way up to 4.0.5.
3.5 is not actively maintained anymore so I would suggest to plan an upgrade to 
at least 3.6 DC and Cluster as that is the minimum supported version in 4.0.

Thanks,
michal
> 
> OS Version of ovirt Hosts: Centos7
> DataCenter runs with version 3.5
> 
> With best regards
> Andreas
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
> 

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] external users problem

2016-10-24 Thread Martin Perina
Alex/Greg, could you please take a look?

Thanks

Martin


On Mon, Oct 24, 2016 at 2:02 PM, Baptiste Agasse <
baptiste.aga...@lyra-network.com> wrote:

> Hi,
>
> - Le 24 Oct 16, à 11:25, Martin Perina  a écrit :
>
>
>
> On Mon, Oct 24, 2016 at 11:18 AM, Baptiste Agasse <
> baptiste.aga...@lyra-network.com> wrote:
>
>> Hi Ondra,
>>
>> - Le 24 Oct 16, à 10:36, Ondra Machacek omach...@redhat.com a écrit :
>>
>> > On 10/21/2016 12:00 PM, Baptiste Agasse wrote:
>> >> Hi all,
>> >>
>> >> We use ovirt 4.0.4 with FreeIPA as external provider. The external
>> provider was
>> >> configured via the 'ovirt-engine-extension-aaa-ldap-setup' command.
>> The
>> >> authentication works fine, but in the webui, when you go on the
>> 'Active User
>> >> Sessions', all users uuid is showed as '----
>> '.
>> >> Other problem, maybe related, when a user create a VM, by default a
>> permission
>> >> is created with the role of 'UserVmManager'. On the 'Permissions'
>> pane, we see
>> >> a line with no value for User, Authorization provider, Namespace. The
>> only
>> >> value set on this line is the role (UserVmManager in that case). When
>> we try to
>> >> remove this line, an exception occurs in the webui that prevent
>> deletion of
>> >> this line.
>> >
>> > I've never see such issue with FreeIPA. Can you please share what's
>> > your IPA version?
>> >
>> > Can you also please share the log of error which occurs, when you try
>> > to remove the permission?
>>
>> We have multiple ovirt envs, all ovirt version are the same as described,
>> but FreeIPA servers are in different versions on these envs. We have one
>> env with FreeIPA on CentOS 6 (ipa-server-3.0.0-42.el6.centos.x86_64) and
>> the other on FreeIPA on CentOS 7 
>> (ipa-server-4.2.0-15.0.1.el7.centos.6.1.x86_64).
>> The both envs have the same problem. On our envs, the role mapping in oVirt
>> is done on user groups and not on individual users.
>>
>> For the permission problem, the problem only occurs when the VM is
>> created via the user webui. Creating VM with API or admin webui is OK. When
>> we try to remove the permission, an UI exception occurs and no logs on the
>> engine.log side. I've attached screenshots and ui.log.
>>
>
> ​Unfortunately by default UI code is obfuscated, so we cannot find exact
> issue. Could you please perform following steps and send us new ui.log?
>
> 1. Install UI debug packages
>   yum install ovirt-engine-webadmin-portal-debuginfo
> ovirt-engine-userportal-debuginfo​
>
>
> ​2. Restart ovirt-engine
>   systemctl restart ovirt-engine
>
> 3. Reproduce the error and share up-to-date ui.log with use
>
> If needed more info about UI logs can be found at
> http://www.ovirt.org/develop/developer-guide/engine/engine-
> debug-obfuscated-ui/
>
>
> I've reproduced the error, see attached engine.log at VM creation time and
> the ui.log when trying to remove inconsistent permission.
>
> Thanks.
>
>
>
> Thanks
>
> Martin Perina
> ​
>
>
>> >
>> >>
>> >> This behavior is verified on all our oVirt environments (oVirt 4.0.4 +
>> FreeIPA)
>> >>
>> >> Someone hit the same problem ?
>> >>
>> >> Have a nice day.
>> >>
>> >> Regards.
>>
>> Regards.
>>
>> --
>> Baptiste AGASSE
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
> --
> Baptiste AGASSE
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] external users problem

2016-10-24 Thread Baptiste Agasse
Hi, 

- Le 24 Oct 16, à 11:25, Martin Perina  a écrit : 

> On Mon, Oct 24, 2016 at 11:18 AM, Baptiste Agasse <
> baptiste.aga...@lyra-network.com > wrote:

>> Hi Ondra,

>> - Le 24 Oct 16, à 10:36, Ondra Machacek omach...@redhat.com a écrit :

>> > On 10/21/2016 12:00 PM, Baptiste Agasse wrote:
>> >> Hi all,

>> >> We use ovirt 4.0.4 with FreeIPA as external provider. The external 
>> >> provider was
>> >> configured via the 'ovirt-engine-extension-aaa-ldap-setup' command. The
>> >> authentication works fine, but in the webui, when you go on the 'Active 
>> >> User
>> >> Sessions', all users uuid is showed as 
>> >> '----'.
>> >> Other problem, maybe related, when a user create a VM, by default a 
>> >> permission
>> >> is created with the role of 'UserVmManager'. On the 'Permissions' pane, 
>> >> we see
>> >> a line with no value for User, Authorization provider, Namespace. The only
>> >> value set on this line is the role (UserVmManager in that case). When we 
>> >> try to
>> >> remove this line, an exception occurs in the webui that prevent deletion 
>> >> of
>> >> this line.

>> > I've never see such issue with FreeIPA. Can you please share what's
>> > your IPA version?

>> > Can you also please share the log of error which occurs, when you try
>> > to remove the permission?

>> We have multiple ovirt envs, all ovirt version are the same as described, but
>> FreeIPA servers are in different versions on these envs. We have one env with
>> FreeIPA on CentOS 6 (ipa-server-3.0.0-42.el6.centos.x86_64) and the other on
>> FreeIPA on CentOS 7 (ipa-server-4.2.0-15.0.1.el7.centos.6.1.x86_64). The both
>> envs have the same problem. On our envs, the role mapping in oVirt is done on
>> user groups and not on individual users.

>> For the permission problem, the problem only occurs when the VM is created 
>> via
>> the user webui. Creating VM with API or admin webui is OK. When we try to
>> remove the permission, an UI exception occurs and no logs on the engine.log
>> side. I've attached screenshots and ui.log.

> ​Unfortunately by default UI code is obfuscated, so we cannot find exact 
> issue.
> Could you please perform following steps and send us new ui.log?

> 1. Install UI debug packages
> yum install ovirt-engine-webadmin-portal-debuginfo
> ovirt-engine-userportal-debuginfo​

> ​2. Restart ovirt-engine
> systemctl restart ovirt-engine

> 3. Reproduce the error and share up-to-date ui.log with use

> If needed more info about UI logs can be found at
> http://www.ovirt.org/develop/developer-guide/engine/engine-debug-obfuscated-ui/

I've reproduced the error, see attached engine.log at VM creation time and the 
ui.log when trying to remove inconsistent permission. 

Thanks. 

> Thanks

> Martin Perina
> ​



>> >> This behavior is verified on all our oVirt environments (oVirt 4.0.4 + 
>> >> FreeIPA)

>> >> Someone hit the same problem ?

>> >> Have a nice day.

>> >> Regards.

>> Regards.

>> --
>> Baptiste AGASSE

>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users

-- 
Baptiste AGASSE 
2016-10-24 12:12:18,460 INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-54) [4e8be722] Lock Acquired to object 'EngineLock:{exclusiveLocks='[testperm=]', sharedLocks='[----=]'}'
2016-10-24 12:12:18,810 INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-54) [] Running command: AddVmFromTemplateCommand internal: false. Entities affected :  ID: 8de6230e-9162-4b93-8ae8-cca33c97c836 Type: Cluster
Action group CREATE_VM with role type USER,  ID: ---- Type: VmTemplateAction group CREATE_VM with role type USER
2016-10-24 12:12:19,851 INFO  [org.ovirt.engine.core.bll.AddGraphicsDeviceCommand] (default task-54) [7f91c712] Running command: AddGraphicsDeviceCommand internal: true. Entities affected :  ID: 3a97234b-5007-44f6-96cb-a279dfe850d6 Type: VMAction group EDIT_VM_PROPERTIES with role type USER
2016-10-24 12:12:20,010 INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-54) [7f91c712] Correlation ID: 4e8be722, Job ID: 86b0cea2-6c2a-46b2-8df1-c943a09c8674, Call Stack: null, Custom Event ID: -1, Message: VM testperm was created by foo...@example.com-authz.
2016-10-24 12:12:20,040 INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-54) [7f91c712] Lock freed to object 'EngineLock:{exclusiveLocks='[testperm=]', sharedLocks='[----=]'}'
2016-10-24 12:12:22,389 INFO  [org.ovirt.engine.core.bll.network.vm.AddVmInterfaceCommand] (default task-15) [3c8e2d1a] 

Re: [ovirt-users] external users problem

2016-10-24 Thread Martin Perina
On Mon, Oct 24, 2016 at 11:18 AM, Baptiste Agasse <
baptiste.aga...@lyra-network.com> wrote:

> Hi Ondra,
>
> - Le 24 Oct 16, à 10:36, Ondra Machacek omach...@redhat.com a écrit :
>
> > On 10/21/2016 12:00 PM, Baptiste Agasse wrote:
> >> Hi all,
> >>
> >> We use ovirt 4.0.4 with FreeIPA as external provider. The external
> provider was
> >> configured via the 'ovirt-engine-extension-aaa-ldap-setup' command. The
> >> authentication works fine, but in the webui, when you go on the 'Active
> User
> >> Sessions', all users uuid is showed as '----
> '.
> >> Other problem, maybe related, when a user create a VM, by default a
> permission
> >> is created with the role of 'UserVmManager'. On the 'Permissions' pane,
> we see
> >> a line with no value for User, Authorization provider, Namespace. The
> only
> >> value set on this line is the role (UserVmManager in that case). When
> we try to
> >> remove this line, an exception occurs in the webui that prevent
> deletion of
> >> this line.
> >
> > I've never see such issue with FreeIPA. Can you please share what's
> > your IPA version?
> >
> > Can you also please share the log of error which occurs, when you try
> > to remove the permission?
>
> We have multiple ovirt envs, all ovirt version are the same as described,
> but FreeIPA servers are in different versions on these envs. We have one
> env with FreeIPA on CentOS 6 (ipa-server-3.0.0-42.el6.centos.x86_64) and
> the other on FreeIPA on CentOS 7 
> (ipa-server-4.2.0-15.0.1.el7.centos.6.1.x86_64).
> The both envs have the same problem. On our envs, the role mapping in oVirt
> is done on user groups and not on individual users.
>
> For the permission problem, the problem only occurs when the VM is created
> via the user webui. Creating VM with API or admin webui is OK. When we try
> to remove the permission, an UI exception occurs and no logs on the
> engine.log side. I've attached screenshots and ui.log.
>

​Unfortunately by default UI code is obfuscated, so we cannot find exact
issue. Could you please perform following steps and send us new ui.log?

1. Install UI debug packages
  yum install ovirt-engine-webadmin-portal-debuginfo
ovirt-engine-userportal-debuginfo​


​2. Restart ovirt-engine
  systemctl restart ovirt-engine

3. Reproduce the error and share up-to-date ui.log with use

If needed more info about UI logs can be found at
http://www.ovirt.org/develop/developer-guide/engine/engine-debug-obfuscated-ui/

Thanks

Martin Perina
​


> >
> >>
> >> This behavior is verified on all our oVirt environments (oVirt 4.0.4 +
> FreeIPA)
> >>
> >> Someone hit the same problem ?
> >>
> >> Have a nice day.
> >>
> >> Regards.
>
> Regards.
>
> --
> Baptiste AGASSE
>
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Detected conflict in hook delete-POST

2016-10-24 Thread Ramesh Nachimuthu


- Original Message -
> From: "Nathanaël Blanchet" 
> To: users@ovirt.org
> Sent: Monday, October 24, 2016 1:21:42 PM
> Subject: [ovirt-users] Detected conflict in hook delete-POST
> 
> Hello,
> 
> What can I do to solve this kind of messages in ovirt 4.0.4?
> 
> Detected conflict in hook delete-POST-57glusterfind-delete-post.py of
> Cluster Test.
> Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Test.
> 
> 

You can resolve the conflicts in gluster hooks. Please use the steps specified 
in 'Resolving the Conflicts' section of gluster hook management feature page 
https://www.ovirt.org/develop/release-management/features/gluster/gluster-hooks-management/

Regards,
Ramesh

> --
> Nathanaël Blanchet
> 
> Supervision réseau
> Pôle Infrastrutures Informatiques
> 227 avenue Professeur-Jean-Louis-Viala
> 34193 MONTPELLIER CEDEX 5
> Tél. 33 (0)4 67 54 84 55
> Fax  33 (0)4 67 54 84 14
> blanc...@abes.fr
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] external users problem

2016-10-24 Thread Ondra Machacek

On 10/21/2016 12:00 PM, Baptiste Agasse wrote:

Hi all,

We use ovirt 4.0.4 with FreeIPA as external provider. The external provider was 
configured via the 'ovirt-engine-extension-aaa-ldap-setup' command. The 
authentication works fine, but in the webui, when you go on the 'Active User 
Sessions', all users uuid is showed as '----'. 
Other problem, maybe related, when a user create a VM, by default a permission 
is created with the role of 'UserVmManager'. On the 'Permissions' pane, we see 
a line with no value for User, Authorization provider, Namespace. The only 
value set on this line is the role (UserVmManager in that case). When we try to 
remove this line, an exception occurs in the webui that prevent deletion of 
this line.


I've never see such issue with FreeIPA. Can you please share what's
your IPA version?

Can you also please share the log of error which occurs, when you try
to remove the permission?



This behavior is verified on all our oVirt environments (oVirt 4.0.4 + FreeIPA)

Someone hit the same problem ?

Have a nice day.

Regards.


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


Re: [ovirt-users] Problem with start VDSMD durring hosted-engine --deploy

2016-10-24 Thread Yaniv Kaul
On Mon, Oct 24, 2016 at 8:59 AM, Grzegorz Szypa 
wrote:

> Hi  Support,
>

Not really support, just a community mailing list :-)


>
> Could you  help me with my problem, because when I try to deploy host on
> fresh Centos  7.1 installation  I got an error that vdsmd servies cannot
> bestarted, and deploy after taht are terminated:
>
> [root@vmsrv1 ~]#
> [root@vmsrv1 ~]# hosted-engine --deploy
> /usr/lib/python2.7/site-packages/ovirt_hosted_engine_ha/lib/storage_backends.py:15:
> DeprecationWarning: vdscli uses xmlrpc. since ovirt 3.6 xmlrpc is
> deprecated, please use vdsm.jsonrpcvdscli
>   import vdsm.vdscli
> [ INFO  ] Stage: Initializing
> [ INFO  ] Generating a temporary VNC password.
> [ INFO  ] Stage: Environment setup
>   During customization use CTRL-D to abort.
>   Continuing will configure this host for serving as hypervisor
> and create a VM where you have to install the engine afterwards.
>   Are you sure you want to continue? (Yes, No)[Yes]:
>   It has been detected that this program is executed through an
> SSH connection without using screen.
>   Continuing with the installation may lead to broken installation
> if the network connection fails.
>   It is highly recommended to abort the installation and run it
> inside a screen session using command "screen".
>   Do you want to continue anyway? (Yes, No)[No]: Yes
> [ INFO  ] Hardware supports virtualization
>   Configuration files: []
>   Log file: /var/log/ovirt-hosted-engine-
> setup/ovirt-hosted-engine-setup-20161024074216-iagc54.log
>   Version: otopi-1.5.2 (otopi-1.5.2-1.el7.centos)
> [ INFO  ] Stage: Environment packages setup
> [ INFO  ] Stage: Programs detection
> [ INFO  ] Stage: Environment setup
> *[ ERROR ] Failed to execute stage 'Environment setup': Failed to start
> service 'vdsmd'*
> [ INFO  ] Stage: Clean up
> [ INFO  ] Generating answer file '/var/lib/ovirt-hosted-engine-
> setup/answers/answers-20161024074222.conf'
> [ INFO  ] Stage: Pre-termination
> [ INFO  ] Stage: Termination
> [ ERROR ] Hosted Engine deployment failed
>   Log file is located at /var/log/ovirt-hosted-engine-
> setup/ovirt-hosted-engine-setup-20161024074216-iagc54.log
> [root@vmsrv1 ~]#
>
>
> Firstly I tried to do it by ovirt portal, but every time failed. so I try
> to do it  by hosted-engine --deploy, and this time I got  more  information
> as above. (SELinux is disabled). firewall are disabled. Onlywhat make me
> confuse are vdsm. So I checkd it and for sure it has been installed (with
> version vdsm-4.18.13-1.el7.centos.x86_64)
>
> [root@vmsrv1 ~]# yum install vdsm
> Wczytane wtyczki: fastestmirror, versionlock
> Loading mirror speeds from cached hostfile
>  * base: centos.trisect.eu
>  * epel: epel.mirrors.ovh.net
>  * extras: centos.trisect.eu
>  * ovirt-4.0: ftp.nluug.nl
>  * ovirt-4.0-epel: epel.mirrors.ovh.net
>  * updates: centos.trisect.eu
> Pakiet vdsm-4.18.13-1.el7.centos.x86_64 jest już zainstalowany w
> najnowszej wersji
> Nie ma niczego do zrobienia
>
> after that I tried to find it and restart :
> [root@vmsrv1 ~]# systemctl vdsmd restart
> Unknown operation 'vdsmd'.
>
> So question is if vdsm has been installed, what going on? So:
> [root@vmsrv1 ~]# systemctl |grep -i vdsm
>   supervdsmd.service
> loadedactive running   Auxiliary vdsm service for
> running helper functions as root
>   vdsm-network.service
> loadedactive exitedVirtual Desktop Server Manager
> network restoration
> [root@vmsrv1 ~]#
>
>
> As see  above there are completly different name convention, and it shuld
> be like vdsmd.service. What is strange, this exist  on host where is
> Portal, but it is not possible to start it, because of
> "vdsm-network.service"
>
> Question are how to avoid it, because for sure hosted-engine script do not
>  know how to start vdsm
>
> Additionaly, I tried to reconfigure  vdsm:
>
> [root@vmsrv1 ~]# vdsm-tool configure --force
> /usr/lib/python2.7/site-packages/vdsm/tool/dump_volume_chains.py:28:
> DeprecationWarning: vdscli uses xmlrpc. since ovirt 3.6 xmlrpc is
> deprecated, please use vdsm.jsonrpcvdscli
>   from vdsm import vdscli
>
> Checking configuration status...
>
> Current revision of multipath.conf detected, preserving
> libvirt is already configured for vdsm
> SUCCESS: ssl configured to true. No conflicts
>
> Running configure...
> Reconfiguration of sebool is done.
> Reconfiguration of libvirt is done.
>
> Done configuring modules to VDSM.
>
>
> [root@vmsrv1 ~]# systemctl start vdsmd
> A dependency job for vdsmd.service failed. See 'journalctl -xe' for
> details.
>
>
> [root@vmsrv1 ~]# journalctl -xe
> -- Subject: Ukończono uruchamianie jednostki libvirtd.service
> -- Defined-By: systemd
> -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
> --
> -- Jednostka libvirtd.service ukończyła uruchamianie.
> --
> -- Wynik uruchamiania: done.
> paź 24 07:57:12 

[ovirt-users] Detected conflict in hook delete-POST

2016-10-24 Thread Nathanaël Blanchet

Hello,

What can I do to solve this kind of messages in ovirt 4.0.4?

Detected conflict in hook delete-POST-57glusterfind-delete-post.py of 
Cluster Test.

Detected conflict in hook start-POST-31ganesha-start.sh of Cluster Test.


--
Nathanaël Blanchet

Supervision réseau
Pôle Infrastrutures Informatiques
227 avenue Professeur-Jean-Louis-Viala
34193 MONTPELLIER CEDEX 5   
Tél. 33 (0)4 67 54 84 55
Fax  33 (0)4 67 54 84 14
blanc...@abes.fr

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users