Re: [ovirt-users] Adding a new quota via the ovirt-shell

2015-06-18 Thread Ondra Machacek
Hi, cli/sdks are built on top of REST API, but there is no support for quota in 3.5 in REST API. But see[1], should be supported in 3.6. [1] https://bugzilla.redhat.com/show_bug.cgi?id=893927 On 06/18/2015 03:49 PM, nico...@devels.es wrote: Hi, Is it currently possible to define a new resou

Re: [ovirt-users] [ATN] LDAP Users please read

2015-08-06 Thread Ondra Machacek
Hi, On 08/06/2015 03:28 PM, Joop wrote: Hi Alon, I'll take the bait :-) I have just installed the extension and the examples are there. I also installed the migration tool. Now it comes. We use Samba4 as our AD provider and have succesfully connected Foreman-1.8 to it using the cert that I got

Re: [ovirt-users] ovirt 3.6 engine-setup failed db consisty check failed

2015-08-21 Thread Ondra Machacek
Hi, please take a look at this bz[1] Ondra [1] https://bugzilla.redhat.com/show_bug.cgi?id=1254639 On 08/21/2015 10:54 AM, Marc Werner wrote: Hi Im runnin ovirt 3.6 and want to upgrade the engine to the newest version… db consisty check failed I tracked it down to engine=# select fk_viol

Re: [ovirt-users] Problem with kerberos authentication and ovirt-engine-sdk-python

2015-09-04 Thread Ondra Machacek
Hi, maybe I am wrong, but I think you didn't properly setup your ovirt to support kerberos. You have to use new AAA, do you use it? It's not working with legacy manage-domains. Please see these[1][2] links. Ondra [1] http://www.ovirt.org/Features/AAA [2] https://gerrit.ovirt.org/gitweb?p=ov

Re: [ovirt-users] FreeIPA

2015-09-22 Thread Ondra Machacek
Just for clarification - ovirt-engine-extension-aaa-ldap-setup is available from oVirt 3.6 Can you send engine.log, hard to say what's wrong from configuration, it looks good. On 09/22/2015 09:55 PM, Ravi Nori wrote: Once you have installed ovirt-engine-extension-aaa-ldap and ovirt-engine-ex

Re: [ovirt-users] LDAP Authentication

2015-09-22 Thread Ondra Machacek
Hi, as Alon already said, you have trailing space in your configuration 'my.abc.net ' <-- space at the end Please remove this space and try again. Ondra On 09/23/2015 05:35 AM, Budur Nagaraju wrote: HI Alon, Tried all the options but no luck , I have copied the logs in the pastebin below

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
@abc.net>. Reasons: USER_NOT_AUTHORIZED_TO_PERFORM_ACTION Thanks, Nagaraju On Wed, Sep 23, 2015 at 12:13 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: Hi, as Alon already said, you have trailing space in your configuration 'my.abc.net <http://my.abc.net>

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
With UserRole you can only login to UserPortal, not webadmin. Do you have this issue when you try to login to UserPortal? On 09/23/2015 09:22 AM, Budur Nagaraju wrote: Provided the "user role" permissions still same issue On Wed, Sep 23, 2015 at 12:48 PM, Ondra Machacek <

Re: [ovirt-users] LDAP Authentication

2015-09-23 Thread Ondra Machacek
, if not please open bz. On 09/23/2015 09:29 AM, Budur Nagaraju wrote: yeah facing issues while logging to the user portal. On Wed, Sep 23, 2015 at 12:54 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: With UserRole you can only login to UserPortal, not webadmin. Do

Re: [ovirt-users] FreeIPA

2015-09-23 Thread Ondra Machacek
.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-50) START, GlusterVolumesListVDSCommand(HostName = node3.acloud.pt, HostId = 0ffde0bc-c610-43ee-8ded-e8d2beb7e0f6), log id: 3beec320 2015-09-23 09:38:24,410 INFO [org.ovirt.engine.core.vdsbroker.gluster.GlusterVolumesListVDSCommand] (DefaultQuartzScheduler_Worker-50) FINISH

Re: [ovirt-users] FreeIPA

2015-09-23 Thread Ondra Machacek
gging/logger=org.ovirt.engineextensions.aaa.ldap:write-attribute(name=level,value=ALL)" get this error: Duplicate argument '--command'/'--commands'. can't see why ---- *De: *"Ondra Machacek&quo

Re: [ovirt-users] FreeIPA

2015-09-23 Thread Ondra Machacek
nsion name: 'ovirt-engine-extension-aaa-ldap.authz', Version: '1.0.2', Notes: 'Display name: ovirt-engine-extension-aaa-ldap-1.0.2-1.el7', License: 'ASL 2.0', Home: 'http://www.ovirt.org', Author 'The oVirt Project', Build interface Version: '0', File: '/etc/o

Re: [ovirt-users] FreeIPA

2015-09-23 Thread Ondra Machacek
ct to the agent on the guest, it may be unresponsive or not installed. As a result, some features may not work. What kind of agent shoul I install on the guests? Thaks a lot *De: *"Ondra Machacek"

Re: [ovirt-users] Admin@internal inlog problems with clean install 3.6RC

2015-09-30 Thread Ondra Machacek
Hi, You can change admin account expiration as below: $ ovirt-aaa-jdbc-tool user edit admin --account-valid-to="2100-01-01 00:00:00Z" Ondra On 09/30/2015 04:08 PM, Joop wrote: I just installed 3.6RC and got Cannot Login. User Account has expired, Please contact your system administrator. in

Re: [ovirt-users] Admin internal inlog problems with clean install 3.6RC

2015-10-05 Thread Ondra Machacek
Hi, I believe this should solve your problem: $ ovirt-aaa-jdbc-tool user edit admin --account-valid-to="2100-01-01 00:00:00Z" (feel free change the date to whatever suites you) If it won't help, can you please send output of this psql command? # select valid_to from aaa_jdbc.users where nam

Re: [ovirt-users] Admin internal inlog problems with clean install 3.6RC

2015-10-05 Thread Ondra Machacek
"[ ERROR ] Failed to execute stage 'Closing up': Failed to stop service 'ovirt-vmconsole-proxy-sshd'" So, while I've got it working, I still don't have a good explanation of why it didn't work before and does again now. I rebuild a few more times and se

Re: [ovirt-users] api access with poweruser role

2015-10-26 Thread Ondra Machacek
On 10/26/2015 02:53 PM, Jorick Astrego wrote: Hi, Currently I'm trying to add an ovirt compute resource in forman that is limited to the VM's of the user. When I give this user the PowerUser role, I cannot access the api: query execution failed due to insufficient permissions Are yo

Re: [ovirt-users] api access with poweruser role

2015-10-29 Thread Ondra Machacek
On 10/28/2015 11:29 AM, Jorick Astrego wrote: On 10/26/2015 03:14 PM, Jorick Astrego wrote: On 10/26/2015 02:57 PM, Ondra Machacek wrote: On 10/26/2015 02:53 PM, Jorick Astrego wrote: Hi, Currently I'm trying to add an ovirt compute resource in forman that is limited to the VM

Re: [ovirt-users] api access with poweruser role

2015-10-29 Thread Ondra Machacek
On 10/29/2015 03:56 PM, Ondra Machacek wrote: On 10/28/2015 11:29 AM, Jorick Astrego wrote: On 10/26/2015 03:14 PM, Jorick Astrego wrote: On 10/26/2015 02:57 PM, Ondra Machacek wrote: On 10/26/2015 02:53 PM, Jorick Astrego wrote: Hi, Currently I'm trying to add an ovirt co

Re: [ovirt-users] AIO UPG Error from 3.5 to 3.6

2015-11-04 Thread Ondra Machacek
Try: yum update ovirt-engine-setup and then engine-setup On 11/04/2015 08:16 PM, Christian Rebel wrote: Seems not to be working, any other ideas? _yum update --skip-broken:_ Skipped (dependency problems): glusterfs.x86_64 0:3.7.5-1.el7 glusterfs-api.x86_64 0:3.7.5-1.el7 glusterfs-cl

Re: [ovirt-users] AIO UPG Error from 3.5 to 3.6

2015-11-04 Thread Ondra Machacek
1.1.5-1.el7.centos ovirt-3.6 *From:*Ondra Machacek [mailto:omach...@redhat.com] *Sent:* Mittwoch, 04. November 2015 20:35 *To:* Christian Rebel; 'Artyom Lukianov' *Cc:* users@ovirt.org *Subject:* Re: [ovirt-users] AIO UPG Error from 3.5 to 3.6 Try: yum update ovirt-engine-s

Re: [ovirt-users] [3.6] Change admin password

2015-11-13 Thread Ondra Machacek
$ ovirt-aaa-jdbc-tool user password-reset admin --password=pass:YourNewPassword Go over it's help to understand all options. On 11/13/2015 03:23 PM, Maksim Naumov wrote: Hello How can I change admin password? I tried # engine-config -s AdminPassword=interactive Error setting AdminPassword's

Re: [ovirt-users] [3.6] Change admin password

2015-11-13 Thread Ondra Machacek
Last unsuccessful Login At: 2015-11-13 14:37:35Z Password Valid To: 2215-09-19 07:09:38Z Ok how can I set my password ??? On Fri, Nov 13, 2015 at 3:30 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: $ ovirt-aaa-jdbc-tool user password-reset admin --password=pass:Y

Re: [ovirt-users] [3.6] Change admin password

2015-11-16 Thread Ondra Machacek
ord: false Last successful Login At: 2015-11-13 14:28:33Z Last unsuccessful Login At: 2015-11-13 14:37:35Z Password Valid To: 2215-09-19 07:09:38Z Ok how can I set my password ??? On Fri, Nov 13, 2015 at 3:30 PM, Ondra Machacek wrote: $ ovirt-aaa-jdbc-tool user password-reset admin --password=pass:

Re: [ovirt-users] [3.6] API - Internal Server Error

2015-11-18 Thread Ondra Machacek
Can you send debug log please? On 11/18/2015 05:56 PM, Maksim Naumov wrote: After some time, API stopped work. When I try to run any request I see only "Internal Server Error" and the log like this: 2015-11-18 17:53:05,634 ERROR [org.ovirt.engine.extension.aaa.jdbc.binding.api.AuthnExtension

Re: [ovirt-users] Bug?

2015-11-27 Thread Ondra Machacek
Hi, this error usually mean, that your user can't be translated to userprincipalname. The strange thing is that it worked, but stopped. Can you please assure, that your user has userprincipalname atttribute? $ ldapsearch -H ldap://ldapserver:3268/ -x -D 'searchu...@company.be' -w password -b

[ovirt-users] Re: Users and VM permissions matrix

2019-11-05 Thread Ondra Machacek
On 05/11/2019 11:57, Colin Coe wrote: Hi all I've been tasked with creating a matrix of users/groups and VMs so we can easily see who has access to what (via SPCIE console). Google has given me a couple of hints but I can get it over the line. --- users_service = connection.system_service(

[ovirt-users] Re: ovirtsdk4 error

2019-12-10 Thread Ondra Machacek
On 10/12/2019 04:58, jeremy_tourvi...@hotmail.com wrote: I have a server which runs a project from Github called SecGen. SecGen uses Vagrant to provision VMs from templates. When I go to my project folder and run vagrant up I get an error. user@localhost:~/bin/SecGen/projects/SecGen2019120

Re: [ovirt-users] LDAP sources

2017-11-15 Thread Ondra Machacek
Hello, On Wed, Nov 15, 2017 at 9:03 AM, Magnus Isaksson wrote: > Hello, > > I have tried googling and searching in the documentation, but i can't seem > to find any instructions on how to remove a authentication source. > > The background is that i did set up an FreeIPA server for auth, worked >

Re: [ovirt-users] Reassign ovirtmgmt to a new bond with ansible

2017-12-14 Thread Ondra Machacek
Hi, On 12/13/2017 11:52 AM, Luca 'remix_tj' Lorenzetto wrote: Hello, I'm trying to create a playbook for deployment of a new node in my ovirt deployment. I'm using the role ovirt-infra from ovirt-infra-roles 1.1.1. I'm creating a new bond and assigning ovirtmgmt to that bond: This is the valu

Re: [ovirt-users] oVirt CLI Question

2018-02-08 Thread Ondra Machacek
On 02/07/2018 11:28 PM, Andrei V wrote: Hi, How to force power off, and then launch (after timeout e.g. 20sec) particular VM from bash or Python script? Please check the following Python script: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/stop_vm.py It stops the VM an

Re: [ovirt-users] Engine AAA LDAP startTLS Protocol Issue

2018-02-08 Thread Ondra Machacek
On 02/08/2018 11:04 AM, Alan Griffiths wrote: Hi, Trying to configure Engine to authenticate against OpenLDAP and I seem to be hitting a protocol bug. Attempts to test the login during the setup fail with 2018-02-07 12:27:37,872Z WARNING Exception: The connection reader was unable to successfu

Re: [ovirt-users] 4.2 aaa LDAP setup issue

2018-02-13 Thread Ondra Machacek
Hello, On 02/09/2018 08:17 PM, Jamie Lawrence wrote: Hello, I'm bringing up a new 4.2 cluster and would like to use LDAP auth. Our LDAP servers are fine and function normally for a number of other services, but I can't get this working. Our LDAP setup requires startTLS and a login. That last

Re: [ovirt-users] Internal Server Error while add Permission [cli]

2018-02-16 Thread Ondra Machacek
Hi, in the /var/log/ovirt-engine/server.log there will be some trace of the exception, right after running that command, can you please share it? Thanks. On 02/16/2018 09:40 AM, Thomas Fecke wrote: Hey dear Community, I work a bit with that ovirt shell. That worked pretty fine but I got so

Re: [ovirt-users] API endpoint for a VM to fetch metadata about itself

2018-02-25 Thread Ondra Machacek
We don't have any such resource. We have those information in different places of the API. For example to find the information about devices of the VM, like network device information (IP address, MAC, etc), you can query: /ovirt-engine/api/vms/{vm_id}/reporteddevices The FQDN is listed right

Re: [ovirt-users] API endpoint for a VM to fetch metadata about itself

2018-02-27 Thread Ondra Machacek
it's {vm_id}.  Can the API be used to query for a VM and it's attributes based on something like a MAC address or the IP itself? -Geoff On Sun, Feb 25, 2018 at 11:05 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: We don't have any such resource. We have t

Re: [ovirt-users] ovirt-ansible-modules vs ovirt 3.6

2018-02-27 Thread Ondra Machacek
Hi, unfortunately no, ovirt-ansible-modules can be used only with oVirt >= 4.0. On 02/27/2018 12:22 PM, Николаев Алексей wrote: Hi community! Is it possible to use ovirt-ansible-modules with ovirt-engine 3.6 api? I'm trying to obtain SSO token by ovirt_auth. And get error: "The response content

Re: [ovirt-users] Hosts firewall custom setup

2018-02-27 Thread Ondra Machacek
On 02/27/2018 11:29 AM, Nicolas Ecarnot wrote: Le 26/02/2018 à 15:00, Yedidyah Bar David a écrit : But how do we add custom rules in case of firewalld type? Please see: https://ovirt.org/blog/2017/12/host-deploy-customization/ Hello Didi and al, - I followed the advices found in this blog

Re: [ovirt-users] oVirt API (4.0 and 4.1) not reporting vms running on a given storage domain

2018-03-02 Thread Ondra Machacek
Hi, As per documentation: http://ovirt.github.io/ovirt-engine-api-model/4.1/#services/storage_domain_vms That resource is used to list VMs on export storage domain, not on data domain. If you want to find VMs using specific storage you may use following query: /ovirt-engine/api/vms?search

Re: [ovirt-users] oVirt API (4.0 and 4.1) not reporting vms running on a given storage domain

2018-03-02 Thread Ondra Machacek
On 03/02/2018 05:24 PM, Luca 'remix_tj' Lorenzetto wrote: On Fri, Mar 2, 2018 at 3:21 PM, Ondra Machacek wrote: Hi, As per documentation: http://ovirt.github.io/ovirt-engine-api-model/4.1/#services/storage_domain_vms That resource is used to list VMs on export storage domain, n

Re: [ovirt-users] Q: Can't connect to oVirt shell / SSL cert issue

2018-03-05 Thread Ondra Machacek
You should use CA certificate if you use default one it's: /etc/pki/ovirt-engine/ca.pem You can find more information about oVirt PKI here: https://www.ovirt.org/develop/release-management/features/infra/pki/ On 03/05/2018 11:51 AM, Andrei Verovski wrote: Hi, Thanks,  corrected URL accepte

Re: [ovirt-users] Q: Can't connect to oVirt shell / SSL cert issue

2018-03-05 Thread Ondra Machacek
On 03/05/2018 01:28 PM, Andrei Verovski wrote: On 03/05/2018 12:58 PM, Ondra Machacek wrote: You should use CA certificate if you use default one it's:  /etc/pki/ovirt-engine/ca.pem Executed as root ovirt-shell -l https://node00.mydomain.com/ovirt-engine/api --cert-file /etc/pki/

Re: [ovirt-users] Users/Groups Permissions

2018-03-06 Thread Ondra Machacek
On 03/05/2018 10:42 AM, markus.schauf...@ooe.gv.at wrote: Hi! Still new to oVirt and got another question: I have many Windows and Linux VMs and created for each the Windows and Linux machines two Usergroups (limited and admins). Now I want to grant the groups according permissions to accord

Re: [ovirt-users] How to setup users to see a subset of VMs in oVirt

2018-03-06 Thread Ondra Machacek
On 03/06/2018 12:03 AM, Jean Pickard wrote: Hello, I need to create user accounts in oVirt that can only manage a specific set of VMs and I don't want them to see any other ones. example: User1 can only see VM1, VM2, VM3, VM4 User2 can only see VM5, VM6, VM7 Admin can see all of them. How do I

Re: [ovirt-users] Setting up a LDAP conf

2018-03-16 Thread Ondra Machacek
On 03/16/2018 12:26 AM, Jose Fernandes wrote: Hello, I have an OpenDJ LDAP server, and I need some help to do query on a specific filter search. I remember I used to setup OpenDJ some time ago, please check this blog post: http://machacekondra.blogspot.cz/2015/05/saml-and-ovirt-35.html Th

Re: [ovirt-users] Authentication

2018-03-22 Thread Ondra Machacek
On 03/22/2018 11:25 PM, Bryan Sockel wrote: Hey Guys, Was working on switching my authentication over to TLS, and during the process I have lost the Internal Authentication option on my drop down list.  Need to Know how to add it back it back to the list of drop down items. Just re-run engi

Re: [ovirt-users] Query on VM Clone

2018-03-29 Thread Ondra Machacek
On 03/29/2018 11:09 AM, Hari Prasanth Loganathan wrote: Hi Team, 1) I perform the VM clone using the following API api/vms/{vmId}/clone 2) The above API is returning the job id 3) Using the job Id, we continuously query the oVirt to get the status of the clone operation. /api/jobs/${vmCloneJ

Re: [ovirt-users] Query on VM Clone

2018-03-29 Thread Ondra Machacek
On 03/29/2018 01:02 PM, Karli Sjöberg wrote: On Thu, 2018-03-29 at 11:21 +0200, Ondra Machacek wrote: On 03/29/2018 11:09 AM, Hari Prasanth Loganathan wrote: Hi Team, 1) I perform the VM clone using the following API api/vms/{vmId}/clone 2) The above API is returning the job id 3) Using

Re: [ovirt-users] Some questions about Ovirt REST API

2018-04-12 Thread Ondra Machacek
On 04/11/2018 08:19 AM, gss...@pku.edu.cn wrote: Hi, I wants to creating my own service under ../vms/{vmid}/myservice.Here is my methods: 1. create VmMytestService in /https://github.com/oVirt/ovirt-engine-api-model project./ add/@Service VmMytestService mytests() in /VmService .java 2. m

Re: [ovirt-users] Some questions about Ovirt REST API

2018-04-12 Thread Ondra Machacek
ew as draft for start, we could better understand the patch then. On 04/12/2018 10:14 AM, gss...@pku.edu.cn wrote: Do you mean /@override/ /getMytestsResource() / in BackendVmResource ? I have done that, otherwise GET would not pass. *From:* Ondra Machacek <mailto:omach...@redhat.com>

Re: [ovirt-users] FreeIPA authentication broken

2018-04-23 Thread Ondra Machacek
On 04/23/2018 04:30 PM, Kristian Petersen wrote: Hey everyone, I had FreeIPA authentication set up on my oVirt instance and it was working great.  Then something happened that disconnected my NFS storage and caused a problem with my hosted-engine.  Once I got it back up and running again, my

Re: [ovirt-users] FreeIPA authentication broken

2018-04-23 Thread Ondra Machacek
Right, you are missing file /etc/ovirt-engine/aaa/IPA.properties It's not subdirectory of /etc/ovirt-engine/extensions.d, but it's in /etc/ovirt-engine/ in 'aaa' subdirectory, can you check what's there? Please check also the correct permissions of that file, it should be '600' and owned by ovirt

Re: [ovirt-users] Fwd: FreeIPA authentication broken

2018-04-25 Thread Ondra Machacek
: *Kristian Petersen* <mailto:nesre...@chem.byu.edu>> Date: Tue, Apr 24, 2018 at 12:38 PM Subject: Re: [ovirt-users] FreeIPA authentication broken To: Ondra Machacek mailto:omach...@redhat.com>> That directory only contains internal.properties.  So I copied the IPA.properties, IPA-authn.

[ovirt-users] Re: sdk api and follow question / bug

2018-05-14 Thread Ondra Machacek
On 05/10/2018 10:32 AM, Peter Hudec wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, I'm using API to get stats about the VM using the FOLLOW syntax described in http://ovirt.github.io/ovirt-engine-api-model/4.2/#documents/003_common_ concepts/follow In my case I list all VM with FOL

[ovirt-users] Re: Use local ansible to talk to engineVM and other vm

2018-05-22 Thread Ondra Machacek
On 05/21/2018 11:51 AM, 03ce...@gmail.com wrote: I have a self-hosted-engine (4.2) running on a centos 7.4 server. I have downloaded ovirt ansible roles from ansible-galaxy and can run them from the server where the engineVM is running and able to deploy new vms, clusters, dc, etc. I have see

[ovirt-users] Re: Obtain dynamic inventory onto local machine using ovirt4.py for self-hosted engine

2018-05-22 Thread Ondra Machacek
On 05/22/2018 06:44 PM, 03ce...@gmail.com wrote: I have successfully deployed self-hosted-engine (4.2) on centos (7.4) server. the server address is ovirt where the self-hosted engine running on it has fdqn as engine.ovirt. I have ovirt,ini configured on server acan run the ovirt4.py from the

[ovirt-users] Re: LDAP Authentication issues

2018-05-29 Thread Ondra Machacek
What's you LDAP and what profile did you choose? This looks like you have chosen incorect profile during setup. Are you sure you arent using posix group and using non-posix aaa profile? Sharing a debug log of ovirt-engine-extensions-tool would be helpfull. On Fri, May 25, 2018, 10:04 AM Callum Sm

[ovirt-users] Re: Simple API call to start VM

2018-05-30 Thread Ondra Machacek
On 05/30/2018 08:07 AM, Kirin van der Veer wrote: Hi oVirt users, I have (what I hope) is a simple problem. I want to make an https request to start a VM via the oVirt REST API. Here is the command that I think should work: curl --user "admin:SECRETPASSWORD" --request POST --header s/admin/adm

[ovirt-users] Re: Unable to login after upgrade

2018-05-31 Thread Ondra Machacek
That's very strange, can you please share the upgrade log if you still have it? Also can you please share the output of: $ select * from users; and $ select * from permissions; and also please share content of: /etc/ovirt-engine/extensions.d/internal-authn.properties /etc/ovirt-engine/ext

[ovirt-users] Re: how to use oVirt engine API to retrieve the attached VM list by a disk id.

2018-05-31 Thread Ondra Machacek
On 05/31/2018 09:28 AM, iterjpnic wrote: Hi all, I use oVirt engine API v4.2 for implementing terraform oVirt provider. And I want to check if a Disk has been attached to a VM, so I need to find all vms attached by this disk. But after I checked the GET-Response data from the "/ovirt-engine/

[ovirt-users] Re: how to use oVirt engine API to retrieve the attached VM list by a disk id.

2018-05-31 Thread Ondra Machacek
ne/webadmin/?locale=en_US#disks> On Fri, Jun 1, 2018 at 8:51 AM, Joey Ma <mailto:majunj...@gmail.com>> wrote: OK, got it. Search is a powerful solution. Thank you very much. On Thu, May 31, 2018 at 6:49 PM, Ondra Machacek mailto:omach...@redhat.com>> wrote

[ovirt-users] Re: LDAP logins do not work

2018-06-14 Thread Ondra Machacek
Can you share the debug log, and also make sure the search user you are using is correct for example by running the ldapsearch command with it. On 06/13/2018 05:33 PM, Michael Watters wrote: I've ran the ovirt-engine-extension-aaa-ldap-setup command to configure LDAP authentication using Active

[ovirt-users] Re: LDAP logins do not work

2018-06-14 Thread Ondra Machacek
domain.com" but then receive an error as follows. The user u...@example.com@example.com is not authorized to perform login How do I enable debug logs?  The log entries from the engine.log file are the same as my previous message. On 06/14/2018 06:37 AM, Ondra Machacek wrote: Can you shar

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
We do not support this. For xml we use event handler, which takes unknown fields as error: https://github.com/oVirt/ovirt-engine/blob/68753f46f09419ddcdbb632453501273697d1a20/backend/manager/modules/restapi/jaxrs/src/main/java/org/ovirt/engine/api/restapi/xml/JAXBProvider.java#L182 For json we

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
in client side, I didn't get this point, Could you explain, please. On Thu, Jun 21, 2018 at 4:20 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: We do not support this. For xml we use event handler, which takes unknown fields as error: https://github.com

[ovirt-users] Re: Ignore extra parameters in oVirt API

2018-06-21 Thread Ondra Machacek
ore extra properties in oVirt Rest API? On Thu, Jun 21, 2018 at 4:30 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: Well, I don't know what are you using to generate the JSON, but you just need to check if engine is v4.1 and then send the JSON without the field

[ovirt-users] Re: oVirt Authentication and Authorization

2018-06-29 Thread Ondra Machacek
What's your use-case? You need all users to access without any username/password? Why not rather share some username/password of guest account them? On 06/29/2018 12:39 PM, Hari Prasanth Loganathan wrote: Guys any update on this, If you have any clarification in my query please let me know.

[ovirt-users] Re: Python-SDK4: Check snapshot deletion result?

2018-07-12 Thread Ondra Machacek
On 07/11/2018 10:10 AM, nico...@devels.es wrote: Hi, We're using ovirt-engine-sdk-python 4.1.6 on oVirt 4.1.9, currently we're trying to delete some snapshots via a script like this:     sys_serv = conn.system_service()     vms_service = sys_serv.vms_service()     vm_service = vms_service.

[ovirt-users] Re: Problem with following host link for vm list using Java SDK.

2018-07-12 Thread Ondra Machacek
On 07/12/2018 11:25 PM, dchamb...@bugfixer.net wrote: When trying to do VM list using the 4.2.4 Java SDK against a 4.2.4 engine, I am getting an error while trying to follow the host link to get host info. Any suggestions on fixing this? List vms = vmsService.list() .follow("h

[ovirt-users] Re: Ovirt4.2 AD integration issue

2018-07-24 Thread Ondra Machacek
Can you please share the full debug log? On 07/23/2018 02:55 PM, Arun S wrote: Hello, I need help to resolve Ovirt AD auth setup issue. I have setup ovirt-engine-4.2 and I am trying to integrate with AD for user authentication. Using  (ad.properties) I am able to bind to AD, however test

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
It's not, but you can write a script which can do this. But if you want all users from the ldap are able to login I would suggest to you create some group in LDAP and add all users as a member of this group and add this group to ovirt and assign it the permissions. On 07/23/2018 08:36 PM, Hari Pr

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
for the suggestion. Much Appreciated. It's not, but you can write a script which can do this. - Could you give a small brief on the type of script we need to write? On Tue, Jul 24, 2018 at 12:50 PM, Ondra Machacek mailto:omach...@redhat.com>> wrote: It's not, but

[ovirt-users] Re: Sync LDAP users in Ovirt

2018-07-24 Thread Ondra Machacek
n Tue, Jul 24, 2018 at 3:26 PM, Ondra Machacek <mailto:omach...@redhat.com>> wrote: Something like this should work for you: import ovirtsdk4 as sdk import ovirtsdk4.types as types DOMAIN_NAME = 'internal-authz' connection = sdk.Conne

[ovirt-users] Re: AAA question...takes long time to log in

2018-07-31 Thread Ondra Machacek
On 07/27/2018 01:59 AM, sipandb...@hotmail.com wrote: I work at a company with a massive AD infrastructure. Is there any way to specify a specific OU to search through instead of just providing a top level DN? We use sssd for all our authing needs on our linux machines and would like to do som

[ovirt-users] Re: [ovirt-engine-api-model] Any solutions to add custom key/value pairs into entities?

2018-08-14 Thread Ondra Machacek
Hi, On 08/14/2018 11:53 AM, Joey Ma wrote: Hi all, In my case, I need to add customized KVs into API model entities, such as VM, Disk, Template and etc. I looked through the API model documents and got some existing Tag/Property/CustomProperty structs, all of which have limitations and can

[ovirt-users] Re: ovirt-ansible download/upload of snapshots for backup

2018-08-16 Thread Ondra Machacek
On 08/15/2018 03:19 PM, Николаев Алексей wrote: Hi community! Does the ansible module "ovirt_snapshots" support download/upload of snapshots? According to the https://bugzilla.redhat.com/show_bug.cgi?id=1405805 support of this functionality is already implemented in the ovirt API. How to use ov

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup credentials invalid

2018-08-30 Thread Ondra Machacek
On 08/29/2018 08:04 PM, Douglas Duckworth wrote: Hi I am not able to finish ovirt-engine-extension-aaa-ldap-setup due to the error "credentials invalid." My password's correct. Our directory server's OpenLDAP standard schema. Our accounts are under OU=People. We are binding with a service acc

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup credentials invalid

2018-08-31 Thread Ondra Machacek
nistrator Scientific Computing Unit Weill Cornell Medicine 1300 York Avenue New York, NY 10065 E: d...@med.cornell.edu O: 212-746-6305 F: 212-746-8690 On Thu, Aug 30, 2018 at 8:36 AM, Ondra Machacek wrote: On 08/29/2018 08:04 PM, Douglas Duckworth wrote: Hi I am not able to finish ovirt-engin

[ovirt-users] Re: ovirt4 api create snapshot

2018-09-07 Thread Ondra Machacek
On 09/06/2018 01:07 PM, David David wrote: hi i have a vm with 3 disks and i want to take a snapshot with only two disks how to do a multiple disk snapshot in the code below? snap = snaps_service.add( snapshot=types.Snapshot( description=snap_description,

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-09-24 Thread Ondra Machacek
If you are sure you are passing correct credentials, then please save the correct configuration and run following command: $ ovirt-engine-extensions-tool --log-level=FINEST aaa login-user --user-name=taha --profile=ldap23.exalt.ps and share the output. On 9/24/18 11:11 AM, mopiel games wrot

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup failed

2018-09-25 Thread Ondra Machacek
Can you please share the whole log? On 9/25/18 8:25 AM, mopiel games wrote: i try it with new user dn:uid=user,dc=exalt,dc=ps but it show this : 2018-09-25 09:23:04,441+03 FINEST simple_attrsGroupRecord = entryUUID, cn, description 2018-09-25 09:23:04,441+03 FINEST simple_attrsPrincipalRecord

[ovirt-users] Re: Ldap-configure

2018-09-26 Thread Ondra Machacek
Hi, you can check the documentation: https://www.ovirt.org/documentation/admin-guide/chap-Users_and_Roles/#chapter-15-users-and-roles On 9/26/18 10:12 AM, Budur Nagaraju wrote: Hi Can you please let us know how to configure LDAP authentication in oVirt 4.2 ? Thanks, Nagaraju _

[ovirt-users] Re: LDAP-Error

2018-09-27 Thread Ondra Machacek
You get following error: Internal Server Error: Cannot resolve principal 'nbud...@psecure.net' 2018-09-26 21:30:35,573+05 ERROR [org.ovirt.engine.core.sso.utils.SsoUt Meaning that user with UPN(user principal name) nbud...@psecure.net can't be found. Please double check if the user with that

[ovirt-users] Re: Different credentials ovirt_vm module

2019-04-10 Thread Ondra Machacek
Hello, this seems ok to me. Can you please check the engine.log, for some error? On 09/04/2019 22:26, Florian Rädler wrote: Hi, how can i use other credentials (run once) in the ansible playbook for Sysprep domain join? My playbook: User_name and root_password does not sound like it’s the

[ovirt-users] Re: Inconsistencies beteween WebUI, API read verbs and API write verbs

2019-04-16 Thread Ondra Machacek
Hello, instance type module was merged into Ansible 2.8: https://github.com/ansible/ansible/pull/54782 You can try it, if all is working fine for you. But the issue you had is just missing header 'All-content: true', which enable listing all attributes. $ curl -H 'All-content: true' -u use

[ovirt-users] Re: Is there a way to tell whether a permission set for a VM is inherited using REST API?

2019-04-23 Thread Ondra Machacek
Actually this is bug, as I see we fill the tag for all permissions, even for inherited permissions, but it should be set only for direct permissions, that's how you would distinguish it. Same as you say you can do it via following the specific permission id. So I am afraid there is no effectiv

[ovirt-users] Re: Fetching DiskAttachmentService in ovirt-python-sdk-4

2019-04-29 Thread Ondra Machacek
There is also this usage guide: https://github.com/oVirt/ovirt-engine-sdk/tree/master/sdk#usage which may help you better understand difference between the service and the type. On 26/04/2019 11:30, Joey Ma wrote: Beside the doc you've referred to, the example codes for sdk [1] are always the

[ovirt-users] Re: Ansible oVirt.image-template role

2019-05-09 Thread Ondra Machacek
Can you share what you have in runsetup.yml. According to log, there is run only 'gather facts' task and nothing more. On 09/05/2019 03:41, Jeremy Tourville wrote: I am trying to run an Ansible playbook that doesn't appear to run correctly.  I have followed the example from this blog - https:/

[ovirt-users] Re: LDAP - not able to find members of groups

2019-05-09 Thread Ondra Machacek
By default the openldap configuration on oVirt does connect it via member attribute of the group, so you shouldn't have any issue logging in as user from some group. We support also memberOf plugin, but it's not default for openldap. On 08/05/2019 13:10, Timmi wrote: Hi oVirt List, I manage to

[ovirt-users] Re: Unable to add permissions for LDAP users

2019-05-14 Thread Ondra Machacek
On 10/06/2016 01:47 PM, Michael Burch wrote: I'm using the latest ovirt on CentOS7 with the aaa-ldap extension. I can successfully authenticate as an LDAP user. I can also login as admin@internal and search for, find, and select LDAP users but I cannot add permissions for them. Each time I get th

[ovirt-users] Re: VM SSO

2019-05-14 Thread Ondra Machacek
On 10/07/2016 09:09 AM, Maxence Sartiaux wrote: Hello, I try to use the VM SSO but no login, still on the logon screen ... I'm on ovirt 4.0.3, connected to an AD (Samba 4.5) + VMs Windows 7/10 stateless sysprep-ed to integrate to the domain and obviously the guest-agent is installed. My AD use

[ovirt-users] Re: ovirt nic ansible module

2019-06-19 Thread Ondra Machacek
I've opened an issue. This will be supported since 2.9: https://github.com/ansible/ansible/issues/58045 On 18/06/2019 12:00, Nathanaël Blanchet wrote: Hello, With that module, we can make the nic present/absent/plugged/unplugged, but is there a way to make the link state up or down? Thanks

[ovirt-users] Re: ovirt_vm ansible cloud-init ipv6 related

2019-06-19 Thread Ondra Machacek
Hello, thanks for the report. This is indeed supported by oVirt, but it's not supported by ovirt_vm Ansible module, I've opened an issue[1]. Thanks. [1] https://github.com/ansible/ansible/issues/58054 On 17/06/2019 15:18, Vrgotic, Marko wrote: Dear oVirt Would you be so kind to help out clari

[ovirt-users] Re: ansible tower/awx integration in ovirt

2019-06-19 Thread Ondra Machacek
We support tower, so you shouldn't have any issues integrate it. There is oVirt/RHV credentials in the Tower/awx. So you can use those for the authentication. On 19/06/2019 10:37, Nathanaël Blanchet wrote: Hello, I wrote a playbook for workflow that automates a vm creation from a template/cloud-

[ovirt-users] Re: template permissions not inherited (4.3.4)

2019-07-24 Thread Ondra Machacek
There is 'Copy template permission' check box, when you open 'create vm' dialog. Right after fields, name, description, comment, vm id. It's not visible when using Blank template, but it's visible when you select different template. On 22/07/2019 14:28, Timmi wrote: Hi oVirt List, I have just a

[ovirt-users] Re: ovirt-engine-extension-aaa-ldap-setup

2019-09-05 Thread Ondra Machacek
Can you please share the debug log from the ovirt-engine-extensions-test-tool? On 04/09/2019 18:23, Rick A wrote: thanks for the reply. That doesn't seem to work for me either. Strange part is if apply the settings anyway and I use a wildcard "*" in ovirt when searching for users, it lists

[ovirt-users] Re: Python to retrive the VM-Config from the snapshot

2019-09-10 Thread Ondra Machacek
Hi, this example is the close to what you want to achieve: https://github.com/oVirt/ovirt-engine-sdk/blob/master/sdk/examples/vm_backup.py#L137 but instead of line 137, you would have to do something like this: snap_data = data_vm_service.snapshots_service().list(all_content=True)[0] ovf_data

[ovirt-users] Re: Reboot a guest via ansible in oVirt

2019-09-24 Thread Ondra Machacek
Hi, we don't have implemented direct restart. But the next_run state does something similar. When there is next_run_configuration on the VM, the VM is restarted. I've submitted the issue[1], to add direct restart. [1] https://github.com/ansible/ansible/issues/62775 On 20/09/2019 16:20, Gianluc

[ovirt-users] Re: Fail to attach/create disk from template when running via Ansible

2019-10-10 Thread Ondra Machacek
The error message is: Image does not exist in domain: u'image=d680a46a-7188-45f6-b6a7-f830c0b4, domain=935de3ac-a735-4fc8-9161-26bfd751ffc7' Can you please check if the image with id 'd680a46a-7188-45f6-b6a7-f830c0b4' exists on storage domain with id '935de3ac-a735-4fc8-9161-26bfd75

[ovirt-users] Re: ovirt-web-ui search active directory user problem

2019-10-29 Thread Ondra Machacek
Did you retart ovirt-engine when you've configured the aaa? If not you should. If the problem is after ovirt-engine restart, please share the engine log, so we can investigate what could be the problem. On 25/10/2019 02:20, 山永军 wrote: Ovirt version 4.3, active directory windows 2012r2; after addi

<    1   2   3   4   >