Re: [ovirt-users] problem engine-manage-domains add ldap domain

2014-06-12 Thread lucas castro 
On ubuntu 12.04, by default,
it is generatthe realm config with 'kdc_ports' parameters in /etc/krb5k
dc/kdc.config,
and then, it is used the udp ports, causing a connection refused for
engine-manage-domains.
Just change kdc_ports to kdc_tcp_ports solve the problem.


On Thu, Jun 12, 2014 at 4:50 AM, Yair Zaslavsky  wrote:

> I helped Lucas resolve this over IRC.
> This was an issue with his kerberos setup.
> Lucas, care to share here what issue did you discover?
>
> Yair
>
>
> - Original Message -
> > From: "lucas castro" 
> > To: users@ovirt.org
> > Sent: Wednesday, June 11, 2014 9:50:48 PM
> > Subject: [ovirt-users] problem engine-manage-domains add ldap domain
> >
> > I'm trying to add a ldap domain to ovirt-engine,
> > but getting problem with that.
> >
> > I sent three files with the engine-manage-domains log
> > the krb5 config generated for testing
> > and the tcpdump port 53 from my dns server
> >
> > can anybody help me to find what is happening?
> > --
> > contatos:
> > Celular: ( 99 ) 9143-5954 - Vivo
> > skype: lucasd3castro
> > msn: lucascastrobor...@hotmail.com
> >
> > ___
> > Users mailing list
> > Users@ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> >
>



-- 
contatos:
Celular: ( 99 ) 9143-5954 - Vivo
skype: lucasd3castro
msn: lucascastrobor...@hotmail.com
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] problem engine-manage-domains add ldap domain

2014-06-12 Thread Yair Zaslavsky 
I helped Lucas resolve this over IRC.
This was an issue with his kerberos setup.
Lucas, care to share here what issue did you discover?

Yair


- Original Message -
> From: "lucas castro" 
> To: users@ovirt.org
> Sent: Wednesday, June 11, 2014 9:50:48 PM
> Subject: [ovirt-users] problem engine-manage-domains add ldap domain
> 
> I'm trying to add a ldap domain to ovirt-engine,
> but getting problem with that.
> 
> I sent three files with the engine-manage-domains log
> the krb5 config generated for testing
> and the tcpdump port 53 from my dns server
> 
> can anybody help me to find what is happening?
> --
> contatos:
> Celular: ( 99 ) 9143-5954 - Vivo
> skype: lucasd3castro
> msn: lucascastrobor...@hotmail.com
> 
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
> 
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] problem engine-manage-domains add ldap domain

2014-06-11 Thread lucas castro 
I'm trying to add a ldap domain to ovirt-engine,
but getting problem with that.

I sent three files with the engine-manage-domains log
the krb5 config generated for testing
and the tcpdump port 53 from my dns server

can anybody help me to find what is happening?
-- 
contatos:
Celular: ( 99 ) 9143-5954 - Vivo
skype: lucasd3castro
msn: lucascastrobor...@hotmail.com
15:37:19.818449 IP (tos 0x0, ttl 64, id 59985, offset 0, flags [DF], proto UDP 
(17), length 57)
172.0.0.10.58058 > 172.0.0.254.53: 29364+ A? example.com. (29)
15:37:19.818535 IP (tos 0x0, ttl 64, id 59986, offset 0, flags [DF], proto UDP 
(17), length 57)
172.0.0.10.58058 > 172.0.0.254.53: 4753+ ? example.com. (29)
15:37:19.819683 IP (tos 0x0, ttl 64, id 11084, offset 0, flags [none], proto 
UDP (17), length 107)
172.0.0.254.53 > 172.0.0.10.58058: 29364* 1/1/1 example.com. A 
192.168.20.21 (79)
15:37:19.820157 IP (tos 0x0, ttl 64, id 11085, offset 0, flags [none], proto 
UDP (17), length 108)
172.0.0.254.53 > 172.0.0.10.58058: 4753* 0/1/0 (80)
15:37:19.821217 IP (tos 0x0, ttl 64, id 59987, offset 0, flags [DF], proto UDP 
(17), length 72)
172.0.0.10.43610 > 172.0.0.254.53: 35399+ PTR? 21.20.168.192.in-addr.arpa. 
(44)
15:37:19.821708 IP (tos 0x0, ttl 64, id 11086, offset 0, flags [none], proto 
UDP (17), length 173)
172.0.0.254.53 > 172.0.0.10.43610: 35399* 1/2/2 21.20.168.192.in-addr.arpa. 
PTR example.com. (145)
15:37:19.856761 IP (tos 0x0, ttl 64, id 59988, offset 0, flags [DF], proto UDP 
(17), length 72)
172.0.0.10.58127 > 172.0.0.254.53: 40570+ SRV? _kerberos._tcp.example.com. 
(44)
15:37:19.857789 IP (tos 0x0, ttl 64, id 11087, offset 0, flags [none], proto 
UDP (17), length 153)
172.0.0.254.53 > 172.0.0.10.58127: 40570* 1/1/2 _kerberos._tcp.example.com. 
SRV example.com.:88 0 100 (125)

2014-06-11 15:32:50,900 INFO  [org.ovirt.engine.core.domains.ManageDomains] Creating kerberos configuration for domain(s): example.com
2014-06-11 15:32:50,935 INFO  [org.ovirt.engine.core.domains.ManageDomains] Successfully created kerberos configuration for domain(s): example.com
2014-06-11 15:32:50,936 INFO  [org.ovirt.engine.core.domains.ManageDomains] Testing kerberos configuration for domain: example.com
2014-06-11 15:32:51,091 ERROR [org.ovirt.engine.core.utils.kerberos.KerberosConfigCheck] Error:  exception message: Conexão recusada
2014-06-11 15:32:51,095 ERROR [org.ovirt.engine.core.domains.ManageDomains] Failure while testing domain example.com. Details: Kerberos error. Please check log for further details.



krb5.conf.manage_domains_utility
Description: Binary data
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users