May 2013 - dev - Rdo List Archives

Re: [Rdo-list] Fwd: RDO with Red Hat IDM

by Adam Young

On 05/30/2013 05:58 PM, Dave Neary wrote: > Hi Adam, > > Can you have a look at this post on rdo-list and see if you can figure > out what's going wrong, please? > > Thanks! > Dave. > > > > -------- Original Message -------- > Subject: [Rdo-list] RDO with Red Hat IDM > Date: Thu, 30 May 2013 17:13:59 -0400 > From: Michael Solberg <msolberg(a)redhat.com> > To: rdo-list(a)redhat.com > > Hi list. > > I've spent a day or two now trying to use Red Hat IDM as a backing store > for Keystone in RDO and I'm about to pull my hair out. > > I started with Adam Young's blog post here: > http://adam.younglogic.com/2012/02/freeipa-keystone-ldap/ > > Then I watched his Summit video here: > http://www.openstack.org/summit/portland-2013/session-videos/presentation... > > Then I tried to follow this document: > http://docs.openstack.org/trunk/openstack-compute/admin/content/configuri... > > I definitely ran into the domain_id problem described here: > https://lists.launchpad.net/openstack/msg23387.html > > I also ran into the issue around the RFC 4519 schema not allowing a > "enabled" attribute. I think I've mitigated this by setting the > "attribute_ignore" settings in keystone.conf. > > I've tried tackling the architecture from a few different directions and > I've gotten to the point where I can create roles, create tenants, and > list users in my IDM domain, but not assign roles to users. I think > this is because I'm trying to separate out the tenants and roles from > the users in the directory tree. I don't mind keystone creating objects > in it's own tree, but I don't want it updating user accounts from IDM. So, you have put projects into their own subtree? Can the LDAP user from Keystone modify that tree? I would think you would want to make user that has ACLs set up permitting them to make modifications to that tree, but not to add users. Configure Keystone to use that user to talk to LDAP. Assuming you call that user KeystoneManager, you would then set the [LDAP] config value for user = KeystoneManager in Keystone Config. The ACL stuff in IPA is kind of cool. I did some write ups here: http://adam.younglogic.com/2012/02/group-managers-in-freeipa/ That should give you an indication of how you want to proceed. > > Has anyone gotten this configuration working? I'm willing to wade > through details, but I'm curious if someone else has this working and I > could just replicate their setup. > > Michael. >

9 years, 8 months

3
7
0 / 0

[Rdo-list] [package announce] network namespace support

by Pádraig Brady

The RDO repositories were updated with a kernel and support utilities to support network namespaces as used by openstack networking. The effected packages were: update: iputils-20071127-17.el6_4 add: kernel-2.6.32-358.6.2.openstack.el6

9 years, 9 months

4
4
0 / 0

[Rdo-list] [package announce] nova network dhcp lease control

by Pádraig Brady

The dnsmasq-utils package providing direct control over dhcp leases, is now installed automatically from the RDO repositories. add: dnsmasq-utils-2.48-13.el6 update: openstack-nova-2013.1.1-3.el6

9 years, 10 months

1
0
0 / 0

[Rdo-list] Reports of F18 problems

by Dave Neary

Hi all, I have had a few reports related to installation on Fedora 18 in recent days - anyone here had success installing RDO on that platform in the last week or so? The issues reported are: * After installation, the default security group is created, but is not visible in the dashboard until I create a second security group: http://openstack.redhat.com/forum/discussion/155/packstack-installation-n... * Networking does not work out of the box: http://openstack.redhat.com/forum/discussion/156/router-interface-status-... Anyone else encountering these issues? Thanks, Dave. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13

9 years, 10 months

2
1
0 / 0

[Rdo-list] QEMU-KVM RBD support

by Zhang, Kimi (NSN - CN/Cheng Du)

I am testing Ceph as backend of Cinder, current KVM came with RHEL6.4 has no RBD support, any plan to add this support ? I tried to build newer version KVM from source with RBD support, but there are problems for VM instance launching and volume attaching. Kimi Zhang

9 years, 10 months

1
0
0 / 0

[Rdo-list] RDO with Red Hat IDM

by Michael Solberg

Hi list. I've spent a day or two now trying to use Red Hat IDM as a backing store for Keystone in RDO and I'm about to pull my hair out. I started with Adam Young's blog post here: http://adam.younglogic.com/2012/02/freeipa-keystone-ldap/ Then I watched his Summit video here: http://www.openstack.org/summit/portland-2013/session-videos/presentation... Then I tried to follow this document: http://docs.openstack.org/trunk/openstack-compute/admin/content/configuri... I definitely ran into the domain_id problem described here: https://lists.launchpad.net/openstack/msg23387.html I also ran into the issue around the RFC 4519 schema not allowing a "enabled" attribute. I think I've mitigated this by setting the "attribute_ignore" settings in keystone.conf. I've tried tackling the architecture from a few different directions and I've gotten to the point where I can create roles, create tenants, and list users in my IDM domain, but not assign roles to users. I think this is because I'm trying to separate out the tenants and roles from the users in the directory tree. I don't mind keystone creating objects in it's own tree, but I don't want it updating user accounts from IDM. Has anyone gotten this configuration working? I'm willing to wade through details, but I'm curious if someone else has this working and I could just replicate their setup. Michael. -- Michael Solberg Principal Architect, Red Hat, Inc.

9 years, 10 months

1
0
0 / 0

[Rdo-list] Webinar: "RDO: An OpenStack community project"

by Dave Neary

Hi everyone, This Wednesday, May 29th, Keith Basil, OpenStack Product Manager with Red Hat, and myself will be delivering a webinar on OpenStack, the RDO project, and Red Hat's involvement in the OpenStack project. You are all welcome to register to join here: http://www.redhat.com/about/events-webinars/webinars/203-05-29-rdo-openst... Thanks! Dave. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13

9 years, 10 months

1
0
0 / 0

[Rdo-list] Fwd: Re: Nova boot problems with devstack

by Gary Kotton

On 05/18/2013 07:24 PM, Gary Kotton wrote: > Hi, > I Have encountered a problem and maybe someone can help (RHEL-6.4 with > upstream devstack). I deploy a VM and it works. If I restart my host, > install devstack and then try and deploy a VM then it fails. If I try > again it works. After the next reboot in order to get a VM up and > running I need to deploy 3 VM's. > > The trace on nova compute is: > > 2013-05-16 08:18:11.742 ERROR nova.openstack.common.rpc.amqp > [req-cd75ed38-1d04-4611-9f34-cce01b388413 demo demo] Exception during > message handling > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp Traceback > (most recent call last): > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 433, in > _process_data > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp **args) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/openstack/common/rpc/dispatcher.py", line 148, > in dispatch > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > return getattr(proxyobj, method)(ctxt, **kwargs) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/exception.py", line 98, in wrapped > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > temp_level, payload) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > self.gen.next() > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/exception.py", line 75, in wrapped > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > return f(self, context, *args, **kw) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 213, in > decorated_function > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp pass > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > self.gen.next() > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 199, in > decorated_function > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > return function(self, context, *args, **kwargs) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 264, in > decorated_function > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > function(self, context, *args, **kwargs) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 241, in > decorated_function > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp e, > sys.exc_info()) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > self.gen.next() > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 228, in > decorated_function > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > return function(self, context, *args, **kwargs) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 1320, in run_instance > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > do_run_instance() > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/openstack/common/lockutils.py", line 246, in inner > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > retval = f(*args, **kwargs) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 1319, in do_run_instance > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > admin_password, is_first_time, node, instance) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 877, in _run_instance > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > notify("error", msg=unicode(e)) # notify that build failed > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > self.gen.next() > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 853, in _run_instance > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > image_meta = self._prebuild_instance(context, instance) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 880, in > _prebuild_instance > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > self._check_instance_exists(context, instance) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File > "/opt/stack/nova/nova/compute/manager.py", line 1083, in > _check_instance_exists > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp raise > exception.InstanceExists(name=instance['name']) > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > InstanceExists: Instance instance-00000001 already exists. > 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp > > Problem seems to be that instances hang around: > > [openstack@dhcp-4-126 devstack]$ virsh list --all > Id Name State > ---------------------------------------------------- > > [openstack@dhcp-4-126 devstack]$ sudo virsh list --all > Id Name State > ---------------------------------------------------- > - instance-00000001 shut off > - instance-00000002 shut off > - instance-00000003 shut off > - instance-00000004 shut off Issue appears to be that when one reboots a host running devstack (with running VMS) that the domains are saved: ./etc/libvirt/qemu/instance-00000001.xml ./var/lib/libvirt/qemu/save/instance-00000001.save ./var/log/libvirt/qemu/instance-00000001.log By deleting the files it enables one to run VM's after reboot. Is there a libvirt configuration variable that will ensure that this is not persistent? Or do we need to purge these each time devstack is restarted? > > Problem is that I am unable to delete any of these. > > Any ideas? > Thanks > Gary

9 years, 10 months

1
0
0 / 0

[Rdo-list] Nova boot problems with devstack

by Gary Kotton

Hi, I Have encountered a problem and maybe someone can help (RHEL-6.4 with upstream devstack). I deploy a VM and it works. If I restart my host, install devstack and then try and deploy a VM then it fails. If I try again it works. After the next reboot in order to get a VM up and running I need to deploy 3 VM's. The trace on nova compute is: 2013-05-16 08:18:11.742 ERROR nova.openstack.common.rpc.amqp [req-cd75ed38-1d04-4611-9f34-cce01b388413 demo demo] Exception during message handling 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp Traceback (most recent call last): 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 433, in _process_data 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp **args) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/openstack/common/rpc/dispatcher.py", line 148, in dispatch 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp return getattr(proxyobj, method)(ctxt, **kwargs) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/exception.py", line 98, in wrapped 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp temp_level, payload) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp self.gen.next() 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/exception.py", line 75, in wrapped 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp return f(self, context, *args, **kw) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 213, in decorated_function 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp pass 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp self.gen.next() 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 199, in decorated_function 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp return function(self, context, *args, **kwargs) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 264, in decorated_function 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp function(self, context, *args, **kwargs) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 241, in decorated_function 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp e, sys.exc_info()) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp self.gen.next() 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 228, in decorated_function 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp return function(self, context, *args, **kwargs) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 1320, in run_instance 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp do_run_instance() 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/openstack/common/lockutils.py", line 246, in inner 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp retval = f(*args, **kwargs) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 1319, in do_run_instance 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp admin_password, is_first_time, node, instance) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 877, in _run_instance 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp notify("error", msg=unicode(e)) # notify that build failed 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/usr/lib64/python2.6/contextlib.py", line 23, in __exit__ 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp self.gen.next() 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 853, in _run_instance 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp image_meta = self._prebuild_instance(context, instance) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 880, in _prebuild_instance 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp self._check_instance_exists(context, instance) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp File "/opt/stack/nova/nova/compute/manager.py", line 1083, in _check_instance_exists 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp raise exception.InstanceExists(name=instance['name']) 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp InstanceExists: Instance instance-00000001 already exists. 2013-05-16 08:18:11.742 TRACE nova.openstack.common.rpc.amqp Problem seems to be that instances hang around: [openstack@dhcp-4-126 devstack]$ virsh list --all Id Name State ---------------------------------------------------- [openstack@dhcp-4-126 devstack]$ sudo virsh list --all Id Name State ---------------------------------------------------- - instance-00000001 shut off - instance-00000002 shut off - instance-00000003 shut off - instance-00000004 shut off Problem is that I am unable to delete any of these. Any ideas? Thanks Gary

9 years, 10 months

1
0
0 / 0

Re: [Rdo-list] [rhos-list] LDAP integration

by Dave Neary

Hi Nicolas, Bringing the topic back to the mailing list (you're using RDO, so I added rdo-list also). On 05/15/2013 06:50 PM, Vogel Nicolas wrote: > I installed Grizzly with the RDO packstack installation guide on CentOS 6.4. > nova --version = 2.13.0 > keystone --version = 0.2.3 > If you need more information you can ask any time. <snip> >> On 05/07/2013 08:00 AM, Vogel Nicolas wrote: >>> After successfully installing an « all-in-one Node » using Packstack, >>> I want to user LDAP to manage my users. >>> >>> The LDAP backend isn’t available in the keystone.conf. Do I have to >>> replace the SQL backend with the LDAP backend? >>> >>> Wenn I switch to LDAP, is my admin user created by Packstack usable >>> yet or do I have to modify everything so that one of my LDAP user >>> becomes the admin ? I'm pretty sure that Adam Young can answer your question. AFAIK, when you switch to the LDAP back-end for Keystone, that you will have to take care of mapping your schema to Keystone attributes and access control. This page seems to be pretty complete: http://docs.openstack.org/trunk/openstack-compute/admin/content/configuri... Thanks, Dave. -- Dave Neary - Community Action and Impact Open Source and Standards, Red Hat - http://community.redhat.com Ph: +33 9 50 71 55 62 / Cell: +33 6 77 01 92 13

9 years, 10 months

1
0
0 / 0

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

dev May 2013