July 2010 - Users - libvirt List Archives

[libvirt-users] qemu+ssh auth with different identity files
by David W King 01 Jul '10

01 Jul '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm trying to get qemu+ssh auth working but I need to be able to specify an identity file to use for the ssh connection. Based on what I read at http://libvirt.org/remote.html I tried virsh -c "qemu+ssh://root@xhost1/system?command=/usr/bin/ssh%20-i%20/path/to/my/identity/file/id_rsa" list which returns error: cannot recv data: Connection reset by peer error: failed to connect to the hypervisor I've also tried virsh -c "qemu+ext://root@xhost1/system?command=/usr/bin/ssh%20-i%20/path/to/my/identity/file/id_rsa" list but that just seg faults right away. Is there something I'm missing or is there a better way to do this? ~david - -- David King Goshen College ITS davidwk(a)goshen.edu 574-535-7726 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkwsfgcACgkQH+/Vg7DylXZwNACgokhTalESNjigypXA2kAlP8gp etkAn3aEwJN1kJSPCkkIr09wBjwGD14r =lC67 -----END PGP SIGNATURE-----

1 0

[libvirt-users] Some missunderstanding in the wiki page
by Leopold Palomo-Avellaneda 01 Jul '10

01 Jul '10

Hi, I'm not in the list and I just would like to comment it to the comunity. So, if someone want to contact me, make CC to me in the reply. The wiki page [1] talk about networking, and show two typical configurations: "virtual network" and "shared physical device". The shared physical device has an error or something that could make confused, I think. What I want to say? In my case, I have a box with several nics, and I want to speciffy that ethX should be used exclusively but virtual domain X. The documentation is clear in this: The NAT based connectivity is useful for quick & easy deployments, or on machines with dynamic/sporadic networking connectivity. More advanced users will want to use full bridging, where the guest is connected directly to the LAN. The configuration (I have follow only the debian/ubuntu steps) shows that br0 has assigned an IP. I did the mistake to try to assign the same IP in the guest network configuration, I understand that, and obviously it doesn't work (duplicate IPs). So, to me, it would me more clear if the br0 interface has no IP. In my case, I have two nics: eth0 the interface for the host and eth1 for the guest. The eth1 part in my network/interfaces is: ... auto eth1 iface eth1 inet manual auto br0 iface br0 inet manual bridge_ports eth1 bridge_stp on bridge_maxwait 0 bridge_fd 0 ... and then in the guest you configure the IP as you want. In the host, eth1 (or whatever interface you bridge) has no IP, so it's not used, and the guest uses completely. What do you think? Regards, Leo [1] http://wiki.libvirt.org/page/Networking

2 3

[libvirt-users] SASL GSSAPI error "Key table entry not found"
by Adam Gray 01 Jul '10

01 Jul '10

My server and client are running Ubuntu Lucid, libvirt-bin 0.7.5-5ubuntu27, qemu-kvm-0.12.3+noroms-0ubuntu9 and I'm using virt-viewer-0.0.3-6ubuntu7.xul19 or virt-manager-0.8.2-2ubuntu8 to connect. I configured SASL2 to use GSSAPI for libvirt following the instructions in the libvirt docs, created a keytab with libvirt/my.fully.qualified.domain(a)MY-REALM.COM (has a dash fwiw) and pointed SASL2 and libvirt at /etc/krb5.keytab (changing the location of that doesn't seem to work for my version, but that's no biggie). So I sit on my client and run this: virsh -c qemu+tcp://my.fully.qualified.domain/system And I get this message on the client: error: authentication failed error: failed to connect to the hypervisor And this on the server logs: 16:37:35.278: error : remoteDispatchAuthSaslStart:3135 : sasl start failed -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Key table entry not found)) For fun, I ran kdestroy and tried again and got this: error: Failed to start SASL negotiation: -1 (SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Credentials cache file '/tmp/krb5cc_1000' not found)) error: failed to connect to the hypervisor So at least the client seems to be presenting my ticket properly, but the server is either looking for the wrong keytab entry or I can't read very well. -adam

4 7

[libvirt-users] non-root user "virConnectOpen() faile" in libvirt-0.3
by Shenglan Wang 30 Jun '10

30 Jun '10

*Hello,* * * *My environment is "Xen3.1 in Fedora8" with "libvirt0.3 & python2.5". When I ran the following * *commands as a non-root user "nimbus":* $python >>> import libvirt >>> libvirt.open("xen:///") --------- Console --------- [nimbus@localhost-120 ~]$ python Python 2.5.1 (r251:54863, Oct 30 2007, 13:54:11) [GCC 4.1.2 20070925 (Red Hat 4.1.2-33)] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import libvirt >>> libvirt.open("xen:///") Traceback (most recent call last): File "<stdin>", line 1, in <module> File "/usr/lib/python2.5/site-packages/libvirt.py", line 123, in open if ret is None:raise libvirtError('virConnectOpen() failed') libvirt.libvirtError: virConnectOpen() failed >>> *I encountered the error "virConnectOpen() failed". if I changed the user into root, it worked well. * *But I hava to use the non-root account "nimbus". I looked into the problem on the net, in order * *that non-root user could use libvirt as root user, someone suggested that I should modify the libvirt * *configuration file "/etc/libvirt/libvirtd.conf", but they didn't point out what field should be changed.* * * *I am puzzled about that problem. I have already changed the sudo file and the xen configuration * *file "/etc/xen/xend-config.sxp", which doesn't work at all. Could someome give me any tips? * --------- "/etc/xen/xend-config.sxp" --------- (xend-http-server yes) (xend-unix-server yes) (network-script network-bridge) * * *Thanks in advance!* * * *Cheers,* * * *Shenglan Wang*

1 0