[libvirt-users] operation forbidden Read Only Access
Jean-Pierre Ribeauville
jpribeauville at axway.com
Fri Jan 8 13:30:15 UTC 2016
Hi,
I found an answer :
Use virConnectOpenAuth() instead of virConnectOpenReadOnly().
As my piece of code is running silently (without user connected) , by using virConnectOpenAuth() ,
is it possible to avoid to prompt user to get user /password ?
Thx.
J.P.
-----Message d'origine-----
De : libvirt-users-bounces at redhat.com [mailto:libvirt-users-bounces at redhat.com] De la part de libvirt-users-request at redhat.com
Envoyé : vendredi 8 janvier 2016 12:51
À : libvirt-users at redhat.com
Objet : libvirt-users Digest, Vol 73, Issue 6
Send libvirt-users mailing list submissions to
libvirt-users at redhat.com
To subscribe or unsubscribe via the World Wide Web, visit
https://www.redhat.com/mailman/listinfo/libvirt-users
or, via email, send a message with subject or body 'help' to
libvirt-users-request at redhat.com
You can reach the person managing the list at
libvirt-users-owner at redhat.com
When replying, please edit your Subject line so it is more specific than "Re: Contents of libvirt-users digest..."
Today's Topics:
1. Unable to retrieve Guest IP Addresses via libvirt API
(Jean-Pierre Ribeauville)
2. Re: Unable to retrieve Guest IP Addresses via libvirt API
(Martin Kletzander)
3. Re: Unable to retrieve Guest IP Addresses via libvirt API
(Jean-Pierre Ribeauville)
4. Re: libvirtd and polkit: internal error: No Unix Process ID
(Daniel P. Berrange)
5. operation forbidden Read Only Access (Jean-Pierre Ribeauville)
----------------------------------------------------------------------
Message: 1
Date: Thu, 7 Jan 2016 19:31:57 +0000
From: Jean-Pierre Ribeauville <jpribeauville at axway.com>
To: "libvirt-users at redhat.com" <libvirt-users at redhat.com>
Subject: [libvirt-users] Unable to retrieve Guest IP Addresses via
libvirt API
Message-ID:
<1051EFB4D3A1704680C38CCAAC5836D292F01EF8 at WPTXMAIL2.ptx.axway.int>
Content-Type: text/plain; charset="iso-8859-1"
Hi ,
Despite the fact that my Guest has an IP address , by running this piece of code on a KVM host :
ifaces_count = F_virDomainInterfaceAddresses(domain, &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_LEASE, NULL);
ifaces_count = F_virDomainInterfaceAddresses(domain, &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_AGENT, NULL);
I'm not able to get a ifaces_count different from -1
Additionnaly :
- IP Addresses are not present within the xmldesc of this Guest.(not sure that they should appear there)
I'm running libvirt-1.2.17-13.el7.x86_64
Did I misunderstood something ?
As ovirt manager shows the address correctly , it should be possible to get it via libvirt ...
Thanks for help.
J.P. Ribeauville
P: +33.(0).1.47.17.20.49
.
Puteaux 3 Etage 5 Bureau 4
jpribeauville at axway.com<mailto:jpribeauville at axway.com>
http://www.axway.com<http://www.axway.com/>
P Pensez ? l'environnement avant d'imprimer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.redhat.com/archives/libvirt-users/attachments/20160107/0a13702c/attachment.html>
------------------------------
Message: 2
Date: Fri, 8 Jan 2016 10:36:05 +0100
From: Martin Kletzander <mkletzan at redhat.com>
To: Jean-Pierre Ribeauville <jpribeauville at axway.com>
Cc: "libvirt-users at redhat.com" <libvirt-users at redhat.com>
Subject: Re: [libvirt-users] Unable to retrieve Guest IP Addresses via
libvirt API
Message-ID: <20160108093605.GL22332 at wheatley>
Content-Type: text/plain; charset="iso-8859-1"; Format="flowed"
On Thu, Jan 07, 2016 at 07:31:57PM +0000, Jean-Pierre Ribeauville wrote:
>Hi ,
>
>Despite the fact that my Guest has an IP address , by running this piece of code on a KVM host :
>
> ifaces_count = F_virDomainInterfaceAddresses(domain, &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_LEASE, NULL);
> ifaces_count = F_virDomainInterfaceAddresses(domain,
> &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_AGENT, NULL);
>
>
>I'm not able to get a ifaces_count different from -1
>
>
>Additionnaly :
>- IP Addresses are not present within the xmldesc of this Guest.(not
>sure that they should appear there)
>
>I'm running libvirt-1.2.17-13.el7.x86_64
>
>Did I misunderstood something ?
>
>As ovirt manager shows the address correctly , it should be possible to get it via libvirt ...
>
Can you get them using virsh domifaddr? If yes, look at the code virsh uses. If not, then it might be ovirt's workaround using their agent for older qemu/libvirt/something combinations.
>Thanks for help.
>
>
>J.P. Ribeauville
>
>
>P: +33.(0).1.47.17.20.49
>.
>Puteaux 3 Etage 5 Bureau 4
>
>jpribeauville at axway.com<mailto:jpribeauville at axway.com>
>http://www.axway.com<http://www.axway.com/>
>
>
>
>P Pensez ? l'environnement avant d'imprimer.
>
>
>
>_______________________________________________
>libvirt-users mailing list
>libvirt-users at redhat.com
>https://www.redhat.com/mailman/listinfo/libvirt-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://www.redhat.com/archives/libvirt-users/attachments/20160108/81e4c217/attachment.bin>
------------------------------
Message: 3
Date: Fri, 8 Jan 2016 09:47:35 +0000
From: Jean-Pierre Ribeauville <jpribeauville at axway.com>
To: Martin Kletzander <mkletzan at redhat.com>
Cc: "libvirt-users at redhat.com" <libvirt-users at redhat.com>
Subject: Re: [libvirt-users] Unable to retrieve Guest IP Addresses via
libvirt API
Message-ID:
<1051EFB4D3A1704680C38CCAAC5836D292F01F48 at WPTXMAIL2.ptx.axway.int>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
My piece of code is inspired from domifaddr one.
Virsh domifaddr doesn't return anything.
Then , it could be useful for me to have a look in ovirt sources to understand how it deals with that.
As a workaround , it should be possible to combine a dumpxml to retrieve Guest MAC addresses and then issue an "arp -an" to retrieve IP adresses.
Regards,
J.P.
-----Message d'origine-----
De?: Martin Kletzander [mailto:mkletzan at redhat.com]
Envoy??: vendredi 8 janvier 2016 10:36
??: Jean-Pierre Ribeauville
Cc?: libvirt-users at redhat.com
Objet?: Re: [libvirt-users] Unable to retrieve Guest IP Addresses via libvirt API
On Thu, Jan 07, 2016 at 07:31:57PM +0000, Jean-Pierre Ribeauville wrote:
>Hi ,
>
>Despite the fact that my Guest has an IP address , by running this piece of code on a KVM host :
>
> ifaces_count = F_virDomainInterfaceAddresses(domain, &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_LEASE, NULL);
> ifaces_count = F_virDomainInterfaceAddresses(domain,
> &ifaces,VIR_DOMAIN_INTERFACE_ADDRESSES_SRC_AGENT, NULL);
>
>
>I'm not able to get a ifaces_count different from -1
>
>
>Additionnaly :
>- IP Addresses are not present within the xmldesc of this Guest.(not
>sure that they should appear there)
>
>I'm running libvirt-1.2.17-13.el7.x86_64
>
>Did I misunderstood something ?
>
>As ovirt manager shows the address correctly , it should be possible to get it via libvirt ...
>
Can you get them using virsh domifaddr? If yes, look at the code virsh uses. If not, then it might be ovirt's workaround using their agent for older qemu/libvirt/something combinations.
>Thanks for help.
>
>
>J.P. Ribeauville
>
>
>P: +33.(0).1.47.17.20.49
>.
>Puteaux 3 Etage 5 Bureau 4
>
>jpribeauville at axway.com<mailto:jpribeauville at axway.com>
>http://www.axway.com<http://www.axway.com/>
>
>
>
>P Pensez ? l'environnement avant d'imprimer.
>
>
>
>_______________________________________________
>libvirt-users mailing list
>libvirt-users at redhat.com
>https://www.redhat.com/mailman/listinfo/libvirt-users
------------------------------
Message: 4
Date: Fri, 8 Jan 2016 10:52:39 +0000
From: "Daniel P. Berrange" <berrange at redhat.com>
To: Benedikt Heine <benedikt at heine.rocks>
Cc: libvirt-users at redhat.com
Subject: Re: [libvirt-users] libvirtd and polkit: internal error: No
Unix Process ID
Message-ID: <20160108105239.GA14764 at redhat.com>
Content-Type: text/plain; charset=utf-8
On Mon, Jan 04, 2016 at 03:44:10PM +0100, Benedikt Heine wrote:
> Hi all,
>
> I want to use libvirtd and polkit to create simple access
> restricitions for incoming TLS connections.
This is sadly not possible. polkit will only authenticate against unix users. I filed an RFE long ago requesting for polkit to be generalized so that we could use it against virtual (ie non-UNIX system) identities but it was rejected.
So effectively the libvirt polkit access control driver is only useful if you're connecting to libvirt over UNIX sockets :-(
I really ought to get around to writing a custom libvirt access control driver that works in all cases.....
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|
------------------------------
Message: 5
Date: Fri, 8 Jan 2016 11:51:24 +0000
From: Jean-Pierre Ribeauville <jpribeauville at axway.com>
To: "libvirt-users at redhat.com" <libvirt-users at redhat.com>
Subject: [libvirt-users] operation forbidden Read Only Access
Message-ID:
<1051EFB4D3A1704680C38CCAAC5836D292F01F6A at WPTXMAIL2.ptx.axway.int>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
When issuing virDomainInterfaceAddresses() libvirt C language API, I got following error:
libvirt: Domain Config error : operation forbidden: read only access prevents virDomainInterfaceAddresses
How may I ask for a non-readonly connexion ? ( looks like to be RO by default)
Thx for help.
Regards,
J.P. Ribeauville
P: +33.(0).1.47.17.20.49
.
Puteaux 3 Etage 5 Bureau 4
jpribeauville at axway.com<mailto:jpribeauville at axway.com>
http://www.axway.com<http://www.axway.com/>
P Pensez ? l'environnement avant d'imprimer.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.redhat.com/archives/libvirt-users/attachments/20160108/96fce101/attachment.html>
------------------------------
_______________________________________________
libvirt-users mailing list
libvirt-users at redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users
End of libvirt-users Digest, Vol 73, Issue 6
********************************************
More information about the libvirt-users
mailing list