[one-users] ElasticFox invalid credentials

Stefan Freitag stefan.freitag at udo.edu
Wed Jul 21 11:21:00 PDT 2010 

Hi Daniel, hi Massimiliano,

I read about the possibility of using ElasticFox in combination with
OpenNebula and upgraded therefore my OpenNebula installation to the newest
git snapshot (from today).

I ran into the same problem when trying to use my old ONE 1.4 database
with the new OpenNebula version. The schema changed for some tables... I
deleted the old database and now use a new one. However it would be nice
to have a script that converts the old database to the new format.

After playing a little bit around with ElasticFox and the authentication I
can see that at least the user pool is queried if I try do some action in
ElasticFox - in the next days I will spent some more time on this issue,
maybe I can upload an (AMI?) image to ONE.

Just wanted to let you know,
Stefan


Daniel Molina Aranda schrieb:
> Hi,
>
> 1. Don't worry about the warnings.
>
> 2. You have to delete the database because in the new 2.0 release we have
> changed the database schemas
>
> 3. In the new 2.0 release that we are developing the administrator
> information is not needed in the econe.conf anymore and we have also
> changed
> the image repository.
>
> If you want to build a new client for the opennebula 1.4, you have to
> change
> the authorization method and the way that the signature is built, needed
> to
> use a client different from the econe client. You can see the new changes
> in
> the new source, but if you delete the old database you can get the new
> release running and you will be able to use the other clients for ec2.
>
> The Beta is coming the next week if you want to wait for the new packages.
>
> Hope this helps.
>
> On 21 July 2010 18:37, Massimiliano Diodati <massimiliano82 at live.it>
> wrote:
>
>>  Hi Daniel,
>> Well I'm running one 1.4, today I tried updating to latest source but I
>> encountered various problems:
>>
>> 1.several warning messages when compiling with scons (all regarding no
>> newline at EOF like this one):
>>
>> include/ObjectSQL.h:71:25: warning: no newline at end of file
>> In file included from include/VirtualMachine.h:22,
>>                  from include/VirtualMachinePool.h:21,
>>                  from include/RequestManager.h:21,
>>                  from src/rm/RequestManagerClusterPoolInfo.cc:17:
>> include/History.h:220:22: warning: no newline at end of file
>> In file included from include/RequestManager.h:23,
>>                  from src/rm/RequestManagerClusterPoolInfo.cc:17:
>>
>> 2. I can't pool resources because of this error from oned.log:
>>
>> Wed Jul 21 16:04:49 2010 [ONE][E]: SQL command was: SELECT vm_pool.*,
>> user_pool.
>> user_name, history.* FROM vm_pool LEFT OUTER JOIN history ON vm_pool.oid
>> =
>> histo
>> ry.vid AND history.seq = vm_pool.last_seq LEFT OUTER JOIN (SELECT
>> oid,user_name
>> FROM user_pool) AS user_pool ON vm_pool.uid = user_pool.oid WHERE
>> vm_pool.state
>> <> 6, error: no such column: vm_pool.last_seq
>> Wed Jul 21 16:04:49 2010 [ReM][E]: [VirtualMachinePoolInfo] Error
>> getting
>> VM Poo
>> l.
>>
>> I thought the problem could have been that CentOS has sqlite 3.3 in its
>> repository,
>> so I tried to install sqlite 3.6 from source, but nothing changed.
>>
>> 3.the econe.conf file was missing some parts, in particular the ones
>> regarding the opennebula administrator user
>> and the configuration for the image repository.
>>
>> Now I am back to 1.4.
>> One thing I'd like to ask you Daniel is if there's a client tool that
>> has
>> been tested to work with 1.4 EC2 interface
>> or if you can give me some instructions on how to build one.
>> Thank you again for your attention.
>> cheers
>>
>> ------------------------------
>> From: danmolin at fdi.ucm.es
>> Date: Tue, 20 Jul 2010 22:15:14 +0200
>>
>> Subject: Re: [one-users] ElasticFox invalid credentials
>> To: massimiliano82 at live.it
>> CC: users at lists.opennebula.org
>>
>> Hi Massimiliano,
>>
>> I think the problem is you are using an old version of OpenNebula. The
>> Invalid Credentials exception was changed over to the AuthFailure one,
>> used
>> in EC2, and the authentication method was also changed.
>>
>> - Stop econe-server and ONE
>> - Download the last OpenNebula source.
>> - Install ONE from the source and set up the econe.conf.
>> - Start ONE and econe-server again.
>>
>> Let's see if the problem is solved with this reinstallation.
>>
>> Regards.
>>
>> On 20 July 2010 21:04, Massimiliano Diodati
>> <massimiliano82 at live.it>wrote:
>>
>>  Hi Claude,
>> well I just followed the developmente release 1.6 guide:
>> http://www.opennebula.org/documentation:rel2.0:ec2qec
>> It says to use SHA1 hashed password, but I also tried with the plain
>> text
>> password (same as one_auth file).
>> Thanks for your reply.
>> Cheers.
>>
>> > From: cnoshpitz at attinteractive.com
>> > To: massimiliano82 at live.it
>> > CC: users at lists.opennebula.org; danmolin at fdi.ucm.es
>> > Date: Tue, 20 Jul 2010 10:25:26 -0700
>>
>> > Subject: Re: [one-users] ElasticFox invalid credentials
>> >
>> > Massimiliano,
>> >
>> > Are you building the signature using the original shared secret
>> ("password")
>> > or the corresponsing hash that is shown by "oneuser list"? I think the
>> > original is the one we need, rather than the hash... perhaps I
>> > misunderstood the scenario.
>> >
>> > Just an idea -- delighted that elasticfox is even an option for
>> managing
>> > ONE!
>> >
>> > --Claude
>> >
>> >
>> > On 7/20/10 10:18 AM, "Massimiliano Diodati" <massimiliano82 at live.it>
>> wrote:
>> >
>> > > I managed to make the system time and the timestamp match by setting
>> UTC time,
>> > > but the 'invalid credentials' response is aleays there.
>> > > I'm running out of ideas, am I miss something?
>> > >
>> > >
>> > > From: danmolin at fdi.ucm.es
>> > > Date: Tue, 20 Jul 2010 17:36:51 +0200
>> > > Subject: Re: [one-users] ElasticFox invalid credentials
>> > > To: massimiliano82 at live.it
>> > > CC: users at lists.opennebula.org
>> > >
>> > > Hi Massimiliano,
>> > >
>> > > Exactly the timestamp is used to build the Signature, so maybe the
>> problem
>> > > comes from there. Try changing the system time.
>> > >
>> > > Regards.
>> > >
>> > > On 20 July 2010 17:20, Massimiliano Diodati <massimiliano82 at live.it>
>> wrote:
>> > >> Thanks for your reply Daniel, well:
>> > >>
>> > >> 1. didn't know of its existence , so I installed git and issued the
>> following
>> > >> command:
>> > >>
>> > >> $ git clone git://opennebula.org/one.git <
>> http://opennebula.org/one.git>
>> > >>
>> > >> 2.Yes, as AWSAccessKeyId I use the OpenNebula username, and as
>> > >> AWSSecretAccessKey
>> > >> I use the SHA1 hashed password as shown with the 'oneuser list'
>> command
>> > >>
>> > >> 3.My econe.conf file reads:
>> > >> SERVER=cloudysun-a.opennebula.org
>> <http://cloudysun-a.opennebula.org>
>> > >> PORT=4567
>> > >>
>> > >> while the Endpoint URL in ElasticFox is
>> > >> http://cloudysun-a.opennebula.org:4567
>> > >>
>> > >> On the other hand one thing that bugs me is that the timestamp
>> shown
>> in my
>> > >> previous message
>> > >> is two hours early than the system time and I don't know how to
>> change
>> it.
>> > >> Can this be the problem?
>> > >>
>> > >> Thank you very much for your assistance,
>> > >> Best regards
>> > >>
>> > >>
>> >
>> _____________________________________________________________________________>>
>> > _
>> > >> _____________________________________________________________
>> > >> From: danmolin at fdi.ucm.es
>> > >> Date: Tue, 20 Jul 2010 16:41:01 +0200
>> > >> Subject: Re: [one-users] ElasticFox invalid credentials
>> > >> To: massimiliano82 at live.it
>> > >> CC: users at lists.opennebula.org
>> > >>
>> > >> Hi Massimiliano,
>> > >>
>> > >> You should check:
>> > >>
>> > >> 1. Are you using the last source from the OpenNebula git
>> repository?
>> > >>
>> > >> 2. Are you using the Hashed password in the account set up?
>> > >>
>> > >> 3. Are you using exactly the same endpoint in the Region set up
>> than
>> the one
>> > >> specified in the econe.conf?
>> > >>
>> > >> Hope this helps
>> > >>
>> > >> Cheers.
>> > >>
>> > >> On 20 July 2010 16:01, Massimiliano Diodati
>> <massimiliano82 at live.it>
>> wrote:
>> > >>> Hi all, I configured the econe.conf file (without SSL) and was
>> able
>> to use
>> > >>> econe tool that came with opennebula installation.
>> > >>> Now I'm trying to use the ElasticFox client, configuring it as in
>> the
>> 1.6
>> > >>> development release, but I continue
>> > >>> to receive the 'invalid credentials' response. Here are the post
>> and
>> > >>> response messages from Firebug:
>> > >>>
>> > >>> POST
>> > >>> Parameters application/x-www-form-urlencoded
>> > >>> AWSAccessKeyId oneadmin
>> > >>> Action DescribeImages
>> > >>> Signature 3/gUXH4BICKrkbBfBkJtozJK3zo=
>> > >>> SignatureVersion 1
>> > >>> Timestamp 2010-07-20T13:51:31
>> > >>> Version 2009-03-01
>> > >>>
>> > >>> Source:
>> > >>>
>> >
>> Action=DescribeImages&AWSAccessKeyId=oneadmin&SignatureVersion=1&Timestamp=2>>>
>> > 0
>> > >>>
>> >
>> 10-07-20T13%3A51%3A31&Version=2009-03-01&Signature=3%2FgUXH4BICKrkbBfBkJtozJ>>>
>> > K
>> > >>> 3zo%3D
>> > >>>
>> > >>> RESPONSE
>> > >>> Invalid credentials
>> > >>>
>> > >>>
>> > >>> Thanks for the support
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>> Il tuo mondo MSN a portata di clic. Scarica IE8 per MSN
>> > >>> <http://events.it.msn.com/internet-explorer-8>
>> > >>>
>> > >>> _______________________________________________
>> > >>> Users mailing list
>> > >>> Users at lists.opennebula.org
>> > >>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>> > >>>
>> > >>>
>> > >>>
>> > >>>
>> > >>> --
>> > >>> Daniel Molina, Cloud Technology Engineer/Researcher
>> > >>> DSA Research Group: web http://dsa-research.org <
>> http://dsa-research.org/>
>> > >>> and blog http://blog.dsa-research.org
>> <http://blog.dsa-research.org/
>> >
>> > >>> OpenNebula Open Source Toolkit for Cloud Computing:
>> > >>> http://www.OpenNebula.org
>> > >>> <http://www.opennebula.org/>
>> > >>>
>> > >>> Messenger Radio. La radio che si fa cliccare!
>> > >>> <http://www.messenger.it/messenger_radio.aspx>
>> > >>>
>> > >>> _______________________________________________
>> > >>> Users mailing list
>> > >>> Users at lists.opennebula.org
>> > >>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>> > >>>
>> > >>
>> > >>
>> > >>
>> > >> --
>> > >> Daniel Molina, Cloud Technology Engineer/Researcher
>> > >> DSA Research Group: web http://dsa-research.org and blog
>> > >> http://blog.dsa-research.org
>> > >> OpenNebula Open Source Toolkit for Cloud Computing:
>> http://www.OpenNebula.org
>> > >>
>> > >>
>> > >> 10 buoni motivi per scegliere Hotmail
>> > >> <http://www.windowslive.it/hotmail/10buonimotivi/index.html>
>> >
>>
>> ------------------------------
>> Chiacchiera, condividi, gioca. Messenger è pieno di
>> sorprese.<http://www.messenger.it/ilovemessenger/>
>>
>> _______________________________________________
>> Users mailing list
>> Users at lists.opennebula.org
>> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>>
>>
>>
>>
>> --
>> Daniel Molina, Cloud Technology Engineer/Researcher
>> DSA Research Group: web http://dsa-research.org and blog
>> http://blog.dsa-research.org
>> OpenNebula Open Source Toolkit for Cloud Computing:
>> http://www.OpenNebula.org
>>
>> ------------------------------
>> nome.cognome @... Verifica la disponibilità sui NUOVI
>> domini<https://signup.live.com/signup.aspx?mkt=it-it&rollrs=12&lic=1>
>>
>
>
>
> --
> Daniel Molina, Cloud Technology Engineer/Researcher
> DSA Research Group: web http://dsa-research.org and blog
> http://blog.dsa-research.org
> OpenNebula Open Source Toolkit for Cloud Computing:
> http://www.OpenNebula.org
> _______________________________________________
> Users mailing list
> Users at lists.opennebula.org
> http://lists.opennebula.org/listinfo.cgi/users-opennebula.org
>


--
Dipl.-Inform. Stefan Freitag
Institut für Roboterforschung - Abteilung Informationstechnik
Universitaet Dortmund         | phone:  +49 (0)231-755-7009
Otto-Hahn-Str. 8              | mobile: +49 (0)176-23900074
44221 Dortmund, Germany       | fax:    +49 (0)231-755-3251
www.irf.uni-dortmund.de       | email:  stefan.freitag at udo.edu

More information about the Users mailing list