Hi,<div><br></div><div>The error messages in the screen captures you both sent are not related to permissions or ACL rules.</div><div><br></div><div>When a NIC (or DISK) uses a Virtual Network (or Image), you can set its ID, or its name and owner [1].</div>
<div>Sunstone sets the following in the VM templates:</div><div><br></div><div>NIC = [ NETWORK = 319ervlan, NETWORK_UID = 6 ]</div><div><br></div><div>From your screen captures, looks like you created the VM Template when the network 319ervlan was owned by the User 6, and then changed its owner to 7.</div>
<div><br></div><div><br></div><div>Regards</div><div><br></div><div>[1] <a href="http://opennebula.org/documentation:rel3.6:template">http://opennebula.org/documentation:rel3.6:template</a></div><div><br></div><div><br></div>
<div><br></div><div>--<br>Carlos Martín, MSc<br>Project Engineer<br>OpenNebula - The Open-source Solution for Data Center Virtualization<div><span style="border-collapse:collapse;color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px"><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a> | <a href="http://twitter.com/opennebula" target="_blank">@OpenNebula</a></span><span style="border-collapse:collapse;color:rgb(136,136,136);font-family:arial,sans-serif;font-size:13px"><a href="mailto:cmartin@opennebula.org" style="color:rgb(42,93,176)" target="_blank"></a></span></div>
<br>
<br><br><div class="gmail_quote">On Tue, Jul 24, 2012 at 2:04 PM, Michael Rebstock <span dir="ltr"><<a href="mailto:rusreb@rus.uni-stuttgart.de" target="_blank">rusreb@rus.uni-stuttgart.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="white" lang="DE" link="blue" vlink="purple"><div><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi Jan, hi Carlos Martín,<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">as Carlos Martín mentioned in is first Mail, I executed the chmod-command (“onevnet chmod 0 604”) but this did not solve my problem.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Moreover I created all my images by providing a path, so this seems not to be the adequate solution for my problem, Jan.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">In the attachment I added some screenshots, including:<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">- the error-message when trying to instantiate a new VM (“createNewVM_error”), <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">- the Image info(“ImageInformation”), <u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">- the VLAN info (“VLAN319_info”) and <u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">- the users and groups (“UserAndGroups”).<u></u><u></u></span></p><p class="MsoNormal">
<span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hope that helps you to help me ;-)<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Best Regards<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Michael<u></u><u></u></span></p><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p>
<div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0cm 0cm 0cm"><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext">Von:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext"> Jan Benadik [mailto:<a href="mailto:jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a>] <br>
<b>Gesendet:</b> Dienstag, 24. Juli 2012 08:30<br><b>An:</b> Carlos Martín Sánchez<br><b>Cc:</b> <a href="mailto:rusreb@rus.uni-stuttgart.de" target="_blank">rusreb@rus.uni-stuttgart.de</a>; <a href="mailto:users@lists.opennebula.org" target="_blank">users@lists.opennebula.org</a><br>
<b>Betreff:</b> Re: [one-users] Problem with virtual network ACLs for multiple users<u></u><u></u></span></p></div></div><div><div><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal" style="margin-bottom:12.0pt">
Hi,<br><br>let see an attached screenshots.<br><br>As I wrote already - if the HDD image is created by providing path to file, everything works well (picture image-prop-right.png), if HDD image is created by providing "source" - an error (shot1.png) occurs in time of VM starting. <br>
<br>Jan<u></u><u></u></p><div><p class="MsoNormal">Dňa 23.07.2012 18:45, Carlos Martín Sánchez wrote / napísal(a):<u></u><u></u></p></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><p class="MsoNormal">Hi, <u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Could elaborate a bit more? What error message is returning opennebula?<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div>
<div><p class="MsoNormal">Regards<br clear="all">--<br>Carlos Martín, MSc<br>Project Engineer<br>OpenNebula - The Open-source Solution for Data Center Virtualization <u></u><u></u></p><div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a> | <a href="http://twitter.com/opennebula" target="_blank">@OpenNebula</a></span><u></u><u></u></p>
</div><p class="MsoNormal" style="margin-bottom:12.0pt"><br><br><u></u><u></u></p><div><p class="MsoNormal">On Mon, Jul 23, 2012 at 12:28 PM, Jan Benadik <<a href="mailto:jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a>> wrote:<u></u><u></u></p>
<div><p class="MsoNormal" style="margin-bottom:12.0pt">Maybe there is other reason ...<br>I have this issue if my images are created by setting "source", not "path" (if you understand what I mean). If a new image is created by providing "path", everything works well after that.<br>
<br>Maybe the same issue has Michael.<br><br>Michael - can you confirm it?<br><br>Jan<u></u><u></u></p><div><p class="MsoNormal">Dňa 23.07.2012 11:57, Carlos Martín Sánchez wrote / napísal(a):<u></u><u></u></p></div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div><p class="MsoNormal">Hi <span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#222222">Michael and Jan,</span> <u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div>
<div>
<p class="MsoNormal"><span style="font-family:"Arial","sans-serif";color:#222222">I've been trying to reproduce your problem, and everything works fine for me. Maybe this is a documentation problem, and some concepts are not as clear as we thought.</span><u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Each resource has an owner and group, and permissions for each of them. The permissions are set with the chown command, and are quite similar to the unix file permissions [1]. By default, resources are created with 600, or<u></u><u></u></p>
</div><div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal"><span style="font-family:"Courier New"">PERMISSIONS </span><u></u><u></u></p>
</div><div><p class="MsoNormal"><span style="font-family:"Courier New"">OWNER : um- </span><u></u><u></u></p></div><div><p class="MsoNormal"><span style="font-family:"Courier New"">GROUP : --- </span><u></u><u></u></p>
</div><div><p class="MsoNormal"><span style="font-family:"Courier New"">OTHER : --- </span><u></u><u></u></p></div></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">If you create a vnet as oneadmin, and want all the users to be able to use it in their VMs, simply execute 'onevnet chmod <id> 604', to set USE permissions for OTHER. Similarly, if you want to make a VNet available to its group, then execture chmod <id> 640.<u></u><u></u></p>
</div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div><p class="MsoNormal">Regards<u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p></div><div>
<p class="MsoNormal">[1] <a href="http://opennebula.org/documentation:rel3.6:chmod" target="_blank">http://opennebula.org/documentation:rel3.6:chmod</a><u></u><u></u></p></div><div><p class="MsoNormal"><u></u> <u></u></p>
</div></div><div><p class="MsoNormal"><span style="font-family:"Arial","sans-serif";color:#222222"><br clear="all"></span>--<br>Carlos Mart<span style="font-family:"Tahoma","sans-serif"">�</span>n, MSc <u></u><u></u></p>
<div><p class="MsoNormal"><br>Project Engineer<br>OpenNebula - The Open-source Solution for Data Center Virtualization <u></u><u></u></p><div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#888888"><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:cmartin@opennebula.org" target="_blank">cmartin@opennebula.org</a> | <a href="http://twitter.com/opennebula" target="_blank">@OpenNebula</a></span><u></u><u></u></p>
</div><p class="MsoNormal" style="margin-bottom:12.0pt"><br><br><u></u><u></u></p></div><div><div><p class="MsoNormal">On Mon, Jul 23, 2012 at 10:40 AM, Jan Benadik <<a href="mailto:jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a>> wrote:<u></u><u></u></p>
</div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div><p class="MsoNormal" style="margin-bottom:12.0pt">Hi all,<br><br>from the OpenNebula 3.6 version I have the same problem (no problem in previous version).<br>
<br>Jan<u></u><u></u></p></div><div><p class="MsoNormal">D<span style="font-family:"Tahoma","sans-serif"">�</span>a <a href="tel:21.07.2012%2011" target="_blank">21.07.2012 11</a>:30, Michael Rebstock wrote / nap<span style="font-family:"Tahoma","sans-serif"">�</span>sal(a):<u></u><u></u></p>
</div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><div><div><p class="MsoNormal">Hello Everybody,<u></u><u></u></p><p class="MsoNormal"> <u></u><u></u></p><p class="MsoNormal"><span lang="EN-US">I have a problem when trying to use Opennebula with more than one user. I have a virtual network with the owner "oneadmin". When I log in with a self-created user "oneuser" and try to deploy a new virtual machine, there pops up an errormessage, that the user has not the permission to use the network I specified in the Template. When I change the owner of this network to "oneuser", he is able to deploy VMs. From this point on oneadmin isn't able to deploy a VM. </span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">I also tried to create two different users who are in the same group and set the ownership of the network to this group but this also didn't work. </span><u></u><u></u></p><p class="MsoNormal">
<span lang="EN-US"> </span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US">In the ACL-documentation [0] I found the following: "@106 NET/#47 USE" and I already tried it out -without success.</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US">What am I doing wrong? Is it possible to let different users use the same network without making them the owner of the same?</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Thanks in advance.</span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US">Best Regards</span><u></u><u></u></p>
<p class="MsoNormal"><span lang="EN-US">Michael</span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US"> </span><u></u><u></u></p><p class="MsoNormal"><span lang="EN-US">[0] </span><a href="http://opennebula.org/documentation:archives:rel3.4:manage_acl" target="_blank"><span lang="EN-US">http://opennebula.org/documentation:archives:rel3.4:manage_acl</span></a><u></u><u></u></p>
</div><p class="MsoNormal"><br><br><u></u><u></u></p></div></div><pre>_______________________________________________<u></u><u></u></pre><pre>Users mailing list<u></u><u></u></pre><pre><a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><u></u><u></u></pre>
<pre><a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><span style="color:#888888"><u></u><u></u></span></pre></blockquote>
</div><p class="MsoNormal"><span style="color:#888888"><u></u> <u></u></span></p><div><p class="MsoNormal"><span style="color:#888888">-- <br></span><span style="font-family:"Verdana","sans-serif""><img border="0" width="252" height="15" src="cid:image001.gif@01CD69A4.F1CD77A0"><br>
<b>J�n Be�adik</b><u></u><u></u></span></p><div><p class="MsoNormal"><span style="font-family:"Verdana","sans-serif"">Managed Services - Solution Design Architect<br><a href="tel:%2B421%2046%205151%20332" target="_blank">+421 46 5151 332</a><br>
<a href="tel:%2B421%20903%20691%20634" target="_blank">+421 903 691 634</a><br><a href="mailto://jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a><u></u><u></u></span></p></div><p class="MsoNormal"><span style="font-family:"Verdana","sans-serif"">Vinohradn�cka 6, 971 01 Prievidza<br>
<a href="http://www.sk.atos.net" target="_blank">www.sk.atos.net</a><br>__________________________________<br><br><img border="0" width="261" height="58" src="cid:image002.gif@01CD69A4.F1CD77A0"></span><span style="color:#888888"><u></u><u></u></span></p>
</div></div><div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><u></u><u></u></p></div></blockquote></div><p class="MsoNormal"><u></u> <u></u></p>
</div></blockquote><div><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">-- <br><span style="font-family:"Verdana","sans-serif""><img border="0" width="252" height="15" src="cid:image001.gif@01CD69A4.F1CD77A0"><br>
<b>Ján Beňadik</b><br>Managed Services - Solution Design Architect<br><a href="tel:%2B421%2046%205151%20332" target="_blank">+421 46 5151 332</a><br><a href="tel:%2B421%20903%20691%20634" target="_blank">+421 903 691 634</a><br>
<a href="mailto://jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a><br>Vinohradnícka 6, 971 01 Prievidza<br><a href="http://www.sk.atos.net" target="_blank">www.sk.atos.net</a><br>__________________________________<br>
<br><img border="0" width="261" height="58" src="cid:image002.gif@01CD69A4.F1CD77A0"></span><u></u><u></u></p></div></div></div></div><p class="MsoNormal"><u></u> <u></u></p></div></blockquote><p class="MsoNormal"><u></u> <u></u></p>
</div></div><div><p class="MsoNormal">-- <br><span style="font-family:"Verdana","sans-serif""><img border="0" width="252" height="15" src="cid:image001.gif@01CD69A4.F1CD77A0"><br><b>Ján Beňadik</b><br>
</span><span style="font-size:10.0pt;font-family:"Verdana","sans-serif""></span></p><div><div>Managed Services - Solution Design Architect<br><a href="tel:%2B421%2046%205151%20332" value="+421465151332" target="_blank">+421 46 5151 332</a><br>
<a href="tel:%2B421%20903%20691%20634" value="+421903691634" target="_blank">+421 903 691 634</a><br><a href="mailto://jan.benadik@atos.net" target="_blank">jan.benadik@atos.net</a><br>Vinohradnícka 6, 971 01 Prievidza<br>
<a href="http://www.sk.atos.net" target="_blank">www.sk.atos.net</a><br>__________________________________<br><br></div></div><img border="0" width="261" height="58" src="cid:image002.gif@01CD69A4.F1CD77A0"><u></u><u></u><p>
</p></div></div></div></blockquote></div><br></div>