Re: [pve-devel] new https server

2013-04-19 Thread Alexandre DERUMIER
seem to be related to path where we are we lauching pvedaemon or init script any idea ? work ok #cd /usr/bin #pvedaemon #cd /usr/share/perl5/ #pvedaemon don't work --- #cd / #pvedaemon Global symbol "@cmd" requires explicit package name at ../PVE/QemuServer.pm line 2038. Co

Re: [pve-devel] Add "sound card" to VM's from WebUI

2013-04-19 Thread Martin Maurer
> I have not been able to get sound over RDP working on Windows Server > 2008r2 without a KVM "hda" sound card. As soon as this is added it works > perfectly. here too. No sound on RDP (windows server). But as it works on Win7 on the same hardware/KVM settings, it looks like windows server 2008r

[pve-devel] user rights

2013-04-19 Thread Stefan Priebe - Profihost AG
Hello list, as i wasn't able to get this information from the wiki - i wanted to ask here. I tried to limit a user to two pathes: /nodes/ and /cluster/resources but that did not work i added two entries to Rights. Is this not possible? Even better it would be if i would be able to limit it to:

Re: [pve-devel] Add "sound card" to VM's from WebUI

2013-04-19 Thread Alexandre DERUMIER
Maybe this can help ? http://member.ds.my/knowledgebase/153/Enabling-Audio-over-RDP-on-a-Windows-Server-sans-hardware-soundcard.html - Mail original - De: "Martin Maurer" À: "Andrew Thrift" , "Alexandre DERUMIER" , pve-devel@pve.proxmox.com Envoyé: Vendredi 19 Avril 2013 09:13:52

Re: [pve-devel] new https server

2013-04-19 Thread Dietmar Maurer
# md5sum /usr/share/perl5/PVE/QemuServer.pm 7ee43527e5cd9004b0f9fbabf3934ec9 /usr/share/perl5/PVE/QemuServer.pm is that correct on your side? > -Original Message- > From: Alexandre DERUMIER [mailto:aderum...@odiso.com] > Sent: Freitag, 19. April 2013 09:10 > To: Dietmar Maurer > Cc: pve-

Re: [pve-devel] Add "sound card" to VM's from WebUI

2013-04-19 Thread Martin Maurer
Yes, Using the howto in the link from Alexandre is the way to go. RDP sound works now also on my Win2008r2 servers. Best Regards, Martin Maurer mar...@proxmox.com > -Original Message- > From: Alexandre DERUMIER [mailto:aderum...@odiso.com] > Sent: Donnerstag, 18. April 2013 14:15 > To:

Re: [pve-devel] user rights

2013-04-19 Thread Dietmar Maurer
> I tried to limit a user to two pathes: > /nodes/ > and > /cluster/resources > > but that did not work i added two entries to Rights. Is this not possible? what did not work? ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com

Re: [pve-devel] new https server

2013-04-19 Thread Alexandre DERUMIER
>>is that correct on your side? yes :/ # md5sum /usr/share/perl5/PVE/QemuServer.pm 7ee43527e5cd9004b0f9fbabf3934ec9 /usr/share/perl5/PVE/QemuServer.pm seem to be related to pve-manager package, I have downgrade it and pvedaemon start fine now. - Mail original - De: "Dietmar Ma

[pve-devel] [PATCH] rbd has a lot of problems with -p parameter for pool if we refer to more than one disk

2013-04-19 Thread Stefan Priebe
This patch is a workaround until rbd is fixed. Signed-off-by: Stefan Priebe --- PVE/Storage/RBDPlugin.pm | 10 +- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/PVE/Storage/RBDPlugin.pm b/PVE/Storage/RBDPlugin.pm index e625999..4662585 100644 --- a/PVE/Storage/RBDPlugin.p

Re: [pve-devel] user rights

2013-04-19 Thread Stefan Priebe - Profihost AG
Am 19.04.2013 09:32, schrieb Dietmar Maurer: >> I tried to limit a user to two pathes: >> /nodes/ >> and >> /cluster/resources >> >> but that did not work i added two entries to Rights. Is this not possible? > > what did not work? I added: /nodes/ userX /cluster/resources/ userX Access to /nodes

Re: [pve-devel] new https server

2013-04-19 Thread Dietmar Maurer
oh, there is still some debugging code there: use lib '..'; I removed that now. Please can you update pve-manager and re-test? > -Original Message- > From: Alexandre DERUMIER [mailto:aderum...@odiso.com] > Sent: Freitag, 19. April 2013 09:44 > To: Dietmar Maurer > Cc: pve-devel@pve.proxm

Re: [pve-devel] user rights

2013-04-19 Thread Dietmar Maurer
> Access to /nodes/ works access to /cluster/resources did not work. > > If i remove both and add: > / userX > > access to both worked. Well, we do not have check at this fine grained level. Why do you need that? ___ pve-devel mailing list pve-devel@p

Re: [pve-devel] [PATCH 3/3] template_create : add template:1 option.

2013-04-19 Thread Dietmar Maurer
> Because you tell me that a template can have non-based name disk. (now a > template is just a vm with template:1 option) I just meant that we can tolerate that error if a use manually configure such nonsense. I am quite unsure if we should make that a feature. _

Re: [pve-devel] [PATCH] rbd is format raw for qemu-img

2013-04-19 Thread Dietmar Maurer
applied, thanks > -Original Message- > From: pve-devel-boun...@pve.proxmox.com [mailto:pve-devel- > boun...@pve.proxmox.com] On Behalf Of Stefan Priebe > Sent: Freitag, 19. April 2013 08:36 > To: pve-devel@pve.proxmox.com > Subject: [pve-devel] [PATCH] rbd is format raw for qemu-img > >

Re: [pve-devel] [PATCH] use vm create permissions for templates

2013-04-19 Thread Dietmar Maurer
applied > -Original Message- > From: pve-devel-boun...@pve.proxmox.com [mailto:pve-devel- > boun...@pve.proxmox.com] On Behalf Of Stefan Priebe > Sent: Freitag, 19. April 2013 08:38 > To: pve-devel@pve.proxmox.com > Subject: [pve-devel] [PATCH] use vm create permissions for templates

Re: [pve-devel] [PATCH] implement node netstat call to get current tap network counters

2013-04-19 Thread Dietmar Maurer
applied, thanks > -Original Message- > From: pve-devel-boun...@pve.proxmox.com [mailto:pve-devel- > boun...@pve.proxmox.com] On Behalf Of Stefan Priebe > Sent: Freitag, 19. April 2013 08:38 > To: pve-devel@pve.proxmox.com > Subject: [pve-devel] [PATCH] implement node netstat call to get cu

Re: [pve-devel] [PATCH] rbd is format raw for qemu-img

2013-04-19 Thread Dietmar Maurer
> applied, thanks sorry - I have not applied that - ignore me. > > > -Original Message- > > From: pve-devel-boun...@pve.proxmox.com [mailto:pve-devel- > > boun...@pve.proxmox.com] On Behalf Of Stefan Priebe > > Sent: Freitag, 19. April 2013 08:36 > > To: pve-devel@pve.proxmox.com > > Sub

[pve-devel] Cloned Template stays Template

2013-04-19 Thread Stefan Priebe - Profihost AG
Hi, if i clone a template it stays template. Clone should remove the template: 1 flag from config? Stefan ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] user rights

2013-04-19 Thread Stefan Priebe - Profihost AG
Am 19.04.2013 11:18, schrieb Dietmar Maurer: >> Access to /nodes/ works access to /cluster/resources did not work. >> >> If i remove both and add: >> / userX >> >> access to both worked. > > Well, we do not have check at this fine grained level. Why do you need that? This is an automated Script u

Re: [pve-devel] user rights

2013-04-19 Thread Dietmar Maurer
> i like to restrict the users as much as possible. Sure, but our permission works on resources (VMs, Storages), not on API paths. For example /cluster/resources simply lists all resources you have access to (VM.Audit or VMs, Datastore.Audit for storage).

[pve-devel] [PATCH] delete template flag from cloned vm

2013-04-19 Thread Stefan Priebe
Signed-off-by: Stefan Priebe --- PVE/API2/Qemu.pm |1 + 1 file changed, 1 insertion(+) diff --git a/PVE/API2/Qemu.pm b/PVE/API2/Qemu.pm index b245257..3de7355 100644 --- a/PVE/API2/Qemu.pm +++ b/PVE/API2/Qemu.pm @@ -542,6 +542,7 @@ __PACKAGE__->register_method({ next

Re: [pve-devel] user rights

2013-04-19 Thread Stefan Priebe - Profihost AG
Am 19.04.2013 12:47, schrieb Dietmar Maurer: > >> i like to restrict the users as much as possible. > > > Sure, but our permission works on resources (VMs, Storages), not on API paths. > > For example /cluster/resources simply lists all resources you have > access to (VM.Audit or VMs, Datastor

Re: [pve-devel] user rights

2013-04-19 Thread Dietmar Maurer
> > Sure, but our permission works on resources (VMs, Storages), not on API > > paths. > > > > For example /cluster/resources simply lists all resources you have > > access to (VM.Audit or VMs, Datastore.Audit for storage). > > Ah sorry didn't know that. It looked like it is path based. Sorry for

Re: [pve-devel] Cloned Template stays Template

2013-04-19 Thread Alexandre DERUMIER
I also need to rebase my patches to remove the template option. I'll resend them next week - Mail original - De: "Stefan Priebe - Profihost AG" À: "Alexandre DERUMIER" Cc: pve-devel@pve.proxmox.com Envoyé: Vendredi 19 Avril 2013 12:17:57 Objet: Cloned Template stays Template Hi

Re: [pve-devel] [PATCH 3/3] template_create : add template:1 option.

2013-04-19 Thread Alexandre DERUMIER
Ok, no problem, I'll resubmit a patch - Mail original - De: "Dietmar Maurer" À: "Alexandre DERUMIER" Cc: pve-devel@pve.proxmox.com Envoyé: Vendredi 19 Avril 2013 11:30:34 Objet: RE: [pve-devel] [PATCH 3/3] template_create : add template:1 option. > Because you tell me that a temp

Re: [pve-devel] new https server

2013-04-19 Thread Alexandre DERUMIER
>>oh, there is still some debugging code there: >> >>use lib '..'; >> >>I removed that now. Please can you update pve-manager and re-test? Yes, that's works fine now ! Thanks ! - Mail original - De: "Dietmar Maurer" À: "Alexandre DERUMIER" Cc: pve-devel@pve.proxmox.com Envoyé

[pve-devel] qemu-server : template create : add template:1 option

2013-04-19 Thread Alexandre Derumier
this add template:1 to vm config when converting to template ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

[pve-devel] [PATCH] template create : add template:1 option

2013-04-19 Thread Alexandre Derumier
Signed-off-by: Alexandre Derumier --- PVE/QemuServer.pm |4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/PVE/QemuServer.pm b/PVE/QemuServer.pm index 8e0a378..0ddbc29 100644 --- a/PVE/QemuServer.pm +++ b/PVE/QemuServer.pm @@ -4474,9 +4474,11 @@ sub template_create {

[pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Alexandre DERUMIER
Hi, just a report to say that new vnc 1.2 works fine for me now, with http://fqnd/... no more java error. Thanks :) ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Dietmar Maurer
> just a report to say that new vnc 1.2 works fine for me now What new vnc 1.2? ___ pve-devel mailing list pve-devel@pve.proxmox.com http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Dietmar Maurer
I played around with new tigervnc 1.2.0, but never activated the new code. So I guess you still run the old 1.1.0 code. The good news is that the old code seems to run now. We still not know why, but things started to magically work again last week. There where java updates from oracle, and ope

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Dietmar Maurer
> I played around with new tigervnc 1.2.0, but never activated the new code. For further info on that see: https://sourceforge.net/tracker/?func=detail&aid=3488166&group_id=254363&atid=1126849 ___ pve-devel mailing list pve-devel@pve.proxmox.com http

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Alexandre DERUMIER
>>I played around with new tigervnc 1.2.0, but never activated the new code. Oh ok ;) >>The bad news is that latest java always pops up a dialog (security warning)- >>what a mess. I have just updated my jre from 7.17 to jre 7.21 to test. Now I have a new warning message, say that the applet h

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Alexandre DERUMIER
>>I have click on unblock, but this just fail to works, the applet is not >>launching anymore :( Oops, sorry, It's work fine after unblock, my vm was not started ;) Don't known why all the code is not signed - Mail original - De: "Alexandre DERUMIER" À: "Dietmar Maurer" Cc: p

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Dietmar Maurer
> Oops, sorry, It's work fine after unblock, my vm was not started ;) > > Don't known why all the code is not signed Our Applet is signed, but seem that oracle does not like our certificate. You can even install the CA as trusted CA, does not help. But you can set java "Mixed Code" option to

Re: [pve-devel] new vnc 1.2 works fine now with http://fqdn....

2013-04-19 Thread Alexandre DERUMIER
I found this on the net: " Java 7 Update 21 was released on April 16 2013 and caused our applet to start showing this warning dialog. Per the release notes: As of JDK 7u21, JavaScript code that calls code within a privileged applet is treated as mixed code and warning dialogs are raised if the