@David Thanks for the report! We're fixing it: https://github.com/vatesfr/xen-orchestra/pull/7031.

pdonias opened this pull request in vatesfr/xen-orchestra

closed fix(xo-server-auth-google): bad argument passed to registerUser2 #7031

@olivierlambert By default, it's 20 minutes. And it's already configurable through xo-server's config by adding:

[xapiOptions]
restartHostTimeout = '40 minutes'

@Tristis-Oris This should be fixed, now. If a pool is disabled or can't be found, you'll get an error message in the logs and the pool will simply be ignored. See https://xen-orchestra.com/blog/xen-orchestra-5-85/#️-netbox.

Hi @bnerickson, thanks for the detailed feedback!

XO Lite is still in its early development phase, which means that most of your suggestions are actually already planned, including VBD management, editing MAC addresses, creating/deleting VMs and snapshots, and more generally everything that can be done through XAPI calls.

Regarding your other suggestions, keep in mind that XO Lite is running without a server behind. This means that the persistency is only in the browser. For instance, I'm not sure how an LDAP login would work, since the credentials you're entering in XO Lite are your host's credentials, and XO Lite needs that to communicate with XAPI.

Regarding XOA's FQDN, you can already do that by configuring the field publicUrl in your XOA's config:

[http]
# Public URL to connect to this XO
#
# This optional entry is used to communicate to external entities (e.g. XO Lite)
# how to connect to this XO.
#
# It SHOULD be defined in case the IP address of the current machine is not
# good enough (e.g. a domain name must be used or there is a reverse proxy).
publicUrl = 'https://xoa.company.lan'

In any case, I took note of your feedback and we'll have to discuss some of your other interesting suggestions, both for XO Lite and XO 6, like showing more of the host's logs, failed services, etc.
Thanks!

Hi @andrewperry, a "server" in XO 5 represents a "connection to a pool". Since you need to enter your physical server's information, that's why we called it that way. But we agree too much vocabulary can be confusing so in XO 6 we'll change that and probably call it something like "Pool connections".

@DustinB @olivierlambert I confirm it's not possible at the moment.

@vilhelm That's fixed: https://github.com/vatesfr/xen-orchestra/pull/6328. Thanks again for the report

pdonias opened this pull request in vatesfr/xen-orchestra

closed fix(xo-server/xapi-object-to-xo): handle guest metrics reporting empty IP field #6328

Hi @bnerickson, indeed, the configurations are correctly imported but plugins aren't automatically "configured" when you import a config. We'll improve that, thanks for the report

Hi @theaeon, this should already be fixed, could you check the full log for that error in Settings > Logs? It should give you more details.

Hi! We introduced a bug in commit 59e6868 causing "Page not found"s and fixed it in commit 6e52794.

@archw It's the amount of seconds after which the job run will be marked as failed if the run hasn't ended. If you configure a timeout on vm.restart with multiple VMs, the timeout will apply on each VM individually.

@archw Since the jobs settings give you an automatic direct access to the API methods, the parameters are not documented, unfortunately. Regarding vm.restart, force will hard-reboot the VM instead of going through the guest tools and bypassBlockedOperation will restart the VM even if you enabled "Protect against accidental shutdown" in the VM's advanced tab.

@love2scoot You can add this to your xo-server config file:

[logs]
filter = 'xo-server-auth-ldap'

Then xo-server's logs will only contain logs coming from the LDAP plugin, including more debug logs during a group sync. Don't forget to remove it once you're done to get your logs back to normal.

Hi! Regarding the templates issue, we're working on a fix on branch pierre-fix-xsa468-test master. Would anyone having the issue be available to test it?

This is essentially why I said in the other thread that "Self Service and ACLs weren't designed to work together"

To keep it simple: Self Service will indeed allow some users to see and use some resources even though they don't have ACLs for them. Then, when they create VMs, it will automatically assign ACLs on the objects under the hood. That's why, even though it's not impossible, most of the time it's not recommended to use them together since you might override ACLs that Self Service assigns automatically.

We're actually starting to think of a redesign (or at least improvements) of those 2 features so feedback is very welcome about any use case that you might have that isn't covered by them at the moment. I already took note of the "dynamic" need for resource set objects.

Hi @olympicgreg, this seems to be the intended behaviour.

Self Service and ACLs weren't designed to work together, so when you create a VM, you either do it under the Self Service feature or thanks to the ACLs you have. So in your case, the user might have Viewer ACLs on the pool, but since they create the VM using Self Service, they will only be able to see the resources available in the Self Service resource set.

Regarding ACLs, "Viewer" is not enough to be able to create a VM on the pool. But if you change it to "Admin", you'll see that the user is now able to create a VM outside of the Self Service feature, simply by selecting the pool. And in that case, they'll be able to see all the pool's networks.

@kagbasi-ngc It's not possible at the moment. How would you expect it to work? Would it try to request the first server and fallback to the second one in case of error? And do that for every single request?

@andrewperry Exactly

Hi @andrewperry, a "server" in XO 5 represents a "connection to a pool". Since you need to enter your physical server's information, that's why we called it that way. But we agree too much vocabulary can be confusing so in XO 6 we'll change that and probably call it something like "Pool connections".

@ph7 Thanks for the report, we'll check that