Virsh无法连接到ovirt管理程序

Question

我安装了Ovirt，并希望为NAT添加网络接口。因此，我需要通过virsh连接到hypervisor并添加nic。

安装在我的本地服务器上的Ovirt主机(ovirt.kvmserver.net)位于同一台服务器上。

我试着用可读的方式连接是可以的。

 # virsh -r
Welcome to virsh, the virtualization interactive terminal.

Type:  'help' for help with commands
       'quit' to quit

virsh > list
 Id    Name                           State
----------------------------------------------------
 10    CentOS_test                    running
 12    CentOS_test2                   running
 16    Windows1                       running
 17    Windows2                       running

正常模式

# virsh
Welcome to virsh, the virtualization interactive terminal.

Type:  'help' for help with commands
       'quit' to quit

virsh # list
Please enter your authentication name:
Please enter your password:
error: Failed to reconnect to the hypervisor
error: no valid connection
error: authentication failed: Failed to step SASL negotiation: -1 (SASL(-1): generic failure: All-whitespace username.)

据我所知，我需要连接证书。我试了一下https

# virsh connect https://ovirt-engine.kvmserver.net
2013-05-12 13:21:30.004+0000: 25581: info : libvirt version: 0.10.2, package: 18.el6_4.4 (CentOS BuildSystem <http://bugs.centos.org>, 2013-04-18-16:13:45, c6b7.bsys.dev.centos.org)
2013-05-12 13:21:30.004+0000: 25581: warning : virNetTLSContextCheckCertificate:1102 : Certificate check failed Certificate [session] owner does not match the hostname ovirt-engine.kvmserver.net
error: Failed to connect to the hypervisor
error: authentication failed: Failed to verify peer's certificate

我试过80端口

# virsh connect http://ovirt-engine.kvmserver.net:80
error: Failed to connect to the hypervisor
error: authentication failed: TLS handshake failed A TLS packet with unexpected length was received.

我应该如何连接到系统管理程序？

Answer 1

我找到解决办法了！

问题在于“使用SASL身份验证进行远程管理”。我没有为SASL创建特殊的用户。创建用户命令是

# saslpasswd2 -a libvirt USERNAME
Password:
Again (for verification):

就这样。

Answer 2

您也可以尝试这个(找到这里 )

 virsh -c qemu:///system?authfile=/etc/ovirt-hosted-engine/virsh_auth.conf

Answer 3

证书不匹配。如果virsh有不检查cert有效性的选项，则使用该选项。否则，将证书与dns名称匹配，反之亦然，将dns与证书名称匹配。以较适当者为准。