Peter, Thanks for the reply. Just to let you know turning off TLS did not solve the issue for me. I have netcat and the user I am trying to login to virsh console does have privileges to create socket. Enabling debug while I try to login using QEMU+SSH, I get prompted for my password and get the following debugs. The error message "Failed to connect to the hypervisor" looks a little suspicious. The same uri with a prebuilt virsh binary, does not have any issues connecting. Any thoughts? shanredd@xxxxxxxxxxxxxxx's password: 2013-03-06 17:30:25.993+0000: 28966: debug : virNetClientMarkClose:631 : client=0x1c52b10, reason=0 2013-03-06 17:30:25.993+0000: 28966: debug : virEventPollRemoveHandle:180 : EVENT_POLL_REMOVE_HANDLE: watch=2 2013-03-06 17:30:25.993+0000: 28966: debug : virEventPollRemoveHandle:193 : mark delete 1 5 2013-03-06 17:30:25.993+0000: 28966: debug : virEventPollInterruptLocked:716 : Interrupting 2013-03-06 17:30:25.993+0000: 28966: debug : virNetClientIOEventLoopPassTheBuck:1423 : Giving up the buck 0x1c528e0 2013-03-06 17:30:25.993+0000: 28966: debug : virNetClientIOEventLoopPassTheBuck:1437 : No thread to pass the buck to 2013-03-06 17:30:25.993+0000: 28966: debug : virNetClientCloseLocked:644 : client=0x1c52b10, sock=0x1c52980, reason=0 2013-03-06 17:30:25.993+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52980 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollRunOnce:640 : Poll got 1 event(s) 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollDispatchTimeouts:425 : Dispatch 0 2013-03-06 17:30:25.993+0000: 28966: debug : virObjectRef:295 : OBJECT_REF: obj=0x1c52b10 2013-03-06 17:30:25.993+0000: 28966: debug : virKeepAliveStop:299 : RPC_KEEPALIVE_STOP: ka=0x1c52c30 client=0x1c52b10 2013-03-06 17:30:25.993+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52c30 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollDispatchHandles:470 : Dispatch 1 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollDispatchHandles:484 : i=0 w=1 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollDispatchHandles:498 : EVENT_POLL_DISPATCH_HANDLE: watch=1 events=1 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollCleanupTimeouts:516 : Cleanup 0 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollCleanupTimeouts:552 : Found 0 out of 0 timeout slots used, releasing 0 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollCleanupHandles:564 : Cleanup 2 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollCleanupHandles:577 : EVENT_POLL_PURGE_HANDLE: watch=2 2013-03-06 17:30:25.993+0000: 28967: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52b10 2013-03-06 17:30:25.993+0000: 28967: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52980 2013-03-06 17:30:25.993+0000: 28967: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c52980 2013-03-06 17:30:25.993+0000: 28967: debug : virNetSocketDispose:998 : sock=0x1c52980 fd=5 2013-03-06 17:30:25.993+0000: 28967: debug : virEventPollRemoveHandle:180 : EVENT_POLL_REMOVE_HANDLE: watch=2 2013-03-06 17:30:25.993+0000: 28967: debug : virFileClose:72 : Closed fd 5 2013-03-06 17:30:25.993+0000: 28967: debug : virFileClose:72 : Closed fd 7 2013-03-06 17:30:25.993+0000: 28967: debug : virProcessAbort:92 : aborting child process 28968 2013-03-06 17:30:25.994+0000: 28967: debug : virProcessAbort:97 : process has ended: exit status 1 2013-03-06 17:30:25.994+0000: 28967: debug : virEventRunDefaultImpl:244 : running default event implementation 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollCleanupTimeouts:516 : Cleanup 0 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollCleanupTimeouts:552 : Found 0 out of 0 timeout slots used, releasing 0 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollCleanupHandles:564 : Cleanup 1 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollMakePollFDs:393 : Prepare n=0 w=1, f=3 e=1 d=0 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollCalculateTimeout:332 : Calculate expiry of 0 timers 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollCalculateTimeout:361 : Timeout at 0 due in -1 ms 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollRunOnce:629 : EVENT_POLL_RUN: nhandles=1 timeout=-1 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c52c30 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52b10 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52b10 2013-03-06 17:30:25.994+0000: 28966: debug : virNetClientIO:1806 : All done with our call head=(nil) call=0x1c528e0 rv=-1 2013-03-06 17:30:25.994+0000: 28966: debug : virNetMessageFree:73 : msg=0x1c53010 nfds=0 cb=(nil) 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c526f0 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52600 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52d70 2013-03-06 17:30:25.994+0000: 28966: debug : virNetClientCloseInternal:685 : client=0x1c52b10 wantclose=0 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52b10 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c52b10 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c526f0 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c526f0 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52600 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c52600 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c52d70 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c52d70 2013-03-06 17:30:25.994+0000: 28966: debug : virFileClose:72 : Closed fd 8 2013-03-06 17:30:25.994+0000: 28966: debug : virFileClose:72 : Closed fd 6 2013-03-06 17:30:25.994+0000: 28966: debug : virNetMessageClear:56 : msg=0x1c52b70 nfds=0 2013-03-06 17:30:25.994+0000: 28966: debug : do_open:1206 : driver 1 remote returned ERROR 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:258 : OBJECT_UNREF: obj=0x1c51f20 2013-03-06 17:30:25.994+0000: 28966: debug : virObjectUnref:260 : OBJECT_DISPOSE: obj=0x1c51f20 error: failed to connect to the hypervisor error: End of file while reading data: 2013-03-06 17:30:22.327+0000: 28968: debug : virFileClose:72 : Closed fd 6 2013-03-06 17:30:22.327+0000: 28968: debug : virFileClose:72 : Closed fd 8 2013-03-06 17:30:22.327+0000: 28968: debug : virCommandHook:2119 : Hook is done 0: Input/output error 2013-03-06 17:30:25.994+0000: 28966: debug : virEventPollAddTimeout:225 : Used 0 timeout slots, adding at least 10 more 2013-03-06 17:30:25.994+0000: 28966: debug : virEventPollInterruptLocked:716 : Interrupting 2013-03-06 17:30:25.994+0000: 28966: debug : virEventPollAddTimeout:248 : EVENT_POLL_ADD_TIMEOUT: timer=1 frequency=0 cb=0x4122ee opaque=(nil) ff=(nil) 2013-03-06 17:30:25.994+0000: 28967: debug : virEventPollRunOnce:640 : Poll got 1 event(s) On 3/6/13 1:35 AM, "Peter Krempa" <pkrempa@xxxxxxxxxx> wrote: >On 03/05/13 23:06, Will Dennis wrote: >> Hi Shantan, >> >> I believe the problem may be that libvirt 1.x requires TLS by default on >> connections. I saw that same problem the 1^st time I replaces a running >> libvirt 0.9.x with 1.0.0. I believe there may be a way to turn off this >> requirement in libvirtd.conf, e.g. > >This is true for normal connections using TCP. SSH tunneling works in a >different way. > >> >> # >> >> # Network connectivity controls >> >> # >> >> # Flag listening for secure TLS connections on the public TCP/IP port. >> >> # NB, must pass the --listen flag to the libvirtd process for this to >> >> # have any effect. >> >> # >> >> # It is necessary to setup a CA and issue server certificates before >> >> # using this capability. >> >> # >> >> # This is enabled by default, uncomment this to disable it >> >> #listen_tls = 0 >> >> # Listen for unencrypted TCP connections on the public TCP/IP port. >> >> # NB, must pass the --listen flag to the libvirtd process for this to >> >> # have any effect. >> >> # >> >> # Using the TCP socket requires SASL authentication by default. Only >> >> # SASL mechanisms which support data encryption are allowed. This is >> >> # DIGEST_MD5 and GSSAPI (Kerberos5) >> >> # >> >> # This is disabled by default, uncomment this to enable it. >> >> #listen_tcp = 1 <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< > >This is not needed for SSH. > >> >> On the two instances of libvirt 1.x I have deployed, I just configure >> and use TLS. Instructions on doing this may be found here: >> >> http://wiki.libvirt.org/page/TLSSetup > > >Please verify that you've got "netcat" installed on the host the daemon >is running on (command "nc" in the shell). Also you need to verify that >the user account you are using on the machine the daemon is running on >has rights to access the libvirt socket. > >Peter > _______________________________________________ libvirt-users mailing list libvirt-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvirt-users
