Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1155060

Summary:	automatically configured iptables doesn't allow communication of engine with reports
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	movciari
Component:	ovirt-engine-reports	Assignee:	Yedidyah Bar David <didi>
Status:	CLOSED NOTABUG	QA Contact:	movciari
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	3.5.0	CC:	ecohen, gklein, iheim, lsurette, movciari, pstehlik, rbalakri, Rhev-m-bugs, sradco, yeylon
Target Milestone:	---	Keywords:	Triaged
Target Release:	3.5.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	integration
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-10-27 14:53:05 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description movciari 2014-10-21 10:40:43 UTC

Description of problem:
when i let engine-setup configure iptables automatically, dashboard tab in webadmin is empty, it starts working after i flush iptables

Version-Release number of selected component (if applicable):
vt6

How reproducible:
always

Steps to Reproduce:
1. yum install -y rhevm-setup rhevm-dwh-setup rhevm-reports-setup
2. allow setup to configure iptables automatically
3. go to webadmin dashboard tab - it will be empty
4. flush iptables
5. go to webadmin dashboard tab - dashboard will show up

Actual results:
iptables doesn't allow engine to communicate with reports

Expected results:
iptables should allow engine to communicate with reports

Additional info:
for good security, it should probably be set to allow communication with reports only when reports are installed, but it should work for remote reports installation, too, or at least instruct admin how to set iptables correctly when installing reports

Comment 2 Yedidyah Bar David 2014-10-21 12:03:19 UTC

(In reply to movciari from comment #0)
> Description of problem:
> when i let engine-setup configure iptables automatically, dashboard tab in
> webadmin is empty, it starts working after i flush iptables

> 
> Version-Release number of selected component (if applicable):
> vt6
> 
> How reproducible:
> always
> 
> Steps to Reproduce:
> 1. yum install -y rhevm-setup rhevm-dwh-setup rhevm-reports-setup
> 2. allow setup to configure iptables automatically
> 3. go to webadmin dashboard tab - it will be empty
> 4. flush iptables
> 5. go to webadmin dashboard tab - dashboard will show up

Sounds weird. All on same machine? How is iptables relevant?
Are you sure that this was broken by iptables? I.e. did you try to enable iptables and see that it's broken again?

Comment 3 movciari 2014-10-27 10:15:11 UTC

yes, when i restart iptables to enable firewall again, dashboard tab in webadmin is broken again

Comment 5 movciari 2014-10-27 14:10:29 UTC

i realized that machine was still on vt5, upgraded it and now i can't reproduce again