[ovirt-users] Re: LDAP setup fails on 4.4 reading PEM file

[Stack Korora]

On 2020-06-11 20:55, Stack Korora wrote:
> Well made one discovery. While named with an 's' in EL7, in EL8 that 's'
> is missing. ovirt-engine-extensions-aaa-ldap is now
> ovirt-engine-extension-aaa-ldap.
>
> However, even after fixing that in the properties it still gives the
> same error message (just missing the 's' now). I do have the packages
> installed and I do have
> /usr/share/java/ovirt-engine-extension-aaa-ldap/ovirt-engine-extension-aaa-ldap.jar
> (and the symlinks that point there). Still throws errors. :-(

I finally cracked it. There's a bunch of small minor changes that don't
allow for the config file from 4.3 to work with 4.4. Things like
dropping the 's' or exchanging the '-' for '.'.  Also had a heck of a
time with the ugly verbosity of the output from
ovirt-engine-extension-aaa-ldap tool. Not nearly as clean as it was
under 4.3.

But, as I said, I cracked the issue and I've got it working. Thanks to
all on the list. I found a lot of good info in searching the archive.

Thanks!
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7AMQAQKPUQGI3MDGQV5KT3CN3HOBJKZZ/

[ovirt-users] Re: oVirt noVNC

[Staniforth, Paul]

Sorry Anton,
I'm trying to get a lot of things sorted before the 
weekend.

This seems the wrong way round, if you follow the documentation you shouldn't 
have the symbolic link on the working system unless you replaced the file it 
was pointing to.

Do you have certificate bundles for both systems?

Regards,
Paul S.


From: Anton Louw 
Sent: 12 June 2020 11:44
To: Staniforth, Paul ; users@ovirt.org 

Subject: RE: oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Thanks Paul,



So the symbolic link has then been removed, as per the below. Not quite sure 
where to go from here.



Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



From: Staniforth, Paul 
Sent: 12 June 2020 12:30
To: Anton Louw ; users@ovirt.org
Subject: Re: oVirt noVNC



Yes Anton,

 I think it's in the documentation it's



Steps 2 & 3

*

*  The Engine has been configured to use /etc/pki/ovirt-engine/apache-ca.pem, 
which is symbolically linked to /etc/pki/ovirt-engine/ca.pem. Remove the 
symbolic link.

 # rm /etc/pki/ovirt-engine/apache-ca.pem

*  Save your CA certificate as /etc/pki/ovirt-engine/apache-ca.pem.

 # cp /tmp/3rd-party-ca-cert.pem /etc/pki/ovirt-engine/apache-ca.pem

Regards,

Paul S.



From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Sent: 12 June 2020 11:06
To: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org 
mailto:users@ovirt.org>>
Subject: RE: oVirt noVNC



Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Paul,



Double checked the permissions as well. All seems to be fine. The only thing 
that does look different between the environments are the below:



ENV1 (Not working)

[cid:image001.png@01D640B7.2B69DFC0]



ENV2 (Working)



[cid:image007.png@01D640B7.2B69DFC0]



It seems that on the working environment, there is a shortcut file 
(apached-ca.pem) which points to the ca.pem file, but on the environment that 
is not working, the apache-ca.pem file is not a shortcut. Could this perhaps be 
an issue?



Thanks





Anton Louw

Cloud Engineer: Storage and Virtualization at Vox



T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[ovirt-users] Re: oVirt noVNC

[Anton Louw via Users]

Thanks Paul,

So the symbolic link has then been removed, as per the below. Not quite sure 
where to go from here.


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za



From: Staniforth, Paul 
Sent: 12 June 2020 12:30
To: Anton Louw ; users@ovirt.org
Subject: Re: oVirt noVNC

Yes Anton,
 I think it's in the documentation it's

Steps 2 & 3

•

•  The Engine has been configured to use /etc/pki/ovirt-engine/apache-ca.pem, 
which is symbolically linked to /etc/pki/ovirt-engine/ca.pem. Remove the 
symbolic link.

 # rm /etc/pki/ovirt-engine/apache-ca.pem

•  Save your CA certificate as /etc/pki/ovirt-engine/apache-ca.pem.

 # cp /tmp/3rd-party-ca-cert.pem /etc/pki/ovirt-engine/apache-ca.pem
Regards,
Paul S.

From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Sent: 12 June 2020 11:06
To: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org 
mailto:users@ovirt.org>>
Subject: RE: oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Paul,



Double checked the permissions as well. All seems to be fine. The only thing 
that does look different between the environments are the below:



ENV1 (Not working)

[cid:image001.png@01D640B7.2B69DFC0]



ENV2 (Working)



[cid:image007.png@01D640B7.2B69DFC0]



It seems that on the working environment, there is a shortcut file 
(apached-ca.pem) which points to the ca.pem file, but on the environment that 
is not working, the apache-ca.pem file is not a shortcut. Could this perhaps be 
an issue?



Thanks



Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:44
To: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>; 
users@ovirt.org
Subject: Re: oVirt noVNC





No worries,

If all is pointing to the correct files I would check 
permissions.





Regards,

Paul S.





From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Sent: 12 June 2020 09:34
To: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org 
mailto:users@ovirt.org>>
Subject: RE: oVirt noVNC



Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Paul,



Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the att

[ovirt-users] Re: oVirt noVNC

[Staniforth, Paul]

Yes Anton,
 I think it's in the documentation it's

Steps 2 & 3
  *

  *   The Engine has been configured to use 
/etc/pki/ovirt-engine/apache-ca.pem, which is symbolically linked to 
/etc/pki/ovirt-engine/ca.pem. Remove the symbolic link.

 # rm /etc/pki/ovirt-engine/apache-ca.pem


  *   Save your CA certificate as /etc/pki/ovirt-engine/apache-ca.pem.

 # cp /tmp/3rd-party-ca-cert.pem /etc/pki/ovirt-engine/apache-ca.pem


Regards,
Paul S.

From: Anton Louw 
Sent: 12 June 2020 11:06
To: Staniforth, Paul ; users@ovirt.org 

Subject: RE: oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Paul,



Double checked the permissions as well. All seems to be fine. The only thing 
that does look different between the environments are the below:



ENV1 (Not working)

[cid:image001.png@01D640B1.B1BEAA20]



ENV2 (Working)



[cid:image007.png@01D640B1.E97498D0]



It seems that on the working environment, there is a shortcut file 
(apached-ca.pem) which points to the ca.pem file, but on the environment that 
is not working, the apache-ca.pem file is not a shortcut. Could this perhaps be 
an issue?



Thanks



Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



From: Staniforth, Paul 
Sent: 12 June 2020 10:44
To: Anton Louw ; users@ovirt.org
Subject: Re: oVirt noVNC





No worries,

If all is pointing to the correct files I would check 
permissions.





Regards,

Paul S.





From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Sent: 12 June 2020 09:34
To: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org 
mailto:users@ovirt.org>>
Subject: RE: oVirt noVNC



Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Paul,



Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies ?



Thanks





Anton Louw

Cloud Engineer: Storage and Virtualization at Vox



T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[ovirt-users] Hosted engine deployment fails consistently when trying to download files.

[Gilboa Davara]

Hello,

I'm trying to deploy a hosted engine on one of my test setups.
No matter how I tried to deploy the hosted engine, either via command line
or via "Hosted Engine" deployment from the cockpit web console, I always
fails with the same error message. [1]
Manually trying to download RPMs via dnf from the host, work just fine.
Firewall log files are clean.

Any idea what's going on?

[1]  2020-06-12 06:09:38,609-0400 DEBUG
otopi.ovirt_hosted_engine_setup.ansible_utils
ansible_utils._process_output:103 {'msg': "Failed to download metadata for
repo 'AppStream'", 'results': [], 'rc': 1, 'invocation': {'module_args':
{'name': ['ovirt-engine'], 'state': 'present', 'allow_downgrade': False,
'autoremove': False, 'bugfix': False, 'disable_gpg_check': False,
'disable_plugin': [], 'disablerepo': [], 'down  load_only': False,
'enable_plugin': [], 'enablerepo': [], 'exclude': [], 'installroot': '/',
'install_repoquery': True, 'install_weak_deps': True, 'security': False,
'skip_broken': False, 'update_cache': False, 'update_only': False,
'validate_certs': True, 'lock_timeout': 30, 'conf_file': None,
'disable_excludes': None, 'download_dir': None, 'list': None, 'releasever':
None}}, '_ansible_no_log': False, 'changed  ': False,
'_ansible_delegated_vars': {'ansible_host': 'test-vmengine.localdomain'}}
  2020-06-12 06:09:38,709-0400 ERROR
otopi.ovirt_hosted_engine_setup.ansible_utils
ansible_utils._process_output:107 fatal: [localhost ->
gilboa-wx-vmovirt.localdomain]: FAILED! => {"changed": false, "msg":
"Failed to download metadata for repo 'AppStream'", "rc": 1, "results": []}
  2020-06-12 06:09:39,711-0400 DEBUG
otopi.ovirt_hosted_engine_setup.ansible_utils
ansible_utils._process_output:103 PLAY RECAP [localhost] : ok: 183 changed:
57 unreachable: 0 skipped: 77 failed: 1
  2020-06-12 06:09:39,812-0400 DEBUG
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils.run:215
ansible-playbook rc: 2
  2020-06-12 06:09:39,812-0400 DEBUG
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils.run:222
ansible-playbook stdout:
  2020-06-12 06:09:39,812-0400 DEBUG
otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils.run:225
ansible-playbook stderr:
  2020-06-12 06:09:39,812-0400 DEBUG otopi.context
context._executeMethod:145 method exception
  Traceback (most recent call last):
File "/usr/lib/python3.6/site-packages/otopi/context.py", line 132, in
_executeMethod
  method['method']()
File
"/usr/share/ovirt-hosted-engine-setup/scripts/../plugins/gr-he-ansiblesetup/core/misc.py",
line 403, in _closeup
  r = ah.run()
File
"/usr/lib/python3.6/site-packages/ovirt_hosted_engine_setup/ansible_utils.py",
line 229, in run
  raise RuntimeError(_('Failed executing ansible-playbook'))

- Gilboa
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/MALLKNVVGH4XRF5QJ7MARBET42CVBPJX/

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Yes, in the end, it was a permission on the one CA file, that was set to 700 
and should have been 750 (if I remember correctly).

From: Anton Louw 
Date: Friday, 12 June 2020 at 12:01
To: Kim Kargaard , "Staniforth, Paul" 
, "users@ovirt.org" 
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Hopefully 😊 I will still run through a couple of checks, I am sure it is 
something small I am missing. Was your issue due to owner and permissions?

Yes, for some of our offerings we do use oVirt.


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Kim Kargaard 
Sent: 12 June 2020 11:43
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Hi Anton,

Don´t worry, it had me tearing out hair for a while. But, Paul managed to save 
my remaining hair, so hopefully he has a suggestion that will sort things out 
for you too 😊

By the way, is Vox using ovirt as their cloud system for customers? Just 
curious of course.

Kind regards

Kim

From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 11:36
To: Kim Kargaard mailto:kim.karga...@noroff.no>>, 
"Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 😊


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Kim Kargaard mailto:kim.karga...@noroff.no>>
Sent: 12 June 2020 10:51
To: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>; Staniforth, 
Paul mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while 😊 The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.

[ovirt-users] Re: oVirt noVNC

[Anton Louw via Users]

Hi Paul,

Double checked the permissions as well. All seems to be fine. The only thing 
that does look different between the environments are the below:

ENV1 (Not working)
[cid:image001.png@01D640B1.B1BEAA20]

ENV2 (Working)

[cid:image007.png@01D640B1.E97498D0]

It seems that on the working environment, there is a shortcut file 
(apached-ca.pem) which points to the ca.pem file, but on the environment that 
is not working, the apache-ca.pem file is not a shortcut. Could this perhaps be 
an issue?

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za



From: Staniforth, Paul 
Sent: 12 June 2020 10:44
To: Anton Louw ; users@ovirt.org
Subject: Re: oVirt noVNC


No worries,
If all is pointing to the correct files I would check 
permissions.


Regards,
Paul S.


From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Sent: 12 June 2020 09:34
To: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org 
mailto:users@ovirt.org>>
Subject: RE: oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Paul,



Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊



Thanks



Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC



Hello Anton,

 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.





https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html







Paul S.





From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC



Caution External Mail: Do not click any links or open any attachme

[ovirt-users] Re: oVirt noVNC

[Anton Louw via Users]

Hi Kim,

Hopefully 😊 I will still run through a couple of checks, I am sure it is 
something small I am missing. Was your issue due to owner and permissions?

Yes, for some of our offerings we do use oVirt.


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za



From: Kim Kargaard 
Sent: 12 June 2020 11:43
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Hi Anton,

Don´t worry, it had me tearing out hair for a while. But, Paul managed to save 
my remaining hair, so hopefully he has a suggestion that will sort things out 
for you too 😊

By the way, is Vox using ovirt as their cloud system for customers? Just 
curious of course.

Kind regards

Kim

From: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 11:36
To: Kim Kargaard mailto:kim.karga...@noroff.no>>, 
"Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 😊


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Kim Kargaard mailto:kim.karga...@noroff.no>>
Sent: 12 June 2020 10:51
To: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>; Staniforth, 
Paul mailto:p.stanifo...@leedsbeckett.ac.uk>>; 
users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while 😊 The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into 

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Hi Anton,

Don´t worry, it had me tearing out hair for a while. But, Paul managed to save 
my remaining hair, so hopefully he has a suggestion that will sort things out 
for you too 😊

By the way, is Vox using ovirt as their cloud system for customers? Just 
curious of course.

Kind regards

Kim

From: Anton Louw 
Date: Friday, 12 June 2020 at 11:36
To: Kim Kargaard , "Staniforth, Paul" 
, "users@ovirt.org" 
Subject: RE: [ovirt-users] Re: oVirt noVNC


Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 😊


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Kim Kargaard 
Sent: 12 June 2020 10:51
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while 😊 The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[Image removed by sender. 
F]

[ovirt-users] Re: oVirt noVNC

[Anton Louw via Users]

Hi Kim,

Thanks for the reply. I double checked the permissions on the cert files now, 
and they are exactly the same as my other environment. But, the other 
environment does not have a CA, these are the default certs from ovirt. The 
other environment is working as expected though.

I have checked the websocket service and config, and it seems to be correct. 
The port is also open on the firewall. I can telnet to my FQDN on port 6100.

This is breaking my spirit 😊


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za



From: Kim Kargaard 
Sent: 12 June 2020 10:51
To: Anton Louw ; Staniforth, Paul 
; users@ovirt.org
Subject: Re: [ovirt-users] Re: oVirt noVNC

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while 😊 The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users mailto:users@ovirt.org>>
Reply to: Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" 
mailto:p.stanifo...@leedsbeckett.ac.uk>>, 
"users@ovirt.org" 
mailto:users@ovirt.org>>
Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
mailto:p.stanifo...@leedsbeckett.ac.uk>>
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
mailto:anton.l...@voxtelecom.co.za>>
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[Image removed by sender. 
F]

[Image removed by sender. 
T]

[Image removed by sender. 
I]

[ovirt-users] Re: oVirt noVNC

[Kim Kargaard]

Have you checked that websocket proxy is configured and running? Is the port 
open on the firewall? And finally, have you checked the ownerships and 
permissions of the cert files on the engine server? The permissions was where 
we came unstuck for a while 😊 The individual users should not need to download 
the CA, the novnc browser option should just open the VM, if the settings are 
right.

From: Anton Louw via Users 
Reply to: Anton Louw 
Date: Friday, 12 June 2020 at 10:48
To: "Staniforth, Paul" , "users@ovirt.org" 

Subject: [ovirt-users] Re: oVirt noVNC


Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


From: Staniforth, Paul 
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[Image removed by sender. 
F]

[Image removed by sender. 
T]

[Image removed by sender. 
I]

[Image removed by sender. 
L]

[Image removed by sender. 
Y]



[Image removed by sender. 
#VoxBrand]

[ovirt-users] Re: oVirt noVNC

[Staniforth, Paul]

No worries,
If all is pointing to the correct files I would check 
permissions.


Regards,
Paul S.


From: Anton Louw 
Sent: 12 June 2020 09:34
To: Staniforth, Paul ; users@ovirt.org 

Subject: RE: oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Paul,



Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies ?



Thanks



Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



From: Staniforth, Paul 
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
Subject: Re: oVirt noVNC



Hello Anton,

 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.





https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html







Paul S.





From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC



Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you



Anton Louw

Cloud Engineer: Storage and Virtualization at Vox



T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za



[F]

[ovirt-users] Re: oVirt noVNC

[Anton Louw via Users]

Hi Paul,

Thanks for the reply. Apologies, I should have added that I have installed our 
own certificates. The main problem I am facing is that the noVNC console just 
refuses to open, I get the attached error with any VM I try and access. I 
should have perhaps started with this issue in my first mail, apologies 😊

Thanks


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za



From: Staniforth, Paul 
Sent: 12 June 2020 10:29
To: users@ovirt.org; Anton Louw 
Subject: Re: oVirt noVNC

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users mailto:users@ovirt.org>>
Sent: 12 June 2020 08:56
To: users@ovirt.org 
mailto:users@ovirt.org>>
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.


Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]



[#VoxBrand]

Disclaimer

The contents of this email are confidential to the sender and the intended 
recipient. Unless the contents are clearly and entirely of a personal nature, 
they are subject to copyright in favour of the holding company of the Vox group 
of companies. Any recipient who receives this email in error should immediately 
report the error to the sender and permanently delete this email from all 
storage devices.

This email has been scanned for viruses and malware, and may have been 
automatically archived by Mimecast Ltd, an innovator in Software as a Service 
(SaaS) for business. Providing a safer and more useful place for your human 
generated data. Specializing in; Security, archiving and compliance. To find 
out more Click 
Here

[ovirt-users] Re: oVirt noVNC

[Staniforth, Paul]

Hello Anton,
 if your organisation has it's own CA you can install your 
own certificates or get certificates from a trusted CA.


https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html



Paul S.


From: Anton Louw via Users 
Sent: 12 June 2020 08:56
To: users@ovirt.org 
Subject: [ovirt-users] oVirt noVNC


Caution External Mail: Do not click any links or open any attachments unless 
you trust the sender and know that the content is safe.



Hi Everybody,



With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.



Thank you

Anton Louw
Cloud Engineer: Storage and Virtualization at Vox

T:  087 805  | D: 087 805 1572
M: N/A
E: anton.l...@voxtelecom.co.za
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
www.vox.co.za

[F]

[T]

[I]

[L]

[Y]


[#VoxBrand]

Disclaimer

The contents of this email are confidential to the sender and the intended 
recipient. Unless the contents are clearly and entirely of a personal nature, 
they are subject to copyright in favour of the holding company of the Vox group 
of companies. Any recipient who receives this email in error should immediately 
report the error to the sender and permanently delete this email from all 
storage devices.

This email has been scanned for viruses and malware, and may have been 
automatically archived by Mimecast Ltd, an innovator in Software as a Service 
(SaaS) for business. Providing a safer and more useful place for your human 
generated data. Specializing in; Security, archiving and compliance. To find 
out more Click 
Here.


To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/ZGK3INCCFF7DWHGPSYA4ZCFXR22N5YF5/

[ovirt-users] oVirt noVNC

[Anton Louw via Users]

Hi Everybody,

With regards to noVNC, is it a requirement to install the CA into your local 
browser? I would like users to access their VM console, but with no additional 
work from their side, ie. Downloading the CA and importing it.

Thank you


Anton Louw
Cloud Engineer: Storage and Virtualization
__
D: 087 805 1572 | M: N/A
A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg
anton.l...@voxtelecom.co.za

www.vox.co.za






___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GNXMD4SBXWOF43UNZNUZ3RBKXW7F4JIP/