Re: [ovirt-devel] SSO using remote-viewer

2014-08-18 Thread Denis Kirjanov


- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Denis Kirjanov k...@itsirius.su
Копия: devel@ovirt.org
Отправленные: Среда, 13 Август 2014 г 11:37:44
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/12/2014 03:01 PM, Denis Kirjanov wrote:
 Ok, vdsClient with the desktopLogin works pretty well on the first step.
 I found a weird behavior when closing remote-viewer window. Even a session
 remains open (no logout/switch user is performed), the subsequent connect 
 with the _same ticket_ spits out a gdm window
 with a password...
You mean the password is shown to the user? That would be pretty bad. As 
for the disconnect that surprises me a little bit. Can you please 
perform the connection to the VM and then disconnect and pass me the 
logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on?

No, I meant the gdm promt. 

Looks like that was an issue from my side.

Thanks!

Also it'd be great if you could before turn on debug logging on the VM 
for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with 
DEBUG) and restart the service.

# service ovirt-guest-agent restart

and pass me the logs for it as well ( 
/var/log/ovirt-guest-agent/ovirt-guest-agent.log )

Thanks



 - Исходное сообщение -
 От: Denis Kirjanov k...@itsirius.su
 Кому: Vinzenz Feenstra vfeen...@redhat.com
 Копия: devel@ovirt.org
 Отправленные: Понедельник, 11 Август 2014 г 18:34:24
 Тема: Re: [ovirt-devel] SSO using remote-viewer



 - Исходное сообщение -
 От: Vinzenz Feenstra vfeen...@redhat.com
 Кому: Denis Kirjanov k...@itsirius.su
 Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org
 Отправленные: Понедельник, 11 Август 2014 г 17:26:30
 Тема: Re: [ovirt-devel] SSO using remote-viewer

 On 08/11/2014 03:12 PM, Denis Kirjanov wrote:
 - Исходное сообщение -
 От: Vinzenz Feenstra vfeen...@redhat.com
 Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov 
 k...@itsirius.su
 Копия: devel@ovirt.org
 Отправленные: Понедельник, 11 Август 2014 г 17:07:40
 Тема: Re: [ovirt-devel] SSO using remote-viewer

 On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:
 On 08/11/2014 03:01 PM, Michal Skrivanek wrote:
 On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:

 Hi guys,

 I'm trying to login to a virtual machine without using the web
 interface (User Portal) but through the remote-viewer and a small
 python script to gather all required info such a certificate
 subject, ticken and ports.
 The virtual machine has the rhevm sso package installed so I can get
 to the machine through the web UI,
 but I can't do the same thing using remote-viewer. What I do see is
 a gdm login window with
 my user account and 2 icons (Login into session and RHEV-M SSO login).

 Looks like I have to invoke something inside my python script to get
 an access but I can't figure out what is missing…
 you need to issue the desktopLogin command to actually perform the
 sign on. The viewer itself doesn't do anything
 If this is going through vdsm then it's the desktop login command. Via
 the REST API it'd be just /vms/{vmid}/logon
 Note: The REST API supports this from oVirt/RHEV 3.5

 Thanks, but we're using oVirt/RHEV 3.1.
 Does the PythonAPI (or ReST API) support something like this in 3.1?
 Well only the XMLRPC api of the Host supports the desktopLogin verb, as
 Michal already said.

 vdsClient for example can do this, when it has the right certificates

 vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD

 HTH

 Could you please guide me on how to set a required certificates on
 a client?

 Thanks!


 Thanks,
 michal

 Thanks!
 ___
 Devel mailing list
 Devel@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/devel



-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel

Re: [ovirt-devel] SSO using remote-viewer

2014-08-13 Thread Vinzenz Feenstra

On 08/12/2014 03:01 PM, Denis Kirjanov wrote:

Ok, vdsClient with the desktopLogin works pretty well on the first step.
I found a weird behavior when closing remote-viewer window. Even a session
remains open (no logout/switch user is performed), the subsequent connect with 
the _same ticket_ spits out a gdm window
with a password...
You mean the password is shown to the user? That would be pretty bad. As 
for the disconnect that surprises me a little bit. Can you please 
perform the connection to the VM and then disconnect and pass me the 
logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on?


Also it'd be great if you could before turn on debug logging on the VM 
for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with 
DEBUG) and restart the service.


# service ovirt-guest-agent restart

and pass me the logs for it as well ( 
/var/log/ovirt-guest-agent/ovirt-guest-agent.log )


Thanks




- Исходное сообщение -
От: Denis Kirjanov k...@itsirius.su
Кому: Vinzenz Feenstra vfeen...@redhat.com
Копия: devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 18:34:24
Тема: Re: [ovirt-devel] SSO using remote-viewer



- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Denis Kirjanov k...@itsirius.su
Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 17:26:30
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/11/2014 03:12 PM, Denis Kirjanov wrote:

- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov 
k...@itsirius.su
Копия: devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 17:07:40
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:

On 08/11/2014 03:01 PM, Michal Skrivanek wrote:

On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:


Hi guys,

I'm trying to login to a virtual machine without using the web
interface (User Portal) but through the remote-viewer and a small
python script to gather all required info such a certificate
subject, ticken and ports.
The virtual machine has the rhevm sso package installed so I can get
to the machine through the web UI,
but I can't do the same thing using remote-viewer. What I do see is
a gdm login window with
my user account and 2 icons (Login into session and RHEV-M SSO login).

Looks like I have to invoke something inside my python script to get
an access but I can't figure out what is missing…

you need to issue the desktopLogin command to actually perform the
sign on. The viewer itself doesn't do anything

If this is going through vdsm then it's the desktop login command. Via
the REST API it'd be just /vms/{vmid}/logon

Note: The REST API supports this from oVirt/RHEV 3.5

Thanks, but we're using oVirt/RHEV 3.1.
Does the PythonAPI (or ReST API) support something like this in 3.1?

Well only the XMLRPC api of the Host supports the desktopLogin verb, as
Michal already said.

vdsClient for example can do this, when it has the right certificates

vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD

HTH

Could you please guide me on how to set a required certificates on
a client?

Thanks!




Thanks,
michal


Thanks!
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel





--
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel

Re: [ovirt-devel] SSO using remote-viewer

2014-08-12 Thread Denis Kirjanov
Ok, vdsClient with the desktopLogin works pretty well on the first step.
I found a weird behavior when closing remote-viewer window. Even a session 
remains open (no logout/switch user is performed), the subsequent connect with 
the _same ticket_ spits out a gdm window
with a password... 



- Исходное сообщение -
От: Denis Kirjanov k...@itsirius.su
Кому: Vinzenz Feenstra vfeen...@redhat.com
Копия: devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 18:34:24
Тема: Re: [ovirt-devel] SSO using remote-viewer



- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Denis Kirjanov k...@itsirius.su
Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 17:26:30
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/11/2014 03:12 PM, Denis Kirjanov wrote:

 - Исходное сообщение -
 От: Vinzenz Feenstra vfeen...@redhat.com
 Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov 
 k...@itsirius.su
 Копия: devel@ovirt.org
 Отправленные: Понедельник, 11 Август 2014 г 17:07:40
 Тема: Re: [ovirt-devel] SSO using remote-viewer

 On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:
 On 08/11/2014 03:01 PM, Michal Skrivanek wrote:
 On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:

 Hi guys,

 I'm trying to login to a virtual machine without using the web
 interface (User Portal) but through the remote-viewer and a small
 python script to gather all required info such a certificate
 subject, ticken and ports.
 The virtual machine has the rhevm sso package installed so I can get
 to the machine through the web UI,
 but I can't do the same thing using remote-viewer. What I do see is
 a gdm login window with
 my user account and 2 icons (Login into session and RHEV-M SSO login).

 Looks like I have to invoke something inside my python script to get
 an access but I can't figure out what is missing…
 you need to issue the desktopLogin command to actually perform the
 sign on. The viewer itself doesn't do anything
 If this is going through vdsm then it's the desktop login command. Via
 the REST API it'd be just /vms/{vmid}/logon
 Note: The REST API supports this from oVirt/RHEV 3.5

 Thanks, but we're using oVirt/RHEV 3.1.
 Does the PythonAPI (or ReST API) support something like this in 3.1?
Well only the XMLRPC api of the Host supports the desktopLogin verb, as 
Michal already said.

vdsClient for example can do this, when it has the right certificates

vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD

HTH

Could you please guide me on how to set a required certificates on
a client?

Thanks!



 Thanks,
 michal

 Thanks!
 ___
 Devel mailing list
 Devel@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/devel




-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel

Re: [ovirt-devel] SSO using remote-viewer

2014-08-11 Thread Michal Skrivanek

On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:

 Hi guys,
 
 I'm trying to login to a virtual machine without using the web interface 
 (User Portal) but through the remote-viewer and a small python script to 
 gather all required info such a certificate subject, ticken and ports.
 The virtual machine has the rhevm sso package installed so I can get to the 
 machine through the web UI,
 but I can't do the same thing using remote-viewer. What I do see is a gdm 
 login window with
 my user account and 2 icons (Login into session and RHEV-M SSO login).
 
 Looks like I have to invoke something inside my python script to get an 
 access but I can't figure out what is missing…

you need to issue the desktopLogin command to actually perform the sign on. 
The viewer itself doesn't do anything

Thanks,
michal

 
 Thanks!
 ___
 Devel mailing list
 Devel@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/devel

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] SSO using remote-viewer

2014-08-11 Thread Vinzenz Feenstra

On 08/11/2014 03:01 PM, Michal Skrivanek wrote:

On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:


Hi guys,

I'm trying to login to a virtual machine without using the web interface (User 
Portal) but through the remote-viewer and a small python script to gather all 
required info such a certificate subject, ticken and ports.
The virtual machine has the rhevm sso package installed so I can get to the 
machine through the web UI,
but I can't do the same thing using remote-viewer. What I do see is a gdm login 
window with
my user account and 2 icons (Login into session and RHEV-M SSO login).

Looks like I have to invoke something inside my python script to get an access 
but I can't figure out what is missing…

you need to issue the desktopLogin command to actually perform the sign on. 
The viewer itself doesn't do anything
If this is going through vdsm then it's the desktop login command. Via 
the REST API it'd be just /vms/{vmid}/logon


Thanks,
michal


Thanks!
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel



--
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel


Re: [ovirt-devel] SSO using remote-viewer

2014-08-11 Thread Denis Kirjanov


- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov 
k...@itsirius.su
Копия: devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 17:07:40
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:
 On 08/11/2014 03:01 PM, Michal Skrivanek wrote:
 On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:

 Hi guys,

 I'm trying to login to a virtual machine without using the web 
 interface (User Portal) but through the remote-viewer and a small 
 python script to gather all required info such a certificate 
 subject, ticken and ports.
 The virtual machine has the rhevm sso package installed so I can get 
 to the machine through the web UI,
 but I can't do the same thing using remote-viewer. What I do see is 
 a gdm login window with
 my user account and 2 icons (Login into session and RHEV-M SSO login).

 Looks like I have to invoke something inside my python script to get 
 an access but I can't figure out what is missing…
 you need to issue the desktopLogin command to actually perform the 
 sign on. The viewer itself doesn't do anything
 If this is going through vdsm then it's the desktop login command. Via 
 the REST API it'd be just /vms/{vmid}/logon
Note: The REST API supports this from oVirt/RHEV 3.5

Thanks, but we're using oVirt/RHEV 3.1.
Does the PythonAPI (or ReST API) support something like this in 3.1?



 Thanks,
 michal

 Thanks!
 ___
 Devel mailing list
 Devel@ovirt.org
 http://lists.ovirt.org/mailman/listinfo/devel




-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel

Re: [ovirt-devel] SSO using remote-viewer

2014-08-11 Thread Vinzenz Feenstra

On 08/11/2014 03:12 PM, Denis Kirjanov wrote:


- Исходное сообщение -
От: Vinzenz Feenstra vfeen...@redhat.com
Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov 
k...@itsirius.su
Копия: devel@ovirt.org
Отправленные: Понедельник, 11 Август 2014 г 17:07:40
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:

On 08/11/2014 03:01 PM, Michal Skrivanek wrote:

On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote:


Hi guys,

I'm trying to login to a virtual machine without using the web
interface (User Portal) but through the remote-viewer and a small
python script to gather all required info such a certificate
subject, ticken and ports.
The virtual machine has the rhevm sso package installed so I can get
to the machine through the web UI,
but I can't do the same thing using remote-viewer. What I do see is
a gdm login window with
my user account and 2 icons (Login into session and RHEV-M SSO login).

Looks like I have to invoke something inside my python script to get
an access but I can't figure out what is missing…

you need to issue the desktopLogin command to actually perform the
sign on. The viewer itself doesn't do anything

If this is going through vdsm then it's the desktop login command. Via
the REST API it'd be just /vms/{vmid}/logon

Note: The REST API supports this from oVirt/RHEV 3.5

Thanks, but we're using oVirt/RHEV 3.1.
Does the PythonAPI (or ReST API) support something like this in 3.1?
Well only the XMLRPC api of the Host supports the desktopLogin verb, as 
Michal already said.


vdsClient for example can do this, when it has the right certificates

vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD

HTH





Thanks,
michal


Thanks!
___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel







--
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R  D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com

___
Devel mailing list
Devel@ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel