Re: [ovirt-devel] SSO using remote-viewer
- Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Среда, 13 Август 2014 г 11:37:44 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/12/2014 03:01 PM, Denis Kirjanov wrote: Ok, vdsClient with the desktopLogin works pretty well on the first step. I found a weird behavior when closing remote-viewer window. Even a session remains open (no logout/switch user is performed), the subsequent connect with the _same ticket_ spits out a gdm window with a password... You mean the password is shown to the user? That would be pretty bad. As for the disconnect that surprises me a little bit. Can you please perform the connection to the VM and then disconnect and pass me the logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on? No, I meant the gdm promt. Looks like that was an issue from my side. Thanks! Also it'd be great if you could before turn on debug logging on the VM for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with DEBUG) and restart the service. # service ovirt-guest-agent restart and pass me the logs for it as well ( /var/log/ovirt-guest-agent/ovirt-guest-agent.log ) Thanks - Исходное сообщение - От: Denis Kirjanov k...@itsirius.su Кому: Vinzenz Feenstra vfeen...@redhat.com Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 18:34:24 Тема: Re: [ovirt-devel] SSO using remote-viewer - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Denis Kirjanov k...@itsirius.su Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:26:30 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:12 PM, Denis Kirjanov wrote: - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:07:40 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote: On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Note: The REST API supports this from oVirt/RHEV 3.5 Thanks, but we're using oVirt/RHEV 3.1. Does the PythonAPI (or ReST API) support something like this in 3.1? Well only the XMLRPC api of the Host supports the desktopLogin verb, as Michal already said. vdsClient for example can do this, when it has the right certificates vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD HTH Could you please guide me on how to set a required certificates on a client? Thanks! Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
On 08/12/2014 03:01 PM, Denis Kirjanov wrote: Ok, vdsClient with the desktopLogin works pretty well on the first step. I found a weird behavior when closing remote-viewer window. Even a session remains open (no logout/switch user is performed), the subsequent connect with the _same ticket_ spits out a gdm window with a password... You mean the password is shown to the user? That would be pretty bad. As for the disconnect that surprises me a little bit. Can you please perform the connection to the VM and then disconnect and pass me the logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on? Also it'd be great if you could before turn on debug logging on the VM for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with DEBUG) and restart the service. # service ovirt-guest-agent restart and pass me the logs for it as well ( /var/log/ovirt-guest-agent/ovirt-guest-agent.log ) Thanks - Исходное сообщение - От: Denis Kirjanov k...@itsirius.su Кому: Vinzenz Feenstra vfeen...@redhat.com Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 18:34:24 Тема: Re: [ovirt-devel] SSO using remote-viewer - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Denis Kirjanov k...@itsirius.su Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:26:30 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:12 PM, Denis Kirjanov wrote: - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:07:40 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote: On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Note: The REST API supports this from oVirt/RHEV 3.5 Thanks, but we're using oVirt/RHEV 3.1. Does the PythonAPI (or ReST API) support something like this in 3.1? Well only the XMLRPC api of the Host supports the desktopLogin verb, as Michal already said. vdsClient for example can do this, when it has the right certificates vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD HTH Could you please guide me on how to set a required certificates on a client? Thanks! Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
Ok, vdsClient with the desktopLogin works pretty well on the first step. I found a weird behavior when closing remote-viewer window. Even a session remains open (no logout/switch user is performed), the subsequent connect with the _same ticket_ spits out a gdm window with a password... - Исходное сообщение - От: Denis Kirjanov k...@itsirius.su Кому: Vinzenz Feenstra vfeen...@redhat.com Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 18:34:24 Тема: Re: [ovirt-devel] SSO using remote-viewer - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Denis Kirjanov k...@itsirius.su Копия: Michal Skrivanek michal.skriva...@redhat.com, devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:26:30 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:12 PM, Denis Kirjanov wrote: - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:07:40 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote: On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Note: The REST API supports this from oVirt/RHEV 3.5 Thanks, but we're using oVirt/RHEV 3.1. Does the PythonAPI (or ReST API) support something like this in 3.1? Well only the XMLRPC api of the Host supports the desktopLogin verb, as Michal already said. vdsClient for example can do this, when it has the right certificates vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD HTH Could you please guide me on how to set a required certificates on a client? Thanks! Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
- Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:07:40 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote: On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Note: The REST API supports this from oVirt/RHEV 3.5 Thanks, but we're using oVirt/RHEV 3.1. Does the PythonAPI (or ReST API) support something like this in 3.1? Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
Re: [ovirt-devel] SSO using remote-viewer
On 08/11/2014 03:12 PM, Denis Kirjanov wrote: - Исходное сообщение - От: Vinzenz Feenstra vfeen...@redhat.com Кому: Michal Skrivanek michal.skriva...@redhat.com, Denis Kirjanov k...@itsirius.su Копия: devel@ovirt.org Отправленные: Понедельник, 11 Август 2014 г 17:07:40 Тема: Re: [ovirt-devel] SSO using remote-viewer On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote: On 08/11/2014 03:01 PM, Michal Skrivanek wrote: On Aug 11, 2014, at 14:14 , Denis Kirjanov k...@itsirius.su wrote: Hi guys, I'm trying to login to a virtual machine without using the web interface (User Portal) but through the remote-viewer and a small python script to gather all required info such a certificate subject, ticken and ports. The virtual machine has the rhevm sso package installed so I can get to the machine through the web UI, but I can't do the same thing using remote-viewer. What I do see is a gdm login window with my user account and 2 icons (Login into session and RHEV-M SSO login). Looks like I have to invoke something inside my python script to get an access but I can't figure out what is missing… you need to issue the desktopLogin command to actually perform the sign on. The viewer itself doesn't do anything If this is going through vdsm then it's the desktop login command. Via the REST API it'd be just /vms/{vmid}/logon Note: The REST API supports this from oVirt/RHEV 3.5 Thanks, but we're using oVirt/RHEV 3.1. Does the PythonAPI (or ReST API) support something like this in 3.1? Well only the XMLRPC api of the Host supports the desktopLogin verb, as Michal already said. vdsClient for example can do this, when it has the right certificates vdsClient -s HOSTIP desktopLogin VMID DOMAIN USER PASSWORD HTH Thanks, michal Thanks! ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel -- Regards, Vinzenz Feenstra | Senior Software Engineer RedHat Engineering Virtualization R D Phone: +420 532 294 625 IRC: vfeenstr or evilissimo Better technology. Faster innovation. Powered by community collaboration. See how it works at redhat.com ___ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel