Itamar, Nail on the head. Pretty much what I describe here is sorely needed: http://lists.ovirt.org/pipermail/users/2013-February/012562.html
- DHC On Tue, Mar 12, 2013 at 5:53 PM, Itamar Heim <[email protected]> wrote: > On 03/12/2013 11:38 PM, Dead Horse wrote: > >> Remote console access IMHO is still a very weak point in ovirt/RHEV. >> SPICE is a very nice protocol but IMHO is in dire need of a platform >> independent client and tighter integration into the user and web >> > > tighter integration or support non integrated clients (the mime based > approach which won't require the XPI/ActiveX)? > > portals. Something I have done to workaround issues like these is to >> disable spice certificate checking and SSL. >> >> psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' >> where option_name = 'SSLEnabled'" >> psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' >> where option_name = '**UseSecureConnectionWithServers**'" >> psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' >> where option_name ='**EnableSpiceRootCertificateVali**dation' >> >> - DHC >> >> >> >> On Fri, Mar 8, 2013 at 10:22 AM, Michal Skrivanek >> <[email protected] >> <mailto:michal.skrivanek@**redhat.com<[email protected]>>> >> wrote: >> >> >> On 8 Mar 2013, at 15:51, Karli Sjöberg wrote: >> >> tor 2013-03-07 klockan 13:52 +0100 skrev David Jaša: >>> >>>> Hi, >>>> >>>> Karli Sjöberg píše v Čt 07. 03. 2013 v 10:01 +0000: >>>> > Hi, it me again, >>>> > >>>> > the last time this was discussed, the problem seemed to be centred >>>> > around Win/IE, but since patching to: >>>> > # rpm -qa | grep ovirt >>>> > ovirt-engine-config-3.1.0-4.**fc17.noarch >>>> > ovirt-engine-dbscripts-3.1.0-**4.fc17.noarch >>>> > ovirt-log-collector-3.1.0-0.**git10d719.fc17.noarch >>>> > ovirt-engine-restapi-3.1.0-4.**fc17.noarch >>>> > ovirt-image-uploader-3.1.0-0.**git9c42c8.fc17.noarch >>>> > ovirt-engine-genericapi-3.1.0-**4.fc17.noarch >>>> > ovirt-iso-uploader-3.1.0-0.**git1841d9.fc17.noarch >>>> > ovirt-engine-webadmin-portal-**3.1.0-4.fc17.noarch >>>> > ovirt-engine-setup-3.1.0-4.**fc17.noarch >>>> > ovirt-engine-sdk-3.2.0.2-1.**fc17.noarch >>>> > ovirt-engine-backend-3.1.0-4.**fc17.noarch >>>> > ovirt-engine-tools-common-3.1.**0-4.fc17.noarch >>>> > ovirt-engine-3.1.0-4.fc17.**noarch >>>> > ovirt-engine-userportal-3.1.0-**4.fc17.noarch >>>> > ovirt-engine-notification-**service-3.1.0-4.fc17.noarch >>>> > >>>> > No one is able to connect to a spice console though the >>>> Userportal at >>>> > all. >>>> >>>> Looks like no one is getting host subject - again. Tomáš? >>>> >>> >>> Come on guys, please tell me if there´s anything we can do to >>> troubleshoot this issue, to help solve a real show-stopper for us! >>> >> Would you be able to try it in 3.2? >> It was known to be broken somewhere around 3.1 release…. >> >> Thanks, >> michal >> >> >>> In using oVirt, our organisation is so close to being able to ship >>> out thin-client kiosks instead of buying expensive new HW on a >>> yearly basis, and have our users access their desktops from >>> practically anywhere, even from home if they´d wish. The rest of >>> the entire system works flawlessly, just to fall flat on it´s face >>> right on the finish line. I think that is so sad and silly, >>> because I really love the rest of this product! We´ve set up >>> oVirt-3.1, made a POC template, defined a pool and have been able >>> to have them prestarted as well. But if our users aren´t able to >>> access their console in a seamless, easy way, then what good is >>> it? And knowing that the console works just fine from the >>> adminportal in several different client systems (Fedora, CentOS, >>> Win7) makes me hope that it´s just this small, yet important piece >>> that needs to be corrected. >>> >>> Anxiously awaiting your response >>> Karli Sjöberg >>> >>> >>> David >>>> >>>> > I´ve tried this from my workstation, running Fedora 17: >>>> > ==============================**==============================** >>>> ==================== >>>> > $ SPICEC_DEBUG_LEVEL=0 firefox >>>> > (plugin-container:18293): SpiceXPI-CRITICAL **: controller >>>> connect: >>>> > Filen eller katalogen finns inte >>>> > (plugin-container:18293): SpiceXPI-CRITICAL **: controller >>>> connect: >>>> > Filen eller katalogen finns inte >>>> > (plugin-container:18293): SpiceXPI-CRITICAL **: could not get >>>> browser >>>> > window, when trying to call OnDisconnected >>>> > ==============================**==============================** >>>> ==================== >>>> > >>>> > >>>> > Here´s a collegue of mine, running Win7/IE9: >>>> > ==============================**==============================** >>>> ==================== >>>> > 1362648766 INFO [7196:5208] spicex_init_logger: started >>>> > 1362648766 DEBUG [7196:5208] COSpiceX::put_DynamicMenu: >>>> DynamicMenu >>>> > 1362648766 INFO [7196:5208] COSpiceX::put_FullScreen: New >>>> FullScreen >>>> > request newVal=0xffffffff >>>> > 1362648766 DEBUG [7196:5208] COSpiceX::Connect: Running spicec (C: >>>> > \Users\jope\AppData\Local\**virt-viewer\bin\remote-viewer.**exe >>>> > --spice-controller) >>>> > 1362648766 INFO [7196:5208] COSpiceX::Connect: spicec pid 1640 >>>> > 1362648766 DEBUG [7196:5208] COSpiceX::Connect: connecting to >>>> spice >>>> > client's pipe >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_init: sending init >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 1 : >>>> > str 130.238.96.135 (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id >>>> 2 >>>> > value 5906 >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id >>>> 3 >>>> > value 5907 >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending password >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 11 : >>>> > str IT-Avdelningen-1:%d - Press SHIFT+F12 to Release Cursor (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id >>>> 10 >>>> > value 1 >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 14 : >>>> > str release-cursor=shift+f12,**toggle-fullscreen=shift+f11 (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 5 : >>>> > str main,inputs,scursor,splayback,**srecord,sdisplay (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 7 : >>>> > str DEFAULT (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id >>>> 8 : >>>> > str C:\Users\jope\AppData\Local\**Temp\truststore.pem (1) >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_msg: sending msg id 16 >>>> > 1362648767 DEBUG [7196:5208] COSpiceX::send_msg: sending msg id 17 >>>> > 1362648767 INFO [7196:5208] COSpiceX::ExecuteUsbCtrl: USB sharing >>>> is >>>> > not requested >>>> > 1362648771 INFO [7196:7480] COSpiceX::event_thread: exit_code=0 >>>> > error_code=1 >>>> > ==============================**==============================** >>>> ==================== >>>> > >>>> > >>>> > And another collegue running CentOS-6.3/Firefox: >>>> > ==============================**==============================** >>>> ==================== >>>> > 2013-03-07 09:42:41,651 DEBUG nsPluginInstance::SetHostIP: >>>> > 130.238.96.132 >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetPort: 5900 >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetTitle: >>>> > IT-Avdelningen-2:%d - Press SHIFT+F12 to Release Cursor >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::**SetDynamicMenu: >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::**SetFullScreen: >>>> 1 >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetPassword: >>>> Password >>>> > set >>>> > 2013-03-07 09:42:41,652 DEBUG >>>> nsPluginInstance::**SetNumberOfMonitors: >>>> 1 >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::**SetUsbListenPort: >>>> 0 >>>> > 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::**SetAdminConsole: >>>> 1 >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::**SetSecurePort: >>>> 5901 >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::**SetSSLChannels: >>>> > original channels: smain,sinputs,scursor,** >>>> splayback,srecord,sdisplay >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::**SetSSLChannels: >>>> > modified channels: main,inputs,cursor,playback,**record,display >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::** >>>> SetGuestHostName: >>>> > IT-Avdelningen-2 >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::**SetCipherSuite: >>>> > DEFAULT >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::**SetTrustStore: >>>> > Certificate: >>>> > Data: >>>> > Version: 3 (0x2) >>>> > Serial Number: 15 (0xf) >>>> > Signature Algorithm: sha1WithRSAEncryption >>>> > Issuer: C=US, O=SLU, CN=CA-storm.slu.se.80985 >>>> > Validity >>>> > Not Before: Sep 26 14:21:06 2012 >>>> > Not After : Sep 25 12:21:06 2022 GMT >>>> > Subject: C=US, O=SLU, CN=CA-storm.slu.se.80985 >>>> > Subject Public Key Info: >>>> > Public Key Algorithm: rsaEncryption >>>> > Public-Key: (1024 bit) >>>> > Modulus: >>>> > 00:a2:94:89:18:26:79:49:6b:c6:** >>>> 28:6c:f2:95:e9: >>>> > a7:71:00:22:c6:79:c2:9e:10:63:** >>>> ef:34:5c:ab:62: >>>> > 36:a0:7a:84:d0:79:77:4c:9d:3d:** >>>> 39:8f:97:93:c5: >>>> > f6:fb:5b:0b:f8:9b:ad:d8:53:2d:** >>>> a6:b6:03:45:d4: >>>> > 76:45:f1:af:99:42:74:07:4c:48:** >>>> 7d:28:96:31:9e: >>>> > 88:cf:90:d9:e7:d9:cf:55:a8:bd:** >>>> 37:a0:8f:f1:26: >>>> > 89:a9:ab:64:78:a4:02:60:9b:3a:** >>>> a7:07:db:6e:75: >>>> > 32:e5:8f:51:7f:50:02:15:d8:c8:** >>>> 7b:68:c1:54:e1: >>>> > 9f:c2:d2:cf:53:c3:58:b3:15 >>>> > Exponent: 65537 (0x10001) >>>> > X509v3 extensions: >>>> > X509v3 Subject Key Identifier: >>>> > >>>> > FE:8F:57:F1:A0:AF:45:36:9F:AC:**C9:6B:EE:F9:D1:3E:18:78:B9:EA >>>> > Authority Information Access: >>>> > CA Issuers - >>>> URI:http://storm.slu.se:80/ca.**crt<http://storm.slu.se:80/ca.crt> < >>>> http://storm.slu.se/ca.crt> >>>> >>>> > >>>> > X509v3 Authority Key Identifier: >>>> > >>>> > keyid:FE:8F:57:F1:A0:AF:45:46:**9F:NC:C9:6B:EE:F9:D1:3E:18:78:** >>>> B9:EA >>>> > DirName:/C=US/O=SLU/CN=CA-**storm.slu.se.80985 >>>> > serial:0F >>>> > >>>> > X509v3 Basic Constraints: critical >>>> > CA:TRUE >>>> > X509v3 Key Usage: critical >>>> > Certificate Sign, CRL Sign >>>> > Signature Algorithm: sha1WithRSAEncryption >>>> > 45:e4:15:23:fa:55:78:89:24:66:**7c:e2:33:41:ea:98:00:12: >>>> > 0c:25:e5:e6:3a:c7:f8:f9:4d:83:**47:d3:80:9b:c0:78:bc:ab: >>>> > 61:ae:6d:a1:cf:43:cb:cb:31:2c:**94:72:21:b0:58:f0:8b:69: >>>> > 0d:c4:73:f2:44:95:52:06:23:6c:**71:7a:9b:fc:5f:98:21:35: >>>> > 26:e1:a3:bb:65:bb:d2:81:bb:48:**96:99:b7:04:e6:15:af:93: >>>> > a1:60:e4:bf:05:d3:b0:4b:e4:e2:**4b:21:82:d7:2b:3d:19:ef: >>>> > a4:5a:23:58:74:ef:1a:80:14:8b:**89:b2:a7:bd:c2:21:66:1f: >>>> > e0:7e >>>> > -----BEGIN CERTIFICATE----- >>>> > MIIC1DCCAj2gAwIBAgIBDzANBgkqhk**iG9w0BAQUFADA7MQswCQYDVQQGEwJV** >>>> UzEM >>>> > MAoGA1UEChMDU0xVMR4wHAYDVQQDEx**VDQS1zdG9ybS5zbHUuc2UuODA5ODUw** >>>> IhcR >>>> > MTIwOTI2MTQyMTA2LTAxMDAXDTIyMD**kyNTEyMjEwNlowOzELMAkGA1UEBhMC** >>>> VVMx >>>> > DDAKBgNVBAoTA1NMVTEeMBwGA1UEAx**MVQ0Etc3Rvcm0uc2x1LnNlLjgwOTg1** >>>> MIGf >>>> > MA0GCSqGSIb3DQEBAQUAA4GNADCBiQ**KBgQCilIkYJnlJa8YobPKV6adxACLG** >>>> ecKe >>>> > EGPvNFyrYjageoTQeXdMnT05j5eTxf**b7Wwv4m63YUy2mtgNF1HZF8a+** >>>> ZQnQHTEh9 >>>> > KJYxnojPkNnn2c9WqL03oI/**xJompq2R4pAJgmzqnB9tudTLlj1F/** >>>> UAIV2Mh7aMFU >>>> > 4Z/**C0s9Tw1izFQIDAQABo4HjMIHgMB0GA**1UdDgQWBBT+j1fxoK9FRp+syWvu+ >>>> **dE+ >>>> > GHi56jA5BggrBgEFBQcBAQQtMCswKQ**YIKwYBBQUHMAKGHWh0dHA6Ly9zdG9y** >>>> bS5z >>>> > bHUuc2U6ODAvY2EuY3J0MGMGA1UdIR**cMFqAFP6PV/Ggr0VGn6zJa+** >>>> 750T4YeLnq >>>> > oT+**kPTA7MQswCQYDVQQGEwJVUzEMMAoGA** >>>> 1UEChMDU0xVMR4wHAYDVQQDExVDQS1**z >>>> > dG9ybS5zbHUuc2UuODA5ODWCAQ8wDw**YDVR0TAQH/BAUwAwEB/** >>>> zAOBgNVHQ8BAf8E >>>> > BAMCAQYwDQYJKoZIhvcNAQEFBQADgY**EAReQVI/** >>>> pVeIkkZnziM0HqmAASDCXl5jrH >>>> > +**PlNg0fTgJvAeLyrYa5toc9Dy8sxLJR**yIbBY8ItpDcRz8kSVUgYjbHF6m/** >>>> xfmCE1 >>>> > JuGju2W70oG7SGaZtwTmFa+**ToWDkvwXTsEvk4kshgtcrPRnvpFojW** >>>> HTvGoAUi4my >>>> > p73CIWYf4H4= >>>> > -----END CERTIFICATE----- >>>> > >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::SetHotKeys: >>>> > release-cursor=shift+f12,**toggle-fullscreen=shift+f11 >>>> > 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::** >>>> SetNoTaskMgrExecution: >>>> > 0 >>>> > 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::** >>>> SetSendCtrlAltDelete: >>>> > 0 >>>> > 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::**SetUsbAutoShare: >>>> 1 >>>> > 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::**SetUsbFilter: >>>> > -1,60186,10000,256,1|-1,1118,**245,-1,1|-1,1133,2245,-1,1|-1,** >>>> 1133,2242,5,1|8,-1,-1,-1,1|7,-**1,-1,-1,1|-1,-1,-1,-1,0 >>>> > 2013-03-07 09:42:41,654 INFO nsPluginInstance::Connect: >>>> > SPICE_XPI_SOCKET: /tmp/spicec-scQYmJ/spice-xpi >>>> > 2013-03-07 09:42:41,654 INFO nsPluginInstance::Connect: >>>> > SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-scQYmJ/spice-**foreign >>>> > 2013-03-07 09:42:41,655 DEBUG nsPluginInstance::Connect: >>>> Controller >>>> > pid: 10340 >>>> > 2013-03-07 09:42:41,655 DEBUG QErrorHandler: Something went wrong: >>>> > connect error, 2 >>>> > 2013-03-07 09:42:41,655 DEBUG SpiceController::Connect: Connect >>>> Error >>>> > 2013-03-07 09:42:41,655 DEBUG QErrorHandler: Something went wrong: >>>> > connect error, 2 >>>> > 2013-03-07 09:42:41,655 DEBUG SpiceController::Connect: Connect >>>> Error >>>> > 2013-03-07 09:42:41,655 INFO nsPluginInstance::Connect: >>>> > Launching /usr/libexec/spice-xpi-client >>>> > 2013-03-07 09:42:42,655 DEBUG SpiceController::Connect: Connected! >>>> > 2013-03-07 09:42:44,723 INFO nsPluginInstance::Connect: >>>> Initiating >>>> > connection with controller >>>> > 2013-03-07 09:42:48,652 DEBUG nsPluginInstance::** >>>> ControllerWaitHelper: >>>> > Controller finished, pid: 10340, exit code: 0 >>>> > 2013-03-07 09:42:48,653 ERROR nsPluginInstance::** >>>> CallOnDisconnected: >>>> > could not get browser window, when trying to call OnDisconnected >>>> > ==============================**==============================** >>>> ==================== >>>> > >>>> > >>>> > If there´s anything we can do to help resolve this issue once and >>>> for >>>> > all, just name it! It so hurts to see this otherwise great product >>>> > tripping over on it´s face so close to the finish line:( >>>> > >>>> > Best Regards >>>> > Karli Sjöberg >>>> > ______________________________**_________________ >>>> > Users mailing list >>>> >[email protected] <mailto:[email protected]> >>>> >>>> >http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >>>> >>>> >>> ______________________________**_________________ >>> Users mailing list >>> [email protected] <mailto:[email protected]> >>> >>> http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >>> >> >> >> ______________________________**_________________ >> Users mailing list >> [email protected] <mailto:[email protected]> >> >> >> http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >> >> >> >> >> ______________________________**_________________ >> Users mailing list >> [email protected] >> http://lists.ovirt.org/**mailman/listinfo/users<http://lists.ovirt.org/mailman/listinfo/users> >> >> >
_______________________________________________ Users mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/users
