- DHC
On Tue, Mar 12, 2013 at 5:53 PM, Itamar Heim <[email protected]
<mailto:[email protected]>> wrote:
On 03/12/2013 11:38 PM, Dead Horse wrote:
Remote console access IMHO is still a very weak point in ovirt/RHEV.
SPICE is a very nice protocol but IMHO is in dire need of a platform
independent client and tighter integration into the user and web
tighter integration or support non integrated clients (the mime
based approach which won't require the XPI/ActiveX)?
portals. Something I have done to workaround issues like these is to
disable spice certificate checking and SSL.
psql engine -U postgres -c "UPDATE vdc_options set option_value
= 'false' where option_name = 'SSLEnabled'"
psql engine -U postgres -c "UPDATE vdc_options set option_value
= 'false' where option_name = '__UseSecureConnectionWithServers__'"
psql engine -U postgres -c "UPDATE vdc_options set option_value
= 'false' where option_name
='__EnableSpiceRootCertificateVali__dation'
- DHC
On Fri, Mar 8, 2013 at 10:22 AM, Michal Skrivanek
<[email protected]
<mailto:[email protected]>
<mailto:michal.skrivanek@__redhat.com
<mailto:[email protected]>>> wrote:
On 8 Mar 2013, at 15:51, Karli Sjöberg wrote:
tor 2013-03-07 klockan 13:52 +0100 skrev David Jaša:
Hi,
Karli Sjöberg píše v Čt 07. 03. 2013 v 10:01 +0000:
> Hi, it me again,
>
> the last time this was discussed, the problem
seemed to be centred
> around Win/IE, but since patching to:
> # rpm -qa | grep ovirt
> ovirt-engine-config-3.1.0-4.__fc17.noarch
> ovirt-engine-dbscripts-3.1.0-__4.fc17.noarch
> ovirt-log-collector-3.1.0-0.__git10d719.fc17.noarch
> ovirt-engine-restapi-3.1.0-4.__fc17.noarch
> ovirt-image-uploader-3.1.0-0.__git9c42c8.fc17.noarch
> ovirt-engine-genericapi-3.1.0-__4.fc17.noarch
> ovirt-iso-uploader-3.1.0-0.__git1841d9.fc17.noarch
> ovirt-engine-webadmin-portal-__3.1.0-4.fc17.noarch
> ovirt-engine-setup-3.1.0-4.__fc17.noarch
> ovirt-engine-sdk-3.2.0.2-1.__fc17.noarch
> ovirt-engine-backend-3.1.0-4.__fc17.noarch
> ovirt-engine-tools-common-3.1.__0-4.fc17.noarch
> ovirt-engine-3.1.0-4.fc17.__noarch
> ovirt-engine-userportal-3.1.0-__4.fc17.noarch
>
ovirt-engine-notification-__service-3.1.0-4.fc17.noarch
>
> No one is able to connect to a spice console
though the Userportal at
> all.
Looks like no one is getting host subject - again.
Tomáš?
Come on guys, please tell me if there´s anything we can
do to
troubleshoot this issue, to help solve a real
show-stopper for us!
Would you be able to try it in 3.2?
It was known to be broken somewhere around 3.1 release….
Thanks,
michal
In using oVirt, our organisation is so close to being
able to ship
out thin-client kiosks instead of buying expensive new
HW on a
yearly basis, and have our users access their desktops from
practically anywhere, even from home if they´d wish.
The rest of
the entire system works flawlessly, just to fall flat
on it´s face
right on the finish line. I think that is so sad and silly,
because I really love the rest of this product! We´ve
set up
oVirt-3.1, made a POC template, defined a pool and have
been able
to have them prestarted as well. But if our users
aren´t able to
access their console in a seamless, easy way, then what
good is
it? And knowing that the console works just fine from the
adminportal in several different client systems
(Fedora, CentOS,
Win7) makes me hope that it´s just this small, yet
important piece
that needs to be corrected.
Anxiously awaiting your response
Karli Sjöberg
David
> I´ve tried this from my workstation, running
Fedora 17:
>
==============================__==============================__====================
> $ SPICEC_DEBUG_LEVEL=0 firefox
> (plugin-container:18293): SpiceXPI-CRITICAL **:
controller connect:
> Filen eller katalogen finns inte
> (plugin-container:18293): SpiceXPI-CRITICAL **:
controller connect:
> Filen eller katalogen finns inte
> (plugin-container:18293): SpiceXPI-CRITICAL **:
could not get browser
> window, when trying to call OnDisconnected
>
==============================__==============================__====================
>
>
> Here´s a collegue of mine, running Win7/IE9:
>
==============================__==============================__====================
> 1362648766 INFO [7196:5208] spicex_init_logger:
started
> 1362648766 DEBUG [7196:5208]
COSpiceX::put_DynamicMenu: DynamicMenu
> 1362648766 INFO [7196:5208]
COSpiceX::put_FullScreen: New FullScreen
> request newVal=0xffffffff
> 1362648766 DEBUG [7196:5208] COSpiceX::Connect:
Running spicec (C:
>
\Users\jope\AppData\Local\__virt-viewer\bin\remote-viewer.__exe
> --spice-controller)
> 1362648766 INFO [7196:5208] COSpiceX::Connect:
spicec pid 1640
> 1362648766 DEBUG [7196:5208] COSpiceX::Connect:
connecting to spice
> client's pipe
> 1362648767 DEBUG [7196:5208] COSpiceX::send_init:
sending init
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 1 :
> str 130.238.96.135 <tel:130.238.96.135> (1)
> 1362648767 DEBUG [7196:5208]
COSpiceX::send_value: sending msg id 2
> value 5906
> 1362648767 DEBUG [7196:5208]
COSpiceX::send_value: sending msg id 3
> value 5907
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending password
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 11 :
> str IT-Avdelningen-1:%d - Press SHIFT+F12 to
Release Cursor (1)
> 1362648767 DEBUG [7196:5208]
COSpiceX::send_value: sending msg id 10
> value 1
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 14 :
> str
release-cursor=shift+f12,__toggle-fullscreen=shift+f11 (1)
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 5 :
> str
main,inputs,scursor,splayback,__srecord,sdisplay (1)
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 7 :
> str DEFAULT (1)
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
sending msg id 8 :
> str
C:\Users\jope\AppData\Local\__Temp\truststore.pem (1)
> 1362648767 DEBUG [7196:5208] COSpiceX::send_msg:
sending msg id 16
> 1362648767 DEBUG [7196:5208] COSpiceX::send_msg:
sending msg id 17
> 1362648767 INFO [7196:5208]
COSpiceX::ExecuteUsbCtrl: USB sharing is
> not requested
> 1362648771 INFO [7196:7480]
COSpiceX::event_thread: exit_code=0
> error_code=1
>
==============================__==============================__====================
>
>
> And another collegue running CentOS-6.3/Firefox:
>
==============================__==============================__====================
> 2013-03-07 09:42:41,651 DEBUG
nsPluginInstance::SetHostIP:
> 130.238.96.132 <tel:130.238.96.132>
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::SetPort: 5900
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::SetTitle:
> IT-Avdelningen-2:%d - Press SHIFT+F12 to Release
Cursor
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::__SetDynamicMenu:
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::__SetFullScreen: 1
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::SetPassword: Password
> set
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::__SetNumberOfMonitors: 1
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::__SetUsbListenPort: 0
> 2013-03-07 09:42:41,652 DEBUG
nsPluginInstance::__SetAdminConsole: 1
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetSecurePort: 5901
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetSSLChannels:
> original channels:
smain,sinputs,scursor,__splayback,srecord,sdisplay
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetSSLChannels:
> modified channels:
main,inputs,cursor,playback,__record,display
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetGuestHostName:
> IT-Avdelningen-2
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetCipherSuite:
> DEFAULT
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetTrustStore:
> Certificate:
> Data:
> Version: 3 (0x2)
> Serial Number: 15 (0xf)
> Signature Algorithm: sha1WithRSAEncryption
> Issuer: C=US, O=SLU, CN=CA-storm.slu.se.80985
> Validity
> Not Before: Sep 26 14:21:06 2012
> Not After : Sep 25 12:21:06 2022 GMT
> Subject: C=US, O=SLU,
CN=CA-storm.slu.se.80985
> Subject Public Key Info:
> Public Key Algorithm: rsaEncryption
> Public-Key: (1024 bit)
> Modulus:
>
00:a2:94:89:18:26:79:49:6b:c6:__28:6c:f2:95:e9:
>
a7:71:00:22:c6:79:c2:9e:10:63:__ef:34:5c:ab:62:
>
36:a0:7a:84:d0:79:77:4c:9d:3d:__39:8f:97:93:c5:
>
f6:fb:5b:0b:f8:9b:ad:d8:53:2d:__a6:b6:03:45:d4:
>
76:45:f1:af:99:42:74:07:4c:48:__7d:28:96:31:9e:
>
88:cf:90:d9:e7:d9:cf:55:a8:bd:__37:a0:8f:f1:26:
>
89:a9:ab:64:78:a4:02:60:9b:3a:__a7:07:db:6e:75:
>
32:e5:8f:51:7f:50:02:15:d8:c8:__7b:68:c1:54:e1:
> 9f:c2:d2:cf:53:c3:58:b3:15
> Exponent: 65537 (0x10001)
> X509v3 extensions:
> X509v3 Subject Key Identifier:
>
>
FE:8F:57:F1:A0:AF:45:36:9F:AC:__C9:6B:EE:F9:D1:3E:18:78:B9:EA
> Authority Information Access:
> CA Issuers -
URI:http://storm.slu.se:80/ca.__crt
<http://storm.slu.se:80/ca.crt>
<http://storm.slu.se/ca.crt>
>
> X509v3 Authority Key Identifier:
>
>
keyid:FE:8F:57:F1:A0:AF:45:46:__9F:NC:C9:6B:EE:F9:D1:3E:18:78:__B9:EA
>
DirName:/C=US/O=SLU/CN=CA-__storm.slu.se.80985
> serial:0F
>
> X509v3 Basic Constraints: critical
> CA:TRUE
> X509v3 Key Usage: critical
> Certificate Sign, CRL Sign
> Signature Algorithm: sha1WithRSAEncryption
>
45:e4:15:23:fa:55:78:89:24:66:__7c:e2:33:41:ea:98:00:12:
>
0c:25:e5:e6:3a:c7:f8:f9:4d:83:__47:d3:80:9b:c0:78:bc:ab:
>
61:ae:6d:a1:cf:43:cb:cb:31:2c:__94:72:21:b0:58:f0:8b:69:
>
0d:c4:73:f2:44:95:52:06:23:6c:__71:7a:9b:fc:5f:98:21:35:
>
26:e1:a3:bb:65:bb:d2:81:bb:48:__96:99:b7:04:e6:15:af:93:
>
a1:60:e4:bf:05:d3:b0:4b:e4:e2:__4b:21:82:d7:2b:3d:19:ef:
>
a4:5a:23:58:74:ef:1a:80:14:8b:__89:b2:a7:bd:c2:21:66:1f:
> e0:7e
> -----BEGIN CERTIFICATE-----
>
MIIC1DCCAj2gAwIBAgIBDzANBgkqhk__iG9w0BAQUFADA7MQswCQYDVQQGEwJV__UzEM
>
MAoGA1UEChMDU0xVMR4wHAYDVQQDEx__VDQS1zdG9ybS5zbHUuc2UuODA5ODUw__IhcR
>
MTIwOTI2MTQyMTA2LTAxMDAXDTIyMD__kyNTEyMjEwNlowOzELMAkGA1UEBhMC__VVMx
>
DDAKBgNVBAoTA1NMVTEeMBwGA1UEAx__MVQ0Etc3Rvcm0uc2x1LnNlLjgwOTg1__MIGf
>
MA0GCSqGSIb3DQEBAQUAA4GNADCBiQ__KBgQCilIkYJnlJa8YobPKV6adxACLG__ecKe
>
EGPvNFyrYjageoTQeXdMnT05j5eTxf__b7Wwv4m63YUy2mtgNF1HZF8a+__ZQnQHTEh9
>
KJYxnojPkNnn2c9WqL03oI/__xJompq2R4pAJgmzqnB9tudTLlj1F/__UAIV2Mh7aMFU
>
4Z/__C0s9Tw1izFQIDAQABo4HjMIHgMB0GA__1UdDgQWBBT+j1fxoK9FRp+syWvu+__dE+
>
GHi56jA5BggrBgEFBQcBAQQtMCswKQ__YIKwYBBQUHMAKGHWh0dHA6Ly9zdG9y__bS5z
>
bHUuc2U6ODAvY2EuY3J0MGMGA1UdIR__cMFqAFP6PV/Ggr0VGn6zJa+__750T4YeLnq
>
oT+__kPTA7MQswCQYDVQQGEwJVUzEMMAoGA__1UEChMDU0xVMR4wHAYDVQQDExVDQS1__z
>
dG9ybS5zbHUuc2UuODA5ODWCAQ8wDw__YDVR0TAQH/BAUwAwEB/__zAOBgNVHQ8BAf8E
>
BAMCAQYwDQYJKoZIhvcNAQEFBQADgY__EAReQVI/__pVeIkkZnziM0HqmAASDCXl5jrH
>
+__PlNg0fTgJvAeLyrYa5toc9Dy8sxLJR__yIbBY8ItpDcRz8kSVUgYjbHF6m/__xfmCE1
>
JuGju2W70oG7SGaZtwTmFa+__ToWDkvwXTsEvk4kshgtcrPRnvpFojW__HTvGoAUi4my
> p73CIWYf4H4=
> -----END CERTIFICATE-----
>
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::SetHotKeys:
>
release-cursor=shift+f12,__toggle-fullscreen=shift+f11
> 2013-03-07 09:42:41,653 DEBUG
nsPluginInstance::__SetNoTaskMgrExecution:
> 0
> 2013-03-07 09:42:41,654 DEBUG
nsPluginInstance::__SetSendCtrlAltDelete:
> 0
> 2013-03-07 09:42:41,654 DEBUG
nsPluginInstance::__SetUsbAutoShare: 1
> 2013-03-07 09:42:41,654 DEBUG
nsPluginInstance::__SetUsbFilter:
>
-1,60186,10000,256,1|-1,1118,__245,-1,1|-1,1133,2245,-1,1|-1,__1133,2242,5,1|8,-1,-1,-1,1|7,-__1,-1,-1,1|-1,-1,-1,-1,0
> 2013-03-07 09:42:41,654 INFO
nsPluginInstance::Connect:
> SPICE_XPI_SOCKET: /tmp/spicec-scQYmJ/spice-xpi
> 2013-03-07 09:42:41,654 INFO
nsPluginInstance::Connect:
> SPICE_FOREIGN_MENU_SOCKET:
/tmp/spicec-scQYmJ/spice-__foreign
> 2013-03-07 09:42:41,655 DEBUG
nsPluginInstance::Connect: Controller
> pid: 10340
> 2013-03-07 09:42:41,655 DEBUG QErrorHandler:
Something went wrong:
> connect error, 2
> 2013-03-07 09:42:41,655 DEBUG
SpiceController::Connect: Connect Error
> 2013-03-07 09:42:41,655 DEBUG QErrorHandler:
Something went wrong:
> connect error, 2
> 2013-03-07 09:42:41,655 DEBUG
SpiceController::Connect: Connect Error
> 2013-03-07 09:42:41,655 INFO
nsPluginInstance::Connect:
> Launching /usr/libexec/spice-xpi-client
> 2013-03-07 09:42:42,655 DEBUG
SpiceController::Connect: Connected!
> 2013-03-07 09:42:44,723 INFO
nsPluginInstance::Connect: Initiating
> connection with controller
> 2013-03-07 09:42:48,652 DEBUG
nsPluginInstance::__ControllerWaitHelper:
> Controller finished, pid: 10340, exit code: 0
> 2013-03-07 09:42:48,653 ERROR
nsPluginInstance::__CallOnDisconnected:
> could not get browser window, when trying to call
OnDisconnected
>
==============================__==============================__====================
>
>
> If there´s anything we can do to help resolve
this issue once and for
> all, just name it! It so hurts to see this
otherwise great product
> tripping over on it´s face so close to the finish
line:(
>
> Best Regards
> Karli Sjöberg
> _________________________________________________
> Users mailing list
>[email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
>http://lists.ovirt.org/__mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>
_________________________________________________
Users mailing list
[email protected] <mailto:[email protected]>
<mailto:[email protected] <mailto:[email protected]>>
http://lists.ovirt.org/__mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>
_________________________________________________
Users mailing list
[email protected] <mailto:[email protected]> <mailto:[email protected]
<mailto:[email protected]>>
http://lists.ovirt.org/__mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>
_________________________________________________
Users mailing list
[email protected] <mailto:[email protected]>
http://lists.ovirt.org/__mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>
