Yes, in the end, it was a permission on the one CA file, that was set to 700 and should have been 750 (if I remember correctly).
From: Anton Louw <[email protected]> Date: Friday, 12 June 2020 at 12:01 To: Kim Kargaard <[email protected]>, "Staniforth, Paul" <[email protected]>, "[email protected]" <[email protected]> Subject: RE: [ovirt-users] Re: oVirt noVNC Hi Kim, Hopefully π I will still run through a couple of checks, I am sure it is something small I am missing. Was your issue due to owner and permissions? Yes, for some of our offerings we do use oVirt. Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: [email protected]<mailto:[email protected]> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<http://www.vox.co.za> [F]<https://www.facebook.com/voxtelecomZA> [T]<https://www.twitter.com/voxtelecom> [I]<https://www.instagram.com/voxtelecomza/> [L]<https://www.linkedin.com/company/voxtelecom> [Y]<https://www.youtube.com/user/VoxTelecom> From: Kim Kargaard <[email protected]> Sent: 12 June 2020 11:43 To: Anton Louw <[email protected]>; Staniforth, Paul <[email protected]>; [email protected] Subject: Re: [ovirt-users] Re: oVirt noVNC Hi Anton, DonΒ΄t worry, it had me tearing out hair for a while. But, Paul managed to save my remaining hair, so hopefully he has a suggestion that will sort things out for you too π By the way, is Vox using ovirt as their cloud system for customers? Just curious of course. Kind regards Kim From: Anton Louw <[email protected]<mailto:[email protected]>> Date: Friday, 12 June 2020 at 11:36 To: Kim Kargaard <[email protected]<mailto:[email protected]>>, "Staniforth, Paul" <[email protected]<mailto:[email protected]>>, "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: RE: [ovirt-users] Re: oVirt noVNC Hi Kim, Thanks for the reply. I double checked the permissions on the cert files now, and they are exactly the same as my other environment. But, the other environment does not have a CA, these are the default certs from ovirt. The other environment is working as expected though. I have checked the websocket service and config, and it seems to be correct. The port is also open on the firewall. I can telnet to my FQDN on port 6100. This is breaking my spirit π Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: [email protected]<mailto:[email protected]> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<http://www.vox.co.za> [F]<https://www.facebook.com/voxtelecomZA> [T]<https://www.twitter.com/voxtelecom> [I]<https://www.instagram.com/voxtelecomza/> [L]<https://www.linkedin.com/company/voxtelecom> [Y]<https://www.youtube.com/user/VoxTelecom> From: Kim Kargaard <[email protected]<mailto:[email protected]>> Sent: 12 June 2020 10:51 To: Anton Louw <[email protected]<mailto:[email protected]>>; Staniforth, Paul <[email protected]<mailto:[email protected]>>; [email protected]<mailto:[email protected]> Subject: Re: [ovirt-users] Re: oVirt noVNC Have you checked that websocket proxy is configured and running? Is the port open on the firewall? And finally, have you checked the ownerships and permissions of the cert files on the engine server? The permissions was where we came unstuck for a while π The individual users should not need to download the CA, the novnc browser option should just open the VM, if the settings are right. From: Anton Louw via Users <[email protected]<mailto:[email protected]>> Reply to: Anton Louw <[email protected]<mailto:[email protected]>> Date: Friday, 12 June 2020 at 10:48 To: "Staniforth, Paul" <[email protected]<mailto:[email protected]>>, "[email protected]<mailto:[email protected]>" <[email protected]<mailto:[email protected]>> Subject: [ovirt-users] Re: oVirt noVNC Hi Paul, Thanks for the reply. Apologies, I should have added that I have installed our own certificates. The main problem I am facing is that the noVNC console just refuses to open, I get the attached error with any VM I try and access. I should have perhaps started with this issue in my first mail, apologies π Thanks Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: [email protected]<mailto:[email protected]> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<http://www.vox.co.za> [F]<https://www.facebook.com/voxtelecomZA> [T]<https://www.twitter.com/voxtelecom> [I]<https://www.instagram.com/voxtelecomza/> [L]<https://www.linkedin.com/company/voxtelecom> [Y]<https://www.youtube.com/user/VoxTelecom> From: Staniforth, Paul <[email protected]<mailto:[email protected]>> Sent: 12 June 2020 10:29 To: [email protected]<mailto:[email protected]>; Anton Louw <[email protected]<mailto:[email protected]>> Subject: Re: oVirt noVNC Hello Anton, if your organisation has it's own CA you can install your own certificates or get certificates from a trusted CA. https://www.ovirt.org/documentation/admin-guide/appe-oVirt_and_SSL.html Paul S. ________________________________ From: Anton Louw via Users <[email protected]<mailto:[email protected]>> Sent: 12 June 2020 08:56 To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: [ovirt-users] oVirt noVNC Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe. Hi Everybody, With regards to noVNC, is it a requirement to install the CA into your local browser? I would like users to access their VM console, but with no additional work from their side, ie. Downloading the CA and importing it. Thank you Anton Louw Cloud Engineer: Storage and Virtualization at Vox ________________________________ T: 087 805 0000 | D: 087 805 1572 M: N/A E: [email protected]<mailto:[email protected]> A: Rutherford Estate, 1 Scott Street, Waverley, Johannesburg www.vox.co.za<https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.vox.co.za%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457323998384&sdata=N9eVNgOX74N%2BbkmHXsNRq%2FDclLUh2ktGH9NeURi9UVg%3D&reserved=0> [Image removed by sender. F]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.facebook.com%2FvoxtelecomZA&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457323998384&sdata=7BD0qNKuRefJCDhUeH%2Be3wpdzcz638BLrQuq%2BSU%2BG8w%3D&reserved=0> [Image removed by sender. T]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.twitter.com%2Fvoxtelecom&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324008378&sdata=AI63sq%2BY0K8s9JjixQDDeIc3W70GlvxoaKEY2%2Fu8824%3D&reserved=0> [Image removed by sender. I]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.instagram.com%2Fvoxtelecomza%2F&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324008378&sdata=OxzRP32a7ZnpmME78%2BylbOrjrMgUCj6yN82uXAI4d3w%3D&reserved=0> [Image removed by sender. L]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvoxtelecom&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324018374&sdata=f3oa7bz8dE%2Br2c%2FP8siMs5K%2BNG%2BI%2Br8uxMZazjwKP1A%3D&reserved=0> [Image removed by sender. Y]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.youtube.com%2Fuser%2FVoxTelecom&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324018374&sdata=AgJu5vdQkiiSH0UmQiaQxIQWpjwUy2GlqTvjdbTgEQY%3D&reserved=0> [Image removed by sender. #VoxBrand]<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.vox.co.za%2Ffibre%2Ffibre-to-the-home%2F%3Fprod%3DHOME&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324018374&sdata=tSzRaAr5LBd1TYdIflh5aNIhbR0wKD7s6LQp%2Bvw4CeI%3D&reserved=0> Disclaimer The contents of this email are confidential to the sender and the intended recipient. Unless the contents are clearly and entirely of a personal nature, they are subject to copyright in favour of the holding company of the Vox group of companies. Any recipient who receives this email in error should immediately report the error to the sender and permanently delete this email from all storage devices. This email has been scanned for viruses and malware, and may have been automatically archived by Mimecast Ltd, an innovator in Software as a Service (SaaS) for business. Providing a safer and more useful place for your human generated data. Specializing in; Security, archiving and compliance. To find out more Click Here<https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.voxtelecom.co.za%2Fsecurity%2Fmimecast%2F%3Fprod%3DEnterprise&data=02%7C01%7Cp.staniforth%40leedsbeckett.ac.uk%7Cce5db7db325f4eccd7ce08d80ea6e86e%7Cd79a81124fbe417aa112cd0fb490d85c%7C0%7C0%7C637275457324028372&sdata=VqmowYOVhGFRqxWapqmyjiwsxbMckDiY6k98xTAHNE0%3D&reserved=0>. To view the terms under which this email is distributed, please go to:- http://leedsbeckett.ac.uk/disclaimer/email/
_______________________________________________ Users mailing list -- [email protected] To unsubscribe send an email to [email protected] Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/[email protected]/message/Y5NJKOJMGQMIYIVQKLNVMOQLNZ5CFNM2/
