<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000'>BTW - this is why i had to change that setting... if i left it hashed out vdsmd exits <br><br>Feb 3 05:26:30 r5a101 systemd-vdsmd[5213]: Starting libvirtd (via systemctl): [ OK ]<br>Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: conflicting vdsm and libvirt tls configuration.<br>Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: vdsm.conf with ssl=False requires libvirt with:<br>Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: listen_tcp=1, auth_tcp="none" and spice_tls=0.<br>Feb 3 05:26:31 r5a101 systemd[1]: vdsmd.service: control process exited, code=exited status=1<br><br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>To: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>Cc: </b>"Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com>, "Yaniv Kaul" <ykaul@redhat.com><br><b>Sent: </b>Friday, 3 February, 2012 5:47:29 PM<br><b>Subject: </b>Re: [Users] Spice plugin for firefox<br><br><style>p { margin: 0; }</style><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000">:( no dice again...<br>same message as below..<br><br>in /etc/libvirt/libvirtd.conf i had to set<br>auth_tcp="none"<br><br>as VDSM didnt seem to start cleanly when i disabled SSL as per the wiki link in this thread<br>I wonder if thats maybe the cause...<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>To: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>Cc: </b>"Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com>, "Yaniv Kaul" <ykaul@redhat.com><br><b>Sent: </b>Friday, 3 February, 2012 5:38:41 PM<br><b>Subject: </b>Re: [Users] Spice plugin for firefox<br><br><style>p { margin: 0; }</style><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000">hrmm after some digging i came across this on the hypervisor when i try and launch spicec...<br><br>/var/log/libvirt/qemu/vm1.log<br><br>reds_handle_read_link_done: Peer doesn't support AUTH selection<br><br>maybe ill blow that VM away and create a new one...see if that helps<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>To: </b>"Yaniv Kaul" <ykaul@redhat.com><br><b>Cc: </b>"Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com>, "Spyro Polymiadis" <spyro@rsp.com.au><br><b>Sent: </b>Friday, 3 February, 2012 5:26:10 PM<br><b>Subject: </b>Re: [Users] Spice plugin for firefox<br><br><style>p { margin: 0; }</style><div style="font-family: tahoma,new york,times,serif; font-size: 12pt; color: #000000">Yeah :( The vm was off after processing all the changes (i rebooted the whole cluster and engine server)<br>How do it set a "ticket"?<br><br>I can connect to the spice interface using IE (windows) via the ovirt ui just fine (although the mouse is completely unreliable)<br><br>Further question - if i end up connecting via the command line... if i have multiple vm's running on the hypervisor - how do i determine which one i want to connect to?<br>Does each vm run on a separate port (vm1 = 5900, vm2=5901 etc?)<br><br><br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Yaniv Kaul" <ykaul@redhat.com><br><b>To: </b>"Spyro Polymiadis" <spyro@rsp.com.au><br><b>Cc: </b>"Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com><br><b>Sent: </b>Friday, 3 February, 2012 5:13:53 PM<br><b>Subject: </b>Re: [Users] Spice plugin for firefox<br><br>
On 02/03/2012 08:08 AM, Spyro Polymiadis wrote:
<blockquote cite="mid:ad11e1db-d3e9-45bf-9912-9200f63ce8c4@angelia">
<style>p { margin: 0; }</style>
<div style="font-family: tahoma,new york,times,serif; font-size:
12pt; color: rgb(0, 0, 0);">Hi Mate, <br>
<br>
no unfortunately i couldnt update it as i wasnt able to find any
newer XPI's that would work on centos5.7 (centos 6.0 version
required a stack of new packages)<br>
<br>
<br>
I had just tried going through all that...<br>
<br>
the errors i was getting after using the SUBJECT and ca file
was:<br>
<br>
$ /usr/bin/spicec --host 192.168.112.21 --secure-port 5901
--secure-channels all --host-subject "`openssl x509 -noout -text
-in cacert.pem | grep Subject: | cut -f 10- -d \" \"`" --ca-file
cacert.pem<br>
Warning: connect failed 7<br>
<br>
Ive just gone through and configured all the spice_tls and ssl
settings to 0 or off (as per
<a class="moz-txt-link-freetext" href="http://ovirt.org/wiki/OVirt_-_disable_SSL_in_VDSM" target="_blank">http://ovirt.org/wiki/OVirt_-_disable_SSL_in_VDSM</a>)<br>
But now im wresting with trying to get the hosts to register
with the engine server again :( so im yet to be able to test a
"non" secured connection<br>
<br>
Thanks for you help so far :)<br>
</div>
</blockquote>
<br>
1. Have you re-ran the VM? If it was launched before the changes, it
is still running with SSL enabled.<br>
2. Did you set a ticket to the VM? (IIRC, 7 means no ticket).<br>
Y.<br>
<br>
<blockquote cite="mid:ad11e1db-d3e9-45bf-9912-9200f63ce8c4@angelia">
<div style="font-family: tahoma,new york,times,serif; font-size:
12pt; color: #000000"><br>
<hr id="zwchr">
<div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From:
</b>"Yaniv Kaul" <a class="moz-txt-link-rfc2396E" href="mailto:ykaul@redhat.com" target="_blank"><ykaul@redhat.com></a><br>
<b>To: </b>"Spyro Polymiadis" <a class="moz-txt-link-rfc2396E" href="mailto:spyro@rsp.com.au" target="_blank"><spyro@rsp.com.au></a><br>
<b>Cc: </b>"Haim Ateya" <a class="moz-txt-link-rfc2396E" href="mailto:hateya@redhat.com" target="_blank"><hateya@redhat.com></a>, "Alon
Levy" <a class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com" target="_blank"><alevy@redhat.com></a>, <a class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>, "Arnon
Gilboa" <a class="moz-txt-link-rfc2396E" href="mailto:agilboa@redhat.com" target="_blank"><agilboa@redhat.com></a><br>
<b>Sent: </b>Friday, 3 February, 2012 4:05:41 PM<br>
<b>Subject: </b>Re: [Users] Spice plugin for firefox<br>
<br>
On 02/03/2012 02:54 AM, Spyro Polymiadis wrote:
<blockquote cite="mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@angelia">
<style>p { margin: 0; }</style>
<div style="font-family: tahoma,new york,times,serif;
font-size: 12pt; color: rgb(0, 0, 0);">Howdy<br>
<br>
Ive just installed an updated version of spice client on
my linux box:<br>
<br>
spice-client-0.8.2-1.el5<br>
spice-0.8.2-1.el5<br>
<br>
and still the firefox xpi crashes with the version
mismatch error below <br>
</div>
</blockquote>
<br>
And the XPI? Was it updated?<br>
<br>
<br>
<blockquote cite="mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@angelia">
<div style="font-family: tahoma,new york,times,serif;
font-size: 12pt; color: rgb(0, 0, 0);">but if i try to run
it manually from the command line like so :<br>
<br>
/usr/bin/spicec --host 192.168.112.21 --port 5901<br>
<br>
I get <br>
<br>
Warning: Connection reset by peer (104)<br>
<br>
<br>
and in the VMs log i see<br>
<br>
139827374590400:error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version
number:s3_pkt.c:350:<br>
reds_init_client_ssl_connection: SSL_accept failed,
error=1<br>
</div>
</blockquote>
<br>
Because you are missing several parameters in the command line
of spicec. Specifically, the whole SSL negotiation stuff is
missing. It expects them.<br>
See 'spicec --help' and specifically the use of --ca-file ,
--host-subject for correct SSL configuration.<br>
Y.<br>
<br>
<blockquote cite="mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@angelia">
<div style="font-family: tahoma,new york,times,serif;
font-size: 12pt; color: #000000"><br>
:( this might be a blocker for us - as i cant also work
out how to use the "VNC" console option<br>
<br>
Cheers<br>
Spyro<br>
<br>
<hr id="zwchr">
<div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From:
</b>"Yaniv Kaul" <a class="moz-txt-link-rfc2396E" href="mailto:ykaul@redhat.com" target="_blank"><ykaul@redhat.com></a><br>
<b>To: </b>"Spyro Polymiadis" <a class="moz-txt-link-rfc2396E" href="mailto:spyro@rsp.com.au" target="_blank"><spyro@rsp.com.au></a><br>
<b>Cc: </b>"Haim Ateya" <a class="moz-txt-link-rfc2396E" href="mailto:hateya@redhat.com" target="_blank"><hateya@redhat.com></a>,
"Alon Levy" <a class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com" target="_blank"><alevy@redhat.com></a>,
<a class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>,
"Arnon Gilboa" <a class="moz-txt-link-rfc2396E" href="mailto:agilboa@redhat.com" target="_blank"><agilboa@redhat.com></a><br>
<b>Sent: </b>Friday, 3 February, 2012 12:09:48 AM<br>
<b>Subject: </b>Re: [Users] Spice plugin for firefox<br>
<br>
On 02/02/2012 03:30 PM, Spyro Polymiadis wrote:
<blockquote cite="mid:eea44a70-8d1b-45fe-a46e-0ca82d644f8c@MacBookPro">
<style>p { margin: 0; }</style>
<div style="font-family: Arial; font-size: 12pt;
color: rgb(0, 0, 0);">Hi Haim, <br>
<br>
Using Firefox 9, and Centos 5.7<br>
<br>
$ rpm -qa | grep spice<br>
<br>
qspice-client-0.3.0-4.el5_5<br>
spice-xpi-2.2-2.3.el5_6.1<br>
qspice-libs-devel-0.3.0-54.el5_5.2<br>
qspice-0.3.0-54.el5_5.2<br>
qspice-libs-0.3.0-54.el5_5.2<br>
<br>
the spiceXPI is in /usr/lib64/mozilla/plugins<br>
and spicec is in /usr/libexec<br>
<br>
Cheers :)<br>
Spyro<br>
</div>
</blockquote>
<br>
A newer version of the XPI would be most useful. I'm not
sure if RPMs are available for it, though.<br>
Y.<br>
<br>
<blockquote cite="mid:eea44a70-8d1b-45fe-a46e-0ca82d644f8c@MacBookPro">
<div style="font-family: Arial; font-size: 12pt;
color: #000000"><br>
<hr id="zwchr">
<div style="color: rgb(0, 0, 0); font-weight:
normal; font-style: normal; text-decoration: none;
font-family: Helvetica,Arial,sans-serif;
font-size: 12pt;"><b>From: </b>"Haim Ateya" <a class="moz-txt-link-rfc2396E" href="mailto:hateya@redhat.com" target="_blank"><hateya@redhat.com></a><br>
<b>To: </b><a class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org" target="_blank">users@ovirt.org</a>,
"Alon Levy" <a class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com" target="_blank"><alevy@redhat.com></a>,
"Arnon Gilboa" <a class="moz-txt-link-rfc2396E" href="mailto:agilboa@redhat.com" target="_blank"><agilboa@redhat.com></a><br>
<b>Sent: </b>Thursday, 2 February, 2012 9:37:12
PM<br>
<b>Subject: </b>Re: [Users] Spice plugin for
firefox<br>
<br>
On 02/02/2012 12:39 PM, Spyro Polymiadis wrote:<br>
<br>
adding Alon & Arnon.<br>
<blockquote cite="mid:7351492f-fc79-41c2-bb2d-849b2cc795e9@MacBookPro">
<div>Howdy again<br>
<br>
Has anyone managed to get the spice plugin
working for firefox under linux?<br>
When ever i click on the console icon, i see a
popup quickly appear then crash<br>
</div>
</blockquote>
what client (o.s) do you use ? do you have
spice-xpi and spice-client installed on it ? <br>
<blockquote cite="mid:7351492f-fc79-41c2-bb2d-849b2cc795e9@MacBookPro">
<div><br>
In the spice logs it says <br>
2012-02-02 16:14:47,006 INFO [20889:20891]
RedPeer::connect: Connecting 192.168.112.2
5901<br>
2012-02-02 16:14:47,013 WARN [20889:20891]
RedChannel::run: RedChannelBase::connect:
version mismatch: expect 1 got 2<br>
</div>
</blockquote>
<blockquote cite="mid:7351492f-fc79-41c2-bb2d-849b2cc795e9@MacBookPro">
<div><br>
:( cant seem to find any information on this
error unfortunately.<br>
<br>
Cheers<br>
Spyro</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>
<a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
<br>
_______________________________________________<br>
Users mailing list<br>
<a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre>_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>
<a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</div>
<br>
</div>
</blockquote>
<br>
</div>
<br>
</div>
</blockquote>
<br>
</div><br></div></div><br></div></div><br></div></div><br></div></body></html>