<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Hey,
<div><br>
</div>
<div>when trying to launch a Spice console from webadmin portal, it works as expected, from both Fedora and windows.</div>
<div><br>
</div>
<div>But when trying to launch console from userportal, the spice client throws this error:</div>
<div><img id="3a11f2dd-4b24-46fb-b84f-b0b7aeb3f266" height="473" width="409" apple-width="yes" apple-height="yes" src="cid:2CE075FF-EC6E-4B74-A849-E59E3B929417@adm.slu.se"></div>
<div>"Unable to connect to the graphics server"</div>
<div><br>
</div>
<div>This was from a Windows 2008R2 with Internet Explorer and spice plugin. It behaves the exact same way when using Fedora or CentOS with the spice-xpi plugin. Using a CentOS client, I have tailed the spice-xpi.log that shows no difference from a good connection
to a bad.</div>
<div><u><br>
</u></div>
<div><u>Good connection, from webadmin:</u></div>
<div>2012-10-23 12:34:39,456 INFO nsPluginInstance::Connect: SPICE_XPI_SOCKET: /tmp/spicec-KD4DJT/spice-xpi<br>
2012-10-23 12:34:39,457 INFO nsPluginInstance::Connect: SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-KD4DJT/spice-foreign<br>
2012-10-23 12:34:39,457 INFO nsPluginInstance::Connect: Launching /usr/libexec/spice-xpi-client <br>
2012-10-23 12:34:42,484 INFO nsPluginInstance::Connect: Initiating connection with controller<br>
2012-10-23 12:34:56,721 ERROR nsPluginInstance::CallOnDisconnected: could not get browser window, when trying to call OnDisconnected (this prints when closing the console window)<br>
<br>
</div>
<div><u>Bad connection, from userportal:</u><br>
2012-10-23 12:35:13,570 INFO nsPluginInstance::Connect: SPICE_XPI_SOCKET: /tmp/spicec-bLJDfq/spice-xpi<br>
2012-10-23 12:35:13,570 INFO nsPluginInstance::Connect: SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-bLJDfq/spice-foreign<br>
2012-10-23 12:35:13,570 INFO nsPluginInstance::Connect: Launching /usr/libexec/spice-xpi-client <br>
2012-10-23 12:35:16,593 INFO nsPluginInstance::Connect: Initiating connection with controller</div>
<div><br>
</div>
<div>In the engine, I have created a User Role, called VmOwner that have these permissions:</div>
<div>
<div>System</div>
<div> Configure System</div>
<div> Manipulate Permissions</div>
<div> √ Login Permissions</div>
<div>VM</div>
<div> √ Basic Operations</div>
<div> √ Basic Operations</div>
<div> √ Change CD</div>
<div> √ Remote Log In</div>
<div> √ Provisioning Operations</div>
<div> Edit properties</div>
<div> Create</div>
<div> Delete</div>
<div> Edit Network</div>
<div> Edit Storage</div>
<div> √ Edit Snapshots</div>
<div><br>
</div>
<div>This is what engine.log says about a connection from userportal:</div>
<div>
<div>2012-10-23 12:55:15,344 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-2) [20487117] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 7700067a-235b-4f46-ace3-71103718d1f9 Type: VM</div>
<div>2012-10-23 12:55:15,378 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-2) [20487117] START, SetVmTicketVDSCommand(vdsId = a4030022-169b-11e2-9e42-00187179e224, vmId=7700067a-235b-4f46-ace3-71103718d1f9, ticket=yJYEWUW386AU,
validTime=120,m userName=karli, userId=de526322-d046-4a06-911e-546e7159556e), log id: 33d22a8e</div>
<div>2012-10-23 12:55:15,434 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-2) [20487117] FINISH, SetVmTicketVDSCommand, log id: 33d22a8e</div>
<div>2012-10-23 12:55:15,681 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SSLEnabled) with null version, using default general for version</div>
<div>2012-10-23 12:55:15,682 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (CipherSuite) with null version, using default general for version</div>
<div>2012-10-23 12:55:15,682 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (EnableSpiceRootCertificateValidation) with null version, using default general for version</div>
<div>2012-10-23 12:55:15,695 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SpiceToggleFullScreenKeys) with null version, using default general for version</div>
<div>2012-10-23 12:55:15,696 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SpiceReleaseCursorKeys) with null version, using default general for version</div>
</div>
<div><br>
</div>
<div>And this is a connection from webadmin:</div>
<div>
<div>2012-10-23 12:59:16,019 WARN [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] User "5ec37cea-a682-405a-acdb-ecff4ed05ebd" is trying to take the console of virtual machine "7700067a-235b-4f46-ace3-71103718d1f9", but the
console is already taken by user "de526322-d046-4a06-911e-546e7159556e".</div>
<div>2012-10-23 12:59:16,108 WARN [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] User "5ec37cea-a682-405a-acdb-ecff4ed05ebd" is trying to take the console of virtual machine "7700067a-235b-4f46-ace3-71103718d1f9", but the
console is already taken by user "de526322-d046-4a06-911e-546e7159556e".</div>
<div>2012-10-23 12:59:16,109 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 7700067a-235b-4f46-ace3-71103718d1f9 Type: VM, ID: 7700067a-235b-4f46-ace3-71103718d1f9
Type: VM</div>
<div>2012-10-23 12:59:16,146 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-17) [71692f83] START, SetVmTicketVDSCommand(vdsId = a4030022-169b-11e2-9e42-00187179e224, vmId=7700067a-235b-4f46-ace3-71103718d1f9, ticket=MpSIhn3Tjisf,
validTime=120,m userName=karliadm, userId=5ec37cea-a682-405a-acdb-ecff4ed05ebd), log id: 2324e764</div>
<div>2012-10-23 12:59:16,255 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-17) [71692f83] FINISH, SetVmTicketVDSCommand, log id: 2324e764</div>
<div>2012-10-23 12:59:16,556 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SSLEnabled) with null version, using default general for version</div>
<div>2012-10-23 12:59:16,558 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (CipherSuite) with null version, using default general for version</div>
<div>2012-10-23 12:59:16,559 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (EnableSpiceRootCertificateValidation) with null version, using default general for version</div>
<div>2012-10-23 12:59:16,577 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SpiceToggleFullScreenKeys) with null version, using default general for version</div>
<div>2012-10-23 12:59:16,578 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SpiceReleaseCursorKeys) with null version, using default general for version</div>
</div>
<div><br>
</div>
<div>I´m using different accounts when logging in to the different portals; "karli" when logging in to userportal, and "karliadm" in webadmin. "karli" is VmOwner and "karliadm" is SuperUser.</div>
<div><br>
</div>
<div>Am I missing any rights to be able to connect to console?</div>
<div><br>
</div>
<div>
<div><br>
</div>
<div>Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: +46-(0)18-67 15 66</div>
<div><a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a></div>
</div>
<br>
</div>
</body>
</html>