<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="GENERATOR" content="GtkHTML/4.4.4">
</head>
<body>
Hey Everyone!<br>
<br>
I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is
only using <a href="mailto:admin@internal">admin@internal</a> for testing (correct me if I´m wrong Juanjo), so I added a "UserRole" to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex,
as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called "ConsoleOwner" that only have "Login Permissions" and "RemoteLogin" and added that role to our engine´s "System Permissions"
on a directory group as "broad" as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:)<br>
<br>
A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs "Effective Permissions", so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions
should have granted the necessary abilities in the system, without me having to first add that as a "big" system permission to have them granted? Bug, or intended?<br>
<br>
Thank you so much Juanjo, for posting the versions you are currently using that proved that it "should" work, and that it had to be something else that prevented us from using it (which it was). Thank you!<br>
<br>
Best Regards<br>
Karli Sjöberg<br>
<br>
tor 2013-04-11 klockan 16:42 +0200 skrev Juan Jose:
<blockquote type="CITE">Hello again Karli,<br>
<br>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">In this mail thread itself, David give me some indication about how I could to debug my spice connection in the client looking at spicex.log or installing debug-helper.exe. I try to search spicex.log and I tried to install debug-helper.exe.
Searching this debug application I found this thread in <a href="mailto:user@ovirt.org">
user@ovirt.org</a> historical mail list: </blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE"><a href="http://lists.ovirt.org/pipermail/users/2013-January/011466.html">http://lists.ovirt.org/pipermail/users/2013-January/011466.html</a>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">And as you see in the Itamar Heim response to Dennis Böck, the host has to be accessible and resolvable and to have spice ports open to the client. I didn't have my host, or node as you want name it, machine configured in the client
hosts file. I had spice ports opened, I only tried to configure node hostname in the client host file and "voilà", it works. This is all my history. Of course, I have also the engine machine configure in the client hosts file. I have this configuration because
this both machines aren't configure in my corporative DNS. </blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">Again, I hope that it was useful. </blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">Juanjo. </blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<blockquote type="CITE">On Thu, Apr 11, 2013 at 1:21 PM, Karli Sjöberg <<a href="mailto:Karli.Sjoberg@slu.se">Karli.Sjoberg@slu.se</a>> wrote:
</blockquote>
<blockquote type="CITE">
<blockquote>tor 2013-04-11 klockan 13:12 +0200 skrev Juan Jose: </blockquote>
</blockquote>
<blockquote type="CITE">
<blockquote>
<blockquote type="CITE">Hello Karli,<br>
<br>
<br>
<br>
No problem, the output of rpm query is: <br>
<br>
<br>
[root@ovirt-engine ~]# rpm -qa | grep ovirt<br>
ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch<br>
ovirt-engine-restapi-3.1.0-2.fc17.noarch<br>
ovirt-engine-backend-3.1.0-2.fc17.noarch<br>
ovirt-engine-config-3.1.0-2.fc17.noarch<br>
ovirt-release-fedora-4-2.noarch<br>
ovirt-engine-sdk-3.1.0.4-1.fc17.noarch<br>
ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch<br>
ovirt-engine-genericapi-3.1.0-2.fc17.noarch<br>
ovirt-engine-tools-common-3.1.0-2.fc17.noarch<br>
ovirt-engine-dbscripts-3.1.0-2.fc17.noarch<br>
ovirt-engine-userportal-3.1.0-2.fc17.noarch<br>
</blockquote>
<br>
<br>
</blockquote>
</blockquote>
<blockquote type="CITE">
<blockquote>What the heck, 3.1.0-2?! Then why the doodoo doesn´t it work for us on 3.1.0-4?! Have you turned off SSL or something? I´m wondering what could be different on your system compared to ours...
</blockquote>
</blockquote>
<blockquote type="CITE">
<blockquote><br>
<br>
<blockquote type="CITE">ovirt-engine-notification-service-3.1.0-2.fc17.noarch<br>
ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch<br>
ovirt-engine-webadmin-portal-3.1.0-2.fc17.noarch<br>
ovirt-engine-setup-3.1.0-2.fc17.noarch<br>
ovirt-engine-3.1.0-2.fc17.noarch <br>
<br>
<br>
I hope this help you to test your system. If you need some other information I will be happy to help.<br>
</blockquote>
<br>
<br>
</blockquote>
</blockquote>
<blockquote type="CITE">
<blockquote>Yeah, how did you reach the conslusion that you needed to edit your host-file for it to start working? Did you follow any debugging instructions previously mentioned, and if you did, please explain how step by step so I can test and try to debug
our systems as well? </blockquote>
</blockquote>
<blockquote type="CITE">
<blockquote><br>
<br>
<blockquote type="CITE"><br>
<br>
Juanjo. <br>
<br>
<br>
On Thu, Apr 11, 2013 at 6:55 AM, Karli Sjöberg <<a href="mailto:Karli.Sjoberg@slu.se">Karli.Sjoberg@slu.se</a>> wrote:<br>
<blockquote>ons 2013-04-10 klockan 17:22 +0200 skrev Juan Jose: <br>
<blockquote type="CITE"><br>
Yes, User portal works fine at the moment. I want to install spice-guest-tools to improve the windows VM integration in client machine. After that I will try to add a server user validation.<br>
</blockquote>
<br>
<br>
Great to hear that! Although the topic is "3.2 final status...", I would like the output of "rpm -qa | grep ovirt" from your engine. I´m stuck at 3.1.0-4, since it is still impossible to upgrade. But as soon as that´s fixed I´ll be able to try and confirm this
as well. <br>
<br>
<br>
/Karli<br>
<br>
<blockquote type="CITE"><br>
<br>
Many thanks, <br>
<br>
<br>
Juanjo. <br>
<br>
<br>
On Wed, Apr 10, 2013 at 6:46 AM, Karli Sjöberg <<a href="mailto:Karli.Sjoberg@slu.se">Karli.Sjoberg@slu.se</a>> wrote:<br>
<blockquote>tis 2013-04-09 klockan 17:11 +0200 skrev Juan Jose: <br>
<blockquote type="CITE">Yes host or node, is my machine that has the hypervisor and yes I tried open console from Admin-Portal and It didn't work. Now both are working in a Win7 client with IE 9.<br>
</blockquote>
Is the User-portal working as well? <br>
<br>
<br>
<blockquote type="CITE"><br>
<br>
<br>
Many thanks again, <br>
<br>
<br>
Juanjo. <br>
<br>
<br>
On Tue, Apr 9, 2013 at 2:53 PM, Karli Sjöberg <<a href="mailto:Karli.Sjoberg@slu.se">Karli.Sjoberg@slu.se</a>> wrote:<br>
<blockquote>tis 2013-04-09 klockan 13:49 +0200 skrev Juan Jose: <br>
<blockquote type="CITE"><br>
Hello David, <br>
<br>
<br>
My problem was that I needed to add my host to \windows\system32\driver\etc\hosts file moreover to have virt-viewer installed in the Windows 7 client. Now I can open the console after that.<br>
</blockquote>
When you say "host", I´m guessing you mean the hypervisor that is running the VM you want to access. Have you tried opening console through
<b>Admin</b>-portal, <b>User</b>-portal, or both? And they all work?<br>
<br>
/Karli <br>
<blockquote type="CITE"><br>
<br>
Many thanks, <br>
<br>
<br>
Juanjo. <br>
<br>
<br>
<br>
<br>
On Mon, Apr 8, 2013 at 4:23 PM, David Jaša <<a href="mailto:djasa@redhat.com">djasa@redhat.com</a>> wrote:<br>
<blockquote>Hi Juan,<br>
<br>
Juan Jose píše v Po 08. 04. 2013 v 14:36 +0200: <br>
><br>
> Hello evrybody,<br>
><br>
><br>
> I'm testing open console in a Windows 7 client with IE 9 and when I<br>
> try to click in console when I'm inside User Portal with wirt-viewer<br>
> installad, it is launched but and virt-viewer give me the message<br>
> "Unable to connect to graphic server" and It can't connect to my VM.<br>
> Any suggest?<br>
<br>
<br>
I've described the debugging steps on this list in the past, please look<br>
them up and go through spicex.log. If that isn't sufficient, please use<br>
debug-helper.exe (IIRC I described it in another mail here) to get<br>
remote-viewer debug output.<br>
<br>
HTH,<br>
<br>
David <br>
<br>
><br>
><br>
> Many thanks in avanced,<br>
><br>
><br>
> Juanjo.<br>
><br>
><br>
> On Thu, Mar 21, 2013 at 1:49 PM, Gianluca Cecchi<br>
> <<a href="mailto:gianluca.cecchi@gmail.com">gianluca.cecchi@gmail.com</a>> wrote:<br>
> On Wed, Mar 20, 2013 at 10:43 PM, Jeff Bailey wrote:<br>
> > On 3/20/2013 5:20 AM, Christophe Fergeau wrote:<br>
> >><br>
> >> On Tue, Mar 19, 2013 at 05:11:56PM -0400, Jeff Bailey<br>
> wrote:<br>
> ><br>
><br>
> > Heh, heh, maybe it's a secret. :)<br>
> ><br>
> > Actually, I believe I got it from<br>
> <a href="http://elmarco.fedorapeople.org/spice.cab">http://elmarco.fedorapeople.org/spice.cab</a><br>
> > and it seems to be version 5.0.2.2.<br>
> ><br>
><br>
><br>
><br>
> As already pointed in another mail of this same thread from<br>
> Michal<br>
> Skrivanek (about a month ago), the info is at<br>
> <a href="http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal">
http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal</a><br>
> and the page indeed contains the same link to spice.cab file<br>
> you are referring<br>
> so possibly difficult to find but not a secret... ;-)<br>
><br>
> Gianluca<br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
> <a href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a><br>
><br>
><br>
><br>
> _______________________________________________<br>
> Users mailing list<br>
> <a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
> <a href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br>
<br>
<font color="#888888">--</font><br>
<br>
<font color="#888888">David Jaša, RHCE</font><br>
<br>
<font color="#888888">SPICE QE based in Brno</font><br>
<font color="#888888">GPG Key: 22C33E24</font><br>
<font color="#888888">Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24</font><br>
<br>
<br>
<br>
</blockquote>
<br>
<br>
</blockquote>
<br>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>-- <br>
<br>
Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: <a href="tel:%2B46-%280%2918-67%2015%2066">+46-(0)18-67 15 66</a><br>
<a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a> </td>
</tr>
</tbody>
</table>
</blockquote>
<br>
<br>
</blockquote>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>-- <br>
<br>
Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: <a href="tel:%2B46-%280%2918-67%2015%2066">+46-(0)18-67 15 66</a><br>
<a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a> </td>
</tr>
</tbody>
</table>
</blockquote>
<br>
<br>
</blockquote>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>-- <br>
<br>
Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: <a href="tel:%2B46-%280%2918-67%2015%2066">+46-(0)18-67 15 66</a><br>
<a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a> </td>
</tr>
</tbody>
</table>
</blockquote>
<br>
<br>
</blockquote>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>-- <br>
<br>
Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: <a href="tel:%2B46-%280%2918-67%2015%2066">+46-(0)18-67 15 66</a><br>
<a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a> </td>
</tr>
</tbody>
</table>
</blockquote>
</blockquote>
<blockquote type="CITE"><br>
<br>
</blockquote>
<br>
<table cellspacing="0" cellpadding="0" width="100%">
<tbody>
<tr>
<td>-- <br>
<br>
Med Vänliga Hälsningar<br>
-------------------------------------------------------------------------------<br>
Karli Sjöberg<br>
Swedish University of Agricultural Sciences<br>
Box 7079 (Visiting Address Kronåsvägen 8)<br>
S-750 07 Uppsala, Sweden<br>
Phone: +46-(0)18-67 15 66<br>
<a href="mailto:karli.sjoberg@adm.slu.se">karli.sjoberg@slu.se</a> </td>
</tr>
</tbody>
</table>
</body>
</html>