<div dir="ltr"><div>Hello Karli,<br></div><div><br></div><div>You are wellcome, yes, at the moment we are testing but our idea is to connect engine to a user validation system. I will try to do it using Samba4 system and all needed pieces.</div>
<div><br></div><div>Thanks,</div><div><br></div><div>Juanjo.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 12, 2013 at 1:41 PM, Itamar Heim <span dir="ltr"><<a href="mailto:iheim@redhat.com" target="_blank">iheim@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 04/12/2013 11:27 AM, Karli Sjöberg wrote:<br>
</div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Hey Everyone!<br>
<br>
I solved it! I friggin solved it, and it didnīt have anything to do with<br>
the spice-client, spice-plugin(ActiveX or XPI), or userportal<br>
specifically, itīs in the engine itself! So Juanjo here said that it<br>
works for him, and I took a guess thatīs because he is only using<br></div>
admin@internal <mailto:<a href="mailto:admin@internal" target="_blank">admin@internal</a>> for testing (correct me if Iīm<div class="im"><br>
wrong Juanjo), so I added a "UserRole" to admin on a test VM, logged<br>
into Userportal, clicked for console, and it worked! So, since our setup<br>
is a little more complex, as itīs connected to our ActiveDirectory, I<br>
concluded that it must be a permissions related issue. I created a new<br>
UserRole, called "ConsoleOwner" that only have "Login Permissions" and<br>
"RemoteLogin" and added that role to our engineīs "System Permissions"<br>
on a directory group as "broad" as possible. After that if I also added<br>
an explicit UserRole permission for a directory user on any VM now it<br>
works 100%. Me so happy!:)<br>
<br>
A question goes out the developers: Should you have to do that? I<br>
thought that permissions where supposed to be calculated like Windows<br>
ACLs "Effective Permissions", so that if I just add sufficient<br>
permissions for a directory user on a VM, itīs effective permissions<br>
should have granted the necessary abilities in the system, without me<br>
having to first add that as a "big" system permission to have them<br>
granted? Bug, or intended?<br>
<br>
Thank you so much Juanjo, for posting the versions you are currently<br>
using that proved that it "should" work, and that it had to be something<br>
else that prevented us from using it (which it was). Thank you!<br>
</div></blockquote>
<br>
can you please clarify again which permission you granted to a user on the VM which didn't work before you added to the user the console permission?<br>
</blockquote></div><br></div>