<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 21, 2016 at 9:26 AM, Tomas Jelinek <span dir="ltr"><<a href="mailto:tjelinek@redhat.com" target="_blank">tjelinek@redhat.com</a>></span> wrote:<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote"><span class="gmail-m_1007650973670006184gmail-"><br>
><br>
> $ diff user_portal.txt admin_portal.txt<br>
> 5c5<br>
> < password=USuJCbk3UhzK<br>
> ---<br>
> > password=4ZAr/w23pFPV<br>
> 16c16<br>
> <<br>
> usb-filter=-1,60186,10000,256,<wbr>1|-1,1118,245,-1,1|-1,1133,224<wbr>5,-1,1|-1,1133,2242,5,1|8,-1,-<wbr>1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-<wbr>1,0<br>
> ---<br>
> > usb-filter=-1,-1,-1,-1,0<br>
<br>
</span>This is not related but looks like a bug. Could you please open a bug against user portal with the fact the usb-filter is not filled in user portal?<br></blockquote><div><br>Hello, sorry for the late answer. I was busy on other things<br>But I have to fill bug against user portal or web admin portal?<br>Because the situation is this <br>[root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv | grep usb<br>< usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0<br>> usb-filter=-1,-1,-1,-1,0<br>[root@ope46 g.cecchi]# <br><br></div><div>So it seems the admin portal the one with all "-1".....<br></div><div>What do you mean with "not filled"? Perhaps it is this I don't understand.<br><br></div><div> <br></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
<br>
> 19a20<br>
> > proxy= <a rel="noreferrer" href="http://192.168.1.215:3128/" target="_blank">http://192.168.1.215:3128/</a><br>
> 27c28<br>
<br>
This looks like the most interesting difference. Where do you have your spice proxy defined? I guess on cluster.<br>
I have a suspicion that there is a bug that when the user does not have access to the cluster (e.g. basic user)<br>
than it can not see the spice proxy.<br>
<br>
Could you please try to connect to the console from user portal using an admin user and check if the<br>
proxy is filled correctly?<br>
<br></blockquote><div><br>I have this configured at engine level:<br><br>[root@ovirt ~]# engine-config -g SpiceProxyDefault<br>SpiceProxyDefault: <a href="http://192.168.1.215:3128/" target="_blank">http://192.168.1.215:3128/</a> version: general<br>[root@ovirt ~]#<br><br></div><div>I just tried now from a Fedora 24 client and the full difference for the .vv files is this:<br><br>[root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv<br>5c5<br>< password=VykX40qEKrXN<br>---<br>> password=/dT1qiHNTZIk<br>16c16<br>< usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0<br>---<br>> usb-filter=-1,-1,-1,-1,0<br>28c28<br>< sso-token=Hbb-_gd8Apsw7qdjfjWivONAodYIzyM2zozEpmD2YHZX3m7mgTeu8zlhOnJbHZ-RVA8JkuNc1fSnS-g8JePeGA<br>---<br>> sso-token=EGYM496UMVtAzdukJH8ipN584Hyrfz34QpfAN15DqETtBsZ4n59ptj8LrVpiH8g40qXr0jL9sscaGklPqkMa3w<br>[root@ope46 g.cecchi]# <br><br></div><div>so the proxy line seems populated in both the portals...<br><br></div><div>Initially I got 11 TCP connections to proxy ip<br></div><div>After about 18 minutes I see that they are only 4 in ESTABLISHED state, the other ones are CLOSE_WAIT<br><br>[root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date<br> 7 <a href="http://192.168.1.215:3128">192.168.1.215:3128</a> CLOSE_WAIT<br> 4 <a href="http://192.168.1.215:3128">192.168.1.215:3128</a> ESTABLISHED<br>[root@ope46 ~]# <br></div><div>And the console still works<br><br></div><div>After about 4 hours<br><div><br></div><div> [root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date<br> 2 <a href="http://192.168.1.215:3128">192.168.1.215:3128</a> ESTABLISHED<br><br></div><div>remote-viewer app itself seems to work (I can select menu options) bit I have black screen without being able to interact.<br></div><div>Also switching to full screen I only have black screen<br><br></div><div>The same with user portal...<br></div><div>After 24 minutes<br><br>[root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date<br> 9 <a href="http://192.168.1.215:3128">192.168.1.215:3128</a> CLOSE_WAIT<br> 2 <a href="http://192.168.1.215:3128">192.168.1.215:3128</a> ESTABLISHED<br><br></div><div>and console session hung....<br></div><div><br></div><br> <br></div><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
> <<br>
> sso-token=f5PtHwvwE6erjVBfGpaL<wbr>eUWmD9iEOeM3OXzAAocXDz4VQ-uYNs<wbr>TUt1x9NXohbCalxFUw947sZfzZyvfe<wbr>vTEaBA<br>
> ---<br>
> > sso-token=pFNiF5viL6jiu9FZIdeE<wbr>svD74eA2OuPGjzZTFa_IfPoGXFMRkQ<wbr>STmrGTB0J5lbTJ6Na_rKkGVMExxUsn<wbr>eLfhzw<br>
><br>
<br>
The strange thing is also that there is no difference between the<br>
admin=1 in webadmin vs admin=0 for user portal.<br>
<br>
So, long story short, are you using the same user to test this from webadmin/userportal?<br>
If not, could you please try to connect from user portal with the same user as from webadmin and check if the<br>
diff between the two .vv files is smaller?<br>
<br></blockquote><div><br></div><div class="gmail_extra">Yes, the user was the same. I gave admin PowerUserRole on the VM so to be able to connect as admin also in User Portal.<br></div></div></div><div class="gmail_extra"><br><br></div></div>