<div dir="ltr">OK, seems the problem is in guest agent:<div><br></div><div>after login in vm manually, I see the following logs in C:\Windows\SysWOW64\ovirt-guest-agent.log</div><div><br></div><div>//begin log</div><div><div>Dummy-1::INFO::2017-05-07 21:29:55,956::OVirtGuestService::84::root::Starting OVirt Guest Agent service</div><div>Dummy-2::INFO::2017-05-07 21:30:06,545::OVirtAgentLogic::321::root::Received an external command: api-version...</div><div>Dummy-2::INFO::2017-05-07 21:30:06,545::OVirtAgentLogic::117::root::API Version updated from 0 to 3</div><div>Dummy-2::INFO::2017-05-07 21:30:59,503::OVirtAgentLogic::321::root::Received an external command: lock-screen...</div><div>Dummy-2::INFO::2017-05-07 21:31:13,756::OVirtAgentLogic::321::root::Received an external command: login...</div><div>Dummy-2::ERROR::2017-05-07 21:31:14,756::GuestAgentWin32::311::root::Error writing credentials to pipe [1/3] (error = 2)</div><div>Dummy-2::ERROR::2017-05-07 21:31:15,756::GuestAgentWin32::311::root::Error writing credentials to pipe [2/3] (error = 2)</div><div>Dummy-2::ERROR::2017-05-07 21:31:16,755::GuestAgentWin32::311::root::Error writing credentials to pipe [3/3] (error = 2)</div></div><div>//end log<br></div><div><br></div><div>Digging into agent code to find the answer...</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-05-07 16:28 GMT+08:00 plysan <span dir="ltr"><<a href="mailto:plysab@gmail.com" target="_blank">plysab@gmail.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>I have recently set up a ovirt 4.1 environment to test vm sso.</div><div><br></div><div>spec:</div><div>* host: centos 7.3.1611</div><div>* ovirt-engine: commit <wbr>af393b7d3a494917dbda33a06813e8<wbr>e8a8c6698a from branch ovirt-engine-4.1 , self compiled.</div><div>* vdsm: vdsm-4.19.10.1-1.el7.<wbr>centos.x86_64</div><div>* windows 2008 r2 with active directory setup(domain name is "ply.local", test user is "ply@ply.local")</div><div>* windows 7 vm with guest tools setup using ovirt-guest-tools-iso-4.<wbr>1-3.fc24.noarch</div><div><br></div><div>I can add AD to ovirt engine successfully using ovirt-engine-extension-<wbr>aaa-ldap-setup tool.[1]</div><div>After adding AD domain to windows7 vm, I can login manually using AD user with no problem.</div><div><br></div><div>I can see the logs[2] when I login in to userportal with AD user, and spice client pop up automatically.</div><div>But the spice client just stops at the windows7 login screen. asking for password.</div><div>In the vm, vdagent and vdservice are all running fine. I can provide guest agent logs if needed.</div><div><br class="m_-8862793358692387680gmail-Apple-interchange-newline">So, anyone can point me to the right direction?</div><div><br></div><div>cheers</div><div><br></div><div><br></div><div>[1]: see attachment: ovirt-engine-extension-aaa-<wbr>ldap-setup-20170507034924-<wbr>w5fwc9.log</div><div>[2]: see attachment: vdsm-log,ovirt-engine-log</div><div><br></div><div><br></div><div><br></div></div>
</blockquote></div><br></div>