9:49 p.m.
I encountered a question about using web console(local vnc remote viewer) to
connect to VM.
The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect ,
the remote viewer program auto abend quickly.
The follow file is the connect file for vm that can connect using remote
viewer:
[virt-viewer]
type=vnc
host=192.168.10.41
port=5900
password=rdXQA4zr/UAY
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=HostedEngine:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6;rhel6
:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/consol
e-client-resources
[ovirt]
host=ooeng.tltd.com:443
vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8FjlK8esct
m3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkGA1UEBh
MCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNvbS4xNzczMDAe
Fw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYTAlVTMREwDwYDVQQKDA
h0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3MzAwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2nMjwyHDmb/JmKeJAUVZqNKRg1q80Ip
WyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nniGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSk
idHwySChXfVPYLPWeUJ1JUrujna/\nCbi5bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLI
ffVJfhPGS3AkIh6nznNaDeH5gFZZbd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLM
wohz7wgtgsDA36277mujNyMjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAA
Gjga0wgaowHQYDVR0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOM
qN8+QhCP7DAkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
AbBgNVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud
DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdMmjrLZGyh
5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGjdrHvhfbZFnZsGe
2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4pHS04c2+4JMhpe+hxgsO
2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVWw+QNXo5islWUXqeDc3RcnW3kq0
XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrDafZn\npTs0KJFNgeVnUhKanB29ONy+tm
nUmTAgPMaKKw==\n-----END CERTIFICATE-----\n
the firewall list of the host 192.168.10.41 is:
[root@ooengh1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio ovirt-vmconsole
snmp ssh vdsm
ports: 6900/tcp 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
the follow file is the connect file that vm that cannot connect using remote
viewer:
[virt-viewer]
type=vnc
host=ohost1.tltd.com
port=5900
password=4/jWA+RLaSZe
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=testol:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6;rhel6
:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/consol
e-client-resources
[ovirt]
host=ooeng.tltd.com:443
vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8FjlK8esct
m3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkGA1UEBh
MCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNvbS4xNzczMDAe
Fw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYTAlVTMREwDwYDVQQKDA
h0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3MzAwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2nMjwyHDmb/JmKeJAUVZqNKRg1q80Ip
WyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nniGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSk
idHwySChXfVPYLPWeUJ1JUrujna/\nCbi5bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLI
ffVJfhPGS3AkIh6nznNaDeH5gFZZbd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLM
wohz7wgtgsDA36277mujNyMjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAA
Gjga0wgaowHQYDVR0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOM
qN8+QhCP7DAkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
AbBgNVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1Ud
DwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdMmjrLZGyh
5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGjdrHvhfbZFnZsGe
2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4pHS04c2+4JMhpe+hxgsO
2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVWw+QNXo5islWUXqeDc3RcnW3kq0
XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrDafZn\npTs0KJFNgeVnUhKanB29ONy+tm
nUmTAgPMaKKw==\n-----END CERTIFICATE-----\n
the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
[root@ohost1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio ovirt-vmconsole
snmp ssh vdsm
ports: 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
Please give me some advice,thanks.
12:54 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Hi,
On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
I encountered a question about using web console(local vnc remote viewer) to connect to
VM.
The engine-vm can be accessed using this methord, but other VM in other DataCenters or
other Clusters can not be accessed, when I tried to connect , the remote viewer program
auto abend quickly.
The follow file is the connect file for vm that can connect using remote viewer:
[virt-viewer]
type=vnc
host=192.168.10.41
port=5900
password=rdXQA4zr/UAY
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=HostedEngine:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6;rhel6:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/con...
[ovirt]
host=ooeng.tltd.com:443
vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8FjlK8esctm3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----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\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
CERTIFICATE-----\n
the firewall list of the host 192.168.10.41 is:
[root@ooengh1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio ovirt-vmconsole snmp ssh
vdsm
ports: 6900/tcp 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
the follow file is the connect file that vm that cannot connect using remote viewer:
[virt-viewer]
type=vnc
host=ohost1.tltd.com
port=5900
password=4/jWA+RLaSZe
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=testol:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6;rhel6:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/con...
[ovirt]
host=ooeng.tltd.com:443
vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8FjlK8esctm3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----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\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
CERTIFICATE-----\n
the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
[root@ohost1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio ovirt-vmconsole snmp ssh
vdsm
ports: 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
Please give me some advice,thanks.
This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
Please check/share relevant logs. Try e.g. to run remote-viewer
manually with --debug and --verbose. Also check with a sniffer
(tcpdump/wireshark) that the client indeed tries to connect to the
correct host. If all looks fine, check with a sniffer on the host that
the connection is accepted, and relevant logs - mainly qemu (in
/var/log/libvirt/qemu), although I am not sure it logs connections by
default.
Good luck and best regards,
--
Didi
1:03 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Thanks for your replay.
I have tried using IP instead of hostname, but it still not work.
I want choose spice instead of vnc to have a try. But the button can not be chosen, what
should I do to activate the spiece ?
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 2:55 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Hi,
On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
I encountered a question about using web console(local vnc remote viewer) to connect to
VM.
The engine-vm can be accessed using this methord, but other VM in other DataCenters or
other Clusters can not be accessed, when I tried to connect , the remote viewer program
auto abend quickly.
The follow file is the connect file for vm that can connect using remote viewer:
[virt-viewer]
type=vnc
host=192.168.10.41
port=5900
password=rdXQA4zr/UAY
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=HostedEngine:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6
;rhel6:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/
console-client-resources
[ovirt]
host=ooeng.tltd.com:443
vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8Fjl
K8esctm3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkG
A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNv
bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYT
AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3
MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2
nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nn
iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCbi5
bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gFZZ
bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277mujNy
MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYDVR
0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP7D
AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAbBg
NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1
UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdM
mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGj
drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4
pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVW
w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrD
afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
CERTIFICATE-----\n
the firewall list of the host 192.168.10.41 is:
[root@ooengh1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
ovirt-vmconsole snmp ssh vdsm
ports: 6900/tcp 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
the follow file is the connect file that vm that cannot connect using remote viewer:
[virt-viewer]
type=vnc
host=ohost1.tltd.com
port=5900
password=4/jWA+RLaSZe
# Password is valid for 120 seconds.
delete-this-file=1
fullscreen=0
title=testol:%d
toggle-fullscreen=shift+f11
release-cursor=shift+f12
secure-attention=ctrl+alt+end
versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6
;rhel6:99.0-1
newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/
console-client-resources
[ovirt]
host=ooeng.tltd.com:443
vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8Fjl
K8esctm3Im4tz80mE1DjrNT3XQ
admin=1
ca=-----BEGIN
CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkG
A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNv
bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYT
AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3
MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2
nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nn
iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCbi5
bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gFZZ
bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277mujNy
MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYDVR
0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP7D
AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAbBg
NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1
UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdM
mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGj
drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4
pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVW
w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrD
afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
CERTIFICATE-----\n
the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
[root@ohost1 ~]# firewall-cmd --list-all public (active)
target: default
icmp-block-inversion: no
interfaces: bond0 ovirtmgmt
sources:
services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
ovirt-vmconsole snmp ssh vdsm
ports: 22/tcp 6081/udp
protocols:
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
Please give me some advice,thanks.
This seems correct, basically, assuming your client correctly resolves ohost1.tltd.com.
Please check/share relevant logs. Try e.g. to run remote-viewer manually with --debug and
--verbose. Also check with a sniffer
(tcpdump/wireshark) that the client indeed tries to connect to the correct host. If all
looks fine, check with a sniffer on the host that the connection is accepted, and relevant
logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs connections
by default.
Good luck and best regards,
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2ELFFE...
1:06 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
Thanks for your replay.
I have tried using IP instead of hostname, but it still not work.
I want choose spice instead of vnc to have a try. But the button can not be chosen, what
should I do to activate the spiece ?
Edit the VM -> Console. Will likely require rebooting the VM.
Best regards,
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 2:55 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Hi,
On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I encountered a question about using web console(local vnc remote viewer) to connect
to VM.
>
>
>
> The engine-vm can be accessed using this methord, but other VM in other DataCenters
or other Clusters can not be accessed, when I tried to connect , the remote viewer program
auto abend quickly.
>
>
>
>
>
>
>
> The follow file is the connect file for vm that can connect using remote viewer:
>
>
>
> [virt-viewer]
>
> type=vnc
>
> host=192.168.10.41
>
> port=5900
>
> password=rdXQA4zr/UAY
>
> # Password is valid for 120 seconds.
>
> delete-this-file=1
>
> fullscreen=0
>
> title=HostedEngine:%d
>
> toggle-fullscreen=shift+f11
>
> release-cursor=shift+f12
>
> secure-attention=ctrl+alt+end
>
> versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6
> ;rhel6:99.0-1
>
> newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/
> console-client-resources
>
>
>
> [ovirt]
>
> host=ooeng.tltd.com:443
>
> vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
>
> sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8Fjl
> K8esctm3Im4tz80mE1DjrNT3XQ
>
> admin=1
>
> ca=-----BEGIN
> CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkG
> A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNv
> bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYT
> AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3
> MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2
> nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nn
> iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCbi5
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gFZZ
> bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277mujNy
> MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYDVR
> 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP7D
> AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAbBg
> NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1
> UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdM
> mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGj
> drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4
> pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVW
> w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrD
> afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> CERTIFICATE-----\n
>
>
>
> the firewall list of the host 192.168.10.41 is:
>
>
>
> [root@ooengh1 ~]# firewall-cmd --list-all public (active)
>
> target: default
>
> icmp-block-inversion: no
>
> interfaces: bond0 ovirtmgmt
>
> sources:
>
> services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> ovirt-vmconsole snmp ssh vdsm
>
> ports: 6900/tcp 22/tcp 6081/udp
>
> protocols:
>
> masquerade: no
>
> forward-ports:
>
> source-ports:
>
> icmp-blocks:
>
> rich rules:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> the follow file is the connect file that vm that cannot connect using remote
viewer:
>
>
>
> [virt-viewer]
>
> type=vnc
>
> host=ohost1.tltd.com
>
> port=5900
>
> password=4/jWA+RLaSZe
>
> # Password is valid for 120 seconds.
>
> delete-this-file=1
>
> fullscreen=0
>
> title=testol:%d
>
> toggle-fullscreen=shift+f11
>
> release-cursor=shift+f12
>
> secure-attention=ctrl+alt+end
>
> versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0-6
> ;rhel6:99.0-1
>
> newer-version-url=http://www.ovirt.org/documentation/admin-guide/virt/
> console-client-resources
>
>
>
> [ovirt]
>
> host=ooeng.tltd.com:443
>
> vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
>
> sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8Fjl
> K8esctm3Im4tz80mE1DjrNT3XQ
>
> admin=1
>
> ca=-----BEGIN
> CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMAkG
> A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLmNv
> bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBAYT
> AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMTc3
> MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKbg2
> nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8nn
> iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCbi5
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gFZZ
> bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277mujNy
> MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYDVR
> 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP7D
> AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAbBg
> NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4GA1
> UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijekdM
> mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwNGj
> drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgwS4
> pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\nVW
> w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/jrD
> afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> CERTIFICATE-----\n
>
>
>
>
>
> the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
>
>
>
> [root@ohost1 ~]# firewall-cmd --list-all public (active)
>
> target: default
>
> icmp-block-inversion: no
>
> interfaces: bond0 ovirtmgmt
>
> sources:
>
> services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> ovirt-vmconsole snmp ssh vdsm
>
> ports: 22/tcp 6081/udp
>
> protocols:
>
> masquerade: no
>
> forward-ports:
>
> source-ports:
>
> icmp-blocks:
>
> rich rules:
>
>
>
>
>
> Please give me some advice,thanks.
This seems correct, basically, assuming your client correctly resolves ohost1.tltd.com.
Please check/share relevant logs. Try e.g. to run remote-viewer manually with --debug and
--verbose. Also check with a sniffer
(tcpdump/wireshark) that the client indeed tries to connect to the correct host. If all
looks fine, check with a sniffer on the host that the connection is accepted, and relevant
logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs connections
by default.
Good luck and best regards,
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2ELFFE...
--
Didi
1:24 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
I got the point!
There are two env, one is 4.3.6 and the other is 4.4.3.
On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not using
spice, maybe not installed and configured.
On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to using VNC, it
still can not work!
Now, I should install spice server and configure it to see if ovirt can using it.
Instaling is vary easy, but what should I do to configure ovirt to using spice ?
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 3:07 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
Thanks for your replay.
I have tried using IP instead of hostname, but it still not work.
I want choose spice instead of vnc to have a try. But the button can not be chosen, what
should I do to activate the spiece ?
Edit the VM -> Console. Will likely require rebooting the VM.
Best regards,
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
Yedidyah Bar David
Sent: Thursday, January 14, 2021 2:55 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Hi,
On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I encountered a question about using web console(local vnc remote viewer) to connect
to VM.
>
>
>
> The engine-vm can be accessed using this methord, but other VM in other DataCenters
or other Clusters can not be accessed, when I tried to connect , the remote viewer program
auto abend quickly.
>
>
>
>
>
>
>
> The follow file is the connect file for vm that can connect using remote viewer:
>
>
>
> [virt-viewer]
>
> type=vnc
>
> host=192.168.10.41
>
> port=5900
>
> password=rdXQA4zr/UAY
>
> # Password is valid for 120 seconds.
>
> delete-this-file=1
>
> fullscreen=0
>
> title=HostedEngine:%d
>
> toggle-fullscreen=shift+f11
>
> release-cursor=shift+f12
>
> secure-attention=ctrl+alt+end
>
> versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0
> -6
> ;rhel6:99.0-1
>
> newer-version-url=http://www.ovirt.org/documentation/admin-guide/vir
> t/
> console-client-resources
>
>
>
> [ovirt]
>
> host=ooeng.tltd.com:443
>
> vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
>
> sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8F
> jl
> K8esctm3Im4tz80mE1DjrNT3XQ
>
> admin=1
>
> ca=-----BEGIN
> CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMA
> kG
> A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLm
> Nv
> bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBA
> YT
> AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMT
> c3
> MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKb
> g2
> nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8
> nn
> iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCb
> iGt+i5
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gF
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277muj
> Ny
> MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYD
> VR
> 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP
> 0OBBYEFDYEqJOMqN8+7D
> AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAb
> Bg
> NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4G
> A1
> UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijek
> dM
> mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwN
> Gj
> drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgw
> S4
> pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\n
> pHS04c2+4JMhpe+hxgsO2+VW
> w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/j
> w+rD
> afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> CERTIFICATE-----\n
>
>
>
> the firewall list of the host 192.168.10.41 is:
>
>
>
> [root@ooengh1 ~]# firewall-cmd --list-all public (active)
>
> target: default
>
> icmp-block-inversion: no
>
> interfaces: bond0 ovirtmgmt
>
> sources:
>
> services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> ovirt-vmconsole snmp ssh vdsm
>
> ports: 6900/tcp 22/tcp 6081/udp
>
> protocols:
>
> masquerade: no
>
> forward-ports:
>
> source-ports:
>
> icmp-blocks:
>
> rich rules:
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> the follow file is the connect file that vm that cannot connect using remote
viewer:
>
>
>
> [virt-viewer]
>
> type=vnc
>
> host=ohost1.tltd.com
>
> port=5900
>
> password=4/jWA+RLaSZe
>
> # Password is valid for 120 seconds.
>
> delete-this-file=1
>
> fullscreen=0
>
> title=testol:%d
>
> toggle-fullscreen=shift+f11
>
> release-cursor=shift+f12
>
> secure-attention=ctrl+alt+end
>
> versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0
> -6
> ;rhel6:99.0-1
>
> newer-version-url=http://www.ovirt.org/documentation/admin-guide/vir
> t/
> console-client-resources
>
>
>
> [ovirt]
>
> host=ooeng.tltd.com:443
>
> vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
>
> sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8F
> jl
> K8esctm3Im4tz80mE1DjrNT3XQ
>
> admin=1
>
> ca=-----BEGIN
> CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMA
> kG
> A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLm
> Nv
> bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBA
> YT
> AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMT
> c3
> MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKb
> g2
> nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8
> nn
> iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCb
> iGt+i5
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gF
> bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277muj
> Ny
> MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYD
> VR
> 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP
> 0OBBYEFDYEqJOMqN8+7D
> AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAb
> Bg
> NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4G
> A1
> UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijek
> dM
> mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwN
> Gj
> drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgw
> S4
> pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\n
> pHS04c2+4JMhpe+hxgsO2+VW
> w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/j
> w+rD
> afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> CERTIFICATE-----\n
>
>
>
>
>
> the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
>
>
>
> [root@ohost1 ~]# firewall-cmd --list-all public (active)
>
> target: default
>
> icmp-block-inversion: no
>
> interfaces: bond0 ovirtmgmt
>
> sources:
>
> services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> ovirt-vmconsole snmp ssh vdsm
>
> ports: 22/tcp 6081/udp
>
> protocols:
>
> masquerade: no
>
> forward-ports:
>
> source-ports:
>
> icmp-blocks:
>
> rich rules:
>
>
>
>
>
> Please give me some advice,thanks.
This seems correct, basically, assuming your client correctly resolves ohost1.tltd.com.
Please check/share relevant logs. Try e.g. to run remote-viewer
manually with --debug and --verbose. Also check with a sniffer
(tcpdump/wireshark) that the client indeed tries to connect to the correct host. If all
looks fine, check with a sniffer on the host that the connection is accepted, and relevant
logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs connections
by default.
Good luck and best regards,
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2EL
FFEDPEIQJ7BKWQQ7GOEFEFC5/
--
Didi
1:37 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
I got the point!
There are two env, one is 4.3.6 and the other is 4.4.3.
On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not using
spice, maybe not installed and configured.
Not sure we support changing the engine VM console type. The engine vm
is special, some changes are not allowed.
Please try a different VM.
On 4.4.3, I can connect any vm, but is using spice protocol. I
changed vm to using VNC, it still can not work!
Did you try also novnc?
If it works, there might be a problem with your client
(remote-viewer?). Which one do you use and which version?
Now, I should install spice server and configure it to see if ovirt can using it.
Instaling is vary easy, but what should I do to configure ovirt to using spice ?
You do not need to install a spice server (inside the VM), and even if
you do, oVirt will not use it.
The spice server here is part of the qemu process.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 3:07 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
>
> Thanks for your replay.
>
> I have tried using IP instead of hostname, but it still not work.
>
> I want choose spice instead of vnc to have a try. But the button can not be chosen,
what should I do to activate the spiece ?
Edit the VM -> Console. Will likely require rebooting the VM.
Best regards,
>
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 2:55 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> Hi,
>
> On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I encountered a question about using web console(local vnc remote viewer) to
connect to VM.
> >
> >
> >
> > The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect , the remote
viewer program auto abend quickly.
> >
> >
> >
> >
> >
> >
> >
> > The follow file is the connect file for vm that can connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=192.168.10.41
> >
> > port=5900
> >
> > password=rdXQA4zr/UAY
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=HostedEngine:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/vir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277muj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAb
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> > the firewall list of the host 192.168.10.41 is:
> >
> >
> >
> > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 6900/tcp 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > the follow file is the connect file that vm that cannot connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=ohost1.tltd.com
> >
> > port=5900
> >
> > password=4/jWA+RLaSZe
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=testol:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2.0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/vir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzELMA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRkLm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNVBA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20uMT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQKb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3So8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\nCb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277muj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQYD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+QhCP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHTAb
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ijek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22HwN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycPgw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> >
> >
> > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> >
> >
> >
> > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> > Please give me some advice,thanks.
>
> This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
>
> Please check/share relevant logs. Try e.g. to run remote-viewer
> manually with --debug and --verbose. Also check with a sniffer
> (tcpdump/wireshark) that the client indeed tries to connect to the correct host. If
all looks fine, check with a sniffer on the host that the connection is accepted, and
relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
>
> Good luck and best regards,
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org
> To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2EL
> FFEDPEIQJ7BKWQQ7GOEFEFC5/
>
>
--
Didi
--
Didi
1:52 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check that:
websocket proxy service is running,
firewalls are properly set,
websocket proxy certificate is trusted by your browser. Default CA certificate.
I try to using novnc, but it raese such error.
How to check the websocked proxy service ?
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 3:37 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
I got the point!
There are two env, one is 4.3.6 and the other is 4.4.3.
On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not using
spice, maybe not installed and configured.
Not sure we support changing the engine VM console type. The engine vm is special, some
changes are not allowed.
Please try a different VM.
On 4.4.3, I can connect any vm, but is using spice protocol. I
changed vm to using VNC, it still can not work!
Did you try also novnc?
If it works, there might be a problem with your client (remote-viewer?). Which one do you
use and which version?
Now, I should install spice server and configure it to see if ovirt can using it.
Instaling is vary easy, but what should I do to configure ovirt to using spice ?
You do not need to install a spice server (inside the VM), and even if you do, oVirt will
not use it.
The spice server here is part of the qemu process.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah
Bar David
Sent: Thursday, January 14, 2021 3:07 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
>
> Thanks for your replay.
>
> I have tried using IP instead of hostname, but it still not work.
>
> I want choose spice instead of vnc to have a try. But the button can not be chosen,
what should I do to activate the spiece ?
Edit the VM -> Console. Will likely require rebooting the VM.
Best regards,
>
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 2:55 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> Hi,
>
> On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I encountered a question about using web console(local vnc remote viewer) to
connect to VM.
> >
> >
> >
> > The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect , the remote
viewer program auto abend quickly.
> >
> >
> >
> >
> >
> >
> >
> > The follow file is the connect file for vm that can connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=192.168.10.41
> >
> > port=5900
> >
> > password=rdXQA4zr/UAY
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=HostedEngine:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > .0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > ir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > 8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > MA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > Lm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > BA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > MT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > Kb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > o8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > iGt+Cb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > uj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > YD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > 0OBBYEFDYEqJOMqN8+CP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > Ab
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > 4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > ek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > wN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > gw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > pHS04c2+4JMhpe+hxgsO2+\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > w+/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> > the firewall list of the host 192.168.10.41 is:
> >
> >
> >
> > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 6900/tcp 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > the follow file is the connect file that vm that cannot connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=ohost1.tltd.com
> >
> > port=5900
> >
> > password=4/jWA+RLaSZe
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=testol:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > .0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > ir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > 8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > MA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > Lm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > BA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > MT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > Kb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > o8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > iGt+Cb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > uj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > YD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > 0OBBYEFDYEqJOMqN8+CP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > Ab
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > 4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > ek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > wN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > gw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > pHS04c2+4JMhpe+hxgsO2+\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > w+/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> >
> >
> > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> >
> >
> >
> > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> > Please give me some advice,thanks.
>
> This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
>
> Please check/share relevant logs. Try e.g. to run remote-viewer
> manually with --debug and --verbose. Also check with a sniffer
> (tcpdump/wireshark) that the client indeed tries to connect to the correct host. If
all looks fine, check with a sniffer on the host that the connection is accepted, and
relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
>
> Good luck and best regards,
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2
> EL
> FFEDPEIQJ7BKWQQ7GOEFEFC5/
>
>
--
Didi
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2NXO2E...
2:02 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
I tried it .
1. The service is well.
2.The firewall is ok.
3.The CA Cert is installed.
But can not disappear anything ,just appear: Loading
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of tommy
Sent: Thursday, January 14, 2021 3:53 PM
To: 'Yedidyah Bar David' <didi(a)redhat.com>
Cc: 'oVirt development list' <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check that:
websocket proxy service is running,
firewalls are properly set,
websocket proxy certificate is trusted by your browser. Default CA certificate.
I try to using novnc, but it raese such error.
How to check the websocked proxy service ?
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 3:37 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
I got the point!
There are two env, one is 4.3.6 and the other is 4.4.3.
On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not using
spice, maybe not installed and configured.
Not sure we support changing the engine VM console type. The engine vm is special, some
changes are not allowed.
Please try a different VM.
On 4.4.3, I can connect any vm, but is using spice protocol. I
changed vm to using VNC, it still can not work!
Did you try also novnc?
If it works, there might be a problem with your client (remote-viewer?). Which one do you
use and which version?
Now, I should install spice server and configure it to see if ovirt can using it.
Instaling is vary easy, but what should I do to configure ovirt to using spice ?
You do not need to install a spice server (inside the VM), and even if you do, oVirt will
not use it.
The spice server here is part of the qemu process.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah
Bar David
Sent: Thursday, January 14, 2021 3:07 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
>
> Thanks for your replay.
>
> I have tried using IP instead of hostname, but it still not work.
>
> I want choose spice instead of vnc to have a try. But the button can not be chosen,
what should I do to activate the spiece ?
Edit the VM -> Console. Will likely require rebooting the VM.
Best regards,
>
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 2:55 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> Hi,
>
> On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I encountered a question about using web console(local vnc remote viewer) to
connect to VM.
> >
> >
> >
> > The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect , the remote
viewer program auto abend quickly.
> >
> >
> >
> >
> >
> >
> >
> > The follow file is the connect file for vm that can connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=192.168.10.41
> >
> > port=5900
> >
> > password=rdXQA4zr/UAY
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=HostedEngine:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > .0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > ir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > 8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > MA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > Lm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > BA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > MT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > Kb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > o8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > iGt+Cb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > uj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > YD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > 0OBBYEFDYEqJOMqN8+CP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > Ab
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > 4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > ek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > wN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > gw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > pHS04c2+4JMhpe+hxgsO2+\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > w+/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> > the firewall list of the host 192.168.10.41 is:
> >
> >
> >
> > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 6900/tcp 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > the follow file is the connect file that vm that cannot connect using remote
viewer:
> >
> >
> >
> > [virt-viewer]
> >
> > type=vnc
> >
> > host=ohost1.tltd.com
> >
> > port=5900
> >
> > password=4/jWA+RLaSZe
> >
> > # Password is valid for 120 seconds.
> >
> > delete-this-file=1
> >
> > fullscreen=0
> >
> > title=testol:%d
> >
> > toggle-fullscreen=shift+f11
> >
> > release-cursor=shift+f12
> >
> > secure-attention=ctrl+alt+end
> >
> > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > .0
> > -6
> > ;rhel6:99.0-1
> >
> > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > ir
> > t/
> > console-client-resources
> >
> >
> >
> > [ovirt]
> >
> > host=ooeng.tltd.com:443
> >
> > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> >
> > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > 8F
> > jl
> > K8esctm3Im4tz80mE1DjrNT3XQ
> >
> > admin=1
> >
> > ca=-----BEGIN
> > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > MA
> > kG
> > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > Lm
> > Nv
> > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > BA
> > YT
> > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > MT
> > c3
> > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > Kb
> > g2
> > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > o8
> > nn
> > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > iGt+Cb
> > iGt+i5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > uj
> > Ny
> > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > YD
> > VR
> > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > 0OBBYEFDYEqJOMqN8+CP
> > 0OBBYEFDYEqJOMqN8+7D
> > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > Ab
> > Bg
> > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > 4G
> > A1
> > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > ek
> > dM
> > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > wN
> > Gj
> > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > gw
> > S4
> > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > pHS04c2+4JMhpe+hxgsO2+\n
> > pHS04c2+4JMhpe+hxgsO2+VW
> > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > w+/j
> > w+rD
> > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > CERTIFICATE-----\n
> >
> >
> >
> >
> >
> > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> >
> >
> >
> > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> >
> > target: default
> >
> > icmp-block-inversion: no
> >
> > interfaces: bond0 ovirtmgmt
> >
> > sources:
> >
> > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > ovirt-vmconsole snmp ssh vdsm
> >
> > ports: 22/tcp 6081/udp
> >
> > protocols:
> >
> > masquerade: no
> >
> > forward-ports:
> >
> > source-ports:
> >
> > icmp-blocks:
> >
> > rich rules:
> >
> >
> >
> >
> >
> > Please give me some advice,thanks.
>
> This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
>
> Please check/share relevant logs. Try e.g. to run remote-viewer
> manually with --debug and --verbose. Also check with a sniffer
> (tcpdump/wireshark) that the client indeed tries to connect to the correct host. If
all looks fine, check with a sniffer on the host that the connection is accepted, and
relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
>
> Good luck and best regards,
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2
> EL
> FFEDPEIQJ7BKWQQ7GOEFEFC5/
>
>
--
Didi
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2NXO2E...
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA66JLEO...
2:37 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com> wrote:
I tried it .
1. The service is well.
2.The firewall is ok.
3.The CA Cert is installed.
But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com
ssh -p 6100 -v ooeng.tltd.com
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of tommy
Sent: Thursday, January 14, 2021 3:53 PM
To: 'Yedidyah Bar David' <didi(a)redhat.com>
Cc: 'oVirt development list' <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check
that:
websocket proxy service is running,
firewalls are properly set,
websocket proxy certificate is trusted by your browser. Default CA certificate.
I try to using novnc, but it raese such error.
How to check the websocked proxy service ?
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 3:37 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I got the point!
>
> There are two env, one is 4.3.6 and the other is 4.4.3.
>
> On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not
using spice, maybe not installed and configured.
Not sure we support changing the engine VM console type. The engine vm is special, some
changes are not allowed.
Please try a different VM.
> On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to using
VNC, it still can not work!
Did you try also novnc?
If it works, there might be a problem with your client (remote-viewer?). Which one do you
use and which version?
>
> Now, I should install spice server and configure it to see if ovirt can using it.
>
> Instaling is vary easy, but what should I do to configure ovirt to using spice ?
You do not need to install a spice server (inside the VM), and even if you do, oVirt will
not use it.
The spice server here is part of the qemu process.
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah
> Bar David
> Sent: Thursday, January 14, 2021 3:07 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > Thanks for your replay.
> >
> > I have tried using IP instead of hostname, but it still not work.
> >
> > I want choose spice instead of vnc to have a try. But the button can not be
chosen, what should I do to activate the spiece ?
>
> Edit the VM -> Console. Will likely require rebooting the VM.
>
> Best regards,
>
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 2:55 PM
> > To: tommy <sz_cuitao(a)163.com>
> > Cc: oVirt development list <devel(a)ovirt.org>
> > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > Hi,
> >
> > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> > >
> > > I encountered a question about using web console(local vnc remote viewer)
to connect to VM.
> > >
> > >
> > >
> > > The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect , the remote
viewer program auto abend quickly.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > The follow file is the connect file for vm that can connect using remote
viewer:
> > >
> > >
> > >
> > > [virt-viewer]
> > >
> > > type=vnc
> > >
> > > host=192.168.10.41
> > >
> > > port=5900
> > >
> > > password=rdXQA4zr/UAY
> > >
> > > # Password is valid for 120 seconds.
> > >
> > > delete-this-file=1
> > >
> > > fullscreen=0
> > >
> > > title=HostedEngine:%d
> > >
> > > toggle-fullscreen=shift+f11
> > >
> > > release-cursor=shift+f12
> > >
> > > secure-attention=ctrl+alt+end
> > >
> > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > > .0
> > > -6
> > > ;rhel6:99.0-1
> > >
> > > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > > ir
> > > t/
> > > console-client-resources
> > >
> > >
> > >
> > > [ovirt]
> > >
> > > host=ooeng.tltd.com:443
> > >
> > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > >
> > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > > 8F
> > > jl
> > > K8esctm3Im4tz80mE1DjrNT3XQ
> > >
> > > admin=1
> > >
> > > ca=-----BEGIN
> > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > > MA
> > > kG
> > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > > Lm
> > > Nv
> > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > > BA
> > > YT
> > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > > MT
> > > c3
> > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > > Kb
> > > g2
> > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > > o8
> > > nn
> > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > > iGt+Cb
> > > iGt+i5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > > uj
> > > Ny
> > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > > YD
> > > VR
> > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > > 0OBBYEFDYEqJOMqN8+CP
> > > 0OBBYEFDYEqJOMqN8+7D
> > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > > Ab
> > > Bg
> > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > > 4G
> > > A1
> > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > > ek
> > > dM
> > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > > wN
> > > Gj
> > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > > gw
> > > S4
> > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > > pHS04c2+4JMhpe+hxgsO2+\n
> > > pHS04c2+4JMhpe+hxgsO2+VW
> > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > > w+/j
> > > w+rD
> > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > CERTIFICATE-----\n
> > >
> > >
> > >
> > > the firewall list of the host 192.168.10.41 is:
> > >
> > >
> > >
> > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > >
> > > target: default
> > >
> > > icmp-block-inversion: no
> > >
> > > interfaces: bond0 ovirtmgmt
> > >
> > > sources:
> > >
> > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > ovirt-vmconsole snmp ssh vdsm
> > >
> > > ports: 6900/tcp 22/tcp 6081/udp
> > >
> > > protocols:
> > >
> > > masquerade: no
> > >
> > > forward-ports:
> > >
> > > source-ports:
> > >
> > > icmp-blocks:
> > >
> > > rich rules:
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > >
> > >
> > >
> > > [virt-viewer]
> > >
> > > type=vnc
> > >
> > > host=ohost1.tltd.com
> > >
> > > port=5900
> > >
> > > password=4/jWA+RLaSZe
> > >
> > > # Password is valid for 120 seconds.
> > >
> > > delete-this-file=1
> > >
> > > fullscreen=0
> > >
> > > title=testol:%d
> > >
> > > toggle-fullscreen=shift+f11
> > >
> > > release-cursor=shift+f12
> > >
> > > secure-attention=ctrl+alt+end
> > >
> > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7:2
> > > .0
> > > -6
> > > ;rhel6:99.0-1
> > >
> > > newer-version-url=http://www.ovirt.org/documentation/admin-guide/v
> > > ir
> > > t/
> > > console-client-resources
> > >
> > >
> > >
> > > [ovirt]
> > >
> > > host=ooeng.tltd.com:443
> > >
> > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > >
> > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3dU
> > > 8F
> > > jl
> > > K8esctm3Im4tz80mE1DjrNT3XQ
> > >
> > > admin=1
> > >
> > > ca=-----BEGIN
> > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPzEL
> > > MA
> > > kG
> > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bHRk
> > > Lm
> > > Nv
> > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBgNV
> > > BA
> > > YT
> > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb20u
> > > MT
> > > c3
> > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAqFQ
> > > Kb
> > > g2
> > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC3S
> > > o8
> > > nn
> > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/\n
> > > iGt+Cb
> > > iGt+i5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDeH5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36277m
> > > uj
> > > Ny
> > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaowHQ
> > > YD
> > > VR
> > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+Qh
> > > 0OBBYEFDYEqJOMqN8+CP
> > > 0OBBYEFDYEqJOMqN8+7D
> > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20xHT
> > > Ab
> > > Bg
> > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/MA
> > > 4G
> > > A1
> > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9ij
> > > ek
> > > dM
> > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM22H
> > > wN
> > > Gj
> > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1saycP
> > > gw
> > > S4
> > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7McqaHN
> > > pHS04c2+4JMhpe+hxgsO2+\n
> > > pHS04c2+4JMhpe+hxgsO2+VW
> > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax1O
> > > w+/j
> > > w+rD
> > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > CERTIFICATE-----\n
> > >
> > >
> > >
> > >
> > >
> > > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> > >
> > >
> > >
> > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > >
> > > target: default
> > >
> > > icmp-block-inversion: no
> > >
> > > interfaces: bond0 ovirtmgmt
> > >
> > > sources:
> > >
> > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > ovirt-vmconsole snmp ssh vdsm
> > >
> > > ports: 22/tcp 6081/udp
> > >
> > > protocols:
> > >
> > > masquerade: no
> > >
> > > forward-ports:
> > >
> > > source-ports:
> > >
> > > icmp-blocks:
> > >
> > > rich rules:
> > >
> > >
> > >
> > >
> > >
> > > Please give me some advice,thanks.
> >
> > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
> >
> > Please check/share relevant logs. Try e.g. to run remote-viewer
> > manually with --debug and --verbose. Also check with a sniffer
> > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> >
> > Good luck and best regards,
> > --
> > Didi
> > _______________________________________________
> > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> > to devel-leave(a)ovirt.org Privacy
> > Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJVR2
> > EL
> > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> >
> >
>
>
> --
> Didi
>
>
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2NXO2E...
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy Statement:
https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA66JLEO...
--
Didi
2:46 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Yeah.
Ping is Ok,telnet is also ok.
I want know how to enable spice protocol on my ovirt env ?
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 4:38 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com> wrote:
I tried it .
1. The service is well.
2.The firewall is ok.
3.The CA Cert is installed.
But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com
ssh -p 6100 -v ooeng.tltd.com
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
tommy
Sent: Thursday, January 14, 2021 3:53 PM
To: 'Yedidyah Bar David' <didi(a)redhat.com>
Cc: 'oVirt development list' <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check
that:
websocket proxy service is running,
firewalls are properly set,
websocket proxy certificate is trusted by your browser. Default CA certificate.
I try to using novnc, but it raese such error.
How to check the websocked proxy service ?
-----Original Message-----
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
Yedidyah Bar David
Sent: Thursday, January 14, 2021 3:37 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I got the point!
>
> There are two env, one is 4.3.6 and the other is 4.4.3.
>
> On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can not
using spice, maybe not installed and configured.
Not sure we support changing the engine VM console type. The engine vm is special, some
changes are not allowed.
Please try a different VM.
> On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to using
VNC, it still can not work!
Did you try also novnc?
If it works, there might be a problem with your client (remote-viewer?). Which one do you
use and which version?
>
> Now, I should install spice server and configure it to see if ovirt can using it.
>
> Instaling is vary easy, but what should I do to configure ovirt to using spice ?
You do not need to install a spice server (inside the VM), and even if you do, oVirt will
not use it.
The spice server here is part of the qemu process.
>
>
>
>
>
>
>
>
>
> -----Original Message-----
> From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 3:07 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > Thanks for your replay.
> >
> > I have tried using IP instead of hostname, but it still not work.
> >
> > I want choose spice instead of vnc to have a try. But the button can not be
chosen, what should I do to activate the spiece ?
>
> Edit the VM -> Console. Will likely require rebooting the VM.
>
> Best regards,
>
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf
> > Of Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 2:55 PM
> > To: tommy <sz_cuitao(a)163.com>
> > Cc: oVirt development list <devel(a)ovirt.org>
> > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > Hi,
> >
> > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> > >
> > > I encountered a question about using web console(local vnc remote viewer)
to connect to VM.
> > >
> > >
> > >
> > > The engine-vm can be accessed using this methord, but other VM in other
DataCenters or other Clusters can not be accessed, when I tried to connect , the remote
viewer program auto abend quickly.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > The follow file is the connect file for vm that can connect using remote
viewer:
> > >
> > >
> > >
> > > [virt-viewer]
> > >
> > > type=vnc
> > >
> > > host=192.168.10.41
> > >
> > > port=5900
> > >
> > > password=rdXQA4zr/UAY
> > >
> > > # Password is valid for 120 seconds.
> > >
> > > delete-this-file=1
> > >
> > > fullscreen=0
> > >
> > > title=HostedEngine:%d
> > >
> > > toggle-fullscreen=shift+f11
> > >
> > > release-cursor=shift+f12
> > >
> > > secure-attention=ctrl+alt+end
> > >
> > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7
> > > :2
> > > .0
> > > -6
> > > ;rhel6:99.0-1
> > >
> > > newer-version-url=http://www.ovirt.org/documentation/admin-guide
> > > /v
> > > ir
> > > t/
> > > console-client-resources
> > >
> > >
> > >
> > > [ovirt]
> > >
> > > host=ooeng.tltd.com:443
> > >
> > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > >
> > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3
> > > dU
> > > 8F
> > > jl
> > > K8esctm3Im4tz80mE1DjrNT3XQ
> > >
> > > admin=1
> > >
> > > ca=-----BEGIN
> > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPz
> > > EL
> > > MA
> > > kG
> > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bH
> > > Rk
> > > Lm
> > > Nv
> > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBg
> > > NV
> > > BA
> > > YT
> > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb2
> > > 0u
> > > MT
> > > c3
> > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAq
> > > FQ
> > > Kb
> > > g2
> > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC
> > > 3S
> > > o8
> > > nn
> > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/
> > > iGt+\n
> > > iGt+Cb
> > > iGt+i5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDe
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA3627
> > > 7m
> > > uj
> > > Ny
> > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaow
> > > HQ
> > > YD
> > > VR
> > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+
> > > 0OBBYEFDYEqJOMqN8+Qh
> > > 0OBBYEFDYEqJOMqN8+CP
> > > 0OBBYEFDYEqJOMqN8+7D
> > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20x
> > > HT
> > > Ab
> > > Bg
> > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/
> > > MA
> > > 4G
> > > A1
> > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9
> > > ij
> > > ek
> > > dM
> > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM2
> > > 2H
> > > wN
> > > Gj
> > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1say
> > > cP
> > > gw
> > > S4
> > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mcqa
> > > pHS04c2+4JMhpe+hxgsO2+HN
> > > pHS04c2+4JMhpe+hxgsO2+\n
> > > pHS04c2+4JMhpe+hxgsO2+VW
> > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax
> > > w+1O
> > > w+/j
> > > w+rD
> > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > CERTIFICATE-----\n
> > >
> > >
> > >
> > > the firewall list of the host 192.168.10.41 is:
> > >
> > >
> > >
> > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > >
> > > target: default
> > >
> > > icmp-block-inversion: no
> > >
> > > interfaces: bond0 ovirtmgmt
> > >
> > > sources:
> > >
> > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > ovirt-vmconsole snmp ssh vdsm
> > >
> > > ports: 6900/tcp 22/tcp 6081/udp
> > >
> > > protocols:
> > >
> > > masquerade: no
> > >
> > > forward-ports:
> > >
> > > source-ports:
> > >
> > > icmp-blocks:
> > >
> > > rich rules:
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > >
> > >
> > >
> > > [virt-viewer]
> > >
> > > type=vnc
> > >
> > > host=ohost1.tltd.com
> > >
> > > port=5900
> > >
> > > password=4/jWA+RLaSZe
> > >
> > > # Password is valid for 120 seconds.
> > >
> > > delete-this-file=1
> > >
> > > fullscreen=0
> > >
> > > title=testol:%d
> > >
> > > toggle-fullscreen=shift+f11
> > >
> > > release-cursor=shift+f12
> > >
> > > secure-attention=ctrl+alt+end
> > >
> > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7
> > > :2
> > > .0
> > > -6
> > > ;rhel6:99.0-1
> > >
> > > newer-version-url=http://www.ovirt.org/documentation/admin-guide
> > > /v
> > > ir
> > > t/
> > > console-client-resources
> > >
> > >
> > >
> > > [ovirt]
> > >
> > > host=ooeng.tltd.com:443
> > >
> > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > >
> > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3
> > > dU
> > > 8F
> > > jl
> > > K8esctm3Im4tz80mE1DjrNT3XQ
> > >
> > > admin=1
> > >
> > > ca=-----BEGIN
> > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPz
> > > EL
> > > MA
> > > kG
> > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bH
> > > Rk
> > > Lm
> > > Nv
> > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBg
> > > NV
> > > BA
> > > YT
> > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb2
> > > 0u
> > > MT
> > > c3
> > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAq
> > > FQ
> > > Kb
> > > g2
> > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC
> > > 3S
> > > o8
> > > nn
> > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/
> > > iGt+\n
> > > iGt+Cb
> > > iGt+i5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDe
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA3627
> > > 7m
> > > uj
> > > Ny
> > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaow
> > > HQ
> > > YD
> > > VR
> > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+
> > > 0OBBYEFDYEqJOMqN8+Qh
> > > 0OBBYEFDYEqJOMqN8+CP
> > > 0OBBYEFDYEqJOMqN8+7D
> > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20x
> > > HT
> > > Ab
> > > Bg
> > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/
> > > MA
> > > 4G
> > > A1
> > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9
> > > ij
> > > ek
> > > dM
> > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM2
> > > 2H
> > > wN
> > > Gj
> > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1say
> > > cP
> > > gw
> > > S4
> > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mcqa
> > > pHS04c2+4JMhpe+hxgsO2+HN
> > > pHS04c2+4JMhpe+hxgsO2+\n
> > > pHS04c2+4JMhpe+hxgsO2+VW
> > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax
> > > w+1O
> > > w+/j
> > > w+rD
> > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > CERTIFICATE-----\n
> > >
> > >
> > >
> > >
> > >
> > > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> > >
> > >
> > >
> > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > >
> > > target: default
> > >
> > > icmp-block-inversion: no
> > >
> > > interfaces: bond0 ovirtmgmt
> > >
> > > sources:
> > >
> > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > ovirt-vmconsole snmp ssh vdsm
> > >
> > > ports: 22/tcp 6081/udp
> > >
> > > protocols:
> > >
> > > masquerade: no
> > >
> > > forward-ports:
> > >
> > > source-ports:
> > >
> > > icmp-blocks:
> > >
> > > rich rules:
> > >
> > >
> > >
> > >
> > >
> > > Please give me some advice,thanks.
> >
> > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
> >
> > Please check/share relevant logs. Try e.g. to run remote-viewer
> > manually with --debug and --verbose. Also check with a sniffer
> > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> >
> > Good luck and best regards,
> > --
> > Didi
> > _______________________________________________
> > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> > to devel-leave(a)ovirt.org Privacy
> > Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJV
> > R2
> > EL
> > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> >
> >
>
>
> --
> Didi
>
>
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2NX
O2EEYTI366FBT2RWKNZX64FO/
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA66J
LEO2QDCPAWHLBVL4NFITADXA/
--
Didi
2:51 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
On Thu, Jan 14, 2021 at 10:46 AM tommy <sz_cuitao(a)163.com> wrote:
Yeah.
Ping is Ok,telnet is also ok.
I want know how to enable spice protocol on my ovirt env ?
I think Edit VM should be enough. If it's grayed-out even when the
machine is down,
then I do not know.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 4:38 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I tried it .
>
> 1. The service is well.
>
> 2.The firewall is ok.
>
> 3.The CA Cert is installed.
>
> But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com
ssh -p 6100 -v ooeng.tltd.com
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> tommy
> Sent: Thursday, January 14, 2021 3:53 PM
> To: 'Yedidyah Bar David' <didi(a)redhat.com>
> Cc: 'oVirt development list' <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
>
> Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check
that:
> websocket proxy service is running,
> firewalls are properly set,
> websocket proxy certificate is trusted by your browser. Default CA certificate.
>
>
> I try to using novnc, but it raese such error.
> How to check the websocked proxy service ?
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 3:37 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I got the point!
> >
> > There are two env, one is 4.3.6 and the other is 4.4.3.
> >
> > On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can
not using spice, maybe not installed and configured.
>
> Not sure we support changing the engine VM console type. The engine vm is special,
some changes are not allowed.
>
> Please try a different VM.
>
> > On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to
using VNC, it still can not work!
>
> Did you try also novnc?
>
> If it works, there might be a problem with your client (remote-viewer?). Which one
do you use and which version?
>
> >
> > Now, I should install spice server and configure it to see if ovirt can using
it.
> >
> > Instaling is vary easy, but what should I do to configure ovirt to using spice
?
>
> You do not need to install a spice server (inside the VM), and even if you do, oVirt
will not use it.
> The spice server here is part of the qemu process.
>
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 3:07 PM
> > To: tommy <sz_cuitao(a)163.com>
> > Cc: oVirt development list <devel(a)ovirt.org>
> > Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
> > >
> > > Thanks for your replay.
> > >
> > > I have tried using IP instead of hostname, but it still not work.
> > >
> > > I want choose spice instead of vnc to have a try. But the button can not
be chosen, what should I do to activate the spiece ?
> >
> > Edit the VM -> Console. Will likely require rebooting the VM.
> >
> > Best regards,
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf
> > > Of Yedidyah Bar David
> > > Sent: Thursday, January 14, 2021 2:55 PM
> > > To: tommy <sz_cuitao(a)163.com>
> > > Cc: oVirt development list <devel(a)ovirt.org>
> > > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> > >
> > > Hi,
> > >
> > > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> > > >
> > > > I encountered a question about using web console(local vnc remote
viewer) to connect to VM.
> > > >
> > > >
> > > >
> > > > The engine-vm can be accessed using this methord, but other VM in
other DataCenters or other Clusters can not be accessed, when I tried to connect , the
remote viewer program auto abend quickly.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > The follow file is the connect file for vm that can connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=192.168.10.41
> > > >
> > > > port=5900
> > > >
> > > > password=rdXQA4zr/UAY
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=HostedEngine:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-guide
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443
> > > >
> > > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDe
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA3627
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1say
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mcqa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > > the firewall list of the host 192.168.10.41 is:
> > > >
> > > >
> > > >
> > > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 6900/tcp 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=ohost1.tltd.com
> > > >
> > > > port=5900
> > > >
> > > > password=4/jWA+RLaSZe
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=testol:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhel7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-guide
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443
> > > >
> > > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfEr3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwPz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJBg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5jb2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUzAq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13PoEC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujna/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNaDe
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA3627
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wgaow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb20x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQH/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0PjF9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2veM2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1say
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mcqa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6Fax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> > > >
> > > >
> > > >
> > > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Please give me some advice,thanks.
> > >
> > > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
> > >
> > > Please check/share relevant logs. Try e.g. to run remote-viewer
> > > manually with --debug and --verbose. Also check with a sniffer
> > > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> > >
> > > Good luck and best regards,
> > > --
> > > Didi
> > > _______________________________________________
> > > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> > > to devel-leave(a)ovirt.org Privacy
> > > Statement: https://www.ovirt.org/privacy-policy.html
> > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/
> > > List Archives:
> > > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UAJV
> > > R2
> > > EL
> > > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> > >
> > >
> >
> >
> > --
> > Didi
> >
> >
>
>
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org
> To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2NX
> O2EEYTI366FBT2RWKNZX64FO/
>
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org
> To unsubscribe send an email to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA66J
> LEO2QDCPAWHLBVL4NFITADXA/
>
>
--
Didi
--
Didi
2:57 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Cannot add the apice on ovirt vm's console page.
Please refer the attached file.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 4:52 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:46 AM tommy <sz_cuitao(a)163.com> wrote:
Yeah.
Ping is Ok,telnet is also ok.
I want know how to enable spice protocol on my ovirt env ?
I think Edit VM should be enough. If it's grayed-out even when the machine is down,
then I do not know.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah
Bar David
Sent: Thursday, January 14, 2021 4:38 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com> wrote:
>
> I tried it .
>
> 1. The service is well.
>
> 2.The firewall is ok.
>
> 3.The CA Cert is installed.
>
> But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com
ssh -p 6100 -v ooeng.tltd.com
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> tommy
> Sent: Thursday, January 14, 2021 3:53 PM
> To: 'Yedidyah Bar David' <didi(a)redhat.com>
> Cc: 'oVirt development list' <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
>
> Can't connect to websocket proxy server wss://ooeng.tltd.com:6100. Please check
that:
> websocket proxy service is running,
> firewalls are properly set,
> websocket proxy certificate is trusted by your browser. Default CA certificate.
>
>
> I try to using novnc, but it raese such error.
> How to check the websocked proxy service ?
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 3:37 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I got the point!
> >
> > There are two env, one is 4.3.6 and the other is 4.4.3.
> >
> > On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can
not using spice, maybe not installed and configured.
>
> Not sure we support changing the engine VM console type. The engine vm is special,
some changes are not allowed.
>
> Please try a different VM.
>
> > On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to
using VNC, it still can not work!
>
> Did you try also novnc?
>
> If it works, there might be a problem with your client (remote-viewer?). Which one
do you use and which version?
>
> >
> > Now, I should install spice server and configure it to see if ovirt can using
it.
> >
> > Instaling is vary easy, but what should I do to configure ovirt to using spice
?
>
> You do not need to install a spice server (inside the VM), and even if you do, oVirt
will not use it.
> The spice server here is part of the qemu process.
>
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 3:07 PM
> > To: tommy <sz_cuitao(a)163.com>
> > Cc: oVirt development list <devel(a)ovirt.org>
> > Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
> > >
> > > Thanks for your replay.
> > >
> > > I have tried using IP instead of hostname, but it still not work.
> > >
> > > I want choose spice instead of vnc to have a try. But the button can not
be chosen, what should I do to activate the spiece ?
> >
> > Edit the VM -> Console. Will likely require rebooting the VM.
> >
> > Best regards,
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On
> > > Behalf Of Yedidyah Bar David
> > > Sent: Thursday, January 14, 2021 2:55 PM
> > > To: tommy <sz_cuitao(a)163.com>
> > > Cc: oVirt development list <devel(a)ovirt.org>
> > > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> > >
> > > Hi,
> > >
> > > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com> wrote:
> > > >
> > > > I encountered a question about using web console(local vnc remote
viewer) to connect to VM.
> > > >
> > > >
> > > >
> > > > The engine-vm can be accessed using this methord, but other VM in
other DataCenters or other Clusters can not be accessed, when I tried to connect , the
remote viewer program auto abend quickly.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > The follow file is the connect file for vm that can connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=192.168.10.41
> > > >
> > > > port=5900
> > > >
> > > > password=rdXQA4zr/UAY
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=HostedEngine:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443
> > > >
> > > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > > the firewall list of the host 192.168.10.41 is:
> > > >
> > > >
> > > >
> > > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 6900/tcp 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=ohost1.tltd.com
> > > >
> > > > port=5900
> > > >
> > > > password=4/jWA+RLaSZe
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=testol:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443
> > > >
> > > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the firewall list of the host ohost1.tltd.com(192.168.10.160) is:
> > > >
> > > >
> > > >
> > > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Please give me some advice,thanks.
> > >
> > > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com.
> > >
> > > Please check/share relevant logs. Try e.g. to run remote-viewer
> > > manually with --debug and --verbose. Also check with a sniffer
> > > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> > >
> > > Good luck and best regards,
> > > --
> > > Didi
> > > _______________________________________________
> > > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an
> > > email to devel-leave(a)ovirt.org Privacy
> > > Statement: https://www.ovirt.org/privacy-policy.html
> > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/
> > > List Archives:
> > > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UA
> > > JV
> > > R2
> > > EL
> > > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> > >
> > >
> >
> >
> > --
> > Didi
> >
> >
>
>
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2
> NX
> O2EEYTI366FBT2RWKNZX64FO/
>
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> to devel-leave(a)ovirt.org Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA6
> 6J
> LEO2QDCPAWHLBVL4NFITADXA/
>
>
--
Didi
--
Didi
4:34 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
On Thu, Jan 14, 2021 at 10:58 AM tommy <sz_cuitao(a)163.com> wrote:
Cannot add the apice on ovirt vm's console page.
Please refer the attached file.
You need to change the 'Video Type' to QXL first.
-----Original Message-----
From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah Bar
David
Sent: Thursday, January 14, 2021 4:52 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
On Thu, Jan 14, 2021 at 10:46 AM tommy <sz_cuitao(a)163.com> wrote:
>
> Yeah.
>
> Ping is Ok,telnet is also ok.
>
> I want know how to enable spice protocol on my ovirt env ?
I think Edit VM should be enough. If it's grayed-out even when the machine
is down, then I do not know.
>
>
>
> -----Original Message-----
> From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of Yedidyah
> Bar David
> Sent: Thursday, January 14, 2021 4:38 PM
> To: tommy <sz_cuitao(a)163.com>
> Cc: oVirt development list <devel(a)ovirt.org>
> Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
>
> On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com> wrote:
> >
> > I tried it .
> >
> > 1. The service is well.
> >
> > 2.The firewall is ok.
> >
> > 3.The CA Cert is installed.
> >
> > But can not disappear anything ,just appear: Loading
>
> Did you check name resolution from the client? E.g.:
>
> ping ooeng.tltd.com
>
> ssh -p 6100 -v ooeng.tltd.com
>
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> > tommy
> > Sent: Thursday, January 14, 2021 3:53 PM
> > To: 'Yedidyah Bar David' <didi(a)redhat.com>
> > Cc: 'oVirt development list' <devel(a)ovirt.org>
> > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
> >
> >
> > Can't connect to websocket proxy server wss://ooeng.tltd.com:6100.
Please check that:
> > websocket proxy service is running,
> > firewalls are properly set,
> > websocket proxy certificate is trusted by your browser. Default CA
certificate.
> >
> >
> > I try to using novnc, but it raese such error.
> > How to check the websocked proxy service ?
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 3:37 PM
> > To: tommy <sz_cuitao(a)163.com>
> > Cc: oVirt development list <devel(a)ovirt.org>
> > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
> >
> > On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com> wrote:
> > >
> > > I got the point!
> > >
> > > There are two env, one is 4.3.6 and the other is 4.4.3.
> > >
> > > On 4.3.6, I only can connect to engvm, and there only one
concole:vnc, I can not using spice, maybe not installed and configured.
> >
> > Not sure we support changing the engine VM console type. The engine vm
is special, some changes are not allowed.
> >
> > Please try a different VM.
> >
> > > On 4.4.3, I can connect any vm, but is using spice protocol. I
changed vm to using VNC, it still can not work!
> >
> > Did you try also novnc?
> >
> > If it works, there might be a problem with your client
(remote-viewer?). Which one do you use and which version?
> >
> > >
> > > Now, I should install spice server and configure it to see if ovirt
can using it.
> > >
> > > Instaling is vary easy, but what should I do to configure ovirt to
using spice ?
> >
> > You do not need to install a spice server (inside the VM), and even if
you do, oVirt will not use it.
> > The spice server here is part of the qemu process.
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: ybardavi(a)redhat.com <ybardavi(a)redhat.com> On Behalf Of
> > > Yedidyah Bar David
> > > Sent: Thursday, January 14, 2021 3:07 PM
> > > To: tommy <sz_cuitao(a)163.com>
> > > Cc: oVirt development list <devel(a)ovirt.org>
> > > Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
> > >
> > > On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com> wrote:
> > > >
> > > > Thanks for your replay.
> > > >
> > > > I have tried using IP instead of hostname, but it still not work.
> > > >
> > > > I want choose spice instead of vnc to have a try. But the button
can not be chosen, what should I do to activate the spiece ?
> > >
> > > Edit the VM -> Console. Will likely require rebooting the VM.
> > >
> > > Best regards,
> > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > -----Original Message-----
> > > > From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On
> > > > Behalf Of Yedidyah Bar David
> > > > Sent: Thursday, January 14, 2021 2:55 PM
> > > > To: tommy <sz_cuitao(a)163.com>
> > > > Cc: oVirt development list <devel(a)ovirt.org>
> > > > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot
connect to other cluster's vm.
> > > >
> > > > Hi,
> > > >
> > > > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com>
wrote:
> > > > >
> > > > > I encountered a question about using web console(local vnc
remote viewer) to connect to VM.
> > > > >
> > > > >
> > > > >
> > > > > The engine-vm can be accessed using this methord, but other VM
in other DataCenters or other Clusters can not be accessed, when I tried to
connect , the remote viewer program auto abend quickly.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > The follow file is the connect file for vm that can connect
using remote viewer:
> > > > >
> > > > >
> > > > >
> > > > > [virt-viewer]
> > > > >
> > > > > type=vnc
> > > > >
> > > > > host=192.168.10.41
> > > > >
> > > > > port=5900
> > > > >
> > > > > password=rdXQA4zr/UAY
> > > > >
> > > > > # Password is valid for 120 seconds.
> > > > >
> > > > > delete-this-file=1
> > > > >
> > > > > fullscreen=0
> > > > >
> > > > > title=HostedEngine:%d
> > > > >
> > > > > toggle-fullscreen=shift+f11
> > > > >
> > > > > release-cursor=shift+f12
> > > > >
> > > > > secure-attention=ctrl+alt+end
> > > > >
> > > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > > l7
> > > > > :2
> > > > > .0
> > > > > -6
> > > > > ;rhel6:99.0-1
> > > > >
> > > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > > de
> > > > > /v
> > > > > ir
> > > > > t/
> > > > > console-client-resources
> > > > >
> > > > >
> > > > >
> > > > > [ovirt]
> > > > >
> > > > > host=ooeng.tltd.com:443
> > > > >
> > > > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > > > >
> > > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > > r3
> > > > > dU
> > > > > 8F
> > > > > jl
> > > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > > >
> > > > > admin=1
> > > > >
> > > > > ca=-----BEGIN
> > > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > > Pz
> > > > > EL
> > > > > MA
> > > > > kG
> > > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > > bH
> > > > > Rk
> > > > > Lm
> > > > > Nv
> > > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > > Bg
> > > > > NV
> > > > > BA
> > > > > YT
> > > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > > b2
> > > > > 0u
> > > > > MT
> > > > > c3
> > > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > > Aq
> > > > > FQ
> > > > > Kb
> > > > > g2
> > > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > > EC
> > > > > 3S
> > > > > o8
> > > > > nn
> > > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > > iGt+a/
> > > > > iGt+\n
> > > > > iGt+Cb
> > > > > iGt+i5
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > > 27
> > > > > 7m
> > > > > uj
> > > > > Ny
> > > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > > ow
> > > > > HQ
> > > > > YD
> > > > > VR
> > > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > > 0OBBYEFDYEqJOMqN8+8+
> > > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > > 0OBBYEFDYEqJOMqN8+CP
> > > > > 0OBBYEFDYEqJOMqN8+7D
> > > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > > 0x
> > > > > HT
> > > > > Ab
> > > > > Bg
> > > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > > H/
> > > > > MA
> > > > > 4G
> > > > > A1
> > > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > > F9
> > > > > ij
> > > > > ek
> > > > > dM
> > > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > > M2
> > > > > 2H
> > > > > wN
> > > > > Gj
> > > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > > ay
> > > > > cP
> > > > > gw
> > > > > S4
> > > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > > w+ax
> > > > > w+1O
> > > > > w+/j
> > > > > w+rD
> > > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > > CERTIFICATE-----\n
> > > > >
> > > > >
> > > > >
> > > > > the firewall list of the host 192.168.10.41 is:
> > > > >
> > > > >
> > > > >
> > > > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > > > >
> > > > > target: default
> > > > >
> > > > > icmp-block-inversion: no
> > > > >
> > > > > interfaces: bond0 ovirtmgmt
> > > > >
> > > > > sources:
> > > > >
> > > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > > ovirt-vmconsole snmp ssh vdsm
> > > > >
> > > > > ports: 6900/tcp 22/tcp 6081/udp
> > > > >
> > > > > protocols:
> > > > >
> > > > > masquerade: no
> > > > >
> > > > > forward-ports:
> > > > >
> > > > > source-ports:
> > > > >
> > > > > icmp-blocks:
> > > > >
> > > > > rich rules:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > the follow file is the connect file that vm that cannot connect
using remote viewer:
> > > > >
> > > > >
> > > > >
> > > > > [virt-viewer]
> > > > >
> > > > > type=vnc
> > > > >
> > > > > host=ohost1.tltd.com
> > > > >
> > > > > port=5900
> > > > >
> > > > > password=4/jWA+RLaSZe
> > > > >
> > > > > # Password is valid for 120 seconds.
> > > > >
> > > > > delete-this-file=1
> > > > >
> > > > > fullscreen=0
> > > > >
> > > > > title=testol:%d
> > > > >
> > > > > toggle-fullscreen=shift+f11
> > > > >
> > > > > release-cursor=shift+f12
> > > > >
> > > > > secure-attention=ctrl+alt+end
> > > > >
> > > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > > l7
> > > > > :2
> > > > > .0
> > > > > -6
> > > > > ;rhel6:99.0-1
> > > > >
> > > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > > de
> > > > > /v
> > > > > ir
> > > > > t/
> > > > > console-client-resources
> > > > >
> > > > >
> > > > >
> > > > > [ovirt]
> > > > >
> > > > > host=ooeng.tltd.com:443
> > > > >
> > > > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > > > >
> > > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > > r3
> > > > > dU
> > > > > 8F
> > > > > jl
> > > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > > >
> > > > > admin=1
> > > > >
> > > > > ca=-----BEGIN
> > > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > > Pz
> > > > > EL
> > > > > MA
> > > > > kG
> > > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > > bH
> > > > > Rk
> > > > > Lm
> > > > > Nv
> > > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > > Bg
> > > > > NV
> > > > > BA
> > > > > YT
> > > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > > b2
> > > > > 0u
> > > > > MT
> > > > > c3
> > > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > > Aq
> > > > > FQ
> > > > > Kb
> > > > > g2
> > > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > > EC
> > > > > 3S
> > > > > o8
> > > > > nn
> > > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > > iGt+a/
> > > > > iGt+\n
> > > > > iGt+Cb
> > > > > iGt+i5
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > > 27
> > > > > 7m
> > > > > uj
> > > > > Ny
> > > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > > ow
> > > > > HQ
> > > > > YD
> > > > > VR
> > > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > > 0OBBYEFDYEqJOMqN8+8+
> > > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > > 0OBBYEFDYEqJOMqN8+CP
> > > > > 0OBBYEFDYEqJOMqN8+7D
> > > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > > 0x
> > > > > HT
> > > > > Ab
> > > > > Bg
> > > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > > H/
> > > > > MA
> > > > > 4G
> > > > > A1
> > > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > > F9
> > > > > ij
> > > > > ek
> > > > > dM
> > > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > > M2
> > > > > 2H
> > > > > wN
> > > > > Gj
> > > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > > ay
> > > > > cP
> > > > > gw
> > > > > S4
> > > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > > w+ax
> > > > > w+1O
> > > > > w+/j
> > > > > w+rD
> > > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > > CERTIFICATE-----\n
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > the firewall list of the host ohost1.tltd.com(192.168.10.160)
is:
> > > > >
> > > > >
> > > > >
> > > > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > > > >
> > > > > target: default
> > > > >
> > > > > icmp-block-inversion: no
> > > > >
> > > > > interfaces: bond0 ovirtmgmt
> > > > >
> > > > > sources:
> > > > >
> > > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > > ovirt-vmconsole snmp ssh vdsm
> > > > >
> > > > > ports: 22/tcp 6081/udp
> > > > >
> > > > > protocols:
> > > > >
> > > > > masquerade: no
> > > > >
> > > > > forward-ports:
> > > > >
> > > > > source-ports:
> > > > >
> > > > > icmp-blocks:
> > > > >
> > > > > rich rules:
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Please give me some advice,thanks.
> > > >
> > > > This seems correct, basically, assuming your client correctly
resolves ohost1.tltd.com.
> > > >
> > > > Please check/share relevant logs. Try e.g. to run remote-viewer
> > > > manually with --debug and --verbose. Also check with a sniffer
> > > > (tcpdump/wireshark) that the client indeed tries to connect to the
correct host. If all looks fine, check with a sniffer on the host that the
connection is accepted, and relevant logs - mainly qemu (in
/var/log/libvirt/qemu), although I am not sure it logs connections by
default.
> > > >
> > > > Good luck and best regards,
> > > > --
> > > > Didi
> > > > _______________________________________________
> > > > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an
> > > > email to devel-leave(a)ovirt.org Privacy
> > > > Statement: https://www.ovirt.org/privacy-policy.html
> > > > oVirt Code of Conduct:
> > > > https://www.ovirt.org/community/about/community-guidelines/
> > > > List Archives:
> > > > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UA
> > > > JV
> > > > R2
> > > > EL
> > > > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> > > >
> > > >
> > >
> > >
> > > --
> > > Didi
> > >
> > >
> >
> >
> > --
> > Didi
> > _______________________________________________
> > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> > to devel-leave(a)ovirt.org Privacy
> > Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2
> > NX
> > O2EEYTI366FBT2RWKNZX64FO/
> >
> > _______________________________________________
> > Devel mailing list -- devel(a)ovirt.org To unsubscribe send an email
> > to devel-leave(a)ovirt.org Privacy
> > Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA6
> > 6J
> > LEO2QDCPAWHLBVL4NFITADXA/
> >
> >
>
>
> --
> Didi
>
>
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org
To unsubscribe send an email to devel-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/BMENUZG27AD...
4:45 a.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Thanks for your replay.
But there’s no QXL option on ‘Video Type’ Tab Control.
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of Arik Hadas
Sent: Thursday, January 14, 2021 6:34 PM
To: tommy <sz_cuitao(a)163.com>
Cc: oVirt development list <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:58 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
Cannot add the apice on ovirt vm's console page.
Please refer the attached file.
You need to change the 'Video Type' to QXL first.
-----Original Message-----
From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> <ybardavi(a)redhat.com
<mailto:ybardavi@redhat.com> > On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 4:52 PM
To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:46 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
Yeah.
Ping is Ok,telnet is also ok.
I want know how to enable spice protocol on my ovirt env ?
I think Edit VM should be enough. If it's grayed-out even when the machine is down,
then I do not know.
-----Original Message-----
From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> <ybardavi(a)redhat.com
<mailto:ybardavi@redhat.com> > On Behalf Of Yedidyah
Bar David
Sent: Thursday, January 14, 2021 4:38 PM
To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
>
> I tried it .
>
> 1. The service is well.
>
> 2.The firewall is ok.
>
> 3.The CA Cert is installed.
>
> But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com <http://ooeng.tltd.com>
ssh -p 6100 -v ooeng.tltd.com <http://ooeng.tltd.com>
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On Behalf Of
> tommy
> Sent: Thursday, January 14, 2021 3:53 PM
> To: 'Yedidyah Bar David' <didi(a)redhat.com <mailto:didi@redhat.com>
>
> Cc: 'oVirt development list' <devel(a)ovirt.org
<mailto:devel@ovirt.org> >
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
>
> Can't connect to websocket proxy server wss://ooeng.tltd.com:6100
<http://ooeng.tltd.com:6100> . Please check that:
> websocket proxy service is running,
> firewalls are properly set,
> websocket proxy certificate is trusted by your browser. Default CA certificate.
>
>
> I try to using novnc, but it raese such error.
> How to check the websocked proxy service ?
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 3:37 PM
> To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> >
> > I got the point!
> >
> > There are two env, one is 4.3.6 and the other is 4.4.3.
> >
> > On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can
not using spice, maybe not installed and configured.
>
> Not sure we support changing the engine VM console type. The engine vm is special,
some changes are not allowed.
>
> Please try a different VM.
>
> > On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to
using VNC, it still can not work!
>
> Did you try also novnc?
>
> If it works, there might be a problem with your client (remote-viewer?). Which one
do you use and which version?
>
> >
> > Now, I should install spice server and configure it to see if ovirt can using
it.
> >
> > Instaling is vary easy, but what should I do to configure ovirt to using spice
?
>
> You do not need to install a spice server (inside the VM), and even if you do, oVirt
will not use it.
> The spice server here is part of the qemu process.
>
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com>
<ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> > On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 3:07 PM
> > To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> > Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org>
>
> > Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> > >
> > > Thanks for your replay.
> > >
> > > I have tried using IP instead of hostname, but it still not work.
> > >
> > > I want choose spice instead of vnc to have a try. But the button can not
be chosen, what should I do to activate the spiece ?
> >
> > Edit the VM -> Console. Will likely require rebooting the VM.
> >
> > Best regards,
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On
> > > Behalf Of Yedidyah Bar David
> > > Sent: Thursday, January 14, 2021 2:55 PM
> > > To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> > > Cc: oVirt development list <devel(a)ovirt.org
<mailto:devel@ovirt.org> >
> > > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> > >
> > > Hi,
> > >
> > > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> > > >
> > > > I encountered a question about using web console(local vnc remote
viewer) to connect to VM.
> > > >
> > > >
> > > >
> > > > The engine-vm can be accessed using this methord, but other VM in
other DataCenters or other Clusters can not be accessed, when I tried to connect , the
remote viewer program auto abend quickly.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > The follow file is the connect file for vm that can connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=192.168.10.41
> > > >
> > > > port=5900
> > > >
> > > > password=rdXQA4zr/UAY
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=HostedEngine:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443 <http://ooeng.tltd.com:443>
> > > >
> > > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > > the firewall list of the host 192.168.10.41 is:
> > > >
> > > >
> > > >
> > > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 6900/tcp 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=ohost1.tltd.com <http://ohost1.tltd.com>
> > > >
> > > > port=5900
> > > >
> > > > password=4/jWA+RLaSZe
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=testol:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443 <http://ooeng.tltd.com:443>
> > > >
> > > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the firewall list of the host ohost1.tltd.com
<http://ohost1.tltd.com> (192.168.10.160) is:
> > > >
> > > >
> > > >
> > > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Please give me some advice,thanks.
> > >
> > > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com <http://ohost1.tltd.com> .
> > >
> > > Please check/share relevant logs. Try e.g. to run remote-viewer
> > > manually with --debug and --verbose. Also check with a sniffer
> > > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> > >
> > > Good luck and best regards,
> > > --
> > > Didi
> > > _______________________________________________
> > > Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To
unsubscribe send an
> > > email to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org>
Privacy
> > > Statement: https://www.ovirt.org/privacy-policy.html
> > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/
> > > List Archives:
> > > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UA
> > > JV
> > > R2
> > > EL
> > > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> > >
> > >
> >
> >
> > --
> > Didi
> >
> >
>
>
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To unsubscribe
send an email
> to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org> Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2
> NX
> O2EEYTI366FBT2RWKNZX64FO/
>
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To unsubscribe
send an email
> to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org> Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA6
> 6J
> LEO2QDCPAWHLBVL4NFITADXA/
>
>
--
Didi
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org>
To unsubscribe send an email to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/BMENUZG27AD...
8:50 p.m.
New subject: My web console(remote viewer) cannot connect to other cluster's vm.
Is there any method to make NVC work or to enable spice on my 4.3.6 env ?
I can not using console, so the system is out of control.
Very anxious.
From: devel-bounces(a)ovirt.org <devel-bounces(a)ovirt.org> On Behalf Of tommy
Sent: Thursday, January 14, 2021 6:46 PM
To: 'Arik Hadas' <ahadas(a)redhat.com>
Cc: 'oVirt development list' <devel(a)ovirt.org>
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
Thanks for your replay.
But there’s no QXL option on ‘Video Type’ Tab Control.
From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On Behalf Of Arik
Hadas
Sent: Thursday, January 14, 2021 6:34 PM
To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:58 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
Cannot add the apice on ovirt vm's console page.
Please refer the attached file.
You need to change the 'Video Type' to QXL first.
-----Original Message-----
From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> <ybardavi(a)redhat.com
<mailto:ybardavi@redhat.com> > On Behalf Of Yedidyah Bar David
Sent: Thursday, January 14, 2021 4:52 PM
To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:46 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
Yeah.
Ping is Ok,telnet is also ok.
I want know how to enable spice protocol on my ovirt env ?
I think Edit VM should be enough. If it's grayed-out even when the machine is down,
then I do not know.
-----Original Message-----
From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> <ybardavi(a)redhat.com
<mailto:ybardavi@redhat.com> > On Behalf Of Yedidyah
Bar David
Sent: Thursday, January 14, 2021 4:38 PM
To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
On Thu, Jan 14, 2021 at 10:02 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
>
> I tried it .
>
> 1. The service is well.
>
> 2.The firewall is ok.
>
> 3.The CA Cert is installed.
>
> But can not disappear anything ,just appear: Loading
Did you check name resolution from the client? E.g.:
ping ooeng.tltd.com <http://ooeng.tltd.com>
ssh -p 6100 -v ooeng.tltd.com <http://ooeng.tltd.com>
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On Behalf Of
> tommy
> Sent: Thursday, January 14, 2021 3:53 PM
> To: 'Yedidyah Bar David' <didi(a)redhat.com <mailto:didi@redhat.com>
>
> Cc: 'oVirt development list' <devel(a)ovirt.org
<mailto:devel@ovirt.org> >
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
>
> Can't connect to websocket proxy server wss://ooeng.tltd.com:6100
<http://ooeng.tltd.com:6100> . Please check that:
> websocket proxy service is running,
> firewalls are properly set,
> websocket proxy certificate is trusted by your browser. Default CA certificate.
>
>
> I try to using novnc, but it raese such error.
> How to check the websocked proxy service ?
>
>
>
>
>
>
> -----Original Message-----
> From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On Behalf Of
> Yedidyah Bar David
> Sent: Thursday, January 14, 2021 3:37 PM
> To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org> >
> Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to other
cluster's vm.
>
> On Thu, Jan 14, 2021 at 9:24 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> >
> > I got the point!
> >
> > There are two env, one is 4.3.6 and the other is 4.4.3.
> >
> > On 4.3.6, I only can connect to engvm, and there only one concole:vnc, I can
not using spice, maybe not installed and configured.
>
> Not sure we support changing the engine VM console type. The engine vm is special,
some changes are not allowed.
>
> Please try a different VM.
>
> > On 4.4.3, I can connect any vm, but is using spice protocol. I changed vm to
using VNC, it still can not work!
>
> Did you try also novnc?
>
> If it works, there might be a problem with your client (remote-viewer?). Which one
do you use and which version?
>
> >
> > Now, I should install spice server and configure it to see if ovirt can using
it.
> >
> > Instaling is vary easy, but what should I do to configure ovirt to using spice
?
>
> You do not need to install a spice server (inside the VM), and even if you do, oVirt
will not use it.
> The spice server here is part of the qemu process.
>
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > -----Original Message-----
> > From: ybardavi(a)redhat.com <mailto:ybardavi@redhat.com>
<ybardavi(a)redhat.com <mailto:ybardavi@redhat.com> > On Behalf Of
> > Yedidyah Bar David
> > Sent: Thursday, January 14, 2021 3:07 PM
> > To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> > Cc: oVirt development list <devel(a)ovirt.org <mailto:devel@ovirt.org>
>
> > Subject: Re: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> >
> > On Thu, Jan 14, 2021 at 9:04 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> > >
> > > Thanks for your replay.
> > >
> > > I have tried using IP instead of hostname, but it still not work.
> > >
> > > I want choose spice instead of vnc to have a try. But the button can not
be chosen, what should I do to activate the spiece ?
> >
> > Edit the VM -> Console. Will likely require rebooting the VM.
> >
> > Best regards,
> >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org>
<devel-bounces(a)ovirt.org <mailto:devel-bounces@ovirt.org> > On
> > > Behalf Of Yedidyah Bar David
> > > Sent: Thursday, January 14, 2021 2:55 PM
> > > To: tommy <sz_cuitao(a)163.com <mailto:sz_cuitao@163.com> >
> > > Cc: oVirt development list <devel(a)ovirt.org
<mailto:devel@ovirt.org> >
> > > Subject: [ovirt-devel] Re: My web console(remote viewer) cannot connect to
other cluster's vm.
> > >
> > > Hi,
> > >
> > > On Thu, Jan 14, 2021 at 5:51 AM tommy <sz_cuitao(a)163.com
<mailto:sz_cuitao@163.com> > wrote:
> > > >
> > > > I encountered a question about using web console(local vnc remote
viewer) to connect to VM.
> > > >
> > > >
> > > >
> > > > The engine-vm can be accessed using this methord, but other VM in
other DataCenters or other Clusters can not be accessed, when I tried to connect , the
remote viewer program auto abend quickly.
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > The follow file is the connect file for vm that can connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=192.168.10.41
> > > >
> > > > port=5900
> > > >
> > > > password=rdXQA4zr/UAY
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=HostedEngine:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443 <http://ooeng.tltd.com:443>
> > > >
> > > > vm-guid=76f99df2-ef79-45d9-8eea-a32b168f9ef3
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > > the firewall list of the host 192.168.10.41 is:
> > > >
> > > >
> > > >
> > > > [root@ooengh1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 6900/tcp 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the follow file is the connect file that vm that cannot connect using
remote viewer:
> > > >
> > > >
> > > >
> > > > [virt-viewer]
> > > >
> > > > type=vnc
> > > >
> > > > host=ohost1.tltd.com <http://ohost1.tltd.com>
> > > >
> > > > port=5900
> > > >
> > > > password=4/jWA+RLaSZe
> > > >
> > > > # Password is valid for 120 seconds.
> > > >
> > > > delete-this-file=1
> > > >
> > > > fullscreen=0
> > > >
> > > > title=testol:%d
> > > >
> > > > toggle-fullscreen=shift+f11
> > > >
> > > > release-cursor=shift+f12
> > > >
> > > > secure-attention=ctrl+alt+end
> > > >
> > > > versions=rhev-win64:2.0-160;rhev-win32:2.0-160;rhel8:7.0-3;rhe
> > > > l7
> > > > :2
> > > > .0
> > > > -6
> > > > ;rhel6:99.0-1
> > > >
> > > > newer-version-url=http://www.ovirt.org/documentation/admin-gui
> > > > de
> > > > /v
> > > > ir
> > > > t/
> > > > console-client-resources
> > > >
> > > >
> > > >
> > > > [ovirt]
> > > >
> > > > host=ooeng.tltd.com:443 <http://ooeng.tltd.com:443>
> > > >
> > > > vm-guid=2b0eeecf-e561-4f60-b16d-dccddfcc852a
> > > >
> > > > sso-token=4Up7TfLLBjSuQgPkQvRz3D-fUGZWZg4ynApe2Y7ylkARCFwQWsfE
> > > > r3
> > > > dU
> > > > 8F
> > > > jl
> > > > K8esctm3Im4tz80mE1DjrNT3XQ
> > > >
> > > > admin=1
> > > >
> > > > ca=-----BEGIN
> > > > CERTIFICATE-----\nMIIDqDCCApCgAwIBAgICEAAwDQYJKoZIhvcNAQELBQAw
> > > > Pz
> > > > EL
> > > > MA
> > > > kG
> > > > A1UEBhMCVVMxETAPBgNVBAoM\nCHRsdGQuY29tMR0wGwYDVQQDDBRvb2VuZy50
> > > > bH
> > > > Rk
> > > > Lm
> > > > Nv
> > > > bS4xNzczMDAeFw0yMTAxMTAxNjE1NDda\nFw0zMTAxMDkxNjE1NDdaMD8xCzAJ
> > > > Bg
> > > > NV
> > > > BA
> > > > YT
> > > > AlVTMREwDwYDVQQKDAh0bHRkLmNvbTEdMBsGA1UE\nAwwUb29lbmcudGx0ZC5j
> > > > b2
> > > > 0u
> > > > MT
> > > > c3
> > > > MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg\nYT9S7hWiXQUz
> > > > Aq
> > > > FQ
> > > > Kb
> > > > g2
> > > > nMjwyHDmb/JmKeJAUVZqNKRg1q80IpWyoM12Zw0nX1eTwMnVY/JtJON4\n13Po
> > > > EC
> > > > 3S
> > > > o8
> > > > nn
> > > > iGt+wtHr44ysvCWfU0SBk/ZPnKmQ58o5MlSkidHwySChXfVPYLPWeUJ1JUrujn
> > > > iGt+a/
> > > > iGt+\n
> > > > iGt+Cb
> > > > iGt+i5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+a3cXLIffVJfhPGS3AkIh6nznNa
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+De
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+H5
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+gF
> > > > bmmjx2pqwLrZXX8Q5NO2MRKOTs0Dtg16Q6z+ZZ
> > > > bd\nr3DKE4xrpdw/7y6CgjmHe4vwGxOIyE+gElZ/lVtqznLMwohz7wgtgsDA36
> > > > 27
> > > > 7m
> > > > uj
> > > > Ny
> > > > MjMbrSFheu\n5WfbIa9VVSZWEkISVq6eswLOQ1IRaFyJsFN9AgMBAAGjga0wga
> > > > ow
> > > > HQ
> > > > YD
> > > > VR
> > > > 0OBBYEFDYEqJOMqN8+\nQhCP7DAkqF3RZMFdMGgGA1UdIwRhMF+AFDYEqJOMqN
> > > > 0OBBYEFDYEqJOMqN8+8+
> > > > 0OBBYEFDYEqJOMqN8+Qh
> > > > 0OBBYEFDYEqJOMqN8+CP
> > > > 0OBBYEFDYEqJOMqN8+7D
> > > > AkqF3RZMFdoUOkQTA/MQswCQYD\nVQQGEwJVUzERMA8GA1UECgwIdGx0ZC5jb2
> > > > 0x
> > > > HT
> > > > Ab
> > > > Bg
> > > > NVBAMMFG9vZW5nLnRsdGQuY29tLjE3NzMw\nggIQADAPBgNVHRMBAf8EBTADAQ
> > > > H/
> > > > MA
> > > > 4G
> > > > A1
> > > > UdDwEB/wQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEA\nAKs0/yQWkoOkGcL0Pj
> > > > F9
> > > > ij
> > > > ek
> > > > dM
> > > > mjrLZGyh5uLot7h9s/Y2+5l9n9IzEjjx9chi8xwt6MBsR6/nBT\n/skcciv2ve
> > > > M2
> > > > 2H
> > > > wN
> > > > Gj
> > > > drHvhfbZFnZsGe2TU60kGzKjlv1En/8Pgd2aWBcwTlr+SErBXkehNEJRj9\n1s
> > > > ay
> > > > cP
> > > > gw
> > > > S4
> > > > pHS04c2+4JMhpe+hxgsO2+N/SYkP95Lf7ZQynVsN/SKx7X3cWybErCqoB7G7Mc
> > > > pHS04c2+4JMhpe+hxgsO2+qa
> > > > pHS04c2+4JMhpe+hxgsO2+HN
> > > > pHS04c2+4JMhpe+hxgsO2+\n
> > > > pHS04c2+4JMhpe+hxgsO2+VW
> > > > w+QNXo5islWUXqeDc3RcnW3kq0XUEzEtp6hoeRcLKO99QrAW31zqU/QY+EeZ6F
> > > > w+ax
> > > > w+1O
> > > > w+/j
> > > > w+rD
> > > > afZn\npTs0KJFNgeVnUhKanB29ONy+tmnUmTAgPMaKKw==\n-----END
> > > > CERTIFICATE-----\n
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > the firewall list of the host ohost1.tltd.com
<http://ohost1.tltd.com> (192.168.10.160) is:
> > > >
> > > >
> > > >
> > > > [root@ohost1 ~]# firewall-cmd --list-all public (active)
> > > >
> > > > target: default
> > > >
> > > > icmp-block-inversion: no
> > > >
> > > > interfaces: bond0 ovirtmgmt
> > > >
> > > > sources:
> > > >
> > > > services: cockpit dhcpv6-client libvirt-tls ovirt-imageio
> > > > ovirt-vmconsole snmp ssh vdsm
> > > >
> > > > ports: 22/tcp 6081/udp
> > > >
> > > > protocols:
> > > >
> > > > masquerade: no
> > > >
> > > > forward-ports:
> > > >
> > > > source-ports:
> > > >
> > > > icmp-blocks:
> > > >
> > > > rich rules:
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Please give me some advice,thanks.
> > >
> > > This seems correct, basically, assuming your client correctly resolves
ohost1.tltd.com <http://ohost1.tltd.com> .
> > >
> > > Please check/share relevant logs. Try e.g. to run remote-viewer
> > > manually with --debug and --verbose. Also check with a sniffer
> > > (tcpdump/wireshark) that the client indeed tries to connect to the correct
host. If all looks fine, check with a sniffer on the host that the connection is accepted,
and relevant logs - mainly qemu (in /var/log/libvirt/qemu), although I am not sure it logs
connections by default.
> > >
> > > Good luck and best regards,
> > > --
> > > Didi
> > > _______________________________________________
> > > Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To
unsubscribe send an
> > > email to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org>
Privacy
> > > Statement: https://www.ovirt.org/privacy-policy.html
> > > oVirt Code of Conduct:
> > > https://www.ovirt.org/community/about/community-guidelines/
> > > List Archives:
> > > https://lists.ovirt.org/archives/list/devel@ovirt.org/message/UA
> > > JV
> > > R2
> > > EL
> > > FFEDPEIQJ7BKWQQ7GOEFEFC5/
> > >
> > >
> >
> >
> > --
> > Didi
> >
> >
>
>
> --
> Didi
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To unsubscribe
send an email
> to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org> Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/CEMQX2
> NX
> O2EEYTI366FBT2RWKNZX64FO/
>
> _______________________________________________
> Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org> To unsubscribe
send an email
> to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org> Privacy
> Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/devel@ovirt.org/message/MRHKA6
> 6J
> LEO2QDCPAWHLBVL4NFITADXA/
>
>
--
Didi
--
Didi
_______________________________________________
Devel mailing list -- devel(a)ovirt.org <mailto:devel@ovirt.org>
To unsubscribe send an email to devel-leave(a)ovirt.org <mailto:devel-leave@ovirt.org>
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/devel@ovirt.org/message/BMENUZG27AD...
1196
days inactive
1200
days old
14 comments
3 participants
participants (3)
-
Arik Hadas -
tommy -
Yedidyah Bar David