Re: [ovirt-users] seria consol setup

From: "Fabrice Bacchella" <fabrice.bacchella(a)orange.fr&gt; To: "Francesco Romani" <fromani(a)redhat.com&gt; Cc: "Yedidyah Bar David" <didi(a)redhat.com&gt;, "users" <users(a)ovirt.org&gt; Sent: Wednesday, March 23, 2016 1:21:11 PM Subject: Re: [ovirt-users] seria consol setup > Le 23 mars 2016 à 12:32, Francesco Romani <fromani(a)redhat.com&gt; a écrit : > > ----- Original Message ----- >> From: "Yedidyah Bar David" <didi(a)redhat.com&gt; >> To: "Fabrice Bacchella" <fabrice.bacchella(a)orange.fr&gt;, "Francesco Romani" >> <fromani(a)redhat.com&gt; >> Cc: "users" <users(a)ovirt.org&gt; >> Sent: Wednesday, March 23, 2016 12:28:52 PM >> Subject: Re: [ovirt-users] seria consol setup > >>> I can always use puppet to modify just this line, it will be fine for me. >>> >>> The point 4 in Automatic Setup is not very helpfull: >>> " • once the setup succesfully run, and once ovirt-engine is >>> running, >>> you can log in and register a SSH key. (TODO: add picture)" >>> >>> what does it mean ? > > It just means that you need to add SSH public keys for the users which want > to use > the serial console. > > E.g. log in user portal > in the top right corner there is the $user drop down menu, click on it > select "options" > paste public key here > > HTH, It tried that, I didn't work.

By digging in log and configuration, I think it's because I have an Apache server in front of ovirt-engine, using a specific SSO authentication module (using CAS), so the certificate-base authentication is failing, if my comprehension is good. So you should add a few line about that in the documentation.

Should I make the proxy helper talks directly to tomcat by playing with ENGINE_BASE_URL in /etc/ovirt-engine/ovirt-vmconsole-proxy-helper.conf.d ?

There is also a small glitch in the documentation: su - ovirt-vmconsole -c 'ovirt-vmconsole-proxy-keys list' but it should be: su - ovirt-vmconsole -c '/usr/libexec/ovirt-vmconsole-proxy-keys list'