On Mon, Nov 21, 2016 at 9:26 AM, Tomas Jelinek <tjelinek@redhat.com> wrote:

>
> $ diff user_portal.txt admin_portal.txt
> 5c5
> < password=USuJCbk3UhzK
> ---
> > password=4ZAr/w23pFPV
> 16c16
> <
> usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
> ---
> > usb-filter=-1,-1,-1,-1,0

This is not related but looks like a bug. Could you please open a bug against user portal with the fact the usb-filter is not filled in user portal?

Hello, sorry for the late answer. I was busy on other things
But I have to fill bug against user portal or web admin portal?
Because the situation is this
[root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv | grep usb
< usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
> usb-filter=-1,-1,-1,-1,0
[root@ope46 g.cecchi]#

So it seems the admin portal the one with all "-1".....
What do you mean with "not filled"? Perhaps it is this I don't understand.

 

> 19a20
> > proxy= http://192.168.1.215:3128/
> 27c28

This looks like the most interesting difference. Where do you have your spice proxy defined? I guess on cluster.
I have a suspicion that there is a bug that when the user does not have access to the cluster (e.g. basic user)
than it can not see the spice proxy.

Could you please try to connect to the console from user portal using an admin user and check if the
proxy is filled correctly?


I have this configured at engine level:

[root@ovirt ~]# engine-config -g SpiceProxyDefault
SpiceProxyDefault: http://192.168.1.215:3128/ version: general
[root@ovirt ~]#

I just tried now from a Fedora 24 client and the full difference for the .vv files is this:

[root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv
5c5
< password=VykX40qEKrXN
---
> password=/dT1qiHNTZIk
16c16
< usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
---
> usb-filter=-1,-1,-1,-1,0
28c28
< sso-token=Hbb-_gd8Apsw7qdjfjWivONAodYIzyM2zozEpmD2YHZX3m7mgTeu8zlhOnJbHZ-RVA8JkuNc1fSnS-g8JePeGA
---
> sso-token=EGYM496UMVtAzdukJH8ipN584Hyrfz34QpfAN15DqETtBsZ4n59ptj8LrVpiH8g40qXr0jL9sscaGklPqkMa3w
[root@ope46 g.cecchi]#

so the proxy line seems populated in both the portals...

Initially I got 11 TCP connections to proxy ip
After about 18 minutes I see that they are only 4 in ESTABLISHED state, the other ones are CLOSE_WAIT

[root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date
      7 192.168.1.215:3128 CLOSE_WAIT
      4 192.168.1.215:3128 ESTABLISHED
[root@ope46 ~]#
And the console still works

After about 4 hours

 [root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date
      2 192.168.1.215:3128 ESTABLISHED

remote-viewer app itself seems to work (I can select menu options) bit I have black screen without being able to interact.
Also switching to full screen I only have black screen

The same with user portal...
After 24 minutes

[root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date
      9 192.168.1.215:3128 CLOSE_WAIT
      2 192.168.1.215:3128 ESTABLISHED

and console session hung....


 
> <
> sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ-uYNsTUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA
> ---
> > sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_IfPoGXFMRkQSTmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
>

The strange thing is also that there is no difference between the
admin=1 in webadmin vs admin=0 for user portal.

So, long story short, are you using the same user to test this from webadmin/userportal?
If not, could you please try to connect from user portal with the same user as from webadmin and check if the
diff between the two .vv files is smaller?


Yes, the user was the same. I gave admin PowerUserRole on the VM so to be able to connect as admin also in User Portal.