Re: [Users] Spice plugin for firefox

3 Feb 2012

      --=_cc0b8156-3370-49f7-be43-2efdf61a4910
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

Yeah :( The vm was off after processing all the changes (i rebooted the whole cluster and engine server) 
How do it set a "ticket"? 

I can connect to the spice interface using IE (windows) via the ovirt ui just fine (although the mouse is completely unreliable) 

Further question - if i end up connecting via the command line... if i have multiple vm's running on the hypervisor - how do i determine which one i want to connect to? 
Does each vm run on a separate port (vm1 = 5900, vm2=5901 etc?) 

----- Original Message -----

From: "Yaniv Kaul" <ykaul@redhat.com> 
To: "Spyro Polymiadis" <spyro@rsp.com.au> 
Cc: "Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com> 
Sent: Friday, 3 February, 2012 5:13:53 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/03/2012 08:08 AM, Spyro Polymiadis wrote: 

Hi Mate, 

no unfortunately i couldnt update it as i wasnt able to find any newer XPI's that would work on centos5.7 (centos 6.0 version required a stack of new packages) 

I had just tried going through all that... 

the errors i was getting after using the SUBJECT and ca file was: 

$ /usr/bin/spicec --host 192.168.112.21 --secure-port 5901 --secure-channels all --host-subject "`openssl x509 -noout -text -in cacert.pem | grep Subject: | cut -f 10- -d \" \"`" --ca-file cacert.pem 
Warning: connect failed 7 

Ive just gone through and configured all the spice_tls and ssl settings to 0 or off (as per http://ovirt.org/wiki/OVirt_-_disable_SSL_in_VDSM ) 
But now im wresting with trying to get the hosts to register with the engine server again :( so im yet to be able to test a "non" secured connection 

Thanks for you help so far :) 

1. Have you re-ran the VM? If it was launched before the changes, it is still running with SSL enabled. 
2. Did you set a ticket to the VM? (IIRC, 7 means no ticket). 
Y. 

<blockquote>

----- Original Message -----

From: "Yaniv Kaul" <ykaul@redhat.com> 
To: "Spyro Polymiadis" <spyro@rsp.com.au> 
Cc: "Haim Ateya" <hateya@redhat.com> , "Alon Levy" <alevy@redhat.com> , users@ovirt.org , "Arnon Gilboa" <agilboa@redhat.com> 
Sent: Friday, 3 February, 2012 4:05:41 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/03/2012 02:54 AM, Spyro Polymiadis wrote: 
<blockquote>

Howdy 

Ive just installed an updated version of spice client on my linux box: 

spice-client-0.8.2-1.el5 
spice-0.8.2-1.el5 

and still the firefox xpi crashes with the version mismatch error below 

</blockquote>

And the XPI? Was it updated? 

<blockquote>

but if i try to run it manually from the command line like so : 

/usr/bin/spicec --host 192.168.112.21 --port 5901 

I get 

Warning: Connection reset by peer (104) 

and in the VMs log i see 

139827374590400:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:350: 
reds_init_client_ssl_connection: SSL_accept failed, error=1 

</blockquote>

Because you are missing several parameters in the command line of spicec. Specifically, the whole SSL negotiation stuff is missing. It expects them. 
See 'spicec --help' and specifically the use of --ca-file , --host-subject for correct SSL configuration. 
Y. 

<blockquote>

:( this might be a blocker for us - as i cant also work out how to use the "VNC" console option 

Cheers 
Spyro 

----- Original Message -----

From: "Yaniv Kaul" <ykaul@redhat.com> 
To: "Spyro Polymiadis" <spyro@rsp.com.au> 
Cc: "Haim Ateya" <hateya@redhat.com> , "Alon Levy" <alevy@redhat.com> , users@ovirt.org , "Arnon Gilboa" <agilboa@redhat.com> 
Sent: Friday, 3 February, 2012 12:09:48 AM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/02/2012 03:30 PM, Spyro Polymiadis wrote: 
<blockquote>

Hi Haim, 

Using Firefox 9, and Centos 5.7 

$ rpm -qa | grep spice 

qspice-client-0.3.0-4.el5_5 
spice-xpi-2.2-2.3.el5_6.1 
qspice-libs-devel-0.3.0-54.el5_5.2 
qspice-0.3.0-54.el5_5.2 
qspice-libs-0.3.0-54.el5_5.2 

the spiceXPI is in /usr/lib64/mozilla/plugins 
and spicec is in /usr/libexec 

Cheers :) 
Spyro 

</blockquote>

A newer version of the XPI would be most useful. I'm not sure if RPMs are available for it, though. 
Y. 

<blockquote>

----- Original Message -----

From: "Haim Ateya" <hateya@redhat.com> 
To: users@ovirt.org , "Alon Levy" <alevy@redhat.com> , "Arnon Gilboa" <agilboa@redhat.com> 
Sent: Thursday, 2 February, 2012 9:37:12 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/02/2012 12:39 PM, Spyro Polymiadis wrote: 

adding Alon & Arnon. 

<blockquote>

Howdy again 

Has anyone managed to get the spice plugin working for firefox under linux? 
When ever i click on the console icon, i see a popup quickly appear then crash 

</blockquote>
what client (o.s) do you use ? do you have spice-xpi and spice-client installed on it ?

<blockquote>

In the spice logs it says 
2012-02-02 16:14:47,006 INFO [20889:20891] RedPeer::connect: Connecting 192.168.112.2 5901 
2012-02-02 16:14:47,013 WARN [20889:20891] RedChannel::run: RedChannelBase::connect: version mismatch: expect 1 got 2 

</blockquote>

<blockquote>

:( cant seem to find any information on this error unfortunately. 

Cheers 
Spyro 

_______________________________________________
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users 
</blockquote>

_______________________________________________ 
Users mailing list 
Users@ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users 

_______________________________________________
Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users 
</blockquote>

</blockquote>

</blockquote>

--=_cc0b8156-3370-49f7-be43-2efdf61a4910
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: tahoma,new york,times,serif; font-size: 12pt; col=
or: #000000'>Yeah :( The vm was off after processing all the changes (i reb=
ooted the whole cluster and engine server) How do it set a "ticket"? =
 I can connect to the spice interface using IE (windows) via the ovirt u=
i just fine (although the mouse is completely unreliable) Further qu=
estion - if i end up connecting via the command line... if i have multiple =
vm's running on the hypervisor - how do i determine which one i want to con=
nect to? Does each vm run on a separate port (vm1 =3D 5900, vm2=3D5901 e=
tc?) <hr id=3D"zwchr"><div style=3D"color:#000;font-weight:n=
ormal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sa=
ns-serif;font-size:12pt;">From: "Yaniv Kaul" <ykaul@redhat.com>=
; To: "Spyro Polymiadis" <spyro@rsp.com.au> Cc: "=
Haim Ateya" <hateya@redhat.com>, "Alon Levy" <alevy@redhat.com>=
, users@ovirt.org, "Arnon Gilboa" <agilboa@redhat.com> Sent: </=
b>Friday, 3 February, 2012 5:13:53 PM Subject: Re: [Users] Spice =
plugin for firefox

    On 02/03/2012 08:08 AM, Spyro Polymiadis wrote:
    <blockquote cite=3D"mid:ad11e1db-d3e9-45bf-9912-9200f63ce8c4@angelia">
      <style>p { margin: 0; }</style>
      <div style=3D"font-family: tahoma,new york,times,serif; font-size:
        12pt; color: rgb(0, 0, 0);">Hi Mate, <br>
        <br>
        no unfortunately i couldnt update it as i wasnt able to find any
        newer XPI's that would work on centos5.7 (centos 6.0 version
        required a stack of new packages)<br>
        <br>
        <br>
        I had just tried going through all that...<br>
        <br>
        the errors i was getting after using the SUBJECT and ca file
        was:<br>
        <br>
        $  /usr/bin/spicec --host 192.168.112.21 --secure-port 5901
        --secure-channels all --host-subject "`openssl x509 -noout -text
        -in cacert.pem | grep Subject: | cut -f 10- -d \" \"`" --ca-file
        cacert.pem<br>
        Warning: connect failed 7<br>
        <br>
        Ive just gone through and configured all the spice_tls and ssl
        settings to 0 or off  (as per
        <a class=3D"moz-txt-link-freetext" href=3D"http://ovirt.org/wiki/OV=
irt_-_disable_SSL_in_VDSM" target=3D"_blank">http://ovirt.org/wiki/OVirt_-_=
disable_SSL_in_VDSM</a>)<br>
        But now im wresting with trying to get the hosts to register
        with the engine server again :(  so im yet to be able to test =
a
        "non" secured connection<br>
        <br>
        Thanks for you help so far :)<br>
      </div>
    </blockquote>
    <br>
    1. Have you re-ran the VM? If it was launched before the changes, it
    is still running with SSL enabled.<br>
    2. Did you set a ticket to the VM? (IIRC, 7 means no ticket).<br>
    Y.<br>
    <br>
    <blockquote cite=3D"mid:ad11e1db-d3e9-45bf-9912-9200f63ce8c4@angelia">
      <div style=3D"font-family: tahoma,new york,times,serif; font-size:
        12pt; color: #000000"><br>
        <hr id=3D"zwchr">
        <div style=3D"color:#000;font-weight:normal;font-style:normal;text-=
decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>=
From:
          </b>"Yaniv Kaul" <a class=3D"moz-txt-link-rfc2396E" href=3D"mailt=
o:ykaul@redhat.com" target=3D"_blank"><ykaul@redhat.com></a><br>
          <b>To: </b>"Spyro Polymiadis" <a class=3D"moz-txt-link-rfc2396E" =
href=3D"mailto:spyro@rsp.com.au" target=3D"_blank"><spyro@rsp.com.au>=
</a><br>
          <b>Cc: </b>"Haim Ateya" <a class=3D"moz-txt-link-rfc2396E" href=
=3D"mailto:hateya@redhat.com" target=3D"_blank"><hateya@redhat.com></=
a>, "Alon
          Levy" <a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:alevy@red=
hat.com" target=3D"_blank"><alevy@redhat.com></a>, <a class=3D"moz-tx=
t-link-abbreviated" href=3D"mailto:users@ovirt.org" target=3D"_blank">users=
@ovirt.org</a>, "Arnon
          Gilboa" <a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:agilboa=
@redhat.com" target=3D"_blank"><agilboa@redhat.com></a><br>
          <b>Sent: </b>Friday, 3 February, 2012 4:05:41 PM<br>
          <b>Subject: </b>Re: [Users] Spice plugin for firefox<br>
          <br>
          On 02/03/2012 02:54 AM, Spyro Polymiadis wrote:
          <blockquote cite=3D"mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@ange=
lia">
            <style>p { margin: 0; }</style>
            <div style=3D"font-family: tahoma,new york,times,serif;
              font-size: 12pt; color: rgb(0, 0, 0);">Howdy<br>
              <br>
              Ive just installed an updated version of spice client on
              my linux box:<br>
              <br>
              spice-client-0.8.2-1.el5<br>
              spice-0.8.2-1.el5<br>
              <br>
              and still the firefox xpi crashes with the version
              mismatch error below <br>
            </div>
          </blockquote>
          <br>
          And the XPI? Was it updated?<br>
          <br>
          <br>
          <blockquote cite=3D"mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@ange=
lia">
            <div style=3D"font-family: tahoma,new york,times,serif;
              font-size: 12pt; color: rgb(0, 0, 0);">but if i try to run
              it manually from the command line like so :<br>
              <br>
              /usr/bin/spicec --host 192.168.112.21 --port 5901<br>
              <br>
              I get <br>
              <br>
              Warning: Connection reset by peer (104)<br>
              <br>
              <br>
              and in the VMs log  i see<br>
              <br>
              139827374590400:error:1408F10B:SSL
              routines:SSL3_GET_RECORD:wrong version
              number:s3_pkt.c:350:<br>
              reds_init_client_ssl_connection: SSL_accept failed,
              error=3D1<br>
            </div>
          </blockquote>
          <br>
          Because you are missing several parameters in the command line
          of spicec. Specifically, the whole SSL negotiation stuff is
          missing. It expects them.<br>
          See 'spicec --help' and specifically the use of --ca-file ,
          --host-subject for correct SSL configuration.<br>
          Y.<br>
          <br>
          <blockquote cite=3D"mid:844b8f09-f9ba-4103-9cd3-31f4b84d0e4e@ange=
lia">
            <div style=3D"font-family: tahoma,new york,times,serif;
              font-size: 12pt; color: #000000"><br>
              :( this might be a blocker for us - as i cant also work
              out how to use the "VNC" console option<br>
              <br>
              Cheers<br>
              Spyro<br>
              <br>
              <hr id=3D"zwchr">
              <div style=3D"color:#000;font-weight:normal;font-style:normal=
;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt=
;"><b>From:

                </b>"Yaniv Kaul" <a class=3D"moz-txt-link-rfc2396E" href=
=3D"mailto:ykaul@redhat.com" target=3D"_blank"><ykaul@redhat.com></a>=
<br>
                <b>To: </b>"Spyro Polymiadis" <a class=3D"moz-txt-link-rfc2=
396E" href=3D"mailto:spyro@rsp.com.au" target=3D"_blank"><spyro@rsp.com.=
au></a><br>
                <b>Cc: </b>"Haim Ateya" <a class=3D"moz-txt-link-rfc2396E" =
href=3D"mailto:hateya@redhat.com" target=3D"_blank"><hateya@redhat.com&g=
t;</a>,
                "Alon Levy" <a class=3D"moz-txt-link-rfc2396E" href=3D"mail=
to:alevy@redhat.com" target=3D"_blank"><alevy@redhat.com></a>,
                <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:users@=
ovirt.org" target=3D"_blank">users@ovirt.org</a>,
                "Arnon Gilboa" <a class=3D"moz-txt-link-rfc2396E" href=3D"m=
ailto:agilboa@redhat.com" target=3D"_blank"><agilboa@redhat.com></a><=
br>
                <b>Sent: </b>Friday, 3 February, 2012 12:09:48 AM<br>
                <b>Subject: </b>Re: [Users] Spice plugin for firefox<br>
                <br>
                On 02/02/2012 03:30 PM, Spyro Polymiadis wrote:
                <blockquote cite=3D"mid:eea44a70-8d1b-45fe-a46e-0ca82d644f8=
c@MacBookPro">
                  <style>p { margin: 0; }</style>
                  <div style=3D"font-family: Arial; font-size: 12pt;
                    color: rgb(0, 0, 0);">Hi Haim, <br>
                    <br>
                    Using Firefox 9, and Centos 5.7<br>
                    <br>
                    $ rpm -qa | grep spice<br>
                    <br>
                    qspice-client-0.3.0-4.el5_5<br>
                    spice-xpi-2.2-2.3.el5_6.1<br>
                    qspice-libs-devel-0.3.0-54.el5_5.2<br>
                    qspice-0.3.0-54.el5_5.2<br>
                    qspice-libs-0.3.0-54.el5_5.2<br>
                    <br>
                    the spiceXPI is in /usr/lib64/mozilla/plugins<br>
                    and spicec is in /usr/libexec<br>
                    <br>
                    Cheers :)<br>
                    Spyro<br>
                  </div>
                </blockquote>
                <br>
                A newer version of the XPI would be most useful. I'm not
                sure if RPMs are available for it, though.<br>
                Y.<br>
                <br>
                <blockquote cite=3D"mid:eea44a70-8d1b-45fe-a46e-0ca82d644f8=
c@MacBookPro">
                  <div style=3D"font-family: Arial; font-size: 12pt;
                    color: #000000"><br>
                    <hr id=3D"zwchr">
                    <div style=3D"color: rgb(0, 0, 0); font-weight:
                      normal; font-style: normal; text-decoration: none;
                      font-family: Helvetica,Arial,sans-serif;
                      font-size: 12pt;"><b>From: </b>"Haim Ateya" <a class=
=3D"moz-txt-link-rfc2396E" href=3D"mailto:hateya@redhat.com" target=3D"_bla=
nk"><hateya@redhat.com></a><br>
                      <b>To: </b><a class=3D"moz-txt-link-abbreviated" href=
=3D"mailto:users@ovirt.org" target=3D"_blank">users@ovirt.org</a>,
                      "Alon Levy" <a class=3D"moz-txt-link-rfc2396E" href=
=3D"mailto:alevy@redhat.com" target=3D"_blank"><alevy@redhat.com></a>=
,
                      "Arnon Gilboa" <a class=3D"moz-txt-link-rfc2396E" hre=
f=3D"mailto:agilboa@redhat.com" target=3D"_blank"><agilboa@redhat.com>=
;</a><br>
                      <b>Sent: </b>Thursday, 2 February, 2012 9:37:12
                      PM<br>
                      <b>Subject: </b>Re: [Users] Spice plugin for
                      firefox<br>
                      <br>
                      On 02/02/2012 12:39 PM, Spyro Polymiadis wrote:<br>
                      <br>
                      adding Alon & Arnon.<br>
                      <blockquote cite=3D"mid:7351492f-fc79-41c2-bb2d-849b2=
cc795e9@MacBookPro">
                        <div>Howdy again<br>
                          <br>
                          Has anyone managed to get the spice plugin
                          working for firefox under linux?<br>
                          When ever i click on the console icon, i see a
                          popup quickly appear then crash<br>
                        </div>
                      </blockquote>
                      what client (o.s) do you use ? do you have
                      spice-xpi and spice-client installed on it ? <br>
                      <blockquote cite=3D"mid:7351492f-fc79-41c2-bb2d-849b2=
cc795e9@MacBookPro">
                        <div><br>
                          In the spice logs it says <br>
                          2012-02-02 16:14:47,006 INFO  [20889:20891]
                          RedPeer::connect: Connecting 192.168.112.2
                          5901<br>
                          2012-02-02 16:14:47,013 WARN  [20889:20891]
                          RedChannel::run: RedChannelBase::connect:
                          version mismatch: expect 1 got 2<br>
                        </div>
                      </blockquote>
                      <blockquote cite=3D"mid:7351492f-fc79-41c2-bb2d-849b2=
cc795e9@MacBookPro">
                        <div><br>
                          :( cant seem to find any information on this
                          error unfortunately.<br>
                          <br>
                          Cheers<br>
                          Spyro</div>
                        <br>
                        <fieldset class=3D"mimeAttachmentHeader"></fieldset=
...
<br>
                        <pre>______________________________________________=
_
Users mailing list
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:Users@ovirt.org" targe=
t=3D"_blank">Users@ovirt.org</a>
<a class=3D"moz-txt-link-freetext" href=3D"http://lists.ovirt.org/mailman/l=
istinfo/users" target=3D"_blank">http://lists.ovirt.org/mailman/listinfo/us=
ers</a>
</pre>
                      </blockquote>
                      <br>
                      <br>
                      _______________________________________________<br>
                      Users mailing list<br>
                      <a class=3D"moz-txt-link-abbreviated" href=3D"mailto:=
Users@ovirt.org" target=3D"_blank">Users@ovirt.org</a><br>
                      <a class=3D"moz-txt-link-freetext" href=3D"http://lis=
ts.ovirt.org/mailman/listinfo/users" target=3D"_blank">http://lists.ovirt.o=
rg/mailman/listinfo/users</a><br>
                    </div>
                    <br>
                  </div>
                  <br>
                  <fieldset class=3D"mimeAttachmentHeader"></fieldset>
                  <br>
                  <pre>_______________________________________________
Users mailing list
<a class=3D"moz-txt-link-abbreviated" href=3D"mailto:Users@ovirt.org" targe=
t=3D"_blank">Users@ovirt.org</a>
<a class=3D"moz-txt-link-freetext" href=3D"http://lists.ovirt.org/mailman/l=
istinfo/users" target=3D"_blank">http://lists.ovirt.org/mailman/listinfo/us=
ers</a>
</pre>
                </blockquote>
                <br>
              </div>
              <br>
            </div>
          </blockquote>
          <br>
        </div>
        <br>
      </div>
    </blockquote>
    <br>

</div><br></div></body></html>
--=_cc0b8156-3370-49f7-be43-2efdf61a4910--