8:04 p.m.
This is a multi-part message in MIME format.
--------------040801010109090109090703
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit
Hi,
I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
everything is working fine, except that I can't start the SPICE HTML5
tool for any of the installed machines I have.
I've installed the oVirt guest agent on the VM side, websocket-proxy is
running and port 6100 is listening on the engine box:
# systemctl status ovirt-websocket-proxy
ovirt-websocket-proxy.service - oVirt Engine websockets proxy
Loaded: loaded
(/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
Active: active (running)
# netstat -atpn | grep 6100
tcp 0 0 0.0.0.0:6100 0.0.0.0:* LISTEN
7227/python
Also, I imported the CA cert (https://fqdn/ca.crt) on the browser.
However, once I run the SPICE HTML5 client from the userportal, all I
get is an empty grey square with the two "Send ctrl+alt+delete" and
"Toggle messages output" buttons at the bottom. Nothing in the logs
about this issue. I tried to run it both with Chromium and Firefox on a
linux box.
Is there anything that I am missing? I've run out of ideas...
Thanks.
Nicolás
--------------040801010109090109090703
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta http-equiv="content-type" content="text/html;
charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
everything is working fine, except that I can't start the SPICE
HTML5 tool for any of the installed machines I have.<br>
<br>
I've installed the oVirt guest agent on the VM side, websocket-proxy
is running and port 6100 is listening on the engine box:<br>
<blockquote># systemctl status ovirt-websocket-proxy<br>
ovirt-websocket-proxy.service - oVirt Engine websockets proxy<br>
Loaded: loaded
(/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)<br>
Active: active (running)<br>
<br>
# netstat -atpn | grep 6100<br>
tcp 0 0 0.0.0.0:6100
0.0.0.0:* LISTEN 7227/python<br>
</blockquote>
Also, I imported the CA cert (<a class="moz-txt-link-freetext"
href="https://fqdn/ca.crt">https://fqdn/ca.crt</a>) on the browser.
However, once I run the SPICE HTML5 client from the userportal, all
I get is an empty grey square with the two "Send ctrl+alt+delete"
and "Toggle messages output" buttons at the bottom. Nothing in the
logs about this issue. I tried to run it both with Chromium and
Firefox on a linux box.<br>
<br>
Is there anything that I am missing? I've run out of ideas...<br>
<br>
Thanks.<br>
<br>
Nicolás<br>
<br>
<br>
</body>
</html>
--------------040801010109090109090703--
8:59 a.m.
This is a multi-part message in MIME format.
--------------050309060608020605000001
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 8bit
On 10-6-2015 19:04, Nicolás wrote:
Hi,
I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
everything is working fine, except that I can't start the SPICE HTML5
tool for any of the installed machines I have.
I've installed the oVirt guest agent on the VM side, websocket-proxy
is running and port 6100 is listening on the engine box:
# systemctl status ovirt-websocket-proxy
ovirt-websocket-proxy.service - oVirt Engine websockets proxy
Loaded: loaded
(/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
Active: active (running)
# netstat -atpn | grep 6100
tcp 0 0 0.0.0.0:6100
0.0.0.0:* LISTEN 7227/python
Also, I imported the CA cert (https://fqdn/ca.crt) on the browser.
However, once I run the SPICE HTML5 client from the userportal, all I
get is an empty grey square with the two "Send ctrl+alt+delete" and
"Toggle messages output" buttons at the bottom. Nothing in the logs
about this issue. I tried to run it both with Chromium and Firefox on
a linux box.
Is there anything that I am missing? I've run out of ideas...
Did you enable port 6100 on the client side?. Try telnetting to the
websocket-proxy from the workstation you're using Chromium/FF on.
Joop
--------------050309060608020605000001
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 10-6-2015 19:04, Nicolás
wrote:<br>
</div>
<blockquote cite="mid:55786E09.70909@devels.es"
type="cite">
<meta http-equiv="content-type" content="text/html;
charset=windows-1252">
Hi,<br>
<br>
I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
everything is working fine, except that I can't start the SPICE
HTML5 tool for any of the installed machines I have.<br>
<br>
I've installed the oVirt guest agent on the VM side,
websocket-proxy is running and port 6100 is listening on the
engine box:<br>
<blockquote># systemctl status ovirt-websocket-proxy<br>
ovirt-websocket-proxy.service - oVirt Engine websockets proxy<br>
Loaded: loaded
(/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)<br>
Active: active (running)<br>
<br>
# netstat -atpn | grep 6100<br>
tcp 0 0 0.0.0.0:6100
0.0.0.0:* LISTEN 7227/python<br>
</blockquote>
Also, I imported the CA cert (<a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="https://fqdn/ca.crt">https://fqdn/ca.crt</a>)
on the browser. However, once I run the SPICE HTML5 client from
the userportal, all I get is an empty grey square with the two
"Send ctrl+alt+delete" and "Toggle messages output" buttons at
the
bottom. Nothing in the logs about this issue. I tried to run it
both with Chromium and Firefox on a linux box.<br>
<br>
Is there anything that I am missing? I've run out of ideas...<br>
<br>
</blockquote>
Did you enable port 6100 on the client side?. Try telnetting to the
websocket-proxy from the workstation you're using Chromium/FF on.<br>
<br>
Joop<br>
<br>
</body>
</html>
--------------050309060608020605000001--
10:04 a.m.
El 2015-06-11 06:59, Joop escribió:
On 10-6-2015 19:04, Nicolás wrote:
> Hi,
>
> I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
> everything is working fine, except that I can't start the SPICE
> HTML5 tool for any of the installed machines I have.
>
> I've installed the oVirt guest agent on the VM side,
> websocket-proxy is running and port 6100 is listening on the engine
> box:
>
>> # systemctl status ovirt-websocket-proxy
>> ovirt-websocket-proxy.service - oVirt Engine websockets proxy
>> Loaded: loaded
>> (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
>> Active: active (running)
>>
>> # netstat -atpn | grep 6100
>> tcp 0 0
>> 0.0.0.0:6100
>> 0.0.0.0:* LISTEN 7227/python
> Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the
> browser. However, once I run the SPICE HTML5 client from the
> userportal, all I get is an empty grey square with the two "Send
> ctrl+alt+delete" and "Toggle messages output" buttons at the bottom.
> Nothing in the logs about this issue. I tried to run it both with
> Chromium and Firefox on a linux box.
>
> Is there anything that I am missing? I've run out of ideas...
Did you enable port 6100 on the client side?. Try telnetting to the
websocket-proxy from the workstation you're using Chromium/FF on.
Joop
By client side do you mean where the ovirt-engine is running? If so,
yes, it's listening on that port. I can also telnet to that port:
$ telnet ovirtenginebox 6100
Trying 10.X.X.X...
Connected to ovirtenginebox.
Escape character is '^]'.
Thanks
Links:
------
[1] https://fqdn/ca.crt
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:30 a.m.
El 2015-06-11 08:04, nicolas(a)devels.es escribió:
El 2015-06-11 06:59, Joop escribió:
> On 10-6-2015 19:04, Nicolás wrote:
>
>> Hi,
>>
>> I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
>> everything is working fine, except that I can't start the SPICE
>> HTML5 tool for any of the installed machines I have.
>>
>> I've installed the oVirt guest agent on the VM side,
>> websocket-proxy is running and port 6100 is listening on the engine
>> box:
>>
>>> # systemctl status ovirt-websocket-proxy
>>> ovirt-websocket-proxy.service - oVirt Engine websockets proxy
>>> Loaded: loaded
>>> (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
>>> Active: active (running)
>>>
>>> # netstat -atpn | grep 6100
>>> tcp 0 0
>>> 0.0.0.0:6100
>>> 0.0.0.0:* LISTEN 7227/python
>> Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the
>> browser. However, once I run the SPICE HTML5 client from the
>> userportal, all I get is an empty grey square with the two "Send
>> ctrl+alt+delete" and "Toggle messages output" buttons at the
bottom.
>> Nothing in the logs about this issue. I tried to run it both with
>> Chromium and Firefox on a linux box.
>>
>> Is there anything that I am missing? I've run out of ideas...
> Did you enable port 6100 on the client side?. Try telnetting to the
> websocket-proxy from the workstation you're using Chromium/FF on.
>
> Joop
By client side do you mean where the ovirt-engine is running? If so,
yes, it's listening on that port. I can also telnet to that port:
$ telnet ovirtenginebox 6100
Trying 10.X.X.X...
Connected to ovirtenginebox.
Escape character is '^]'.
Thanks
I just found out that actually there are some lines in the
ovirt-engine's log whenever I try to run the HTML5 client:
2015-06-11 08:26:08,402 INFO
[org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-10)
[5a92c038] Running command: SetVmTicketCommand internal: false. Entities
affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction
group CONNECT_TO_VM with role type USER
2015-06-11 08:26:08,442 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
(ajp--127.0.0.1-8702-10) [5a92c038] START,
SetVmTicketVDSCommand(HostName = hostmachine, HostId =
3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, ticket=nEaTH3mqR30x,
validTime=120,m userName=user,
userId=f3365dd8-963b-4a56-b81f-b9444dfd62e2), log id: 2e6ef305
2015-06-11 08:26:08,459 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
(ajp--127.0.0.1-8702-10) [5a92c038] FINISH, SetVmTicketVDSCommand, log
id: 2e6ef305
2015-06-11 08:26:08,475 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(ajp--127.0.0.1-8702-10) [5a92c038] Correlation ID: 5a92c038, Call
Stack: null, Custom Event ID: -1, Message: user user@domain initiated
console session for VM Pool-ADMSIS-1
2015-06-11 08:26:08,502 WARN
[org.ovirt.engine.core.dal.job.ExecutionMessageDirector]
(ajp--127.0.0.1-8702-10) [4458db3] The message key VmLogon is missing
from bundles/ExecutionMessages
2015-06-11 08:26:08,534 INFO [org.ovirt.engine.core.bll.VmLogonCommand]
(ajp--127.0.0.1-8702-10) [4458db3] Running command: VmLogonCommand
internal: false. Entities affected : ID:
5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM
with role type USER
2015-06-11 08:26:08,574 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
(ajp--127.0.0.1-8702-10) [4458db3] START, VmLogonVDSCommand(HostName =
hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, domain=domain-authz,
password=******, userName=user@domain), log id: 14f0c410
2015-06-11 08:26:08,579 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
(ajp--127.0.0.1-8702-10) [4458db3] FINISH, VmLogonVDSCommand, log id:
14f0c410
None of them seem to be error messages, though.
>
>
>
> Links:
> ------
> [1] https://fqdn/ca.crt
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
10:55 a.m.
----- Original Message -----
From: nicolas(a)devels.es
To: users(a)ovirt.org
Sent: Thursday, June 11, 2015 9:30:23 AM
Subject: Re: [ovirt-users] Unable to use the SPICE HTML5 tool
El 2015-06-11 08:04, nicolas(a)devels.es escribió:
> El 2015-06-11 06:59, Joop escribió:
>> On 10-6-2015 19:04, Nicolás wrote:
>>
>>> Hi,
>>>
>>> I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
>>> everything is working fine, except that I can't start the SPICE
>>> HTML5 tool for any of the installed machines I have.
>>>
>>> I've installed the oVirt guest agent on the VM side,
>>> websocket-proxy is running and port 6100 is listening on the engine
>>> box:
>>>
>>>> # systemctl status ovirt-websocket-proxy
>>>> ovirt-websocket-proxy.service - oVirt Engine websockets proxy
>>>> Loaded: loaded
>>>> (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
>>>> Active: active (running)
>>>>
>>>> # netstat -atpn | grep 6100
>>>> tcp 0 0
>>>> 0.0.0.0:6100
>>>> 0.0.0.0:* LISTEN 7227/python
>>> Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the
>>> browser. However, once I run the SPICE HTML5 client from the
>>> userportal, all I get is an empty grey square with the two "Send
>>> ctrl+alt+delete" and "Toggle messages output" buttons at the
bottom.
>>> Nothing in the logs about this issue. I tried to run it both with
>>> Chromium and Firefox on a linux box.
Did you tried to click on the "Toggle messages output" button? is something
there?
Can you please check your browser Javascript console (Ctrl+Shift+J) for errors?
>>> Is there anything that I am missing? I've run out of
ideas...
>> Did you enable port 6100 on the client side?. Try telnetting to the
>> websocket-proxy from the workstation you're using Chromium/FF on.
>>
>> Joop
>
> By client side do you mean where the ovirt-engine is running? If so,
> yes, it's listening on that port. I can also telnet to that port:
>
> $ telnet ovirtenginebox 6100
> Trying 10.X.X.X...
> Connected to ovirtenginebox.
> Escape character is '^]'.
>
> Thanks
>
I just found out that actually there are some lines in the
ovirt-engine's log whenever I try to run the HTML5 client:
2015-06-11 08:26:08,402 INFO
[org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-10)
[5a92c038] Running command: SetVmTicketCommand internal: false. Entities
affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction
group CONNECT_TO_VM with role type USER
2015-06-11 08:26:08,442 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
(ajp--127.0.0.1-8702-10) [5a92c038] START,
SetVmTicketVDSCommand(HostName = hostmachine, HostId =
3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, ticket=nEaTH3mqR30x,
validTime=120,m userName=user,
userId=f3365dd8-963b-4a56-b81f-b9444dfd62e2), log id: 2e6ef305
2015-06-11 08:26:08,459 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
(ajp--127.0.0.1-8702-10) [5a92c038] FINISH, SetVmTicketVDSCommand, log
id: 2e6ef305
2015-06-11 08:26:08,475 INFO
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
(ajp--127.0.0.1-8702-10) [5a92c038] Correlation ID: 5a92c038, Call
Stack: null, Custom Event ID: -1, Message: user user@domain initiated
console session for VM Pool-ADMSIS-1
2015-06-11 08:26:08,502 WARN
[org.ovirt.engine.core.dal.job.ExecutionMessageDirector]
(ajp--127.0.0.1-8702-10) [4458db3] The message key VmLogon is missing
from bundles/ExecutionMessages
2015-06-11 08:26:08,534 INFO [org.ovirt.engine.core.bll.VmLogonCommand]
(ajp--127.0.0.1-8702-10) [4458db3] Running command: VmLogonCommand
internal: false. Entities affected : ID:
5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group CONNECT_TO_VM
with role type USER
2015-06-11 08:26:08,574 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
(ajp--127.0.0.1-8702-10) [4458db3] START, VmLogonVDSCommand(HostName =
hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, domain=domain-authz,
password=******, userName=user@domain), log id: 14f0c410
2015-06-11 08:26:08,579 INFO
[org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
(ajp--127.0.0.1-8702-10) [4458db3] FINISH, VmLogonVDSCommand, log id:
14f0c410
None of them seem to be error messages, though.
>>
>>
>>
>> Links:
>> ------
>> [1] https://fqdn/ca.crt
>>
>> _______________________________________________
>> Users mailing list
>> Users(a)ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
12:57 p.m.
El 2015-06-11 08:55, Simone Tiraboschi escribió:
----- Original Message -----
> From: nicolas(a)devels.es
> To: users(a)ovirt.org
> Sent: Thursday, June 11, 2015 9:30:23 AM
> Subject: Re: [ovirt-users] Unable to use the SPICE HTML5 tool
>
> El 2015-06-11 08:04, nicolas(a)devels.es escribió:
> > El 2015-06-11 06:59, Joop escribió:
> >> On 10-6-2015 19:04, Nicolás wrote:
> >>
> >>> Hi,
> >>>
> >>> I'm using oVirt 3.5.2 on a CentOS box. As far as the engine goes
> >>> everything is working fine, except that I can't start the SPICE
> >>> HTML5 tool for any of the installed machines I have.
> >>>
> >>> I've installed the oVirt guest agent on the VM side,
> >>> websocket-proxy is running and port 6100 is listening on the engine
> >>> box:
> >>>
> >>>> # systemctl status ovirt-websocket-proxy
> >>>> ovirt-websocket-proxy.service - oVirt Engine websockets proxy
> >>>> Loaded: loaded
> >>>> (/usr/lib/systemd/system/ovirt-websocket-proxy.service; enabled)
> >>>> Active: active (running)
> >>>>
> >>>> # netstat -atpn | grep 6100
> >>>> tcp 0 0
> >>>> 0.0.0.0:6100
> >>>> 0.0.0.0:* LISTEN 7227/python
> >>> Also, I imported the CA cert (https://fqdn/ca.crt [1]) on the
> >>> browser. However, once I run the SPICE HTML5 client from the
> >>> userportal, all I get is an empty grey square with the two "Send
> >>> ctrl+alt+delete" and "Toggle messages output" buttons at
the bottom.
> >>> Nothing in the logs about this issue. I tried to run it both with
> >>> Chromium and Firefox on a linux box.
Did you tried to click on the "Toggle messages output" button? is
something there?
Can you please check your browser Javascript console (Ctrl+Shift+J) for
errors?
Indeed, checking the Javascript console I discovered where the culprit
is. This ovirt engine machine had formerly a FQDN that was changed
afterwards (I used the .../setup/bin/ovirt-engine-rename script), so at
installation time, SSL certs were issued for that FQDN. The
ovirt-engine-rename script regenerated the engine certs, but seems that
it didn't do the work for the websocket proxy, so the old FQDN cert is
still used and a connection cannot be established with the daemon
(logically, due to the mismatch). I can't find any documentation on how
to regenerate the websocket proxy cert, though. Is there some script for
that, or at least some manual way to accomplish it?
Thanks for your help.
> >>> Is there anything that I am missing? I've run
out of ideas...
> >> Did you enable port 6100 on the client side?. Try telnetting to the
> >> websocket-proxy from the workstation you're using Chromium/FF on.
> >>
> >> Joop
> >
> > By client side do you mean where the ovirt-engine is running? If so,
> > yes, it's listening on that port. I can also telnet to that port:
> >
> > $ telnet ovirtenginebox 6100
> > Trying 10.X.X.X...
> > Connected to ovirtenginebox.
> > Escape character is '^]'.
> >
> > Thanks
> >
>
> I just found out that actually there are some lines in the
> ovirt-engine's log whenever I try to run the HTML5 client:
>
> 2015-06-11 08:26:08,402 INFO
> [org.ovirt.engine.core.bll.SetVmTicketCommand]
> (ajp--127.0.0.1-8702-10)
> [5a92c038] Running command: SetVmTicketCommand internal: false.
> Entities
> affected : ID: 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction
> group CONNECT_TO_VM with role type USER
> 2015-06-11 08:26:08,442 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-10) [5a92c038] START,
> SetVmTicketVDSCommand(HostName = hostmachine, HostId =
> 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
> vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, ticket=nEaTH3mqR30x,
> validTime=120,m userName=user,
> userId=f3365dd8-963b-4a56-b81f-b9444dfd62e2), log id: 2e6ef305
> 2015-06-11 08:26:08,459 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-10) [5a92c038] FINISH, SetVmTicketVDSCommand, log
> id: 2e6ef305
> 2015-06-11 08:26:08,475 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-10) [5a92c038] Correlation ID: 5a92c038, Call
> Stack: null, Custom Event ID: -1, Message: user user@domain initiated
> console session for VM Pool-ADMSIS-1
> 2015-06-11 08:26:08,502 WARN
> [org.ovirt.engine.core.dal.job.ExecutionMessageDirector]
> (ajp--127.0.0.1-8702-10) [4458db3] The message key VmLogon is missing
> from bundles/ExecutionMessages
> 2015-06-11 08:26:08,534 INFO
> [org.ovirt.engine.core.bll.VmLogonCommand]
> (ajp--127.0.0.1-8702-10) [4458db3] Running command: VmLogonCommand
> internal: false. Entities affected : ID:
> 5efbe47d-8f27-46a1-a663-20882b9f4b6a Type: VMAction group
> CONNECT_TO_VM
> with role type USER
> 2015-06-11 08:26:08,574 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
> (ajp--127.0.0.1-8702-10) [4458db3] START, VmLogonVDSCommand(HostName =
> hostmachine, HostId = 3ec39b7a-f0a9-4df6-8c14-db2e73a493e2,
> vmId=5efbe47d-8f27-46a1-a663-20882b9f4b6a, domain=domain-authz,
> password=******, userName=user@domain), log id: 14f0c410
> 2015-06-11 08:26:08,579 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.VmLogonVDSCommand]
> (ajp--127.0.0.1-8702-10) [4458db3] FINISH, VmLogonVDSCommand, log id:
> 14f0c410
>
> None of them seem to be error messages, though.
>
> >>
> >>
> >>
> >> Links:
> >> ------
> >> [1] https://fqdn/ca.crt
> >>
> >> _______________________________________________
> >> Users mailing list
> >> Users(a)ovirt.org
> >> http://lists.ovirt.org/mailman/listinfo/users
> > _______________________________________________
> > Users mailing list
> > Users(a)ovirt.org
> > http://lists.ovirt.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
1:16 p.m.
On Thu, Jun 11, 2015 at 11:57 AM, <nicolas(a)devels.es> wrote:
El 2015-06-11 08:55, Simone Tiraboschi escribió:
>
>
Indeed, checking the Javascript console I discovered where the culprit is.
This ovirt engine machine had formerly a FQDN that was changed afterwards
(I used the .../setup/bin/ovirt-engine-rename script), so at installation
time, SSL certs were issued for that FQDN. The ovirt-engine-rename script
regenerated the engine certs, but seems that it didn't do the work for the
websocket proxy, so the old FQDN cert is still used and a connection cannot
be established with the daemon (logically, due to the mismatch). I can't
find any documentation on how to regenerate the websocket proxy cert,
though. Is there some script for that, or at least some manual way to
accomplish it?
Thanks for your help.
Based on an environment in 3.3.2 I solved a situation with webSocketProxy
Enabled only after original install + update thanks to Alon advises.
See full lthread here:
http://lists.ovirt.org/pipermail/users/2013-December/018554.html
Possibly it can apply to your environment too
You could do the following:
1. remove
In /etc/pki/ovirt-engine/keys/:
websocket-proxy.key.nopass
websocket-proxy.p12
In /etc/pki/ovirt-engine/certs/:
websocket-proxy.cer
2. run setup using:
# engine-setup --otopi-environment="OVESETUP_CONFIG/websocketProxyConfig=
bool:True"
and this should create websocket proxy certificates/keys in correct way....
Be sure to make backups and verify better, in particular it this is a
production environment.
HIH,
Gianluca
1:33 p.m.
El 2015-06-11 11:16, Gianluca Cecchi escribió:
On Thu, Jun 11, 2015 at 11:57 AM, <nicolas(a)devels.es> wrote:
> El 2015-06-11 08:55, Simone Tiraboschi escribió:
>
>>
>
> Indeed, checking the Javascript console I discovered where the
> culprit is. This ovirt engine machine had formerly a FQDN that was
> changed afterwards (I used the .../setup/bin/ovirt-engine-rename
> script), so at installation time, SSL certs were issued for that
> FQDN. The ovirt-engine-rename script regenerated the engine certs,
> but seems that it didn't do the work for the websocket proxy, so the
> old FQDN cert is still used and a connection cannot be established
> with the daemon (logically, due to the mismatch). I can't find any
> documentation on how to regenerate the websocket proxy cert, though.
> Is there some script for that, or at least some manual way to
> accomplish it?
>
> Thanks for your help.
Based on an environment in 3.3.2 I solved a situation with
webSocketProxy Enabled only after original install + update thanks to
Alon advises.
See full lthread here:
http://lists.ovirt.org/pipermail/users/2013-December/018554.html [1]
Possibly it can apply to your environment too
You could do the following:
1. remove
In /etc/pki/ovirt-engine/keys/:
websocket-proxy.key.nopass
websocket-proxy.p12
In /etc/pki/ovirt-engine/certs/:
websocket-proxy.cer
2. run setup using:
# engine-setup
--otopi-environment="OVESETUP_CONFIG/websocketProxyConfig=bool:True"
and this should create websocket proxy certificates/keys in correct
way....
Unfortunately not. The process seems to run:
[...]
[ INFO ] Configuring WebSocket Proxy
[...]
But once it ends, there are no certs. Neither restarting the daemon
works.
Thanks for the hint, anyway.
Be sure to make backups and verify better, in particular it this is
a
production environment.
HIH,
Gianluca
Links:
------
[1] http://lists.ovirt.org/pipermail/users/2013-December/018554.html
3451
days inactive
3452
days old
7 comments
5 participants
participants (5)
-
Gianluca Cecchi -
Joop -
nicolas＠devels.es -
Nicolás
-
Simone Tiraboschi