Re: [Users] SSO from user portal to Windows 7 guest

Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow. Simon

On 02/15/2014 07:51 AM, SimmInfo wrote:
Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM? commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100 frontend: Allow enabling/disabling SSO This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog. Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279

Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default). To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail). If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence). Also VmLogon command should print some information to engine's log - could you take a look? Cheers, Franta. ----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest On 02/15/2014 07:51 AM, SimmInfo wrote:
Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM? commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100 frontend: Allow enabling/disabling SSO This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog. Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279

Ok, I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config. Same result as the 3.3.3 engine. No sso but lock screen on spice session termination. Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc. Is there another way to know if the agent is correctly reporting to the engine? Will test today with a fedora host. Thanks! My test config : Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a écrit :
Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default).
To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/15/2014 07:51 AM, SimmInfo wrote: Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279

On 02/18/2014 03:36 PM, SimmInfo wrote:
Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice session termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc.
Is there another way to know if the agent is correctly reporting to the engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a écrit :
Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default).
To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/15/2014 07:51 AM, SimmInfo wrote: Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279

Yes, I make my tests from user portal. Envoyé de mon iPad
Le 2014-02-18 à 09:14, Itamar Heim <iheim@redhat.com> a écrit :
On 02/18/2014 03:36 PM, SimmInfo wrote: Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice session termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc.
Is there another way to know if the agent is correctly reporting to the engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a écrit :
Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default).
To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/15/2014 07:51 AM, SimmInfo wrote: Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279

On 02/18/2014 06:59 PM, SimmInfo wrote:
Yes, I make my tests from user portal.
Envoyé de mon iPad
Le 2014-02-18 à 09:14, Itamar Heim <iheim@redhat.com> a écrit :
On 02/18/2014 03:36 PM, SimmInfo wrote: Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice session termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc.
Is there another way to know if the agent is correctly reporting to the engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a écrit :
Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default).
To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/15/2014 07:51 AM, SimmInfo wrote: Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279
engine log?

On February 18, 2014 at 4:47 PM Itamar Heim <iheim@redhat.com> wrote:
On 02/18/2014 06:59 PM, SimmInfo wrote:
Yes, I make my tests from user portal.
Envoy=C3=A9 de mon iPad
Le 2014-02-18 =C3=A0 09:14, Itamar Heim <iheim@redhat.com> a =C3=A9cri= t :
On 02/18/2014 03:36 PM, SimmInfo wrote: Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" = as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice sess= ion termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of t= he connected user (very useful info), installed app, etc.
Is there another way to know if the agent is correctly reporting to t= he engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only wor= ks if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 =C3=A0 04:24, Frantisek Kobzik <fkobzik@redhat.com> a =
=C3=A9crit :
Yes, that's a valid point (however it _should_ be set to 'Guest Agen=
t' by
default).
To sum it up, SSO should happen (on the engine side) if all these conditions are true: - user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work, there = must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kob= zik" <fkobzik@redhat.com> Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/15/2014 07:51 AM, SimmInfo wrote: Ok, after more investigation on agent logs and some code modificati= on it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not =
------=_Part_464706_1392248389.1392874309886 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable the
"login" command. Look like engine trouble... I will do more testing tomorrow.
Simon _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279
engine log?
Get no time for testing with fedora guest but there is some log output of t= he connection to the vm from user portal : I've noticed that error : Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA This domain : rstemis.reg01.rtss.qc.ca is not my domain but another domain member of the same forest... 2014-02-20 00:02:47,721 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-40) [63705695] Correlation ID: 63705695, Jo= b ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1= , Message: VM test was started by admin (Host: csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca). 2014-02-20 00:02:50,795 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) VM test 8bf43efc-9424-4ffd-b5c6-1c926232= 67ea moved from WaitForLaunch --> PoweringUp 2014-02-20 00:02:50,804 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) START, FullListVdsCommand(HostName =3D csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =3D 0e900351-de49-4646-a4b1-394343e32f81, vds=3DHost[csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca], vmIds=3D[8bf43efc-9424-4ffd-b5c6-1c92623267ea]), log id: 4714a293 2014-02-20 00:02:50,813 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) FINISH, FullListVdsCommand, return: [Ljava.util.HashMap;@1bbd855a, log id: 4714a293 2014-02-20 00:02:50,815 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) Received a console Device without an add= ress when processing VM 8bf43efc-9424-4ffd-b5c6-1c92623267ea devices, skipping device: {alias=3Dconsole0, specParams=3D{}, device=3Dconsole, type=3Dconsol= e, deviceId=3Ddd007a77-cbf1-4c58-9cea-39427e770d5d} 2014-02-20 00:03:48,442 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-44) VM test 8bf43efc-9424-4ffd-b5c6-1c926232= 67ea moved from PoweringUp --> Up 2014-02-20 00:03:48,449 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-44) Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1= , Message: VM test started on Host csl01basqu0vh01.csssbasques.reg01.rtss.qc.= ca 2014-02-20 00:03:59,757 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--127.0.0.1-870= 2-2) calling GetConfigurationValueQuery (UserMessageOfTheDay) with null version, using default general for version 2014-02-20 00:04:21,710 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-99) VM test 8bf43efc-9424-4ffd-b5c6-1c926232= 67ea moved from Up --> RebootInProgress 2014-02-20 00:05:01,101 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-66) VM test 8bf43efc-9424-4ffd-b5c6-1c926232= 67ea moved from RebootInProgress --> Up 2014-02-20 00:05:31,126 ERROR [org.ovirt.engine.core.bll.adbroker.DirectorySearcher] (ajp--127.0.0.1-8702= -5) Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using use= r levsim01@CSSSBASQUES.REG01.RTSS.QC.CA 2014-02-20 00:05:31,593 INFO [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-5) Running command: LoginUserCommand internal: false. 2014-02-20 00:05:31,600 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) Correlation ID: null, Call Stack: null, Custom Even= t ID: -1, Message: User levsim01 logged in. 2014-02-20 00:05:34,780 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand= ] (ajp--127.0.0.1-8702-5) [6916f2f] Running command: SetVmTicketCommand inter= nal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: = VM 2014-02-20 00:05:34,787 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] START, SetVmTicketVDSCommand(HostName =3D csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =3D 0e900351-de49-4646-a4b1-394343e32f81, vmId=3D8bf43efc-9424-4ffd-b5c6-1c9262= 3267ea, ticket=3Dy5bNXmtoILn7, validTime=3D120,m userName=3Dlevsim01, userId=3D4643e1c0-bd18-493c-8c51-a342802168b0), log id: 44ef4679 2014-02-20 00:05:34,806 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] FINISH, SetVmTicketVDSCommand, log id: 44ef4679 2014-02-20 00:05:34,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) [6916f2f] Correlation ID: 6916f2f, Call Stack: null= , Custom Event ID: -1, Message: user levsim01 initiated console session for V= M test 2014-02-20 00:05:49,829 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand= ] (ajp--127.0.0.1-8702-4) [50148fc] Running command: SetVmTicketCommand inter= nal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: = VM 2014-02-20 00:05:49,832 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] START, SetVmTicketVDSCommand(HostName =3D csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =3D 0e900351-de49-4646-a4b1-394343e32f81, vmId=3D8bf43efc-9424-4ffd-b5c6-1c9262= 3267ea, ticket=3DthO14QusWk0w, validTime=3D120,m userName=3Dlevsim01, userId=3D4643e1c0-bd18-493c-8c51-a342802168b0), log id: b7b1cf 2014-02-20 00:05:49,849 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] FINISH, SetVmTicketVDSCommand, log id: b7= b1cf 2014-02-20 00:05:49,862 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-4) [50148fc] Correlation ID: 50148fc, Call Stack: null= , Custom Event ID: -1, Message: user levsim01 initiated console session for V= M test 2014-02-20 00:05:52,547 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-59) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca is connected to VM test. 2014-02-20 00:06:07,732 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-81) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca go= t disconnected from VM test. Also, i get this error each hour : 2014-02-19 23:46:15,522 ERROR [org.ovirt.engine.core.utils.timer.SchedulerUtilQuartzImpl] (DefaultQuartzScheduler_Worker-37) Failed to invoke scheduled method refreshAllUsers: java.lang.reflect.InvocationTargetException at sun.reflect.GeneratedMethodAccessor175.invoke(Unknown Source) [:1.7.= 0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImp= l.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java= :60) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:55= 7) [quartz.jar:] Caused by: java.lang.NullPointerException at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUser(DbUserCacheManager= .java:220) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUsers(DbUserCacheManage= r.java:137) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshAllUsers(DbUserCacheMan= ager.java:92) [bll.jar:] ... 6 more Somthing wrong with my directory config? Thanks ------=_Part_464706_1392248389.1392874309886 MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"/> </head><body style=""> <div> > On February 18, 2014 at 4:47 PM Itamar Heim <iheim@redhat.com> wrote: <br/>> <br/>> On 02/18/2014 06:59 PM, SimmInfo wrote: <br/>> > Yes, I make my tests from user portal. <br/>> > <br/>> > Envoyé de mon iPad <br/>> > <br/>> >> Le 2014-02-18 à 09:14, Itamar Heim <iheim@redhat.com> a écrit : <br/>> >> <br/>> >>> On 02/18/2014 03:36 PM, SimmInfo wrote: <br/>> >>> Ok, <br/>> >>> <br/>> >>> I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config. <br/>> >>> <br/>> >>> Same result as the 3.3.3 engine. No sso but lock screen on spice session termination. <br/>> >>> <br/>> >>> Nothing in engine.log about VmLogon nor Guest agent reportion to the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc. <br/>> >>> <br/>> >>> Is there another way to know if the agent is correctly reporting to the engine? <br/>> >>> <br/>> >>> Will test today with a fedora host. <br/>> >> <br/>> >> just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin? <br/>> >> <br/>> >>> <br/>> >>> Thanks! <br/>> >>> <br/>> >>> My test config : <br/>> >>> <br/>> >>> Engine 3.4 beta2 on CentOS 6.5 <br/>> >>> Node CentOS 6.5 with vdsm from prerelease repo. <br/>> >>> Storage iscsi <br/>> >>> <br/>> >>> <br/>> >>>> Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a écrit : <br/>> >>>> <br/>> >>>> Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default). <br/>> >>>> <br/>> >>>> To sum it up, SSO should happen (on the engine side) if all these conditions are true: <br/>> >>>> - user is connecting via userportal (not webadmin), <br/>> >>>> - guest agent presence is reported to engine, <br/>> >>>> - state of VM is strictly "Up" <br/>> >>>> - VM has SSO method set to "Guest agent" (Itamar's mail). <br/>> >>>> <br/>> >>>> If these conditions are fulfilled and SSO still doesn't work, there must be something wrong with the engine (or with reporting GA presence). <br/>> >>>> <br/>> >>>> Also VmLogon command should print some information to engine's log - could you take a look? <br/>> >>>> <br/>> >>>> Cheers, <br/>> >>>> Franta. <br/>> >>>> <br/>> >>>> <br/>> >>>> ----- Original Message ----- <br/>> >>>> From: "Itamar Heim" <iheim@redhat.com> <br/>> >>>> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> <br/>> >>>> Sent: Monday, February 17, 2014 3:35:08 AM <br/>> >>>> Subject: Re: [Users] SSO from user portal to Windows 7 guest <br/>> >>>> <br/>> >>>>> On 02/15/2014 07:51 AM, SimmInfo wrote: <br/>> >>>>> Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow. <br/>> >>>>> <br/>> >>>>> Simon <br/>> >>>>> _______________________________________________ <br/>> >>>>> Users mailing list <br/>> >>>>> Users@ovirt.org <br/>> >>>>> http://lists.ovirt.org/mailman/listinfo/users <br/>> >>>> <br/>> >>>> make sure it is enabled for the VM? <br/>> >>>> <br/>> >>>> commit abd645d5af8a5e4f7986bef00f470171a63be823 <br/>> >>>> Author: Frantisek Kobzik <fkobzik@redhat.com> <br/>> >>>> Date: Tue Nov 26 11:16:26 2013 +0100 <br/>> >>>> <br/>> >>>> frontend: Allow enabling/disabling SSO <br/>> >>>> <br/>> >>>> This small feature allows controlling SSO per VM. <br/>> >>>> Changes: <br/>> >>>> - new radio buttons in New/Edit VM/Template/VmPool dialog. <br/>> >>>> <br/>> >>>> Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e <br/>> >>>> Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> <br/>> >>>> Bug-Url: https://bugzilla.redhat.com/1035279 <br/>> >> <br/>> <br/>> engine log? </div> <div> </div> <div> Get no time for testing with fedora guest but there is some log output of the connection to the vm from user portal : </div> <div> </div> <div> I've noticed that error : <strong>Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA</strong> </div> <div> </div> <div> This domain : <strong>rstemis.reg01.rtss.qc.ca</strong> is not my domain but another domain member of the same forest... </div> <div> </div> <div> 2014-02-20 00:02:47,721 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-40) [63705695] Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test was started by admin (Host: csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca). <br/>2014-02-20 00:02:50,795 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from WaitForLaunch --> PoweringUp <br/>2014-02-20 00:02:50,804 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) START, FullListVdsCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vds=Host[csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca], vmIds=[8bf43efc-9424-4ffd-b5c6-1c92623267ea]), log id: 4714a293 <br/>2014-02-20 00:02:50,813 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) FINISH, FullListVdsCommand, return: [Ljava.util.HashMap;@1bbd855a, log id: 4714a293 <br/>2014-02-20 00:02:50,815 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) Received a console Device without an address when processing VM 8bf43efc-9424-4ffd-b5c6-1c92623267ea devices, skipping device: {alias=console0, specParams={}, device=console, type=console, deviceId=dd007a77-cbf1-4c58-9cea-39427e770d5d} <br/>2014-02-20 00:03:48,442 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-44) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from PoweringUp --> Up <br/>2014-02-20 00:03:48,449 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-44) Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test started on Host csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca <br/>2014-02-20 00:03:59,757 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--127.0.0.1-8702-2) calling GetConfigurationValueQuery (UserMessageOfTheDay) with null version, using default general for version <br/>2014-02-20 00:04:21,710 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-99) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from Up --> RebootInProgress <br/>2014-02-20 00:05:01,101 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-66) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from RebootInProgress --> Up <br/>2014-02-20 00:05:31,126 ERROR [org.ovirt.engine.core.bll.adbroker.DirectorySearcher] (ajp--127.0.0.1-8702-5) Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA <br/>2014-02-20 00:05:31,593 INFO [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-5) Running command: LoginUserCommand internal: false. <br/>2014-02-20 00:05:31,600 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01 logged in. <br/>2014-02-20 00:05:34,780 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-5) [6916f2f] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM <br/>2014-02-20 00:05:34,787 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=y5bNXmtoILn7, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: 44ef4679 <br/>2014-02-20 00:05:34,806 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] FINISH, SetVmTicketVDSCommand, log id: 44ef4679 <br/>2014-02-20 00:05:34,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) [6916f2f] Correlation ID: 6916f2f, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test <br/>2014-02-20 00:05:49,829 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-4) [50148fc] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM <br/>2014-02-20 00:05:49,832 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=thO14QusWk0w, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: b7b1cf <br/>2014-02-20 00:05:49,849 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] FINISH, SetVmTicketVDSCommand, log id: b7b1cf <br/>2014-02-20 00:05:49,862 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-4) [50148fc] Correlation ID: 50148fc, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test <br/>2014-02-20 00:05:52,547 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-59) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca is connected to VM test. <br/>2014-02-20 00:06:07,732 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-81) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca got disconnected from VM test. </div> <div> </div> <div> Also, i get this error each hour : </div> <div> </div> <div> 2014-02-19 23:46:15,522 ERROR [org.ovirt.engine.core.utils.timer.SchedulerUtilQuartzImpl] (DefaultQuartzScheduler_Worker-37) Failed to invoke scheduled method refreshAllUsers: java.lang.reflect.InvocationTargetException <br/> at sun.reflect.GeneratedMethodAccessor175.invoke(Unknown Source) [:1.7.0_51] <br/> at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] <br/> at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] <br/> at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [scheduler.jar:] <br/> at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] <br/> at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] <br/>Caused by: java.lang.NullPointerException <br/> at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUser(DbUserCacheManager.java:220) [bll.jar:] <br/> at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUsers(DbUserCacheManager.java:137) [bll.jar:] <br/> at org.ovirt.engine.core.bll.DbUserCacheManager.refreshAllUsers(DbUserCacheManager.java:92) [bll.jar:] <br/> ... 6 more </div> <div> </div> <div> Somthing wrong with my directory config? </div> <div> </div> <div> Thanks </div> </body></html> ------=_Part_464706_1392248389.1392874309886--

On 02/20/2014 07:31 AM, simon wrote:
On February 18, 2014 at 4:47 PM Itamar Heim <iheim@redhat.com> wrote:
Yes, I make my tests from user portal.
Envoyé de mon iPad
Le 2014-02-18 à 09:14, Itamar Heim <iheim@redhat.com> a écrit :
On 02/18/2014 03:36 PM, SimmInfo wrote: Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice session termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to
Is there another way to know if the agent is correctly reporting
to the engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a
écrit :
Yes, that's a valid point (however it _should_ be set to 'Guest
Agent' by default).
To sum it up, SSO should happen (on the engine side) if all
- user is connecting via userportal (not webadmin), - guest agent presence is reported to engine, - state of VM is strictly "Up" - VM has SSO method set to "Guest agent" (Itamar's mail).
If these conditions are fulfilled and SSO still doesn't work,
On 02/18/2014 06:59 PM, SimmInfo wrote: the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc. these conditions are true: there must be something wrong with the engine (or with reporting GA presence).
Also VmLogon command should print some information to engine's
log - could you take a look?
Cheers, Franta.
----- Original Message ----- From: "Itamar Heim" <iheim@redhat.com> To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek
Kobzik" <fkobzik@redhat.com>
Sent: Monday, February 17, 2014 3:35:08 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
> On 02/15/2014 07:51 AM, SimmInfo wrote: > Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow. > > Simon > _______________________________________________ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users
make sure it is enabled for the VM?
commit abd645d5af8a5e4f7986bef00f470171a63be823 Author: Frantisek Kobzik <fkobzik@redhat.com> Date: Tue Nov 26 11:16:26 2013 +0100
frontend: Allow enabling/disabling SSO
This small feature allows controlling SSO per VM. Changes: - new radio buttons in New/Edit VM/Template/VmPool dialog.
Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> Bug-Url: https://bugzilla.redhat.com/1035279
engine log? Get no time for testing with fedora guest but there is some log output of the connection to the vm from user portal : I've noticed that error : *Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA* This domain : *rstemis.reg01.rtss.qc.ca* is not my domain but another domain member of the same forest... 2014-02-20 00:02:47,721 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-40) [63705695] Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test was started by admin (Host: csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca). 2014-02-20 00:02:50,795 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from WaitForLaunch --> PoweringUp 2014-02-20 00:02:50,804 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) START, FullListVdsCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vds=Host[csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca], vmIds=[8bf43efc-9424-4ffd-b5c6-1c92623267ea]), log id: 4714a293 2014-02-20 00:02:50,813 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) FINISH, FullListVdsCommand, return: [Ljava.util.HashMap;@1bbd855a, log id: 4714a293 2014-02-20 00:02:50,815 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) Received a console Device without an address when processing VM 8bf43efc-9424-4ffd-b5c6-1c92623267ea devices, skipping device: {alias=console0, specParams={}, device=console, type=console, deviceId=dd007a77-cbf1-4c58-9cea-39427e770d5d} 2014-02-20 00:03:48,442 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-44) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from PoweringUp --> Up 2014-02-20 00:03:48,449 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-44) Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test started on Host csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca 2014-02-20 00:03:59,757 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--127.0.0.1-8702-2) calling GetConfigurationValueQuery (UserMessageOfTheDay) with null version, using default general for version 2014-02-20 00:04:21,710 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-99) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from Up --> RebootInProgress 2014-02-20 00:05:01,101 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-66) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from RebootInProgress --> Up 2014-02-20 00:05:31,126 ERROR [org.ovirt.engine.core.bll.adbroker.DirectorySearcher] (ajp--127.0.0.1-8702-5) Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA 2014-02-20 00:05:31,593 INFO [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-5) Running command: LoginUserCommand internal: false. 2014-02-20 00:05:31,600 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01 logged in. 2014-02-20 00:05:34,780 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-5) [6916f2f] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM 2014-02-20 00:05:34,787 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=y5bNXmtoILn7, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: 44ef4679 2014-02-20 00:05:34,806 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] FINISH, SetVmTicketVDSCommand, log id: 44ef4679 2014-02-20 00:05:34,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) [6916f2f] Correlation ID: 6916f2f, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test 2014-02-20 00:05:49,829 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-4) [50148fc] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM 2014-02-20 00:05:49,832 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=thO14QusWk0w, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: b7b1cf 2014-02-20 00:05:49,849 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] FINISH, SetVmTicketVDSCommand, log id: b7b1cf 2014-02-20 00:05:49,862 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-4) [50148fc] Correlation ID: 50148fc, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test 2014-02-20 00:05:52,547 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-59) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca is connected to VM test. 2014-02-20 00:06:07,732 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-81) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca got disconnected from VM test. Also, i get this error each hour : 2014-02-19 23:46:15,522 ERROR [org.ovirt.engine.core.utils.timer.SchedulerUtilQuartzImpl] (DefaultQuartzScheduler_Worker-37) Failed to invoke scheduled method refreshAllUsers: java.lang.reflect.InvocationTargetException at sun.reflect.GeneratedMethodAccessor175.invoke(Unknown Source) [:1.7.0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] Caused by: java.lang.NullPointerException at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUser(DbUserCacheManager.java:220) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUsers(DbUserCacheManager.java:137) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshAllUsers(DbUserCacheManager.java:92) [bll.jar:] ... 6 more Somthing wrong with my directory config? Thanks
yair?

----- Original Message -----
From: "Itamar Heim" <iheim@redhat.com> To: "simon" <simon@simminfo.com> Cc: "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org, "Yair Zaslavsky" <yzaslavs@redhat.com> Sent: Thursday, February 20, 2014 9:15:11 AM Subject: Re: [Users] SSO from user portal to Windows 7 guest
On 02/20/2014 07:31 AM, simon wrote:
On February 18, 2014 at 4:47 PM Itamar Heim <iheim@redhat.com> wrote:
Yes, I make my tests from user portal.
Envoyé de mon iPad
Le 2014-02-18 à 09:14, Itamar Heim <iheim@redhat.com> a écrit :
On 02/18/2014 03:36 PM, SimmInfo wrote: Ok,
I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest agent" as SSO option in vm config.
Same result as the 3.3.3 engine. No sso but lock screen on spice session termination.
Nothing in engine.log about VmLogon nor Guest agent reportion to
Is there another way to know if the agent is correctly reporting
to the engine?
Will test today with a fedora host.
just to make sure - did you notice the important point of SSO only works if you login from the user portal, not from the webadmin?
Thanks!
My test config :
Engine 3.4 beta2 on CentOS 6.5 Node CentOS 6.5 with vdsm from prerelease repo. Storage iscsi
> Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik@redhat.com> a
écrit :
> > Yes, that's a valid point (however it _should_ be set to 'Guest Agent' by default). > > To sum it up, SSO should happen (on the engine side) if all
> - user is connecting via userportal (not webadmin), > - guest agent presence is reported to engine, > - state of VM is strictly "Up" > - VM has SSO method set to "Guest agent" (Itamar's mail). > > If these conditions are fulfilled and SSO still doesn't work,
On 02/18/2014 06:59 PM, SimmInfo wrote: the engine but Admin portal populated with vm ip, user connected, ip of the connected user (very useful info), installed app, etc. these conditions are true: there must be something wrong with the engine (or with reporting GA presence).
> > Also VmLogon command should print some information to engine's log - could you take a look? > > Cheers, > Franta. > > > ----- Original Message ----- > From: "Itamar Heim" <iheim@redhat.com> > To: "SimmInfo" <simon@simminfo.com>, users@ovirt.org, "Frantisek Kobzik" <fkobzik@redhat.com> > Sent: Monday, February 17, 2014 3:35:08 AM > Subject: Re: [Users] SSO from user portal to Windows 7 guest > >> On 02/15/2014 07:51 AM, SimmInfo wrote: >> Ok, after more investigation on agent logs and some code modification it seem that the agent is receiving commands from virtio device. As it should. I have seen commands lock-screen, shutdown, etc... But not the "login" command. Look like engine trouble... I will do more testing tomorrow. >> >> Simon >> _______________________________________________ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users > > make sure it is enabled for the VM? > > commit abd645d5af8a5e4f7986bef00f470171a63be823 > Author: Frantisek Kobzik <fkobzik@redhat.com> > Date: Tue Nov 26 11:16:26 2013 +0100 > > frontend: Allow enabling/disabling SSO > > This small feature allows controlling SSO per VM. > Changes: > - new radio buttons in New/Edit VM/Template/VmPool dialog. > > Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e > Signed-off-by: Frantisek Kobzik <fkobzik@redhat.com> > Bug-Url: https://bugzilla.redhat.com/1035279
engine log? Get no time for testing with fedora guest but there is some log output of the connection to the vm from user portal : I've noticed that error : *Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA* This domain : *rstemis.reg01.rtss.qc.ca* is not my domain but another domain member of the same forest...
That sounds strange, the ldap servers should be looked for domains that were added by engine-manage-domains. You can perform engine-manage-domains list (or engine-manage-domains -action=list if the new syntax does not work for you). or you can alternatively check the database - psql engine select * from vdc_options where option_name = 'DomainName'; and check which domains were added?
2014-02-20 00:02:47,721 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-6-thread-40) [63705695] Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test was started by admin (Host: csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca). 2014-02-20 00:02:50,795 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from WaitForLaunch --> PoweringUp 2014-02-20 00:02:50,804 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) START, FullListVdsCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vds=Host[csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca], vmIds=[8bf43efc-9424-4ffd-b5c6-1c92623267ea]), log id: 4714a293 2014-02-20 00:02:50,813 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand] (DefaultQuartzScheduler_Worker-47) FINISH, FullListVdsCommand, return: [Ljava.util.HashMap;@1bbd855a, log id: 4714a293 2014-02-20 00:02:50,815 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-47) Received a console Device without an address when processing VM 8bf43efc-9424-4ffd-b5c6-1c92623267ea devices, skipping device: {alias=console0, specParams={}, device=console, type=console, deviceId=dd007a77-cbf1-4c58-9cea-39427e770d5d} 2014-02-20 00:03:48,442 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-44) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from PoweringUp --> Up 2014-02-20 00:03:48,449 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-44) Correlation ID: 63705695, Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID: -1, Message: VM test started on Host csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca 2014-02-20 00:03:59,757 WARN [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--127.0.0.1-8702-2) calling GetConfigurationValueQuery (UserMessageOfTheDay) with null version, using default general for version 2014-02-20 00:04:21,710 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-99) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from Up --> RebootInProgress 2014-02-20 00:05:01,101 INFO [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo] (DefaultQuartzScheduler_Worker-66) VM test 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from RebootInProgress --> Up 2014-02-20 00:05:31,126 ERROR [org.ovirt.engine.core.bll.adbroker.DirectorySearcher] (ajp--127.0.0.1-8702-5) Error in finding LDAP servers for domain rstemis.reg01.rtss.qc.ca using user levsim01@CSSSBASQUES.REG01.RTSS.QC.CA 2014-02-20 00:05:31,593 INFO [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-5) Running command: LoginUserCommand internal: false. 2014-02-20 00:05:31,600 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01 logged in. 2014-02-20 00:05:34,780 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-5) [6916f2f] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM 2014-02-20 00:05:34,787 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=y5bNXmtoILn7, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: 44ef4679 2014-02-20 00:05:34,806 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-5) [6916f2f] FINISH, SetVmTicketVDSCommand, log id: 44ef4679 2014-02-20 00:05:34,813 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-5) [6916f2f] Correlation ID: 6916f2f, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test 2014-02-20 00:05:49,829 INFO [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-4) [50148fc] Running command: SetVmTicketCommand internal: false. Entities affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM 2014-02-20 00:05:49,832 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] START, SetVmTicketVDSCommand(HostName = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId = 0e900351-de49-4646-a4b1-394343e32f81, vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=thO14QusWk0w, validTime=120,m userName=levsim01, userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: b7b1cf 2014-02-20 00:05:49,849 INFO [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--127.0.0.1-8702-4) [50148fc] FINISH, SetVmTicketVDSCommand, log id: b7b1cf 2014-02-20 00:05:49,862 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (ajp--127.0.0.1-8702-4) [50148fc] Correlation ID: 50148fc, Call Stack: null, Custom Event ID: -1, Message: user levsim01 initiated console session for VM test 2014-02-20 00:05:52,547 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-59) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca is connected to VM test. 2014-02-20 00:06:07,732 INFO [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-81) Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: User levsim01@csssbasques.reg01.rtss.qc.ca got disconnected from VM test. Also, i get this error each hour : 2014-02-19 23:46:15,522 ERROR [org.ovirt.engine.core.utils.timer.SchedulerUtilQuartzImpl] (DefaultQuartzScheduler_Worker-37) Failed to invoke scheduled method refreshAllUsers: java.lang.reflect.InvocationTargetException at sun.reflect.GeneratedMethodAccessor175.invoke(Unknown Source) [:1.7.0_51] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_51] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51] at org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60) [scheduler.jar:] at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:] at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557) [quartz.jar:] Caused by: java.lang.NullPointerException at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUser(DbUserCacheManager.java:220) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshUsers(DbUserCacheManager.java:137) [bll.jar:] at org.ovirt.engine.core.bll.DbUserCacheManager.refreshAllUsers(DbUserCacheManager.java:92) [bll.jar:] ... 6 more Somthing wrong with my directory config? Thanks
yair?
Hi, this was fixed by Martin perina at http://gerrit.ovirt.org/#/c/24290/ The fix did not make it to beta2
participants (5)
-
Frantisek Kobzik
-
Itamar Heim
-
SimmInfo
-
simon
-
Yair Zaslavsky