Re: [ovirt-users] Can't connect to my VMs' consoles using any method
This is a multi-part message in MIME format. --b1_dd77213fbf9c4b396eef7ae34cf8b981 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: base64 SSBiZWxpZXZlIEkgaGF2ZSBzZXR1cCB0aGUgZW5naW5lIGFzIGEgcHJveHksIGR1cmluZyB0aGUg aW5pdGlhbCBpbnN0YWxsLCB1bmxlc3MgSSdtIHJlbWVtYmVyaW5nIGluY29ycmVjdGx5LCBvciBt aXNyZWFkIHNvbWV0aGluZy4KCkkgZW5kZWQgdXAgYXQgbGVhc3QgYmVpbmcgYWJsZSB0byBjb25u ZWN0IHVzaW5nIHRoZSAiTmF0aXZlIiBjbGllbnQgb3B0aW9uLCBhcHBhcmVudGx5LCB0aGUgVExT IHBvcnQgd2FzIG5vdCBiZWluZyBmb3J3YXJkZWQgYnkgZGVmYXVsdCBpbiB0aGUgZmlyZXdhbGwg c2V0dGluZ3Mgb1ZpcnQgc2V0dXAgZHVyaW5nIGluc3RhbGwuIEkgZ290IHRoZSBjb25zb2xlIHRv IHdvcmsgYWZ0ZXIgb3BlbmluZyB0aGUgcG9ydCBhbmQgc2F2aW5nIHRoZSAudnYsIGFuZCB0aGVu IHJ1bm5pbmcgaXQgbWFudWFsbHksIGhvd2V2ZXIgdGhpcyBpcyBub3QgYSBnb29kIGxvbmcgdGVy bSBzb2x1dGlvbiBmb3IgbXkgc2l0dWF0aW9uLi4uIGlkZWFsbHkgSSdkIGxpa2UgdG8gZ2V0IG9u ZSBvciBib3RoIG9mIHRoZSBicm93c2VyIGNsaWVudHMgd29ya2luZy4KCgpJIHRoaW5rIHRoZSBp c3N1ZSBtYXkgYmUgb25lIG9mIHRocmVlIHRoaW5ncywgYSBjZXJ0IGlzc3VlLCBidXQgSSBkb24n dCBrbm93IGhvdyBsaWtlbHkgdGhhdCBpcy4gT2J2aW91c2x5IEkgZ2V0IGFuIGludmFsaWQgY2Vy dCBpc3N1ZSBmcm9tIHdoYXRldmVyIGJyb3dzZXIgSSBhY2Nlc3Mgb1ZpcnQgd2l0aCBzaW5jZSBp dCdzIGp1c3QgdXNpbmcgdGhlIGRlZmF1bHQgbG9jYWwgY2VydHMsIGJ1dCBJJ3ZlIGFsbG93ZWQg dGhlbSBvbiBib3RoIEZpcmVmb3ggYW5kIENocm9taXVtLCBhbmQgSSd2ZSBnb3R0ZW4gYSB3ZWJz b2NrZXQgY29uc29sZSB0byB3b3JrIGluIGRpZmZlcmVudCBtYW5hZ2VtZW50IHBsYXRmb3JtcyAo a2ltY2hpKSwgaG93ZXZlciBJIHJlYWQgc29tZXdoZXJlIGluIG15IHNlYXJjaCB0aGF0IG9WaXJ0 IHVzZXMgdHdvIGNlcnRzLCBvbmUgZm9yIHRoZSBtYWluIHBhcnQgb2YgdGhlIGNsaWVudCwgYW5k IHRoZW4gYW5vdGhlciBmb3Igd2Vic29ja2V0cywgaG93ZXZlciBJIGRvbid0IGtub3cgaWYgdGhp cyBpcyBhY2N1cmF0ZS4KClRoZSBvdGhlciB0aGluZyBJIHN1c3BlY3QgaXMgdGhhdCBpdCBjb3Vs ZCBiZSBhbm90aGVyIHBvcnQvZmlyZXdhbGwgcmVsYXRlZCBpc3N1ZSwgYWx0aG91Z2ggSSBjYW5u b3Qgc2VlIHdoYXQgcG9ydCBpdCBjb3VsZCBiZSwgYW5kIEkgaGF2ZSBubyByZWFsIGhpbnRzIHRv IGdvIG9uLgoKCkxhc3RseSBJIGltYWdpbmUgdGhlIHByb3h5IGNvdWxkIGJlIGlsbC1jb25maWd1 cmVkLCBidXQgSSBkb24ndCBrbm93IGhvdyBzZWVpbmcgYXMgZXZlcnl0aGluZyBpcyBlc3NlbnRp YWxseSBzZXQgdG8gZGVmYXVsdC4KCkFjdHVhbGx5LCBJIGp1c3QgdGhvdWdodCBvZiBhbm90aGVy IHBvc3NpYmlsaXR5IHRob3VnaCBpdCBzZWVtcyBsaWtlIGEgYml0IG9mIGEgc3RyZXRjaCwgYnV0 IEknbSBydW5uaW5nIHRoZSBvVmlydCBob3N0IGFuZCB0aGUgZW5naW5lIG9uIHRoZSBzYW1lIG1h Y2hpbmUsIGJ1dCBub3QgaW4gYSBob3N0ZWQtZW5naW5lIHNldHVwLgoKVGhhdCdzIHRoZSBiZXN0 IEkndmUgZ290LCB0aG91Z2gu --b1_dd77213fbf9c4b396eef7ae34cf8b981 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGRpdj48ZGl2PkkgYmVsaWV2ZSBJIGhhdmUgc2V0dXAgdGhlIGVuZ2luZSBhcyBhIHByb3h5LCBk dXJpbmcgdGhlIGluaXRpYWwgCmluc3RhbGwsIHVubGVzcyBJJ20gcmVtZW1iZXJpbmcgaW5jb3Jy ZWN0bHksIG9yIG1pc3JlYWQgc29tZXRoaW5nLjxicj48L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2 PkkKIGVuZGVkIHVwIGF0IGxlYXN0IGJlaW5nIGFibGUgdG8gY29ubmVjdCB1c2luZyB0aGUgIk5h dGl2ZSIgY2xpZW50IApvcHRpb24sIGFwcGFyZW50bHksIHRoZSBUTFMgcG9ydCB3YXMgbm90IGJl aW5nIGZvcndhcmRlZCBieSBkZWZhdWx0IGluIAp0aGUgZmlyZXdhbGwgc2V0dGluZ3Mgb1ZpcnQg c2V0dXAgZHVyaW5nIGluc3RhbGwuIEkgZ290IHRoZSBjb25zb2xlIHRvIAp3b3JrIGFmdGVyIG9w ZW5pbmcgdGhlIHBvcnQgYW5kIHNhdmluZyB0aGUgLnZ2LCBhbmQgdGhlbiBydW5uaW5nIGl0IApt YW51YWxseSwgaG93ZXZlciB0aGlzIGlzIG5vdCBhIGdvb2QgbG9uZyB0ZXJtIHNvbHV0aW9uIGZv ciBteSAKc2l0dWF0aW9uLi4uIGlkZWFsbHkgSSdkIGxpa2UgdG8gZ2V0IG9uZSBvciBib3RoIG9m IHRoZSBicm93c2VyIGNsaWVudHMgCndvcmtpbmcuPGJyPjwvZGl2PjwvZGl2PjxkaXY+PGJyPjwv ZGl2PjxkaXY+PGRpdj5JIHRoaW5rIHRoZSBpc3N1ZSBtYXkgYmUgb25lIG9mIHRocmVlIAp0aGlu Z3MsIGEgY2VydCBpc3N1ZSwgYnV0IEkgZG9uJ3Qga25vdyBob3cgbGlrZWx5IHRoYXQgaXMuIE9i dmlvdXNseSBJIApnZXQgYW4gaW52YWxpZCBjZXJ0IGlzc3VlIGZyb20gd2hhdGV2ZXIgYnJvd3Nl ciBJIGFjY2VzcyBvVmlydCB3aXRoIApzaW5jZSBpdCdzIGp1c3QgdXNpbmcgdGhlIGRlZmF1bHQg bG9jYWwgY2VydHMsIGJ1dCBJJ3ZlIGFsbG93ZWQgdGhlbSBvbiAKYm90aCBGaXJlZm94IGFuZCBD aHJvbWl1bSwgYW5kIEkndmUgZ290dGVuIGEgd2Vic29ja2V0IGNvbnNvbGUgdG8gd29yayAKaW4g ZGlmZmVyZW50IG1hbmFnZW1lbnQgcGxhdGZvcm1zIChraW1jaGkpLCBob3dldmVyIEkgcmVhZCBz b21ld2hlcmUgaW4gCm15IHNlYXJjaCB0aGF0IG9WaXJ0IHVzZXMgdHdvIGNlcnRzLCBvbmUgZm9y IHRoZSBtYWluIHBhcnQgb2YgdGhlIApjbGllbnQsIGFuZCB0aGVuIGFub3RoZXIgZm9yIHdlYnNv Y2tldHMsIGhvd2V2ZXIgSSBkb24ndCBrbm93IGlmIHRoaXMgaXMKIGFjY3VyYXRlLjxicj48L2Rp dj48ZGl2Pjxicj48L2Rpdj48ZGl2PlRoZSBvdGhlciB0aGluZyBJIHN1c3BlY3QgaXMgdGhhdCBp dCBjb3VsZCBiZSBhbm90aGVyIApwb3J0L2ZpcmV3YWxsIHJlbGF0ZWQgaXNzdWUsIGFsdGhvdWdo IEkgY2Fubm90IHNlZSB3aGF0IHBvcnQgaXQgY291bGQgCmJlLCBhbmQgSSBoYXZlIG5vIHJlYWwg aGludHMgdG8gZ28gb24uPGJyPjwvZGl2PjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+PGRpdj5M YXN0bHkgSSBpbWFnaW5lIHRoZSBwcm94eSBjb3VsZCBiZSBpbGwtY29uZmlndXJlZCwgYnV0IEkg ZG9uJ3Qga25vdyBob3cgc2VlaW5nIGFzIGV2ZXJ5dGhpbmcgaXMgZXNzZW50aWFsbHkgc2V0IHRv IGRlZmF1bHQuPGJyPjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+QWN0dWFsbHksCiBJIGp1c3Qg dGhvdWdodCBvZiBhbm90aGVyIHBvc3NpYmlsaXR5IHRob3VnaCBpdCBzZWVtcyBsaWtlIGEgYml0 IG9mIGEgCnN0cmV0Y2gsIGJ1dCBJJ20gcnVubmluZyB0aGUgb1ZpcnQgaG9zdCBhbmQgdGhlIGVu Z2luZSBvbiB0aGUgc2FtZSAKbWFjaGluZSwgYnV0IG5vdCBpbiBhIGhvc3RlZC1lbmdpbmUgc2V0 dXAuPGJyPjwvZGl2PjwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+VGhhdCdzIHRoZSBiZXN0IEkn dmUgZ290LCB0aG91Z2guPGJyPjwvZGl2Pg== --b1_dd77213fbf9c4b396eef7ae34cf8b981--
On Wed, Jan 11, 2017 at 9:18 PM, summit hainey <s.hainey@protonmail.ch> wrote:
I believe I have setup the engine as a proxy, during the initial install, unless I'm remembering incorrectly, or misread something.
I ended up at least being able to connect using the "Native" client option, apparently, the TLS port was not being forwarded by default in the firewall settings oVirt setup during install. I got the console to work after opening the port and saving the .vv, and then running it manually, however this is not a good long term solution for my situation... ideally I'd like to get one or both of the browser clients working.
I think the issue may be one of three things, a cert issue, but I don't know how likely that is. Obviously I get an invalid cert issue from whatever browser I access oVirt with since it's just using the default local certs, but I've allowed them on both Firefox and Chromium, and I've gotten a websocket console to work in different management platforms (kimchi), however I read somewhere in my search that oVirt uses two certs, one for the main part of the client, and then another for websockets, however I don't know if this is accurate.
you need to import the engine CA into the browser, not only the certificate.
The other thing I suspect is that it could be another port/firewall related issue, although I cannot see what port it could be, and I have no real hints to go on.
here the clients need to go through websocket proxy which is a different service running somewhere, most typically on engine. Please check it is up and running and reachable
Lastly I imagine the proxy could be ill-configured, but I don't know how seeing as everything is essentially set to default.
Actually, I just thought of another possibility though it seems like a bit of a stretch, but I'm running the oVirt host and the engine on the same machine, but not in a hosted-engine setup.
That's the best I've got, though.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
participants (2)
-
summit hainey -
Tomas Jelinek