Solved by the additional configuration in
It seems that ovirt-guest-tools-iso-4.1-3.fc24.noarch doesn't provide any
credential providers dll, is there any reason why it's not included in the
2017-05-07 21:47 GMT+08:00 plysan <plysab(a)gmail.com>:
OK, seems the problem is in guest agent:
after login in vm manually, I see the following logs
OVirt Guest Agent service
an external command: api-version...
Version updated from 0 to 3
an external command: lock-screen...
an external command: login...
writing credentials to pipe [1/3] (error = 2)
writing credentials to pipe [2/3] (error = 2)
writing credentials to pipe [3/3] (error = 2)
Digging into agent code to find the answer...
2017-05-07 16:28 GMT+08:00 plysan <plysab(a)gmail.com>:
> I have recently set up a ovirt 4.1 environment to test vm sso.
> * host: centos 7.3.1611
> * ovirt-engine: commit af393b7d3a494917dbda33a06813e8e8a8c6698a from
> branch ovirt-engine-4.1 , self compiled.
> * vdsm: vdsm-188.8.131.52-1.el7.centos.x86_64
> * windows 2008 r2 with active directory setup(domain name is "ply.local",
> test user is "ply(a)ply.local")
> * windows 7 vm with guest tools setup using ovirt-guest-tools-iso-4.
> I can add AD to ovirt engine successfully using
> After adding AD domain to windows7 vm, I can login manually using AD user
> with no problem.
> I can see the logs when I login in to userportal with AD user, and
> spice client pop up automatically.
> But the spice client just stops at the windows7 login screen. asking for
> In the vm, vdagent and vdservice are all running fine. I can provide
> guest agent logs if needed.
> So, anyone can point me to the right direction?
> : see attachment: ovirt-engine-extension-aaa-lda
> : see attachment: vdsm-log,ovirt-engine-log