remote-viewer from admin vs user portal
Hello, I have the impression that there is a different behavior between admin and user portal when opening a VM console with remote-viewer. My client is an updated CentOS 7 machine and I'm using firefox on it to connect to oVirt 4.0.4 portals. If I connect to a VM (that is a Fedora 24 os) from web admin it runs remote-viewer. I switch to full screen mode and leave it some hours. When I come back I see a black screen and I'm not able to re-get the session. I can click on top center to pop up the menu and exit the remote-viewer full screen but also in window mode I'm not able to get again the desktop environment inside the VM (I configured Mate desktop in fedora 24 VM): it remains black window. The VM itsel is ok: I can close the remote-viewer window and open again the console and I get the desktop environment. Instead from User Portal on the same client I can open the console (again remote-viewer), leave the session in full screen mode and come back many hours later and as soon as I click or press a key I get the session ok (sometimes actually I get the screen saver locked of the client desktop environment itself, but as soon as I unlock it I can connec thent to the VM desktop). Any special reason for this? In both cases the command seems the same: admin portal: $ ps -ef|grep remote-viewer g.cecchi 10356 9462 0 18:59 pts/1 00:00:00 grep --color=auto remote-viewer g.cecchi 16814 20129 0 01:30 ? 00:00:54 /usr/bin/remote-viewer /tmp/mozilla_g.cecchi0/console.vv user portal (extended mode) $ ps -ef|grep remote-viewer g.cecchi 11544 20129 0 19:02 ? 00:01:18 /usr/bin/remote-viewer /tmp/mozilla_g.cecchi0/console.vv g.cecchi 23534 9462 0 22:54 pts/1 00:00:00 grep --color=auto remote-viewer Not a big problem, but quite strange. Gianluca
On Wed, Oct 12, 2016 at 11:08 PM, Gianluca Cecchi <gianluca.cecchi@gmail.com
wrote:
Hello, I have the impression that there is a different behavior between admin and user portal when opening a VM console with remote-viewer. My client is an updated CentOS 7 machine and I'm using firefox on it to connect to oVirt 4.0.4 portals. If I connect to a VM (that is a Fedora 24 os) from web admin it runs remote-viewer. I switch to full screen mode and leave it some hours. When I come back I see a black screen and I'm not able to re-get the session. I can click on top center to pop up the menu and exit the remote-viewer full screen but also in window mode I'm not able to get again the desktop environment inside the VM (I configured Mate desktop in fedora 24 VM): it remains black window. The VM itsel is ok: I can close the remote-viewer window and open again the console and I get the desktop environment.
Instead from User Portal on the same client I can open the console (again remote-viewer), leave the session in full screen mode and come back many hours later and as soon as I click or press a key I get the session ok (sometimes actually I get the screen saver locked of the client desktop environment itself, but as soon as I unlock it I can connec thent to the VM desktop).
Any special reason for this?
In both cases the command seems the same:
admin portal: $ ps -ef|grep remote-viewer g.cecchi 10356 9462 0 18:59 pts/1 00:00:00 grep --color=auto remote-viewer g.cecchi 16814 20129 0 01:30 ? 00:00:54 /usr/bin/remote-viewer /tmp/mozilla_g.cecchi0/console.vv
user portal (extended mode) $ ps -ef|grep remote-viewer g.cecchi 11544 20129 0 19:02 ? 00:01:18 /usr/bin/remote-viewer /tmp/mozilla_g.cecchi0/console.vv g.cecchi 23534 9462 0 22:54 pts/1 00:00:00 grep --color=auto remote-viewer
Not a big problem, but quite strange.
Ciao Gianluca, Have you compared also the content of the two console.vv files?
Gianluca
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Thu, Oct 13, 2016 at 9:31 AM, Simone Tiraboschi <stirabos@redhat.com> wrote:
Ciao Gianluca, Have you compared also the content of the two console.vv files?
It seems this: $ diff user_portal.txt admin_portal.txt 5c5 < password=USuJCbk3UhzK ---
password=4ZAr/w23pFPV 16c16 < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
usb-filter=-1,-1,-1,-1,0 19a20 proxy=http://192.168.1.215:3128/ 27c28 < sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ-uYNsTUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA
sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_IfPoGXFMRkQSTmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
----- Original Message -----
From: "Gianluca Cecchi" <gianluca.cecchi@gmail.com> To: "Simone Tiraboschi" <stirabos@redhat.com> Cc: "users" <users@ovirt.org> Sent: Thursday, October 13, 2016 9:03:04 PM Subject: Re: [ovirt-users] remote-viewer from admin vs user portal
On Thu, Oct 13, 2016 at 9:31 AM, Simone Tiraboschi < stirabos@redhat.com > wrote:
Ciao Gianluca, Have you compared also the content of the two console.vv files?
It seems this:
$ diff user_portal.txt admin_portal.txt 5c5 < password=USuJCbk3UhzK ---
password=4ZAr/w23pFPV 16c16 < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
usb-filter=-1,-1,-1,-1,0
This is not related but looks like a bug. Could you please open a bug against user portal with the fact the usb-filter is not filled in user portal?
19a20
proxy= http://192.168.1.215:3128/ 27c28
This looks like the most interesting difference. Where do you have your spice proxy defined? I guess on cluster. I have a suspicion that there is a bug that when the user does not have access to the cluster (e.g. basic user) than it can not see the spice proxy. Could you please try to connect to the console from user portal using an admin user and check if the proxy is filled correctly?
< sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ-uYNsTUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA ---
sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_IfPoGXFMRkQSTmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
The strange thing is also that there is no difference between the admin=1 in webadmin vs admin=0 for user portal. So, long story short, are you using the same user to test this from webadmin/userportal? If not, could you please try to connect from user portal with the same user as from webadmin and check if the diff between the two .vv files is smaller? Thanx, Tomas
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hello, I seem to have a simular issue but I can't open a console with Spice at all. The console.vv file is not presenteer. I simply get "Error while executing Action VmLogin : Internal Engine Error" Where would I best start looking. In the Engine log or in the vdsm. Kind regards. Op 21 nov. 2016 9:26 a.m. schreef "Tomas Jelinek" <tjelinek@redhat.com>:
----- Original Message -----
From: "Gianluca Cecchi" <gianluca.cecchi@gmail.com> To: "Simone Tiraboschi" <stirabos@redhat.com> Cc: "users" <users@ovirt.org> Sent: Thursday, October 13, 2016 9:03:04 PM Subject: Re: [ovirt-users] remote-viewer from admin vs user portal
On Thu, Oct 13, 2016 at 9:31 AM, Simone Tiraboschi < stirabos@redhat.com
wrote:
Ciao Gianluca, Have you compared also the content of the two console.vv files?
It seems this:
$ diff user_portal.txt admin_portal.txt 5c5 < password=USuJCbk3UhzK ---
password=4ZAr/w23pFPV 16c16 < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133, 2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
usb-filter=-1,-1,-1,-1,0
This is not related but looks like a bug. Could you please open a bug against user portal with the fact the usb-filter is not filled in user portal?
19a20
proxy= http://192.168.1.215:3128/ 27c28
This looks like the most interesting difference. Where do you have your spice proxy defined? I guess on cluster. I have a suspicion that there is a bug that when the user does not have access to the cluster (e.g. basic user) than it can not see the spice proxy.
Could you please try to connect to the console from user portal using an admin user and check if the proxy is filled correctly?
< sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ- uYNsTUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA ---
sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_ IfPoGXFMRkQSTmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
The strange thing is also that there is no difference between the admin=1 in webadmin vs admin=0 for user portal.
So, long story short, are you using the same user to test this from webadmin/userportal? If not, could you please try to connect from user portal with the same user as from webadmin and check if the diff between the two .vv files is smaller?
Thanx, Tomas
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Mon, Nov 21, 2016 at 9:26 AM, Tomas Jelinek <tjelinek@redhat.com> wrote:
$ diff user_portal.txt admin_portal.txt 5c5 < password=USuJCbk3UhzK ---
password=4ZAr/w23pFPV 16c16 < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,224
5,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
---
usb-filter=-1,-1,-1,-1,0
This is not related but looks like a bug. Could you please open a bug against user portal with the fact the usb-filter is not filled in user portal?
Hello, sorry for the late answer. I was busy on other things But I have to fill bug against user portal or web admin portal? Because the situation is this [root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv | grep usb < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
usb-filter=-1,-1,-1,-1,0 [root@ope46 g.cecchi]#
So it seems the admin portal the one with all "-1"..... What do you mean with "not filled"? Perhaps it is this I don't understand.
19a20
proxy= http://192.168.1.215:3128/ 27c28
This looks like the most interesting difference. Where do you have your spice proxy defined? I guess on cluster. I have a suspicion that there is a bug that when the user does not have access to the cluster (e.g. basic user) than it can not see the spice proxy.
Could you please try to connect to the console from user portal using an admin user and check if the proxy is filled correctly?
I have this configured at engine level: [root@ovirt ~]# engine-config -g SpiceProxyDefault SpiceProxyDefault: http://192.168.1.215:3128/ version: general [root@ovirt ~]# I just tried now from a Fedora 24 client and the full difference for the .vv files is this: [root@ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv 5c5 < password=VykX40qEKrXN ---
password=/dT1qiHNTZIk 16c16 < usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
usb-filter=-1,-1,-1,-1,0 28c28 < sso-token=Hbb-_gd8Apsw7qdjfjWivONAodYIzyM2zozEpmD2YHZX3m7mgTeu8zlhOnJbHZ-RVA8JkuNc1fSnS-g8JePeGA
sso-token=EGYM496UMVtAzdukJH8ipN584Hyrfz34QpfAN15DqETtBsZ4n59ptj8LrVpiH8g40qXr0jL9sscaGklPqkMa3w [root@ope46 g.cecchi]# so the proxy line seems populated in both the portals... Initially I got 11 TCP connections to proxy ip After about 18 minutes I see that they are only 4 in ESTABLISHED state, the other ones are CLOSE_WAIT [root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date 7 192.168.1.215:3128 CLOSE_WAIT 4 192.168.1.215:3128 ESTABLISHED [root@ope46 ~]# And the console still works After about 4 hours [root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date 2 192.168.1.215:3128 ESTABLISHED remote-viewer app itself seems to work (I can select menu options) bit I have black screen without being able to interact. Also switching to full screen I only have black screen The same with user portal... After 24 minutes [root@ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort | uniq -c ; date 9 192.168.1.215:3128 CLOSE_WAIT 2 192.168.1.215:3128 ESTABLISHED and console session hung....
< sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ-uYNs TUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA ---
sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_IfPoGXFMRkQ STmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
The strange thing is also that there is no difference between the admin=1 in webadmin vs admin=0 for user portal.
So, long story short, are you using the same user to test this from webadmin/userportal? If not, could you please try to connect from user portal with the same user as from webadmin and check if the diff between the two .vv files is smaller?
Yes, the user was the same. I gave admin PowerUserRole on the VM so to be able to connect as admin also in User Portal.
participants (4)
-
Andy Michielsen -
Gianluca Cecchi -
Simone Tiraboschi -
Tomas Jelinek