Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi Sven, Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ??? -- Regards Shanil On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
Hi, we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues. -- Regards Shanil On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from
Am 16.07.2014 11:30, schrieb Shanil S: the
ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
Hi, We are waiting for the updates, it will be great if anyone can give the helpful details.. :) -- Regards Shanil On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from
Am 16.07.2014 11:30, schrieb Shanil S: the
ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
Hi All, We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error. Thanks, Punit On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from
Am 16.07.2014 11:30, schrieb Shanil S: the
ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi All, I am still waiting for the updates...is there any one have the clue to solve this problem.... ??? Thanks, Punit On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all the logs Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com> wrote: Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi All, We already updated with the logs and the clear picture about the issue. -- Regards Shanil On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all the logs
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and
wrote: port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console
from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and
hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de>
wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the
api funcion call but didn't get the "path" value. Will it get it from
ticket the
ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi Michal, We want to access vm console by using noVNC and Rest api. We are using websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster. But when we try to connect the vnc_auto.html from the server using host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006). The following are the codes which we use to create the ticket… host,port and the password will get from the ticket and with the same details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.) try { var host = WebUtil.getQueryVar('host', '<?php echo $host?>'); var port = WebUtil.getQueryVar('port', '<?php echo $port?>'); var path = WebUtil.getQueryVar('path', 'websockify'); var password = '<?php echo $password?>'; if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; } rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt', (window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e); Could you please check if there any issues with it and guide me how to get rid of this failed to connect error? I have attached the screen shots for further reference… Thanks, Punit On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all the logs
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and
wrote: port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console
from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and
hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de>
wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the
api funcion call but didn't get the "path" value. Will it get it from
ticket the
ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi Michal, =20 We want to access vm console by using noVNC and Rest api. We are using = websocket proxy on the same machine where engine runs and we try to get =
--Apple-Mail=_E21EC9BC-24D5-497F-8122-EA0369437E8C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 On 22 Jul 2014, at 09:02, Punit Dambiwal wrote: the console access from the another server that is outside from this = cluster. =20
=20 But when we try to connect the vnc_auto.html from the server using = host ip, port and the password which we get from the ticket creation=85 = it shows a Failed to connect to server (code: 1006).=20
=20 The following are the codes which we use to create the ticket=85 = host,port and the password will get from the ticket and with the same =
Hi Punit, did you read about the modification we did for the noVNC package? = http://www.ovirt.org/Features/noVNC_console details (host,port & password) we are able to connect the console using = the vnc clients(TigerVNC etc.) =20 you mean the "ticket" call? that returns you the direct connection = information but you want to connect to websocket proxy(to engine:6100 indeed) and = pass the above information as an signed encoded url path (where to = connect to from proxy) check https://bugzilla.redhat.com/show_bug.cgi?id=3D838468 and = associated patches to see how it is being encoded Thanks, michal
=20 try {=20 var host =3D WebUtil.getQueryVar('host', '<?php echo = $host?>');=20 var port =3D WebUtil.getQueryVar('port', '<?php echo = $port?>');=20 var path =3D WebUtil.getQueryVar('path', 'websockify');=20 =20 var password =3D '<?php echo $password?>';=20 =20 if ((!host) || (!port)) {=20 updateState('failed',=20 "Must specify host and port in URL");=20 return;=20 }=20 =20 rfb =3D new RFB({'target': $D('noVNC_canvas'),=20=
'encrypt': =
WebUtil.getQueryVar('encrypt',=20
=20 (window.location.protocol =3D=3D=3D "https:")),=20 'true_color': =
WebUtil.getQueryVar('true_color', true),=20
'local_cursor': =
WebUtil.getQueryVar('cursor', true),=20
'shared': =
WebUtil.getQueryVar('shared', true),=20
'view_only': =
WebUtil.getQueryVar('view_only', false),=20
'updateState': updateState,=20 'onPasswordRequired': passwordRequired});=20=
rfb.connect(host, port, password, path);=20 }catch(e) {alert(e);=20 =20 =20 Could you please check if there any issues with it and guide me how to =
=20 I have attached the screen shots for further reference=85 =20 Thanks, Punit =20 =20 =20 On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> = wrote: Hi All, =20 We already updated with the logs and the clear picture about the = issue. =20 --=20 Regards=20 Shanil =20 =20 On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek = <michal.skrivanek@redhat.com> wrote: =20 On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote: =20
Hi All,
I am still waiting for the updates...is there any one have the clue = to solve this problem.... ??? =20 Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, = without describing precisely what are you doing and how, and include all =
=20 Thanks, michal =20
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com> =
wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to = update here the resolution or suggest us the way to get rid of this = "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> = wrote: Hi,
We are waiting for the updates, it will be great if anyone can give =
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> =
wrote:
Hi,
we have enabled our portal ip address on the engine and hosts = firewall but still the connection failed. so there should be no firewall = issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> = wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host = and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what = should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, = network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the = console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine = and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> = wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from =
get rid of this failed to connect error?=20 the logs the helpful details.. :) the ticket
api funcion call but didn't get the "path" value. Will it get it = from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Gr=FC=DFen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG K=F6nigsberger Stra=DFe 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Gesch=E4ftsf=FChrer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad = Oeynhausen Komplement=E4rin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad = Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users =20 =20 =20 <screen3 Jul. 15.1.jpg>
--Apple-Mail=_E21EC9BC-24D5-497F-8122-EA0369437E8C Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 <html><head></head><body style=3D"word-wrap: break-word; = -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; = "><br><div><div>On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:</div><br = class=3D"Apple-interchange-newline"><blockquote type=3D"cite"><div = dir=3D"ltr">Hi Michal,<br><br>We want to access vm console by using = noVNC and Rest api. We are using websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is=20 outside from this cluster. <br> <br>But when we try to connect the vnc_auto.html from the = server=20 using host ip, port and the password which we get from the ticket=20 creation=85 it shows a Failed to connect to server (code: 1006). <br></div></blockquote><div><br></div>Hi Punit,</div><div>did you read = about the modification we did for the noVNC package? <a = href=3D"http://www.ovirt.org/Features/noVNC_console">http://www.ovirt.org/= Features/noVNC_console</a></div><div><br></div><div><br><blockquote = type=3D"cite"><div dir=3D"ltr"> <br>The following are the codes = which we use to create the ticket=85=20 host,port and the password will get from the ticket and with the same=20 details (host,port & password) we are able to connect the console=20 using the vnc clients(TigerVNC etc.) <br></div></blockquote><div><br></div>you mean the "ticket" call? that = returns you the direct connection information</div><div>but you want to = connect to websocket proxy(to engine:6100 indeed) and pass the above = information as an signed encoded url path (where to connect to from = proxy)</div><div>check <a = href=3D"https://bugzilla.redhat.com/show_bug.cgi?id=3D838468">https://bugz= illa.redhat.com/show_bug.cgi?id=3D838468</a> and associated patches to = see how it is being = encoded</div><div><br></div><div>Thanks,</div><div>michal</div><div><br><b= lockquote type=3D"cite"><div dir=3D"ltr"> <br>try { = <br> &nbs= p; var host =3D WebUtil.getQueryVar('host', '<?php = echo $host?>'); = <br> &nbs= p; var port =3D WebUtil.getQueryVar('port', '<?php = echo $port?>'); <br> var path =3D WebUtil.getQueryVar('path', 'websockify'); = <br> &nbs= p; <br> var password =3D '<?php echo $password?>'; <br> <br> if ((!host) || = (!port)) { = <br> &nbs= p; updateState('failed', = <br> &nbs= p; = "Must specify host and port in URL"); = <br> &nbs= p; return; = <br> &nbs= p; } = <br> <br> = rfb =3D new = RFB({'target': $D('noVNC_canvas'), = <br> &nbs= p; = 'encrypt': = WebUtil.getQueryVar('encrypt', = <br> &nbs= p; = <div> = (window.location.protocol =3D=3D=3D "https:")), = <br> &nbs= p; = 'true_color': WebUtil.getQueryVar('true_color', = true), = <br> &nbs= p; = 'local_cursor': WebUtil.getQueryVar('cursor', true), = <br> &nbs= p; = 'shared': = WebUtil.getQueryVar('shared', true), = <br> &nbs= p; = 'view_only': = WebUtil.getQueryVar('view_only', false), = <br> &nbs= p; = 'updateState': updateState, = <br> &nbs= p; = 'onPasswordRequired': passwordRequired}); = <br> &nbs= p; = rfb.connect(host, port, password, path); <br> = }catch(e) {alert(e); <br> <br> <br>Could you please check if there any issues with = it and guide me how to get rid of this failed to connect error? <br> <br>I have attached the screen shots for further = reference=85<br><br></div><div>Thanks,<br></div><div>Punit<br></div><br></= div><div class=3D"gmail_extra"><br><br><div class=3D"gmail_quote">On = Tue, Jul 22, 2014 at 2:54 PM, Shanil S <span dir=3D"ltr"><<a = href=3D"mailto:xielesshanil@gmail.com" = target=3D"_blank">xielesshanil@gmail.com</a>></span> wrote:<br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 = .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi = All,<br><br>We already updated with the logs and the clear picture about = the issue.<span class=3D"HOEnZb"><font color=3D"#888888"><br> </font></span></div><div class=3D"gmail_extra"><span = class=3D"HOEnZb"><font color=3D"#888888"><br clear=3D"all"><div><div = dir=3D"ltr"><span>-- <br></span>Regards <br>Shanil </div></div></font></span><div><div class=3D"h5"> <br><br><div class=3D"gmail_quote">On Mon, Jul 21, 2014 at 5:54 PM, = Michal Skrivanek <span dir=3D"ltr"><<a = href=3D"mailto:michal.skrivanek@redhat.com" = target=3D"_blank">michal.skrivanek@redhat.com</a>></span> = wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 = .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div><br> On Jul 21, 2014, at 04:33 , Punit Dambiwal <<a = href=3D"mailto:hypunit@gmail.com" = target=3D"_blank">hypunit@gmail.com</a>> wrote:<br> <br> > Hi All,<br> ><br> </div><div>> I am still waiting for the updates...is there any one = have the clue to solve this problem.... ???<br> <br> </div>Hi Punit,<br> I'm afraid no one can help you debug connectivity issues remotely, = without describing precisely what are you doing and how, and include all = the logs<br> <br> Thanks,<br> michal<br> <div><div><br> ><br> > Thanks,<br> > Punit<br> ><br> ><br> > On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <<a = href=3D"mailto:hypunit@gmail.com" = target=3D"_blank">hypunit@gmail.com</a>> wrote:<br> > Hi All,<br> ><br> > We are also struggling with the same problem....can anybody mind to = update here the resolution or suggest us the way to get rid of this = "Failed to connect to server (code: 1006" error.<br> ><br> > Thanks,<br> > Punit<br> ><br> ><br> > On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <<a = href=3D"mailto:xielesshanil@gmail.com" = target=3D"_blank">xielesshanil@gmail.com</a>> wrote:<br> > Hi,<br> ><br> > We are waiting for the updates, it will be great if anyone can give = the helpful details.. :)<br> ><br> > --<br> > Regards<br> > Shanil<br> ><br> ><br> > On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <<a = href=3D"mailto:xielesshanil@gmail.com" = target=3D"_blank">xielesshanil@gmail.com</a>> wrote:<br> > Hi,<br> ><br> > we have enabled our portal ip address on the engine and hosts = firewall but still the connection failed. so there should be no firewall = issues.<br> ><br> > --<br> > Regards<br> > Shanil<br> ><br> ><br> > On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <<a = href=3D"mailto:xielesshanil@gmail.com" = target=3D"_blank">xielesshanil@gmail.com</a>> wrote:<br> > Hi Sven,<br> ><br> > Regarding the ticket "path", Is it the direct combination of host = and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what = should be the "path" value ? Is there encryption needs here ?<br> ><br> ><br> > >>so you have access from the browser to the websocket-proxy, = network<br> > wise? can you ping the proxy?<br> > and the websocket proxy can reach the host where the vm runs?<br> ><br> > yes.. there should be no firewall issue as we can access the = console from ovirt engine portal<br> ><br> > Do we need to allow our own portal ip address in the ovirt = engine and hypervisiors also ???<br> ><br> ><br> > --<br> > Regards<br> > Shanil<br> ><br> ><br> > On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <<a = href=3D"mailto:S.Kieske@mittwald.de" = target=3D"_blank">S.Kieske@mittwald.de</a>> wrote:<br> ><br> ><br> > Am 16.07.2014 11:30, schrieb Shanil S:<br> > > We will get the ticket details like host,port and password = from the ticket<br> > > api funcion call but didn't get the "path" value. Will it get = it from the<br> > > ticket details ? i couldn't find out any from the ticket = details.<br> ><br> > the "path" is the combination of host and port.<br> ><br> > so you have access from the browser to the websocket-proxy, = network<br> > wise? can you ping the proxy?<br> > and the websocket proxy can reach the host where the vm runs?<br> > are you sure there are no firewalls in between?<br> > also you should pay attention on how long your ticket<br> > is valid, you can specify the duration in minutes in your api = call.<br> ><br> > --<br> > Mit freundlichen Gr=FC=DFen / Regards<br> ><br> > Sven Kieske<br> ><br> > Systemadministrator<br> > Mittwald CM Service GmbH & Co. KG<br> > K=F6nigsberger Stra=DFe 6<br> > 32339 Espelkamp<br> > T: <a href=3D"tel:%2B49-5772-293-100" value=3D"+495772293100" = target=3D"_blank">+49-5772-293-100</a><br> > F: <a href=3D"tel:%2B49-5772-293-333" value=3D"+495772293333" = target=3D"_blank">+49-5772-293-333</a><br> > <a href=3D"https://www.mittwald.de/" = target=3D"_blank">https://www.mittwald.de</a><br> > Gesch=E4ftsf=FChrer: Robert Meyer<br> > St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad = Oeynhausen<br> > Komplement=E4rin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad = Oeynhausen<br> ><br> ><br> ><br> ><br> > _______________________________________________<br> > Users mailing list<br> > <a href=3D"mailto:Users@ovirt.org" = target=3D"_blank">Users@ovirt.org</a><br> > <a href=3D"http://lists.ovirt.org/mailman/listinfo/users" = target=3D"_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br> ><br> ><br> ><br> > _______________________________________________<br> > Users mailing list<br> > <a href=3D"mailto:Users@ovirt.org" = target=3D"_blank">Users@ovirt.org</a><br> > <a href=3D"http://lists.ovirt.org/mailman/listinfo/users" = target=3D"_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br> <br> </div></div></blockquote></div><br></div></div></div> </blockquote></div><br></div> <span><screen3 Jul. = 15.1.jpg></span></blockquote></div><br></body></html>= --Apple-Mail=_E21EC9BC-24D5-497F-8122-EA0369437E8C--
Hi Michal, Thanks for your updates. I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ? -- Regards Shanil On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster.
But when we try to connect the vnc_auto.html from the server using host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket… host,port and the password will get from the ticket and with the same details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection information but you want to connect to websocket proxy(to engine:6100 indeed) and pass the above information as an signed encoded url path (where to connect to from proxy) check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo $host?>'); var port = WebUtil.getQueryVar('port', '<?php echo $port?>'); var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all the logs
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give
wrote: the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com>
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and
wrote: port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console
from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and
hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de>
wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the
ticket
api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster.
But when we try to connect the vnc_auto.html from the server using host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket… host,port and the password will get from the ticket and with the same details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection information but you want to connect to websocket proxy(to engine:6100 indeed) and pass the above information as an signed encoded url path (where to connect to from proxy) check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo $host?>'); var port = WebUtil.getQueryVar('port', '<?php echo $port?>'); var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek <michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all the logs
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com> wrote: Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give the helpful details.. :)
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the ticket api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
Hi Michal, We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ? -- Regards Shanil On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using
But when we try to connect the vnc_auto.html from the server using host
ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket…
host,port and the password will get from the ticket and with the same
websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster. details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
but you want to connect to websocket proxy(to engine:6100 indeed) and
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated
information pass the above information as an signed encoded url path (where to connect to from proxy) patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo
var port = WebUtil.getQueryVar('port', '<?php echo
$port?>');
var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com>
wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and
$host?>'); the logs the helpful details.. :) port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console
from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine
and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de>
wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from the
ticket
api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
Hi All, Is there any body in the community...who can help us to resolve this issue... 1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same... Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt.... Thanks, Punit On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using
But when we try to connect the vnc_auto.html from the server using
host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket…
host,port and the password will get from the ticket and with the same
websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster. details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
but you want to connect to websocket proxy(to engine:6100 indeed) and
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo
$host?>');
var port = WebUtil.getQueryVar('port', '<?php echo
$port?>');
var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com>
wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
>so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from
information pass the above information as an signed encoded url path (where to connect to from proxy) the logs the helpful details.. :) the ticket
api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
Hello Punit, this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or 2, implement this signing mechanism from scratch (for that the "signing machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like). This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better. Thanks, Franta. ----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" <danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" <S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC Hi All, Is there any body in the community...who can help us to resolve this issue... 1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same... Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt.... Thanks, Punit On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using
But when we try to connect the vnc_auto.html from the server using
host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket…
host,port and the password will get from the ticket and with the same
websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster. details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
but you want to connect to websocket proxy(to engine:6100 indeed) and
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo
$host?>');
var port = WebUtil.getQueryVar('port', '<?php echo
$port?>');
var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com>
wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
>so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S:
We will get the ticket details like host,port and password from
information pass the above information as an signed encoded url path (where to connect to from proxy) the logs the helpful details.. :) the ticket
api funcion call but didn't get the "path" value. Will it get it from the ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the "signing machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" <danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" <S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using
But when we try to connect the vnc_auto.html from the server using
host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package? http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket…
host,port and the password will get from the ticket and with the same
websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster. details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
but you want to connect to websocket proxy(to engine:6100 indeed) and
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo
$host?>');
var port = WebUtil.getQueryVar('port', '<?php echo
$port?>');
var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt': WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color': WebUtil.getQueryVar('true_color', true), 'local_cursor': WebUtil.getQueryVar('cursor', true), 'shared': WebUtil.getQueryVar('shared', true), 'view_only': WebUtil.getQueryVar('view_only', false), 'updateState': updateState, 'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All,
I am still waiting for the updates...is there any one have the clue to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely, without describing precisely what are you doing and how, and include all
Thanks, michal
Thanks, Punit
On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com>
wrote:
Hi All,
We are also struggling with the same problem....can anybody mind to update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
Thanks, Punit
On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi,
We are waiting for the updates, it will be great if anyone can give
-- Regards Shanil
On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com>
wrote:
Hi,
we have enabled our portal ip address on the engine and hosts firewall but still the connection failed. so there should be no firewall issues.
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> wrote: Hi Sven,
Regarding the ticket "path", Is it the direct combination of host and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
>> so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs?
yes.. there should be no firewall issue as we can access the console from ovirt engine portal
Do we need to allow our own portal ip address in the ovirt engine and hypervisiors also ???
-- Regards Shanil
On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> wrote:
Am 16.07.2014 11:30, schrieb Shanil S: > We will get the ticket details like host,port and password from
information pass the above information as an signed encoded url path (where to connect to from proxy) the logs the helpful details.. :) the ticket
> api funcion call but didn't get the "path" value. Will it get it from the > ticket details ? i couldn't find out any from the ticket details.
the "path" is the combination of host and port.
so you have access from the browser to the websocket-proxy, network wise? can you ping the proxy? and the websocket proxy can reach the host where the vm runs? are you sure there are no firewalls in between? also you should pay attention on how long your ticket is valid, you can specify the duration in minutes in your api call.
-- Mit freundlichen Grüßen / Regards
Sven Kieske
Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
<screen3 Jul. 15.1.jpg>
Hi Dan, We require the VM console which provide html5 console...please let me know can we achieve html5 with the spice..if yes how to integrate it with API and our own portal...?? On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim@redhat.com> wrote:
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the "signing
machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" < danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" < S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post
https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal,
We want to access vm console by using noVNC and Rest api. We are using
websocket proxy on the same machine where engine runs and we try to
get the console access from the another server that is outside from this cluster.
But when we try to connect the vnc_auto.html from the server using
host ip, port and the password which we get from the ticket creation…
it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package?
http://www.ovirt.org/Features/noVNC_console
The following are the codes which we use to create the ticket…
host,port and the password will get from the ticket and with the same
details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
information
but you want to connect to websocket proxy(to engine:6100 indeed) and
pass the above information as an signed encoded url path (where to connect to from proxy)
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and
associated patches to see how it is being encoded
Thanks, michal
try { var host = WebUtil.getQueryVar('host', '<?php echo
$host?>');
var port = WebUtil.getQueryVar('port', '<?php echo
$port?>');
var path = WebUtil.getQueryVar('path', 'websockify');
var password = '<?php echo $password?>';
if ((!host) || (!port)) { updateState('failed', "Must specify host and port in URL"); return; }
rfb = new RFB({'target': $D('noVNC_canvas'), 'encrypt':
WebUtil.getQueryVar('encrypt',
(window.location.protocol === "https:")), 'true_color':
WebUtil.getQueryVar('true_color', true),
'local_cursor':
WebUtil.getQueryVar('cursor', true),
'shared':
WebUtil.getQueryVar('shared', true),
'view_only':
WebUtil.getQueryVar('view_only', false),
'updateState': updateState,
'onPasswordRequired': passwordRequired}); rfb.connect(host, port, password, path); }catch(e) {alert(e);
Could you please check if there any issues with it and guide me how to
get rid of this failed to connect error?
I have attached the screen shots for further reference…
Thanks, Punit
On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com>
wrote:
Hi All,
We already updated with the logs and the clear picture about the issue.
-- Regards Shanil
On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> wrote:
Hi All, > > I am still waiting for the updates...is there any one have the clue > to solve this problem.... ???
Hi Punit, I'm afraid no one can help you debug connectivity issues remotely,
without describing precisely what are you doing and how, and include
all the logs
Thanks, michal
> Thanks, > Punit > > > On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com> > wrote:
Hi All,
> > We are also struggling with the same problem....can anybody mind to > update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
> Thanks, > Punit > > > On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> > wrote:
Hi,
> > We are waiting for the updates, it will be great if anyone can give > the helpful details.. :)
> -- > Regards > Shanil > > > On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> > wrote:
Hi,
> > we have enabled our portal ip address on the engine and hosts > firewall but still the connection failed. so there should be no firewall issues.
> -- > Regards > Shanil > > > On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> > wrote:
Hi Sven,
> > Regarding the ticket "path", Is it the direct combination of host > and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
> > so you have access from the browser to the websocket-proxy, network >>> >> wise? can you ping the proxy? > and the websocket proxy can reach the host where the vm runs? > > yes.. there should be no firewall issue as we can access the > console from ovirt engine portal
> Do we need to allow our own portal ip address in the ovirt engine > and hypervisiors also ???
> > -- > Regards > Shanil > > > On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> > wrote:
> > Am 16.07.2014 11:30, schrieb Shanil S: > >> We will get the ticket details like host,port and password from >> > the ticket
api funcion call but didn't get the "path" value. Will it get it
>> > from the
ticket details ? i couldn't find out any from the ticket details.
>> > > the "path" is the combination of host and port. > > so you have access from the browser to the websocket-proxy, network > wise? can you ping the proxy? > and the websocket proxy can reach the host where the vm runs? > are you sure there are no firewalls in between? > also you should pay attention on how long your ticket > is valid, you can specify the duration in minutes in your api call. > > -- > Mit freundlichen Grüßen / Regards > > Sven Kieske > > Systemadministrator > Mittwald CM Service GmbH & Co. KG > Königsberger Straße 6 > 32339 Espelkamp > T: +49-5772-293-100 > F: +49-5772-293-333 > https://www.mittwald.de > Geschäftsführer: Robert Meyer > St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad > Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad
> Oeynhausen
> > > > _______________________________________________ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > > > > _______________________________________________ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users >
<screen3 Jul. 15.1.jpg>
You have only mentioned console access. Do you really need the Administrative Portal or could you live with the User Portal? Do you need VM control through your portal, or only consoles? What is your use scenario? -Bob On Jul 25, 2014 12:33 AM, "Punit Dambiwal" <hypunit@gmail.com> wrote:
Hi Dan,
We require the VM console which provide html5 console...please let me know can we achieve html5 with the spice..if yes how to integrate it with API and our own portal...??
On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim@redhat.com> wrote:
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the "signing
machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" < danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" < S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
Thanks for your updates.
I am unable to view the above post
https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
-- Regards Shanil
On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek <
michal.skrivanek@redhat.com> wrote:
On 22 Jul 2014, at 09:02, Punit Dambiwal wrote:
Hi Michal, > > We want to access vm console by using noVNC and Rest api. We are > using > websocket proxy on the same machine where engine runs and we try to
get the console access from the another server that is outside from this cluster.
> But when we try to connect the vnc_auto.html from the server using > host ip, port and the password which we get from the ticket creation…
it shows a Failed to connect to server (code: 1006).
Hi Punit, did you read about the modification we did for the noVNC package?
http://www.ovirt.org/Features/noVNC_console
> The following are the codes which we use to create the ticket… > host,port and the password will get from the ticket and with the same
details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
you mean the "ticket" call? that returns you the direct connection
information
but you want to connect to websocket proxy(to engine:6100 indeed) and
pass the above information as an signed encoded url path (where to connect to from proxy)
check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and
associated patches to see how it is being encoded
Thanks, michal
> try { > var host = WebUtil.getQueryVar('host', '<?php echo > $host?>');
var port = WebUtil.getQueryVar('port', '<?php echo > $port?>');
var path = WebUtil.getQueryVar('path', 'websockify'); > > var password = '<?php echo $password?>'; > > if ((!host) || (!port)) { > updateState('failed', > "Must specify host and port in URL"); > return; > } > > rfb = new RFB({'target': $D('noVNC_canvas'), > 'encrypt': > WebUtil.getQueryVar('encrypt',
> (window.location.protocol === "https:")), > 'true_color': > WebUtil.getQueryVar('true_color', true),
'local_cursor': > WebUtil.getQueryVar('cursor', true),
'shared': > WebUtil.getQueryVar('shared', true),
'view_only': > WebUtil.getQueryVar('view_only', false),
'updateState': updateState, > 'onPasswordRequired': > passwordRequired}); > rfb.connect(host, port, password, path); > }catch(e) {alert(e); > > > Could you please check if there any issues with it and guide me how > to > get rid of this failed to connect error?
> I have attached the screen shots for further reference… > > Thanks, > Punit > > > > On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> > wrote:
Hi All, > > We already updated with the logs and the clear picture about the > issue. > > -- > Regards > Shanil > > > On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < > michal.skrivanek@redhat.com> wrote:
> On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> > wrote: > > Hi All, >> >> I am still waiting for the updates...is there any one have the clue >> > to solve this problem.... ???
> Hi Punit, > I'm afraid no one can help you debug connectivity issues remotely, > without describing precisely what are you doing and how, and include
all the logs
> Thanks, > michal > > >> Thanks, >> Punit >> >> >> On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal <hypunit@gmail.com >> > >> > wrote:
Hi All, >> >> We are also struggling with the same problem....can anybody mind to >> > update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
>> Thanks, >> Punit >> >> >> On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> >> > wrote:
Hi, >> >> We are waiting for the updates, it will be great if anyone can give >> > the helpful details.. :)
>> -- >> Regards >> Shanil >> >> >> On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com> >> > wrote:
Hi, >> >> we have enabled our portal ip address on the engine and hosts >> > firewall but still the connection failed. so there should be no firewall issues.
>> -- >> Regards >> Shanil >> >> >> On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> >> > wrote:
Hi Sven, >> >> Regarding the ticket "path", Is it the direct combination of host >> > and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
>> >> so you have access from the browser to the websocket-proxy, network >>>> >>> wise? can you ping the proxy? >> and the websocket proxy can reach the host where the vm runs? >> >> yes.. there should be no firewall issue as we can access the >> > console from ovirt engine portal
>> Do we need to allow our own portal ip address in the ovirt engine >> > and hypervisiors also ???
>> >> -- >> Regards >> Shanil >> >> >> On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de> >> > wrote:
>> >> Am 16.07.2014 11:30, schrieb Shanil S: >> >>> We will get the ticket details like host,port and password from >>> >> the ticket
api funcion call but didn't get the "path" value. Will it get it >>> >> from the
ticket details ? i couldn't find out any from the ticket details. >>> >> >> the "path" is the combination of host and port. >> >> so you have access from the browser to the websocket-proxy, network >> wise? can you ping the proxy? >> and the websocket proxy can reach the host where the vm runs? >> are you sure there are no firewalls in between? >> also you should pay attention on how long your ticket >> is valid, you can specify the duration in minutes in your api call. >> >> -- >> Mit freundlichen Grüßen / Regards >> >> Sven Kieske >> >> Systemadministrator >> Mittwald CM Service GmbH & Co. KG >> Königsberger Straße 6 >> 32339 Espelkamp >> T: +49-5772-293-100 >> F: +49-5772-293-333 >> https://www.mittwald.de >> Geschäftsführer: Robert Meyer >> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad >> > Oeynhausen
Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad >> > Oeynhausen
>> >> >> >> _______________________________________________ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> >> >> >> _______________________________________________ >> Users mailing list >> Users@ovirt.org >> http://lists.ovirt.org/mailman/listinfo/users >> > > > > <screen3 Jul. 15.1.jpg> >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi Bob, We require the VM control through our portal and our requirement is to give access to the console from our portal. Our portal is also will be doing some other vm functions like listing vm,start vm,stop vm etc and other operations using the REST Api that you provided. -- Regards Shanil On Fri, Jul 25, 2014 at 10:15 AM, Bob Doolittle <bob@doolittle.us.com> wrote:
You have only mentioned console access. Do you really need the Administrative Portal or could you live with the User Portal? Do you need VM control through your portal, or only consoles? What is your use scenario?
-Bob On Jul 25, 2014 12:33 AM, "Punit Dambiwal" <hypunit@gmail.com> wrote:
Hi Dan,
We require the VM console which provide html5 console...please let me know can we achieve html5 with the spice..if yes how to integrate it with API and our own portal...??
On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim@redhat.com> wrote:
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the "signing
machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" < danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" < S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal, > > Thanks for your updates. > > I am unable to view the above post > https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an access denied error. I don't have the login to this, could you please paste the content here ?
should be fixed now, sorry. try again NoVncImpl.java in review 13931 should explain some things… (or Franta can, if something's not clear:-)
> > -- > Regards > Shanil > > > On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek < > michal.skrivanek@redhat.com> wrote:
> > On 22 Jul 2014, at 09:02, Punit Dambiwal wrote: > > Hi Michal, >> >> We want to access vm console by using noVNC and Rest api. We are >> using >> > websocket proxy on the same machine where engine runs and we try to get the console access from the another server that is outside from this cluster.
> >> But when we try to connect the vnc_auto.html from the server using >> > host ip, port and the password which we get from the ticket creation… it shows a Failed to connect to server (code: 1006).
> > Hi Punit, > did you read about the modification we did for the noVNC package? > http://www.ovirt.org/Features/noVNC_console
> > > >> The following are the codes which we use to create the ticket… >> > host,port and the password will get from the ticket and with the same details (host,port & password) we are able to connect the console using the vnc clients(TigerVNC etc.)
> > you mean the "ticket" call? that returns you the direct connection > information
> but you want to connect to websocket proxy(to engine:6100 indeed) and > pass the above information as an signed encoded url path (where to connect to from proxy)
> check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and > associated patches to see how it is being encoded
> > Thanks, > michal > > >> try { >> var host = WebUtil.getQueryVar('host', '<?php echo >> > $host?>');
> var port = WebUtil.getQueryVar('port', '<?php echo >> > $port?>');
> var path = WebUtil.getQueryVar('path', 'websockify'); >> >> var password = '<?php echo $password?>'; >> >> if ((!host) || (!port)) { >> updateState('failed', >> "Must specify host and port in URL"); >> return; >> } >> >> rfb = new RFB({'target': $D('noVNC_canvas'), >> 'encrypt': >> > WebUtil.getQueryVar('encrypt',
> >> (window.location.protocol === "https:")), >> 'true_color': >> > WebUtil.getQueryVar('true_color', true),
> 'local_cursor': >> > WebUtil.getQueryVar('cursor', true),
> 'shared': >> > WebUtil.getQueryVar('shared', true),
> 'view_only': >> > WebUtil.getQueryVar('view_only', false),
> 'updateState': updateState, >> 'onPasswordRequired': >> passwordRequired}); >> rfb.connect(host, port, password, path); >> }catch(e) {alert(e); >> >> >> Could you please check if there any issues with it and guide me how >> to >> > get rid of this failed to connect error?
> >> I have attached the screen shots for further reference… >> >> Thanks, >> Punit >> >> >> >> On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> >> > wrote:
> Hi All, >> >> We already updated with the logs and the clear picture about the >> issue. >> >> -- >> Regards >> Shanil >> >> >> On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < >> > michal.skrivanek@redhat.com> wrote:
> >> On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> >> wrote: >> >> Hi All, >>> >>> I am still waiting for the updates...is there any one have the clue >>> >> to solve this problem.... ???
> >> Hi Punit, >> I'm afraid no one can help you debug connectivity issues remotely, >> > without describing precisely what are you doing and how, and include all the logs
> >> Thanks, >> michal >> >> >>> Thanks, >>> Punit >>> >>> >>> On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal < >>> hypunit@gmail.com> >>> >> wrote:
> Hi All, >>> >>> We are also struggling with the same problem....can anybody mind to >>> >> update here the resolution or suggest us the way to get rid of this "Failed to connect to server (code: 1006" error.
> >>> Thanks, >>> Punit >>> >>> >>> On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com> >>> >> wrote:
> Hi, >>> >>> We are waiting for the updates, it will be great if anyone can give >>> >> the helpful details.. :)
> >>> -- >>> Regards >>> Shanil >>> >>> >>> On Thu, Jul 17, 2014 at 10:23 AM, Shanil S <xielesshanil@gmail.com >>> > >>> >> wrote:
> Hi, >>> >>> we have enabled our portal ip address on the engine and hosts >>> >> firewall but still the connection failed. so there should be no firewall issues.
> >>> -- >>> Regards >>> Shanil >>> >>> >>> On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com> >>> >> wrote:
> Hi Sven, >>> >>> Regarding the ticket "path", Is it the direct combination of host >>> >> and port ? suppose if the host is 1.2.3.4 and the port is 5100 then what should be the "path" value ? Is there encryption needs here ?
> >>> >>> so you have access from the browser to the websocket-proxy, >>>>> network >>>>> >>>> wise? can you ping the proxy? >>> and the websocket proxy can reach the host where the vm runs? >>> >>> yes.. there should be no firewall issue as we can access the >>> >> console from ovirt engine portal
> >>> Do we need to allow our own portal ip address in the ovirt engine >>> >> and hypervisiors also ???
> >>> >>> -- >>> Regards >>> Shanil >>> >>> >>> On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske <S.Kieske@mittwald.de >>> > >>> >> wrote:
> >>> >>> Am 16.07.2014 11:30, schrieb Shanil S: >>> >>>> We will get the ticket details like host,port and password from >>>> >>> the ticket
> api funcion call but didn't get the "path" value. Will it get it >>>> >>> from the
> ticket details ? i couldn't find out any from the ticket details. >>>> >>> >>> the "path" is the combination of host and port. >>> >>> so you have access from the browser to the websocket-proxy, network >>> wise? can you ping the proxy? >>> and the websocket proxy can reach the host where the vm runs? >>> are you sure there are no firewalls in between? >>> also you should pay attention on how long your ticket >>> is valid, you can specify the duration in minutes in your api call. >>> >>> -- >>> Mit freundlichen Grüßen / Regards >>> >>> Sven Kieske >>> >>> Systemadministrator >>> Mittwald CM Service GmbH & Co. KG >>> Königsberger Straße 6 >>> 32339 Espelkamp >>> T: +49-5772-293-100 >>> F: +49-5772-293-333 >>> https://www.mittwald.de >>> Geschäftsführer: Robert Meyer >>> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad >>> >> Oeynhausen
> Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad >>> >> Oeynhausen
> >>> >>> >>> >>> _______________________________________________ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >>> >>> >>> _______________________________________________ >>> Users mailing list >>> Users@ovirt.org >>> http://lists.ovirt.org/mailman/listinfo/users >>> >> >> >> >> <screen3 Jul. 15.1.jpg> >> > > >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi, Is there any one have the clue to resolve this problem....it seems no one did this before ?? Thanks, Punit On Fri, Jul 25, 2014 at 1:13 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Bob,
We require the VM control through our portal and our requirement is to give access to the console from our portal. Our portal is also will be doing some other vm functions like listing vm,start vm,stop vm etc and other operations using the REST Api that you provided.
-- Regards Shanil
On Fri, Jul 25, 2014 at 10:15 AM, Bob Doolittle <bob@doolittle.us.com> wrote:
You have only mentioned console access. Do you really need the Administrative Portal or could you live with the User Portal? Do you need VM control through your portal, or only consoles? What is your use scenario?
-Bob On Jul 25, 2014 12:33 AM, "Punit Dambiwal" <hypunit@gmail.com> wrote:
Hi Dan,
We require the VM console which provide html5 console...please let me know can we achieve html5 with the spice..if yes how to integrate it with API and our own portal...??
On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim@redhat.com> wrote:
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the
"signing machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" < danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" < S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal,
We are using 3.4.3 and we are able to access the console from the ovirt panel. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. We have installed websocket proxy on the ovirt engine server and now we want to access the VM console from our portal. How we can achieve this ? it is found that there is no direct api function to create console, so how we can create console using our own portal ?
-- Regards Shanil
On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < michal.skrivanek@redhat.com> wrote:
> On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> wrote: > > Hi Michal, >> >> Thanks for your updates. >> >> I am unable to view the above post >> > https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an > access > denied error. I don't have the login to this, could you please paste > the > content here ? > > should be fixed now, sorry. try again > NoVncImpl.java in review 13931 should explain some things… (or Franta > can, if something's not clear:-) > > >> >> -- >> Regards >> Shanil >> >> >> On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek < >> > michal.skrivanek@redhat.com> wrote: > >> >> On 22 Jul 2014, at 09:02, Punit Dambiwal wrote: >> >> Hi Michal, >>> >>> We want to access vm console by using noVNC and Rest api. We are >>> using >>> >> websocket proxy on the same machine where engine runs and we try to > get the > console access from the another server that is outside from this > cluster. > >> >>> But when we try to connect the vnc_auto.html from the server using >>> >> host ip, port and the password which we get from the ticket > creation… it > shows a Failed to connect to server (code: 1006). > >> >> Hi Punit, >> did you read about the modification we did for the noVNC package? >> > http://www.ovirt.org/Features/noVNC_console > >> >> >> >>> The following are the codes which we use to create the ticket… >>> >> host,port and the password will get from the ticket and with the > same > details (host,port & password) we are able to connect the console > using the > vnc clients(TigerVNC etc.) > >> >> you mean the "ticket" call? that returns you the direct connection >> > information > >> but you want to connect to websocket proxy(to engine:6100 indeed) >> and >> > pass the above information as an signed encoded url path (where to > connect > to from proxy) > >> check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and >> > associated patches to see how it is being encoded > >> >> Thanks, >> michal >> >> >>> try { >>> var host = WebUtil.getQueryVar('host', '<?php echo >>> >> $host?>'); > >> var port = WebUtil.getQueryVar('port', '<?php echo >>> >> $port?>'); > >> var path = WebUtil.getQueryVar('path', 'websockify'); >>> >>> var password = '<?php echo $password?>'; >>> >>> if ((!host) || (!port)) { >>> updateState('failed', >>> "Must specify host and port in URL"); >>> return; >>> } >>> >>> rfb = new RFB({'target': $D('noVNC_canvas'), >>> 'encrypt': >>> >> WebUtil.getQueryVar('encrypt', > >> >>> (window.location.protocol === "https:")), >>> 'true_color': >>> >> WebUtil.getQueryVar('true_color', true), > >> 'local_cursor': >>> >> WebUtil.getQueryVar('cursor', true), > >> 'shared': >>> >> WebUtil.getQueryVar('shared', true), > >> 'view_only': >>> >> WebUtil.getQueryVar('view_only', false), > >> 'updateState': updateState, >>> 'onPasswordRequired': >>> passwordRequired}); >>> rfb.connect(host, port, password, >>> path); >>> }catch(e) {alert(e); >>> >>> >>> Could you please check if there any issues with it and guide me >>> how to >>> >> get rid of this failed to connect error? > >> >>> I have attached the screen shots for further reference… >>> >>> Thanks, >>> Punit >>> >>> >>> >>> On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com> >>> >> wrote: > >> Hi All, >>> >>> We already updated with the logs and the clear picture about the >>> issue. >>> >>> -- >>> Regards >>> Shanil >>> >>> >>> On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < >>> >> michal.skrivanek@redhat.com> wrote: > >> >>> On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> >>> wrote: >>> >>> Hi All, >>>> >>>> I am still waiting for the updates...is there any one have the >>>> clue >>>> >>> to solve this problem.... ??? > >> >>> Hi Punit, >>> I'm afraid no one can help you debug connectivity issues remotely, >>> >> without describing precisely what are you doing and how, and > include all > the logs > >> >>> Thanks, >>> michal >>> >>> >>>> Thanks, >>>> Punit >>>> >>>> >>>> On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal < >>>> hypunit@gmail.com> >>>> >>> wrote: > >> Hi All, >>>> >>>> We are also struggling with the same problem....can anybody mind >>>> to >>>> >>> update here the resolution or suggest us the way to get rid of > this "Failed > to connect to server (code: 1006" error. > >> >>>> Thanks, >>>> Punit >>>> >>>> >>>> On Thu, Jul 17, 2014 at 5:20 PM, Shanil S <xielesshanil@gmail.com >>>> > >>>> >>> wrote: > >> Hi, >>>> >>>> We are waiting for the updates, it will be great if anyone can >>>> give >>>> >>> the helpful details.. :) > >> >>>> -- >>>> Regards >>>> Shanil >>>> >>>> >>>> On Thu, Jul 17, 2014 at 10:23 AM, Shanil S < >>>> xielesshanil@gmail.com> >>>> >>> wrote: > >> Hi, >>>> >>>> we have enabled our portal ip address on the engine and hosts >>>> >>> firewall but still the connection failed. so there should be no > firewall > issues. > >> >>>> -- >>>> Regards >>>> Shanil >>>> >>>> >>>> On Wed, Jul 16, 2014 at 3:26 PM, Shanil S <xielesshanil@gmail.com >>>> > >>>> >>> wrote: > >> Hi Sven, >>>> >>>> Regarding the ticket "path", Is it the direct combination of host >>>> >>> and port ? suppose if the host is 1.2.3.4 and the port is 5100 > then what > should be the "path" value ? Is there encryption needs here ? > >> >>>> >>>> so you have access from the browser to the websocket-proxy, >>>>>> network >>>>>> >>>>> wise? can you ping the proxy? >>>> and the websocket proxy can reach the host where the vm runs? >>>> >>>> yes.. there should be no firewall issue as we can access the >>>> >>> console from ovirt engine portal > >> >>>> Do we need to allow our own portal ip address in the ovirt >>>> engine >>>> >>> and hypervisiors also ??? > >> >>>> >>>> -- >>>> Regards >>>> Shanil >>>> >>>> >>>> On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske < >>>> S.Kieske@mittwald.de> >>>> >>> wrote: > >> >>>> >>>> Am 16.07.2014 11:30, schrieb Shanil S: >>>> >>>>> We will get the ticket details like host,port and password from >>>>> >>>> the ticket > >> api funcion call but didn't get the "path" value. Will it get it >>>>> >>>> from the > >> ticket details ? i couldn't find out any from the ticket details. >>>>> >>>> >>>> the "path" is the combination of host and port. >>>> >>>> so you have access from the browser to the websocket-proxy, >>>> network >>>> wise? can you ping the proxy? >>>> and the websocket proxy can reach the host where the vm runs? >>>> are you sure there are no firewalls in between? >>>> also you should pay attention on how long your ticket >>>> is valid, you can specify the duration in minutes in your api >>>> call. >>>> >>>> -- >>>> Mit freundlichen Grüßen / Regards >>>> >>>> Sven Kieske >>>> >>>> Systemadministrator >>>> Mittwald CM Service GmbH & Co. KG >>>> Königsberger Straße 6 >>>> 32339 Espelkamp >>>> T: +49-5772-293-100 >>>> F: +49-5772-293-333 >>>> https://www.mittwald.de >>>> Geschäftsführer: Robert Meyer >>>> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad >>>> >>> Oeynhausen > >> Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad >>>> >>> Oeynhausen > >> >>>> >>>> >>>> >>>> _______________________________________________ >>>> Users mailing list >>>> Users@ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users >>>> >>>> >>>> >>>> _______________________________________________ >>>> Users mailing list >>>> Users@ovirt.org >>>> http://lists.ovirt.org/mailman/listinfo/users >>>> >>> >>> >>> >>> <screen3 Jul. 15.1.jpg> >>> >> >> >> > >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Hi, I am still waiting for the updates....is there any one in the community who can help me to resolve this issue....or the Ovirt lacking this feature.....that means we can not integrate VM console to our own portal through API ??? Thanks, Punit On Mon, Jul 28, 2014 at 2:40 PM, Punit Dambiwal <hypunit@gmail.com> wrote:
Hi,
Is there any one have the clue to resolve this problem....it seems no one did this before ??
Thanks, Punit
On Fri, Jul 25, 2014 at 1:13 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Bob,
We require the VM control through our portal and our requirement is to give access to the console from our portal. Our portal is also will be doing some other vm functions like listing vm,start vm,stop vm etc and other operations using the REST Api that you provided.
-- Regards Shanil
On Fri, Jul 25, 2014 at 10:15 AM, Bob Doolittle <bob@doolittle.us.com> wrote:
You have only mentioned console access. Do you really need the Administrative Portal or could you live with the User Portal? Do you need VM control through your portal, or only consoles? What is your use scenario?
-Bob On Jul 25, 2014 12:33 AM, "Punit Dambiwal" <hypunit@gmail.com> wrote:
Hi Dan,
We require the VM console which provide html5 console...please let me know can we achieve html5 with the spice..if yes how to integrate it with API and our own portal...??
On Fri, Jul 25, 2014 at 6:31 AM, Itamar Heim <iheim@redhat.com> wrote:
On 07/24/2014 02:43 PM, Frantisek Kobzik wrote:
Hello Punit,
this wouldn't be so straightforward. The data that goes from noVNC client to websocket proxy must be digitally signed. In engine, we use SignString query for that. There are 2 possibilities to create such signatures: 1, Expose SignString via rest api, or
this means its a gap we need to close in any case to allow moving the portals to work over the REST API?
2, implement this signing mechanism from scratch (for that the
"signing machine" would have to posses private key for signing ovirt-websocket-proxy tickets, which I don't like).
This is just first idea on how we could do it. Let me think about it a little bit longer, I'll try to ask around and maybe we'll come up with something better.
Thanks, Franta.
----- Original Message ----- From: "Punit Dambiwal" <hypunit@gmail.com> To: "Shanil S" <xielesshanil@gmail.com>, "Dan Kenigsberg" < danken@redhat.com>, ahadas@redhat.com, "Sven Kieske" < S.Kieske@mittwald.de>, "Antoni Segura Puimedon" <asegurap@redhat.com>, "Itamar Heim" <iheim@redhat.com> Cc: "Michal Skrivanek" <michal.skrivanek@redhat.com>, "Frantisek Kobzik" <fkobzik@redhat.com>, users@ovirt.org Sent: Thursday, July 24, 2014 6:50:02 AM Subject: Re: [ovirt-users] Guest VM Console Creation/Access using REST API and noVNC
Hi All,
Is there any body in the community...who can help us to resolve this issue...
1. We are using Ovirt 3.4.3 and we are able to access the console from the ovirt panel. 2. We don't want to use the ovirt engine portal for the webUI, we want to use our own portal for user interface. 3. Webbsocket proxy Installed on the same sever where ovirt engine installed. 4. We want to access the VM console from our portal,which is different from this Ovirt cluster. 5. We already allowed our portal server Ip address in the engine as well as all the hypervisior servers.....also selinux on all the servers are disabled mode. 6. Display network is on the ovirtmgmt network and the same network we are using to get the VM console.... 7. We are able to create the ticket and with the help of the ticket details,when we try to access the VM console through our portal it failed with the following error (Failed to connect to server (code: 1006)). 8. Same time we can access the console from any vnc client,which is installed on my local system,but through browser with novnc it through error. 9. We found that there is no direct api function to create console, so how we can create console using our own portal and how we can achieve this ?? 10. If it's not possible then is there any workaround for the same...
Our whole project just stuck because of this issue...please help us so we can go ahead with Ovirt....
Thanks, Punit
On Wed, Jul 23, 2014 at 1:00 PM, Shanil S <xielesshanil@gmail.com> wrote:
Hi Michal, > > We are using 3.4.3 and we are able to access the console from the > ovirt > panel. We don't want to use the ovirt engine portal for the webUI, > we want > to use our own portal for user interface. We have installed > websocket proxy > on the ovirt engine server and now we want to access the VM console > from > our portal. How we can achieve this ? it is found that there is no > direct > api function to create console, so how we can create console using > our own > portal ? > > > -- > Regards > Shanil > > > On Tue, Jul 22, 2014 at 7:15 PM, Michal Skrivanek < > michal.skrivanek@redhat.com> wrote: > > >> On Jul 22, 2014, at 13:34 , Shanil S <xielesshanil@gmail.com> >> wrote: >> >> Hi Michal, >>> >>> Thanks for your updates. >>> >>> I am unable to view the above post >>> >> https://bugzilla.redhat.com/show_bug.cgi?id=838468 and getting an >> access >> denied error. I don't have the login to this, could you please >> paste the >> content here ? >> >> should be fixed now, sorry. try again >> NoVncImpl.java in review 13931 should explain some things… (or >> Franta >> can, if something's not clear:-) >> >> >>> >>> -- >>> Regards >>> Shanil >>> >>> >>> On Tue, Jul 22, 2014 at 12:53 PM, Michal Skrivanek < >>> >> michal.skrivanek@redhat.com> wrote: >> >>> >>> On 22 Jul 2014, at 09:02, Punit Dambiwal wrote: >>> >>> Hi Michal, >>>> >>>> We want to access vm console by using noVNC and Rest api. We are >>>> using >>>> >>> websocket proxy on the same machine where engine runs and we try >> to get the >> console access from the another server that is outside from this >> cluster. >> >>> >>>> But when we try to connect the vnc_auto.html from the server using >>>> >>> host ip, port and the password which we get from the ticket >> creation… it >> shows a Failed to connect to server (code: 1006). >> >>> >>> Hi Punit, >>> did you read about the modification we did for the noVNC package? >>> >> http://www.ovirt.org/Features/noVNC_console >> >>> >>> >>> >>>> The following are the codes which we use to create the ticket… >>>> >>> host,port and the password will get from the ticket and with the >> same >> details (host,port & password) we are able to connect the console >> using the >> vnc clients(TigerVNC etc.) >> >>> >>> you mean the "ticket" call? that returns you the direct connection >>> >> information >> >>> but you want to connect to websocket proxy(to engine:6100 indeed) >>> and >>> >> pass the above information as an signed encoded url path (where to >> connect >> to from proxy) >> >>> check https://bugzilla.redhat.com/show_bug.cgi?id=838468 and >>> >> associated patches to see how it is being encoded >> >>> >>> Thanks, >>> michal >>> >>> >>>> try { >>>> var host = WebUtil.getQueryVar('host', '<?php >>>> echo >>>> >>> $host?>'); >> >>> var port = WebUtil.getQueryVar('port', '<?php echo >>>> >>> $port?>'); >> >>> var path = WebUtil.getQueryVar('path', 'websockify'); >>>> >>>> var password = '<?php echo $password?>'; >>>> >>>> if ((!host) || (!port)) { >>>> updateState('failed', >>>> "Must specify host and port in URL"); >>>> return; >>>> } >>>> >>>> rfb = new RFB({'target': >>>> $D('noVNC_canvas'), >>>> 'encrypt': >>>> >>> WebUtil.getQueryVar('encrypt', >> >>> >>>> (window.location.protocol === "https:")), >>>> 'true_color': >>>> >>> WebUtil.getQueryVar('true_color', true), >> >>> 'local_cursor': >>>> >>> WebUtil.getQueryVar('cursor', true), >> >>> 'shared': >>>> >>> WebUtil.getQueryVar('shared', true), >> >>> 'view_only': >>>> >>> WebUtil.getQueryVar('view_only', false), >> >>> 'updateState': updateState, >>>> 'onPasswordRequired': >>>> passwordRequired}); >>>> rfb.connect(host, port, password, >>>> path); >>>> }catch(e) {alert(e); >>>> >>>> >>>> Could you please check if there any issues with it and guide me >>>> how to >>>> >>> get rid of this failed to connect error? >> >>> >>>> I have attached the screen shots for further reference… >>>> >>>> Thanks, >>>> Punit >>>> >>>> >>>> >>>> On Tue, Jul 22, 2014 at 2:54 PM, Shanil S <xielesshanil@gmail.com >>>> > >>>> >>> wrote: >> >>> Hi All, >>>> >>>> We already updated with the logs and the clear picture about the >>>> issue. >>>> >>>> -- >>>> Regards >>>> Shanil >>>> >>>> >>>> On Mon, Jul 21, 2014 at 5:54 PM, Michal Skrivanek < >>>> >>> michal.skrivanek@redhat.com> wrote: >> >>> >>>> On Jul 21, 2014, at 04:33 , Punit Dambiwal <hypunit@gmail.com> >>>> wrote: >>>> >>>> Hi All, >>>>> >>>>> I am still waiting for the updates...is there any one have the >>>>> clue >>>>> >>>> to solve this problem.... ??? >> >>> >>>> Hi Punit, >>>> I'm afraid no one can help you debug connectivity issues >>>> remotely, >>>> >>> without describing precisely what are you doing and how, and >> include all >> the logs >> >>> >>>> Thanks, >>>> michal >>>> >>>> >>>>> Thanks, >>>>> Punit >>>>> >>>>> >>>>> On Fri, Jul 18, 2014 at 12:37 PM, Punit Dambiwal < >>>>> hypunit@gmail.com> >>>>> >>>> wrote: >> >>> Hi All, >>>>> >>>>> We are also struggling with the same problem....can anybody mind >>>>> to >>>>> >>>> update here the resolution or suggest us the way to get rid of >> this "Failed >> to connect to server (code: 1006" error. >> >>> >>>>> Thanks, >>>>> Punit >>>>> >>>>> >>>>> On Thu, Jul 17, 2014 at 5:20 PM, Shanil S < >>>>> xielesshanil@gmail.com> >>>>> >>>> wrote: >> >>> Hi, >>>>> >>>>> We are waiting for the updates, it will be great if anyone can >>>>> give >>>>> >>>> the helpful details.. :) >> >>> >>>>> -- >>>>> Regards >>>>> Shanil >>>>> >>>>> >>>>> On Thu, Jul 17, 2014 at 10:23 AM, Shanil S < >>>>> xielesshanil@gmail.com> >>>>> >>>> wrote: >> >>> Hi, >>>>> >>>>> we have enabled our portal ip address on the engine and hosts >>>>> >>>> firewall but still the connection failed. so there should be no >> firewall >> issues. >> >>> >>>>> -- >>>>> Regards >>>>> Shanil >>>>> >>>>> >>>>> On Wed, Jul 16, 2014 at 3:26 PM, Shanil S < >>>>> xielesshanil@gmail.com> >>>>> >>>> wrote: >> >>> Hi Sven, >>>>> >>>>> Regarding the ticket "path", Is it the direct combination of host >>>>> >>>> and port ? suppose if the host is 1.2.3.4 and the port is 5100 >> then what >> should be the "path" value ? Is there encryption needs here ? >> >>> >>>>> >>>>> so you have access from the browser to the websocket-proxy, >>>>>>> network >>>>>>> >>>>>> wise? can you ping the proxy? >>>>> and the websocket proxy can reach the host where the vm runs? >>>>> >>>>> yes.. there should be no firewall issue as we can access the >>>>> >>>> console from ovirt engine portal >> >>> >>>>> Do we need to allow our own portal ip address in the ovirt >>>>> engine >>>>> >>>> and hypervisiors also ??? >> >>> >>>>> >>>>> -- >>>>> Regards >>>>> Shanil >>>>> >>>>> >>>>> On Wed, Jul 16, 2014 at 3:13 PM, Sven Kieske < >>>>> S.Kieske@mittwald.de> >>>>> >>>> wrote: >> >>> >>>>> >>>>> Am 16.07.2014 11:30, schrieb Shanil S: >>>>> >>>>>> We will get the ticket details like host,port and password from >>>>>> >>>>> the ticket >> >>> api funcion call but didn't get the "path" value. Will it get it >>>>>> >>>>> from the >> >>> ticket details ? i couldn't find out any from the ticket details. >>>>>> >>>>> >>>>> the "path" is the combination of host and port. >>>>> >>>>> so you have access from the browser to the websocket-proxy, >>>>> network >>>>> wise? can you ping the proxy? >>>>> and the websocket proxy can reach the host where the vm runs? >>>>> are you sure there are no firewalls in between? >>>>> also you should pay attention on how long your ticket >>>>> is valid, you can specify the duration in minutes in your api >>>>> call. >>>>> >>>>> -- >>>>> Mit freundlichen Grüßen / Regards >>>>> >>>>> Sven Kieske >>>>> >>>>> Systemadministrator >>>>> Mittwald CM Service GmbH & Co. KG >>>>> Königsberger Straße 6 >>>>> 32339 Espelkamp >>>>> T: +49-5772-293-100 >>>>> F: +49-5772-293-333 >>>>> https://www.mittwald.de >>>>> Geschäftsführer: Robert Meyer >>>>> St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad >>>>> >>>> Oeynhausen >> >>> Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad >>>>> >>>> Oeynhausen >> >>> >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users@ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> Users mailing list >>>>> Users@ovirt.org >>>>> http://lists.ovirt.org/mailman/listinfo/users >>>>> >>>> >>>> >>>> >>>> <screen3 Jul. 15.1.jpg> >>>> >>> >>> >>> >> >> >
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
Well if you would really read your mail carfully enough you should already know that this does work, as I pointed out here: http://lists.ovirt.org/pipermail/users/2014-July/026026.html Again, I have a working setup like you want it but I can't share any code or further advice than I have already done. Am 06.08.2014 05:30, schrieb Punit Dambiwal:
I am still waiting for the updates....is there any one in the community who can help me to resolve this issue....or the Ovirt lacking this feature.....that means we can not integrate VM console to our own portal through API ???
-- Mit freundlichen Grüßen / Regards Sven Kieske Systemadministrator Mittwald CM Service GmbH & Co. KG Königsberger Straße 6 32339 Espelkamp T: +49-5772-293-100 F: +49-5772-293-333 https://www.mittwald.de Geschäftsführer: Robert Meyer St.Nr.: 331/5721/1033, USt-IdNr.: DE814773217, HRA 6640, AG Bad Oeynhausen Komplementärin: Robert Meyer Verwaltungs GmbH, HRB 13260, AG Bad Oeynhausen
participants (7)
-
Bob Doolittle -
Frantisek Kobzik -
Itamar Heim -
Michal Skrivanek -
Punit Dambiwal -
Shanil S -
Sven Kieske