[ovirt-devel] SSO using remote-viewer

[Vinzenz Feenstra]

On 08/12/2014 03:01 PM, Denis Kirjanov wrote:
> Ok, vdsClient with the desktopLogin works pretty well on the first step.
> I found a weird behavior when closing remote-viewer window. Even a session
> remains open (no logout/switch user is performed), the subsequent connect with the _same ticket_ spits out a gdm window
> with a password...
You mean the password is shown to the user? That would be pretty bad. As 
for the disconnect that surprises me a little bit. Can you please 
perform the connection to the VM and then disconnect and pass me the 
logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on?

Also it'd be great if you could before turn on debug logging on the VM 
for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with 
DEBUG) and restart the service.

# service ovirt-guest-agent restart

and pass me the logs for it as well ( 
/var/log/ovirt-guest-agent/ovirt-guest-agent.log )

Thanks
>
>
>
> ----- Исходное сообщение -----
> От: "Denis Kirjanov" <kda at itsirius.su>
> Кому: "Vinzenz Feenstra" <vfeenstr at redhat.com>
> Копия: devel at ovirt.org
> Отправленные: Понедельник, 11 Август 2014 г 18:34:24
> Тема: Re: [ovirt-devel] SSO using remote-viewer
>
>
>
> ----- Исходное сообщение -----
> От: "Vinzenz Feenstra" <vfeenstr at redhat.com>
> Кому: "Denis Kirjanov" <kda at itsirius.su>
> Копия: "Michal Skrivanek" <michal.skrivanek at redhat.com>, devel at ovirt.org
> Отправленные: Понедельник, 11 Август 2014 г 17:26:30
> Тема: Re: [ovirt-devel] SSO using remote-viewer
>
> On 08/11/2014 03:12 PM, Denis Kirjanov wrote:
>> ----- Исходное сообщение -----
>> От: "Vinzenz Feenstra" <vfeenstr at redhat.com>
>> Кому: "Michal Skrivanek" <michal.skrivanek at redhat.com>, "Denis Kirjanov" <kda at itsirius.su>
>> Копия: devel at ovirt.org
>> Отправленные: Понедельник, 11 Август 2014 г 17:07:40
>> Тема: Re: [ovirt-devel] SSO using remote-viewer
>>
>> On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:
>>> On 08/11/2014 03:01 PM, Michal Skrivanek wrote:
>>>> On Aug 11, 2014, at 14:14 , Denis Kirjanov <kda at itsirius.su> wrote:
>>>>
>>>>> Hi guys,
>>>>>
>>>>> I'm trying to login to a virtual machine without using the web
>>>>> interface (User Portal) but through the remote-viewer and a small
>>>>> python script to gather all required info such a certificate
>>>>> subject, ticken and ports.
>>>>> The virtual machine has the rhevm sso package installed so I can get
>>>>> to the machine through the web UI,
>>>>> but I can't do the same thing using remote-viewer. What I do see is
>>>>> a gdm login window with
>>>>> my user account and 2 icons (Login into session and RHEV-M SSO login).
>>>>>
>>>>> Looks like I have to invoke something inside my python script to get
>>>>> an access but I can't figure out what is missing…
>>>> you need to issue the "desktopLogin" command to actually perform the
>>>> sign on. The viewer itself doesn't do anything
>>> If this is going through vdsm then it's the desktop login command. Via
>>> the REST API it'd be just /vms/{vmid}/logon
>> Note: The REST API supports this from oVirt/RHEV 3.5
>>
>> Thanks, but we're using oVirt/RHEV 3.1.
>> Does the PythonAPI (or ReST API) support something like this in 3.1?
> Well only the XMLRPC api of the Host supports the desktopLogin verb, as
> Michal already said.
>
> vdsClient for example can do this, when it has the right certificates
>
> vdsClient -s <HOSTIP> desktopLogin <VMID> <DOMAIN> <USER> <PASSWORD>
>
> HTH
>
> Could you please guide me on how to set a required certificates on
> a client?
>
> Thanks!
>
>>
>>>> Thanks,
>>>> michal
>>>>
>>>>> Thanks!
>>>>> _______________________________________________
>>>>> Devel mailing list
>>>>> Devel at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/devel
>


-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R & D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com