[ovirt-devel] SSO using remote-viewer

Denis Kirjanov kda at itsirius.su
Mon Aug 18 12:37:04 UTC 2014



----- Исходное сообщение -----
От: "Vinzenz Feenstra" <vfeenstr at redhat.com>
Кому: "Denis Kirjanov" <kda at itsirius.su>
Копия: devel at ovirt.org
Отправленные: Среда, 13 Август 2014 г 11:37:44
Тема: Re: [ovirt-devel] SSO using remote-viewer

On 08/12/2014 03:01 PM, Denis Kirjanov wrote:
> Ok, vdsClient with the desktopLogin works pretty well on the first step.
> I found a weird behavior when closing remote-viewer window. Even a session
> remains open (no logout/switch user is performed), the subsequent connect with the _same ticket_ spits out a gdm window
> with a password...
You mean the password is shown to the user? That would be pretty bad. As 
for the disconnect that surprises me a little bit. Can you please 
perform the connection to the VM and then disconnect and pass me the 
logs of vdsm /var/log/vdsm/vdsm.log for the host the vm is running on?

No, I meant the gdm promt. 

Looks like that was an issue from my side.

Thanks!

Also it'd be great if you could before turn on debug logging on the VM 
for the guest agent /etc/ovirt-guest-agent.conf (replace INFO with 
DEBUG) and restart the service.

# service ovirt-guest-agent restart

and pass me the logs for it as well ( 
/var/log/ovirt-guest-agent/ovirt-guest-agent.log )

Thanks
>
>
>
> ----- Исходное сообщение -----
> От: "Denis Kirjanov" <kda at itsirius.su>
> Кому: "Vinzenz Feenstra" <vfeenstr at redhat.com>
> Копия: devel at ovirt.org
> Отправленные: Понедельник, 11 Август 2014 г 18:34:24
> Тема: Re: [ovirt-devel] SSO using remote-viewer
>
>
>
> ----- Исходное сообщение -----
> От: "Vinzenz Feenstra" <vfeenstr at redhat.com>
> Кому: "Denis Kirjanov" <kda at itsirius.su>
> Копия: "Michal Skrivanek" <michal.skrivanek at redhat.com>, devel at ovirt.org
> Отправленные: Понедельник, 11 Август 2014 г 17:26:30
> Тема: Re: [ovirt-devel] SSO using remote-viewer
>
> On 08/11/2014 03:12 PM, Denis Kirjanov wrote:
>> ----- Исходное сообщение -----
>> От: "Vinzenz Feenstra" <vfeenstr at redhat.com>
>> Кому: "Michal Skrivanek" <michal.skrivanek at redhat.com>, "Denis Kirjanov" <kda at itsirius.su>
>> Копия: devel at ovirt.org
>> Отправленные: Понедельник, 11 Август 2014 г 17:07:40
>> Тема: Re: [ovirt-devel] SSO using remote-viewer
>>
>> On 08/11/2014 03:06 PM, Vinzenz Feenstra wrote:
>>> On 08/11/2014 03:01 PM, Michal Skrivanek wrote:
>>>> On Aug 11, 2014, at 14:14 , Denis Kirjanov <kda at itsirius.su> wrote:
>>>>
>>>>> Hi guys,
>>>>>
>>>>> I'm trying to login to a virtual machine without using the web
>>>>> interface (User Portal) but through the remote-viewer and a small
>>>>> python script to gather all required info such a certificate
>>>>> subject, ticken and ports.
>>>>> The virtual machine has the rhevm sso package installed so I can get
>>>>> to the machine through the web UI,
>>>>> but I can't do the same thing using remote-viewer. What I do see is
>>>>> a gdm login window with
>>>>> my user account and 2 icons (Login into session and RHEV-M SSO login).
>>>>>
>>>>> Looks like I have to invoke something inside my python script to get
>>>>> an access but I can't figure out what is missing…
>>>> you need to issue the "desktopLogin" command to actually perform the
>>>> sign on. The viewer itself doesn't do anything
>>> If this is going through vdsm then it's the desktop login command. Via
>>> the REST API it'd be just /vms/{vmid}/logon
>> Note: The REST API supports this from oVirt/RHEV 3.5
>>
>> Thanks, but we're using oVirt/RHEV 3.1.
>> Does the PythonAPI (or ReST API) support something like this in 3.1?
> Well only the XMLRPC api of the Host supports the desktopLogin verb, as
> Michal already said.
>
> vdsClient for example can do this, when it has the right certificates
>
> vdsClient -s <HOSTIP> desktopLogin <VMID> <DOMAIN> <USER> <PASSWORD>
>
> HTH
>
> Could you please guide me on how to set a required certificates on
> a client?
>
> Thanks!
>
>>
>>>> Thanks,
>>>> michal
>>>>
>>>>> Thanks!
>>>>> _______________________________________________
>>>>> Devel mailing list
>>>>> Devel at ovirt.org
>>>>> http://lists.ovirt.org/mailman/listinfo/devel
>


-- 
Regards,

Vinzenz Feenstra | Senior Software Engineer
RedHat Engineering Virtualization R & D
Phone: +420 532 294 625
IRC: vfeenstr or evilissimo

Better technology. Faster innovation. Powered by community collaboration.
See how it works at redhat.com




More information about the Devel mailing list