[Users] Spice plugin for firefox

Fri Feb 3 07:19:23 UTC 2012

BTW - this is why i had to change that setting... if i left it hashed out vdsmd exits 

Feb 3 05:26:30 r5a101 systemd-vdsmd[5213]: Starting libvirtd (via systemctl): [ OK ] 
Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: conflicting vdsm and libvirt tls configuration. 
Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: vdsm.conf with ssl=False requires libvirt with: 
Feb 3 05:26:31 r5a101 systemd-vdsmd[5213]: listen_tcp=1, auth_tcp="none" and spice_tls=0. 
Feb 3 05:26:31 r5a101 systemd[1]: vdsmd.service: control process exited, code=exited status=1 

----- Original Message -----

From: "Spyro Polymiadis" <spyro at rsp.com.au> 
To: "Spyro Polymiadis" <spyro at rsp.com.au> 
Cc: "Haim Ateya" <hateya at redhat.com>, "Alon Levy" <alevy at redhat.com>, users at ovirt.org, "Arnon Gilboa" <agilboa at redhat.com>, "Yaniv Kaul" <ykaul at redhat.com> 
Sent: Friday, 3 February, 2012 5:47:29 PM 
Subject: Re: [Users] Spice plugin for firefox 

:( no dice again... 
same message as below.. 

in /etc/libvirt/libvirtd.conf i had to set 
auth_tcp="none" 

as VDSM didnt seem to start cleanly when i disabled SSL as per the wiki link in this thread 
I wonder if thats maybe the cause... 

----- Original Message -----

From: "Spyro Polymiadis" <spyro at rsp.com.au> 
To: "Spyro Polymiadis" <spyro at rsp.com.au> 
Cc: "Haim Ateya" <hateya at redhat.com>, "Alon Levy" <alevy at redhat.com>, users at ovirt.org, "Arnon Gilboa" <agilboa at redhat.com>, "Yaniv Kaul" <ykaul at redhat.com> 
Sent: Friday, 3 February, 2012 5:38:41 PM 
Subject: Re: [Users] Spice plugin for firefox 

hrmm after some digging i came across this on the hypervisor when i try and launch spicec... 

/var/log/libvirt/qemu/vm1.log 

reds_handle_read_link_done: Peer doesn't support AUTH selection 

maybe ill blow that VM away and create a new one...see if that helps 

----- Original Message -----

From: "Spyro Polymiadis" <spyro at rsp.com.au> 
To: "Yaniv Kaul" <ykaul at redhat.com> 
Cc: "Haim Ateya" <hateya at redhat.com>, "Alon Levy" <alevy at redhat.com>, users at ovirt.org, "Arnon Gilboa" <agilboa at redhat.com>, "Spyro Polymiadis" <spyro at rsp.com.au> 
Sent: Friday, 3 February, 2012 5:26:10 PM 
Subject: Re: [Users] Spice plugin for firefox 

Yeah :( The vm was off after processing all the changes (i rebooted the whole cluster and engine server) 
How do it set a "ticket"? 

I can connect to the spice interface using IE (windows) via the ovirt ui just fine (although the mouse is completely unreliable) 

Further question - if i end up connecting via the command line... if i have multiple vm's running on the hypervisor - how do i determine which one i want to connect to? 
Does each vm run on a separate port (vm1 = 5900, vm2=5901 etc?) 

----- Original Message -----

From: "Yaniv Kaul" <ykaul at redhat.com> 
To: "Spyro Polymiadis" <spyro at rsp.com.au> 
Cc: "Haim Ateya" <hateya at redhat.com>, "Alon Levy" <alevy at redhat.com>, users at ovirt.org, "Arnon Gilboa" <agilboa at redhat.com> 
Sent: Friday, 3 February, 2012 5:13:53 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/03/2012 08:08 AM, Spyro Polymiadis wrote: 

Hi Mate, 

no unfortunately i couldnt update it as i wasnt able to find any newer XPI's that would work on centos5.7 (centos 6.0 version required a stack of new packages) 

I had just tried going through all that... 

the errors i was getting after using the SUBJECT and ca file was: 

$ /usr/bin/spicec --host 192.168.112.21 --secure-port 5901 --secure-channels all --host-subject "`openssl x509 -noout -text -in cacert.pem | grep Subject: | cut -f 10- -d \" \"`" --ca-file cacert.pem 
Warning: connect failed 7 

Ive just gone through and configured all the spice_tls and ssl settings to 0 or off (as per http://ovirt.org/wiki/OVirt_-_disable_SSL_in_VDSM ) 
But now im wresting with trying to get the hosts to register with the engine server again :( so im yet to be able to test a "non" secured connection 

Thanks for you help so far :) 

1. Have you re-ran the VM? If it was launched before the changes, it is still running with SSL enabled. 
2. Did you set a ticket to the VM? (IIRC, 7 means no ticket). 
Y. 

<blockquote>

----- Original Message -----

From: "Yaniv Kaul" <ykaul at redhat.com> 
To: "Spyro Polymiadis" <spyro at rsp.com.au> 
Cc: "Haim Ateya" <hateya at redhat.com> , "Alon Levy" <alevy at redhat.com> , users at ovirt.org , "Arnon Gilboa" <agilboa at redhat.com> 
Sent: Friday, 3 February, 2012 4:05:41 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/03/2012 02:54 AM, Spyro Polymiadis wrote: 
<blockquote>

Howdy 

Ive just installed an updated version of spice client on my linux box: 

spice-client-0.8.2-1.el5 
spice-0.8.2-1.el5 

and still the firefox xpi crashes with the version mismatch error below 

</blockquote>

And the XPI? Was it updated? 

<blockquote>

but if i try to run it manually from the command line like so : 

/usr/bin/spicec --host 192.168.112.21 --port 5901 

I get 

Warning: Connection reset by peer (104) 

and in the VMs log i see 

139827374590400:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:350: 
reds_init_client_ssl_connection: SSL_accept failed, error=1 

</blockquote>

Because you are missing several parameters in the command line of spicec. Specifically, the whole SSL negotiation stuff is missing. It expects them. 
See 'spicec --help' and specifically the use of --ca-file , --host-subject for correct SSL configuration. 
Y. 

<blockquote>

:( this might be a blocker for us - as i cant also work out how to use the "VNC" console option 

Cheers 
Spyro 

----- Original Message -----

From: "Yaniv Kaul" <ykaul at redhat.com> 
To: "Spyro Polymiadis" <spyro at rsp.com.au> 
Cc: "Haim Ateya" <hateya at redhat.com> , "Alon Levy" <alevy at redhat.com> , users at ovirt.org , "Arnon Gilboa" <agilboa at redhat.com> 
Sent: Friday, 3 February, 2012 12:09:48 AM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/02/2012 03:30 PM, Spyro Polymiadis wrote: 
<blockquote>

Hi Haim, 

Using Firefox 9, and Centos 5.7 

$ rpm -qa | grep spice 

qspice-client-0.3.0-4.el5_5 
spice-xpi-2.2-2.3.el5_6.1 
qspice-libs-devel-0.3.0-54.el5_5.2 
qspice-0.3.0-54.el5_5.2 
qspice-libs-0.3.0-54.el5_5.2 

the spiceXPI is in /usr/lib64/mozilla/plugins 
and spicec is in /usr/libexec 

Cheers :) 
Spyro 

</blockquote>

A newer version of the XPI would be most useful. I'm not sure if RPMs are available for it, though. 
Y. 

<blockquote>

----- Original Message -----

From: "Haim Ateya" <hateya at redhat.com> 
To: users at ovirt.org , "Alon Levy" <alevy at redhat.com> , "Arnon Gilboa" <agilboa at redhat.com> 
Sent: Thursday, 2 February, 2012 9:37:12 PM 
Subject: Re: [Users] Spice plugin for firefox 

On 02/02/2012 12:39 PM, Spyro Polymiadis wrote: 

adding Alon & Arnon. 

<blockquote>

Howdy again 

Has anyone managed to get the spice plugin working for firefox under linux? 
When ever i click on the console icon, i see a popup quickly appear then crash 

</blockquote>
what client (o.s) do you use ? do you have spice-xpi and spice-client installed on it ? 

<blockquote>

In the spice logs it says 
2012-02-02 16:14:47,006 INFO [20889:20891] RedPeer::connect: Connecting 192.168.112.2 5901 
2012-02-02 16:14:47,013 WARN [20889:20891] RedChannel::run: RedChannelBase::connect: version mismatch: expect 1 got 2 

</blockquote>

<blockquote>

:( cant seem to find any information on this error unfortunately. 

Cheers 
Spyro 

_______________________________________________
Users mailing list Users at ovirt.org http://lists.ovirt.org/mailman/listinfo/users 
</blockquote>

_______________________________________________ 
Users mailing list 
Users at ovirt.org 
http://lists.ovirt.org/mailman/listinfo/users 

_______________________________________________
Users mailing list Users at ovirt.org http://lists.ovirt.org/mailman/listinfo/users 
</blockquote>

</blockquote>

</blockquote>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20120203/480a266e/attachment-0001.html>