[Users] Spice Console User Portal

Tue Oct 23 11:09:12 UTC 2012

Hey,

when trying to launch a Spice console from webadmin portal, it works as expected, from both Fedora and windows.

But when trying to launch console from userportal, the spice client throws this error:
[cid:2CE075FF-EC6E-4B74-A849-E59E3B929417 at adm.slu.se]
"Unable to connect to the graphics server"

This was from a Windows 2008R2 with Internet Explorer and spice plugin. It behaves the exact same way when using Fedora or CentOS with the spice-xpi plugin. Using a CentOS client, I have tailed the spice-xpi.log that shows no difference from a good connection to a bad.

Good connection, from webadmin:
2012-10-23 12:34:39,456 INFO  nsPluginInstance::Connect: SPICE_XPI_SOCKET: /tmp/spicec-KD4DJT/spice-xpi
2012-10-23 12:34:39,457 INFO  nsPluginInstance::Connect: SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-KD4DJT/spice-foreign
2012-10-23 12:34:39,457 INFO  nsPluginInstance::Connect: Launching /usr/libexec/spice-xpi-client
2012-10-23 12:34:42,484 INFO  nsPluginInstance::Connect: Initiating connection with controller
2012-10-23 12:34:56,721 ERROR nsPluginInstance::CallOnDisconnected: could not get browser window, when trying to call OnDisconnected (this prints when closing the console window)

Bad connection, from userportal:
2012-10-23 12:35:13,570 INFO  nsPluginInstance::Connect: SPICE_XPI_SOCKET: /tmp/spicec-bLJDfq/spice-xpi
2012-10-23 12:35:13,570 INFO  nsPluginInstance::Connect: SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-bLJDfq/spice-foreign
2012-10-23 12:35:13,570 INFO  nsPluginInstance::Connect: Launching /usr/libexec/spice-xpi-client
2012-10-23 12:35:16,593 INFO  nsPluginInstance::Connect: Initiating connection with controller

In the engine, I have created a User Role, called VmOwner that have these permissions:
System
 Configure System
  Manipulate Permissions
  √ Login Permissions
VM
 √ Basic Operations
  √ Basic Operations
  √ Change CD
  √ Remote Log In
 √ Provisioning Operations
  Edit properties
  Create
  Delete
  Edit Network
  Edit Storage
  √ Edit Snapshots

This is what engine.log says about a connection from userportal:
2012-10-23 12:55:15,344 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-2) [20487117] Running command: SetVmTicketCommand internal: false. Entities affected :  ID: 7700067a-235b-4f46-ace3-71103718d1f9 Type: VM
2012-10-23 12:55:15,378 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-2) [20487117] START, SetVmTicketVDSCommand(vdsId = a4030022-169b-11e2-9e42-00187179e224, vmId=7700067a-235b-4f46-ace3-71103718d1f9, ticket=yJYEWUW386AU, validTime=120,m userName=karli, userId=de526322-d046-4a06-911e-546e7159556e), log id: 33d22a8e
2012-10-23 12:55:15,434 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-2) [20487117] FINISH, SetVmTicketVDSCommand, log id: 33d22a8e
2012-10-23 12:55:15,681 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SSLEnabled) with null version, using default general for version
2012-10-23 12:55:15,682 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (CipherSuite) with null version, using default general for version
2012-10-23 12:55:15,682 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (EnableSpiceRootCertificateValidation) with null version, using default general for version
2012-10-23 12:55:15,695 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SpiceToggleFullScreenKeys) with null version, using default general for version
2012-10-23 12:55:15,696 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-7) calling GetConfigurationValueQuery (SpiceReleaseCursorKeys) with null version, using default general for version

And this is a connection from webadmin:
2012-10-23 12:59:16,019 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] User "5ec37cea-a682-405a-acdb-ecff4ed05ebd" is trying to take the console of virtual machine "7700067a-235b-4f46-ace3-71103718d1f9", but the console is already taken by user "de526322-d046-4a06-911e-546e7159556e".
2012-10-23 12:59:16,108 WARN  [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] User "5ec37cea-a682-405a-acdb-ecff4ed05ebd" is trying to take the console of virtual machine "7700067a-235b-4f46-ace3-71103718d1f9", but the console is already taken by user "de526322-d046-4a06-911e-546e7159556e".
2012-10-23 12:59:16,109 INFO  [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--0.0.0.0-8009-17) [71692f83] Running command: SetVmTicketCommand internal: false. Entities affected :  ID: 7700067a-235b-4f46-ace3-71103718d1f9 Type: VM,  ID: 7700067a-235b-4f46-ace3-71103718d1f9 Type: VM
2012-10-23 12:59:16,146 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-17) [71692f83] START, SetVmTicketVDSCommand(vdsId = a4030022-169b-11e2-9e42-00187179e224, vmId=7700067a-235b-4f46-ace3-71103718d1f9, ticket=MpSIhn3Tjisf, validTime=120,m userName=karliadm, userId=5ec37cea-a682-405a-acdb-ecff4ed05ebd), log id: 2324e764
2012-10-23 12:59:16,255 INFO  [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] (ajp--0.0.0.0-8009-17) [71692f83] FINISH, SetVmTicketVDSCommand, log id: 2324e764
2012-10-23 12:59:16,556 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SSLEnabled) with null version, using default general for version
2012-10-23 12:59:16,558 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (CipherSuite) with null version, using default general for version
2012-10-23 12:59:16,559 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (EnableSpiceRootCertificateValidation) with null version, using default general for version
2012-10-23 12:59:16,577 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SpiceToggleFullScreenKeys) with null version, using default general for version
2012-10-23 12:59:16,578 WARN  [org.ovirt.engine.core.bll.GetConfigurationValueQuery] (ajp--0.0.0.0-8009-12) calling GetConfigurationValueQuery (SpiceReleaseCursorKeys) with null version, using default general for version

I´m using different accounts when logging in to the different portals; "karli" when logging in to userportal, and "karliadm" in webadmin. "karli" is VmOwner and "karliadm" is SuperUser.

Am I missing any rights to be able to connect to console?

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20121023/26eee045/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Sk?rmavbild 2012-10-23 kl. 12.25.37.png
Type: image/png
Size: 16680 bytes
Desc: Sk?rmavbild 2012-10-23 kl. 12.25.37.png
URL: <http://lists.ovirt.org/pipermail/users/attachments/20121023/26eee045/attachment-0001.png>