[Users] [Spice-devel] 3.2 final and status of spice console in ie

Fri Apr 12 04:27:13 EDT 2013

Hey Everyone!

I solved it! I friggin solved it, and it didn´t have anything to do with the spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in the engine itself! So Juanjo here said that it works for him, and I took a guess that´s because he is only using admin at internal<mailto:admin at internal> for testing (correct me if I´m wrong Juanjo), so I added a "UserRole" to admin on a test VM, logged into Userportal, clicked for console, and it worked! So, since our setup is a little more complex, as it´s connected to our ActiveDirectory, I concluded that it must be a permissions related issue. I created a new UserRole, called "ConsoleOwner" that only have "Login Permissions" and "RemoteLogin" and added that role to our engine´s "System Permissions" on a directory group as "broad" as possible. After that if I also added an explicit UserRole permission for a directory user on any VM now it works 100%. Me so happy!:)

A question goes out the developers: Should you have to do that? I thought that permissions where supposed to be calculated like Windows ACLs "Effective Permissions", so that if I just add sufficient permissions for a directory user on a VM, it´s effective permissions should have granted the necessary abilities in the system, without me having to first add that as a "big" system permission to have them granted? Bug, or intended?

Thank you so much Juanjo, for posting the versions you are currently using that proved that it "should" work, and that it had to be something else that prevented us from using it (which it was). Thank you!

Best Regards
Karli Sjöberg

tor 2013-04-11 klockan 16:42 +0200 skrev Juan Jose:
Hello again Karli,

In this mail thread itself, David give me some indication about how I could to debug my spice connection in the client looking at spicex.log or installing debug-helper.exe. I try to search spicex.log and I tried to install debug-helper.exe. Searching this debug application I found this thread in user at ovirt.org<mailto:user at ovirt.org> historical mail list:

http://lists.ovirt.org/pipermail/users/2013-January/011466.html

And as you see in the Itamar Heim response to Dennis Böck, the host has to be accessible and resolvable and to have spice ports open to the client. I didn't have my host, or node as you want name it, machine configured in the client hosts file. I had spice ports opened, I only tried to configure node hostname in the client host file and "voilà", it works. This is all my history. Of course, I have also the engine machine configure in the client hosts file. I have this configuration because this both machines aren't configure in my corporative DNS.

Again, I hope that it was useful.

Juanjo.

On Thu, Apr 11, 2013 at 1:21 PM, Karli Sjöberg <Karli.Sjoberg at slu.se<mailto:Karli.Sjoberg at slu.se>> wrote:
tor 2013-04-11 klockan 13:12 +0200 skrev Juan Jose:
Hello Karli,

No problem, the output of rpm query is:

[root at ovirt-engine ~]# rpm -qa | grep ovirt
ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch
ovirt-engine-restapi-3.1.0-2.fc17.noarch
ovirt-engine-backend-3.1.0-2.fc17.noarch
ovirt-engine-config-3.1.0-2.fc17.noarch
ovirt-release-fedora-4-2.noarch
ovirt-engine-sdk-3.1.0.4-1.fc17.noarch
ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch
ovirt-engine-genericapi-3.1.0-2.fc17.noarch
ovirt-engine-tools-common-3.1.0-2.fc17.noarch
ovirt-engine-dbscripts-3.1.0-2.fc17.noarch
ovirt-engine-userportal-3.1.0-2.fc17.noarch

What the heck, 3.1.0-2?! Then why the doodoo doesn´t it work for us on 3.1.0-4?! Have you turned off SSL or something? I´m wondering what could be different on your system compared to ours...

ovirt-engine-notification-service-3.1.0-2.fc17.noarch
ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch
ovirt-engine-webadmin-portal-3.1.0-2.fc17.noarch
ovirt-engine-setup-3.1.0-2.fc17.noarch
ovirt-engine-3.1.0-2.fc17.noarch

I hope this help you to test your system. If you need some other information I will be happy to help.

Yeah, how did you reach the conslusion that you needed to edit your host-file for it to start working? Did you follow any debugging instructions previously mentioned, and if you did, please explain how step by step so I can test and try to debug our systems as well?

Juanjo.

On Thu, Apr 11, 2013 at 6:55 AM, Karli Sjöberg <Karli.Sjoberg at slu.se<mailto:Karli.Sjoberg at slu.se>> wrote:
ons 2013-04-10 klockan 17:22 +0200 skrev Juan Jose:

Yes, User portal works fine at the moment. I want to install spice-guest-tools to improve the windows VM integration in client machine. After that I will try to add a server user validation.

Great to hear that! Although the topic is "3.2 final status...", I would like the output of "rpm -qa | grep ovirt" from your engine. I´m stuck at 3.1.0-4, since it is still impossible to upgrade. But as soon as that´s fixed I´ll be able to try and confirm this as well.

/Karli

Many thanks,

Juanjo.

On Wed, Apr 10, 2013 at 6:46 AM, Karli Sjöberg <Karli.Sjoberg at slu.se<mailto:Karli.Sjoberg at slu.se>> wrote:
tis 2013-04-09 klockan 17:11 +0200 skrev Juan Jose:
Yes host or node, is my machine that has the hypervisor and yes I tried open console from Admin-Portal and It didn't work. Now both are working in a Win7 client with IE 9.
Is the User-portal working as well?

Many thanks again,

Juanjo.

On Tue, Apr 9, 2013 at 2:53 PM, Karli Sjöberg <Karli.Sjoberg at slu.se<mailto:Karli.Sjoberg at slu.se>> wrote:
tis 2013-04-09 klockan 13:49 +0200 skrev Juan Jose:

Hello David,

My problem was that I needed to add my host to \windows\system32\driver\etc\hosts file moreover to have virt-viewer installed in the Windows 7 client. Now I can open the console after that.
When you say "host", I´m guessing you mean the hypervisor that is running the VM you want to access. Have you tried opening console through Admin-portal, User-portal, or both? And they all work?

/Karli

Many thanks,

Juanjo.

On Mon, Apr 8, 2013 at 4:23 PM, David Jaša <djasa at redhat.com<mailto:djasa at redhat.com>> wrote:
Hi Juan,

Juan Jose píše v Po 08. 04. 2013 v 14:36 +0200:
>
> Hello evrybody,
>
>
> I'm testing open console in a Windows 7 client with IE 9 and when I
> try to click in console when I'm inside User Portal with wirt-viewer
> installad, it is launched but and virt-viewer give me the message
> "Unable to connect to graphic server" and It can't connect to my VM.
> Any suggest?

I've described the debugging steps on this list in the past, please look
them up and go through spicex.log. If that isn't sufficient, please use
debug-helper.exe (IIRC I described it in another mail here) to get
remote-viewer debug output.

HTH,

David

>
>
> Many thanks in avanced,
>
>
> Juanjo.
>
>
> On Thu, Mar 21, 2013 at 1:49 PM, Gianluca Cecchi
> <gianluca.cecchi at gmail.com<mailto:gianluca.cecchi at gmail.com>> wrote:
>         On Wed, Mar 20, 2013 at 10:43 PM, Jeff Bailey wrote:
>         > On 3/20/2013 5:20 AM, Christophe Fergeau wrote:
>         >>
>         >> On Tue, Mar 19, 2013 at 05:11:56PM -0400, Jeff Bailey
>         wrote:
>         >
>
>         > Heh, heh, maybe it's a secret. :)
>         >
>         > Actually, I believe I got it from
>         http://elmarco.fedorapeople.org/spice.cab
>         > and it seems to be version 5.0.2.2.
>         >
>
>
>
>         As already pointed in another mail of this same thread from
>         Michal
>         Skrivanek (about a month ago), the info is at
>         http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal
>         and the page indeed contains the same link to spice.cab file
>         you are referring
>         so possibly difficult to find but not a secret... ;-)
>
>         Gianluca
>         _______________________________________________
>         Users mailing list
>         Users at ovirt.org<mailto:Users at ovirt.org>
>         http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org<mailto:Users at ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users

--

David Jaša, RHCE

SPICE QE based in Brno
GPG Key:     22C33E24
Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24

--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>

--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>

--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>

--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>

--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66
karli.sjoberg at slu.se<mailto:karli.sjoberg at adm.slu.se>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20130412/5a911317/attachment-0001.html>