[Users] Userportal SPICE Woes

Itamar Heim iheim at redhat.com
Wed Mar 13 11:03:21 UTC 2013


On 03/13/2013 03:42 AM, Dead Horse wrote:
> Itamar,
> Nail on the head. Pretty much what I describe here is sorely needed:
> http://lists.ovirt.org/pipermail/users/2013-February/012562.html
>

we are working on multiple things here:
- mime based launch - should allow launching vnc/spice/rdp on any
   client machine having them[1]. main benefit its only a web side
   change.
- spice.html5/novnc - requires either qemu support for websockets or a
   websocket service to be deployed, not sure yet about impact to live
   migration

[1] may need a wrapper script on some.

> - DHC
>
>
> On Tue, Mar 12, 2013 at 5:53 PM, Itamar Heim <iheim at redhat.com
> <mailto:iheim at redhat.com>> wrote:
>
>     On 03/12/2013 11:38 PM, Dead Horse wrote:
>
>         Remote console access IMHO is still a very weak point in ovirt/RHEV.
>         SPICE is a very nice protocol but IMHO is in dire need of a platform
>         independent client and tighter integration into the user and web
>
>
>     tighter integration or support non integrated clients (the mime
>     based approach which won't require the XPI/ActiveX)?
>
>         portals. Something I have done to workaround issues like these is to
>         disable spice certificate checking and SSL.
>
>         psql engine -U postgres -c "UPDATE vdc_options set option_value
>         = 'false' where option_name = 'SSLEnabled'"
>         psql engine -U postgres -c "UPDATE vdc_options set option_value
>         = 'false' where option_name = '__UseSecureConnectionWithServers__'"
>         psql engine -U postgres -c "UPDATE vdc_options set option_value
>         = 'false' where option_name
>         ='__EnableSpiceRootCertificateVali__dation'
>
>         - DHC
>
>
>
>         On Fri, Mar 8, 2013 at 10:22 AM, Michal Skrivanek
>         <michal.skrivanek at redhat.com
>         <mailto:michal.skrivanek at redhat.com>
>         <mailto:michal.skrivanek at __redhat.com
>         <mailto:michal.skrivanek at redhat.com>>> wrote:
>
>
>              On 8 Mar 2013, at 15:51, Karli Sjöberg wrote:
>
>                  tor 2013-03-07 klockan 13:52 +0100 skrev David Jaša:
>
>                      Hi,
>
>                      Karli Sjöberg píše v Čt 07. 03. 2013 v 10:01 +0000:
>                      > Hi, it me again,
>                      >
>                      > the last time this was discussed, the problem
>                 seemed to be centred
>                      > around Win/IE, but since patching to:
>                      > # rpm -qa | grep ovirt
>                      > ovirt-engine-config-3.1.0-4.__fc17.noarch
>                      > ovirt-engine-dbscripts-3.1.0-__4.fc17.noarch
>                      > ovirt-log-collector-3.1.0-0.__git10d719.fc17.noarch
>                      > ovirt-engine-restapi-3.1.0-4.__fc17.noarch
>                      > ovirt-image-uploader-3.1.0-0.__git9c42c8.fc17.noarch
>                      > ovirt-engine-genericapi-3.1.0-__4.fc17.noarch
>                      > ovirt-iso-uploader-3.1.0-0.__git1841d9.fc17.noarch
>                      > ovirt-engine-webadmin-portal-__3.1.0-4.fc17.noarch
>                      > ovirt-engine-setup-3.1.0-4.__fc17.noarch
>                      > ovirt-engine-sdk-3.2.0.2-1.__fc17.noarch
>                      > ovirt-engine-backend-3.1.0-4.__fc17.noarch
>                      > ovirt-engine-tools-common-3.1.__0-4.fc17.noarch
>                      > ovirt-engine-3.1.0-4.fc17.__noarch
>                      > ovirt-engine-userportal-3.1.0-__4.fc17.noarch
>                      >
>                 ovirt-engine-notification-__service-3.1.0-4.fc17.noarch
>                      >
>                      > No one is able to connect to a spice console
>                 though the Userportal at
>                      > all.
>
>                      Looks like no one is getting host subject - again.
>                 Tomáš?
>
>
>                  Come on guys, please tell me if there´s anything we can
>             do to
>                  troubleshoot this issue, to help solve a real
>             show-stopper for us!
>
>              Would you be able to try it in 3.2?
>              It was known to be broken somewhere around 3.1 release….
>
>              Thanks,
>              michal
>
>
>                  In using oVirt, our organisation is so close to being
>             able to ship
>                  out thin-client kiosks instead of buying expensive new
>             HW on a
>                  yearly basis, and have our users access their desktops from
>                  practically anywhere, even from home if they´d wish.
>             The rest of
>                  the entire system works flawlessly, just to fall flat
>             on it´s face
>                  right on the finish line. I think that is so sad and silly,
>                  because I really love the rest of this product! We´ve
>             set up
>                  oVirt-3.1, made a POC template, defined a pool and have
>             been able
>                  to have them prestarted as well. But if our users
>             aren´t able to
>                  access their console in a seamless, easy way, then what
>             good is
>                  it? And knowing that the console works just fine from the
>                  adminportal in several different client systems
>             (Fedora, CentOS,
>                  Win7) makes me hope that it´s just this small, yet
>             important piece
>                  that needs to be corrected.
>
>                  Anxiously awaiting your response
>                  Karli Sjöberg
>
>
>                      David
>
>                      > I´ve tried this from my workstation, running
>                 Fedora 17:
>                      >
>                 ==============================__==============================__====================
>                      > $ SPICEC_DEBUG_LEVEL=0 firefox
>                      > (plugin-container:18293): SpiceXPI-CRITICAL **:
>                 controller connect:
>                      > Filen eller katalogen finns inte
>                      > (plugin-container:18293): SpiceXPI-CRITICAL **:
>                 controller connect:
>                      > Filen eller katalogen finns inte
>                      > (plugin-container:18293): SpiceXPI-CRITICAL **:
>                 could not get browser
>                      > window, when trying to call OnDisconnected
>                      >
>                 ==============================__==============================__====================
>                      >
>                      >
>                      > Here´s a collegue of mine, running Win7/IE9:
>                      >
>                 ==============================__==============================__====================
>                      > 1362648766 INFO [7196:5208] spicex_init_logger:
>                 started
>                      > 1362648766 DEBUG [7196:5208]
>                 COSpiceX::put_DynamicMenu: DynamicMenu
>                      > 1362648766 INFO [7196:5208]
>                 COSpiceX::put_FullScreen: New FullScreen
>                      > request newVal=0xffffffff
>                      > 1362648766 DEBUG [7196:5208] COSpiceX::Connect:
>                 Running spicec (C:
>                      >
>                 \Users\jope\AppData\Local\__virt-viewer\bin\remote-viewer.__exe
>                      > --spice-controller)
>                      > 1362648766 INFO [7196:5208] COSpiceX::Connect:
>                 spicec pid 1640
>                      > 1362648766 DEBUG [7196:5208] COSpiceX::Connect:
>                 connecting to spice
>                      > client's pipe
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_init:
>                 sending init
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 1 :
>                      > str 130.238.96.135 <tel:130.238.96.135> (1)
>                      > 1362648767 DEBUG [7196:5208]
>                 COSpiceX::send_value: sending msg id 2
>                      > value 5906
>                      > 1362648767 DEBUG [7196:5208]
>                 COSpiceX::send_value: sending msg id 3
>                      > value 5907
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending password
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 11 :
>                      > str IT-Avdelningen-1:%d - Press SHIFT+F12 to
>                 Release Cursor (1)
>                      > 1362648767 DEBUG [7196:5208]
>                 COSpiceX::send_value: sending msg id 10
>                      > value 1
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 14 :
>                      > str
>                 release-cursor=shift+f12,__toggle-fullscreen=shift+f11 (1)
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 5 :
>                      > str
>                 main,inputs,scursor,splayback,__srecord,sdisplay (1)
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 7 :
>                      > str DEFAULT (1)
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr:
>                 sending msg id 8 :
>                      > str
>                 C:\Users\jope\AppData\Local\__Temp\truststore.pem (1)
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_msg:
>                 sending msg id 16
>                      > 1362648767 DEBUG [7196:5208] COSpiceX::send_msg:
>                 sending msg id 17
>                      > 1362648767 INFO [7196:5208]
>                 COSpiceX::ExecuteUsbCtrl: USB sharing is
>                      > not requested
>                      > 1362648771 INFO [7196:7480]
>                 COSpiceX::event_thread: exit_code=0
>                      > error_code=1
>                      >
>                 ==============================__==============================__====================
>                      >
>                      >
>                      > And another collegue running CentOS-6.3/Firefox:
>                      >
>                 ==============================__==============================__====================
>                      > 2013-03-07 09:42:41,651 DEBUG
>                 nsPluginInstance::SetHostIP:
>                      > 130.238.96.132 <tel:130.238.96.132>
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::SetPort: 5900
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::SetTitle:
>                      > IT-Avdelningen-2:%d - Press SHIFT+F12 to Release
>                 Cursor
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::__SetDynamicMenu:
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::__SetFullScreen: 1
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::SetPassword: Password
>                      > set
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::__SetNumberOfMonitors: 1
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::__SetUsbListenPort: 0
>                      > 2013-03-07 09:42:41,652 DEBUG
>                 nsPluginInstance::__SetAdminConsole: 1
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetSecurePort: 5901
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetSSLChannels:
>                      > original channels:
>                 smain,sinputs,scursor,__splayback,srecord,sdisplay
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetSSLChannels:
>                      > modified channels:
>                 main,inputs,cursor,playback,__record,display
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetGuestHostName:
>                      > IT-Avdelningen-2
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetCipherSuite:
>                      > DEFAULT
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetTrustStore:
>                      > Certificate:
>                      >     Data:
>                      >         Version: 3 (0x2)
>                      >         Serial Number: 15 (0xf)
>                      >         Signature Algorithm: sha1WithRSAEncryption
>                      >         Issuer: C=US, O=SLU, CN=CA-storm.slu.se.80985
>                      >         Validity
>                      >             Not Before: Sep 26 14:21:06 2012
>                      >             Not After : Sep 25 12:21:06 2022 GMT
>                      >         Subject: C=US, O=SLU,
>                 CN=CA-storm.slu.se.80985
>                      >         Subject Public Key Info:
>                      >             Public Key Algorithm: rsaEncryption
>                      >                 Public-Key: (1024 bit)
>                      >                 Modulus:
>                      >
>                 00:a2:94:89:18:26:79:49:6b:c6:__28:6c:f2:95:e9:
>                      >
>                 a7:71:00:22:c6:79:c2:9e:10:63:__ef:34:5c:ab:62:
>                      >
>                 36:a0:7a:84:d0:79:77:4c:9d:3d:__39:8f:97:93:c5:
>                      >
>                 f6:fb:5b:0b:f8:9b:ad:d8:53:2d:__a6:b6:03:45:d4:
>                      >
>                 76:45:f1:af:99:42:74:07:4c:48:__7d:28:96:31:9e:
>                      >
>                 88:cf:90:d9:e7:d9:cf:55:a8:bd:__37:a0:8f:f1:26:
>                      >
>                 89:a9:ab:64:78:a4:02:60:9b:3a:__a7:07:db:6e:75:
>                      >
>                 32:e5:8f:51:7f:50:02:15:d8:c8:__7b:68:c1:54:e1:
>                      >                     9f:c2:d2:cf:53:c3:58:b3:15
>                      >                 Exponent: 65537 (0x10001)
>                      >         X509v3 extensions:
>                      >             X509v3 Subject Key Identifier:
>                      >
>                      >
>                 FE:8F:57:F1:A0:AF:45:36:9F:AC:__C9:6B:EE:F9:D1:3E:18:78:B9:EA
>                      >             Authority Information Access:
>                      >                 CA Issuers -
>                 URI:http://storm.slu.se:80/ca.__crt
>                 <http://storm.slu.se:80/ca.crt>
>                   <http://storm.slu.se/ca.crt>
>
>                      >
>                      >             X509v3 Authority Key Identifier:
>                      >
>                      >
>                 keyid:FE:8F:57:F1:A0:AF:45:46:__9F:NC:C9:6B:EE:F9:D1:3E:18:78:__B9:EA
>                      >
>                 DirName:/C=US/O=SLU/CN=CA-__storm.slu.se.80985
>                      >                 serial:0F
>                      >
>                      >             X509v3 Basic Constraints: critical
>                      >                 CA:TRUE
>                      >             X509v3 Key Usage: critical
>                      >                 Certificate Sign, CRL Sign
>                      >     Signature Algorithm: sha1WithRSAEncryption
>                      >
>                 45:e4:15:23:fa:55:78:89:24:66:__7c:e2:33:41:ea:98:00:12:
>                      >
>                 0c:25:e5:e6:3a:c7:f8:f9:4d:83:__47:d3:80:9b:c0:78:bc:ab:
>                      >
>                 61:ae:6d:a1:cf:43:cb:cb:31:2c:__94:72:21:b0:58:f0:8b:69:
>                      >
>                 0d:c4:73:f2:44:95:52:06:23:6c:__71:7a:9b:fc:5f:98:21:35:
>                      >
>                 26:e1:a3:bb:65:bb:d2:81:bb:48:__96:99:b7:04:e6:15:af:93:
>                      >
>                 a1:60:e4:bf:05:d3:b0:4b:e4:e2:__4b:21:82:d7:2b:3d:19:ef:
>                      >
>                 a4:5a:23:58:74:ef:1a:80:14:8b:__89:b2:a7:bd:c2:21:66:1f:
>                      >         e0:7e
>                      > -----BEGIN CERTIFICATE-----
>                      >
>                 MIIC1DCCAj2gAwIBAgIBDzANBgkqhk__iG9w0BAQUFADA7MQswCQYDVQQGEwJV__UzEM
>                      >
>                 MAoGA1UEChMDU0xVMR4wHAYDVQQDEx__VDQS1zdG9ybS5zbHUuc2UuODA5ODUw__IhcR
>                      >
>                 MTIwOTI2MTQyMTA2LTAxMDAXDTIyMD__kyNTEyMjEwNlowOzELMAkGA1UEBhMC__VVMx
>                      >
>                 DDAKBgNVBAoTA1NMVTEeMBwGA1UEAx__MVQ0Etc3Rvcm0uc2x1LnNlLjgwOTg1__MIGf
>                      >
>                 MA0GCSqGSIb3DQEBAQUAA4GNADCBiQ__KBgQCilIkYJnlJa8YobPKV6adxACLG__ecKe
>                      >
>                 EGPvNFyrYjageoTQeXdMnT05j5eTxf__b7Wwv4m63YUy2mtgNF1HZF8a+__ZQnQHTEh9
>                      >
>                 KJYxnojPkNnn2c9WqL03oI/__xJompq2R4pAJgmzqnB9tudTLlj1F/__UAIV2Mh7aMFU
>                      >
>                 4Z/__C0s9Tw1izFQIDAQABo4HjMIHgMB0GA__1UdDgQWBBT+j1fxoK9FRp+syWvu+__dE+
>                      >
>                 GHi56jA5BggrBgEFBQcBAQQtMCswKQ__YIKwYBBQUHMAKGHWh0dHA6Ly9zdG9y__bS5z
>                      >
>                 bHUuc2U6ODAvY2EuY3J0MGMGA1UdIR__cMFqAFP6PV/Ggr0VGn6zJa+__750T4YeLnq
>                      >
>                 oT+__kPTA7MQswCQYDVQQGEwJVUzEMMAoGA__1UEChMDU0xVMR4wHAYDVQQDExVDQS1__z
>                      >
>                 dG9ybS5zbHUuc2UuODA5ODWCAQ8wDw__YDVR0TAQH/BAUwAwEB/__zAOBgNVHQ8BAf8E
>                      >
>                 BAMCAQYwDQYJKoZIhvcNAQEFBQADgY__EAReQVI/__pVeIkkZnziM0HqmAASDCXl5jrH
>                      >
>                 +__PlNg0fTgJvAeLyrYa5toc9Dy8sxLJR__yIbBY8ItpDcRz8kSVUgYjbHF6m/__xfmCE1
>                      >
>                 JuGju2W70oG7SGaZtwTmFa+__ToWDkvwXTsEvk4kshgtcrPRnvpFojW__HTvGoAUi4my
>                      > p73CIWYf4H4=
>                      > -----END CERTIFICATE-----
>                      >
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::SetHotKeys:
>                      >
>                 release-cursor=shift+f12,__toggle-fullscreen=shift+f11
>                      > 2013-03-07 09:42:41,653 DEBUG
>                 nsPluginInstance::__SetNoTaskMgrExecution:
>                      > 0
>                      > 2013-03-07 09:42:41,654 DEBUG
>                 nsPluginInstance::__SetSendCtrlAltDelete:
>                      > 0
>                      > 2013-03-07 09:42:41,654 DEBUG
>                 nsPluginInstance::__SetUsbAutoShare: 1
>                      > 2013-03-07 09:42:41,654 DEBUG
>                 nsPluginInstance::__SetUsbFilter:
>                      >
>                 -1,60186,10000,256,1|-1,1118,__245,-1,1|-1,1133,2245,-1,1|-1,__1133,2242,5,1|8,-1,-1,-1,1|7,-__1,-1,-1,1|-1,-1,-1,-1,0
>                      > 2013-03-07 09:42:41,654 INFO
>                   nsPluginInstance::Connect:
>                      > SPICE_XPI_SOCKET: /tmp/spicec-scQYmJ/spice-xpi
>                      > 2013-03-07 09:42:41,654 INFO
>                   nsPluginInstance::Connect:
>                      > SPICE_FOREIGN_MENU_SOCKET:
>                 /tmp/spicec-scQYmJ/spice-__foreign
>                      > 2013-03-07 09:42:41,655 DEBUG
>                 nsPluginInstance::Connect: Controller
>                      > pid: 10340
>                      > 2013-03-07 09:42:41,655 DEBUG QErrorHandler:
>                 Something went wrong:
>                      > connect error, 2
>                      > 2013-03-07 09:42:41,655 DEBUG
>                 SpiceController::Connect: Connect Error
>                      > 2013-03-07 09:42:41,655 DEBUG QErrorHandler:
>                 Something went wrong:
>                      > connect error, 2
>                      > 2013-03-07 09:42:41,655 DEBUG
>                 SpiceController::Connect: Connect Error
>                      > 2013-03-07 09:42:41,655 INFO
>                   nsPluginInstance::Connect:
>                      > Launching /usr/libexec/spice-xpi-client
>                      > 2013-03-07 09:42:42,655 DEBUG
>                 SpiceController::Connect: Connected!
>                      > 2013-03-07 09:42:44,723 INFO
>                   nsPluginInstance::Connect: Initiating
>                      > connection with controller
>                      > 2013-03-07 09:42:48,652 DEBUG
>                 nsPluginInstance::__ControllerWaitHelper:
>                      > Controller finished, pid: 10340, exit code: 0
>                      > 2013-03-07 09:42:48,653 ERROR
>                 nsPluginInstance::__CallOnDisconnected:
>                      > could not get browser window, when trying to call
>                 OnDisconnected
>                      >
>                 ==============================__==============================__====================
>                      >
>                      >
>                      > If there´s anything we can do to help resolve
>                 this issue once and for
>                      > all, just name it! It so hurts to see this
>                 otherwise great product
>                      > tripping over on it´s face so close to the finish
>                 line:(
>                      >
>                      > Best Regards
>                      > Karli Sjöberg
>                      > _________________________________________________
>                      > Users mailing list
>                      >Users at ovirt.org <mailto:Users at ovirt.org>
>                   <mailto:Users at ovirt.org <mailto:Users at ovirt.org>>
>                      >http://lists.ovirt.org/__mailman/listinfo/users
>                 <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>                  _________________________________________________
>                  Users mailing list
>             Users at ovirt.org <mailto:Users at ovirt.org>
>             <mailto:Users at ovirt.org <mailto:Users at ovirt.org>>
>             http://lists.ovirt.org/__mailman/listinfo/users
>             <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>
>              _________________________________________________
>              Users mailing list
>         Users at ovirt.org <mailto:Users at ovirt.org> <mailto:Users at ovirt.org
>         <mailto:Users at ovirt.org>>
>
>         http://lists.ovirt.org/__mailman/listinfo/users
>         <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>
>
>         _________________________________________________
>         Users mailing list
>         Users at ovirt.org <mailto:Users at ovirt.org>
>         http://lists.ovirt.org/__mailman/listinfo/users
>         <http://lists.ovirt.org/mailman/listinfo/users>
>
>
>




More information about the Users mailing list