[Users] SSO from user portal to Windows 7 guest
Itamar Heim
iheim at redhat.com
Thu Feb 20 07:15:11 UTC 2014
On 02/20/2014 07:31 AM, simon wrote:
> > On February 18, 2014 at 4:47 PM Itamar Heim <iheim at redhat.com> wrote:
> >
> > On 02/18/2014 06:59 PM, SimmInfo wrote:
> > > Yes, I make my tests from user portal.
> > >
> > > Envoyé de mon iPad
> > >
> > >> Le 2014-02-18 à 09:14, Itamar Heim <iheim at redhat.com> a écrit :
> > >>
> > >>> On 02/18/2014 03:36 PM, SimmInfo wrote:
> > >>> Ok,
> > >>>
> > >>> I tested it on a 3.4 beta2. Build a VM (win7 32) check "Guest
> agent" as SSO option in vm config.
> > >>>
> > >>> Same result as the 3.3.3 engine. No sso but lock screen on spice
> session termination.
> > >>>
> > >>> Nothing in engine.log about VmLogon nor Guest agent reportion to
> the engine but Admin portal populated with vm ip, user connected, ip of
> the connected user (very useful info), installed app, etc.
> > >>>
> > >>> Is there another way to know if the agent is correctly reporting
> to the engine?
> > >>>
> > >>> Will test today with a fedora host.
> > >>
> > >> just to make sure - did you notice the important point of SSO only
> works if you login from the user portal, not from the webadmin?
> > >>
> > >>>
> > >>> Thanks!
> > >>>
> > >>> My test config :
> > >>>
> > >>> Engine 3.4 beta2 on CentOS 6.5
> > >>> Node CentOS 6.5 with vdsm from prerelease repo.
> > >>> Storage iscsi
> > >>>
> > >>>
> > >>>> Le 2014-02-17 à 04:24, Frantisek Kobzik <fkobzik at redhat.com> a
> écrit :
> > >>>>
> > >>>> Yes, that's a valid point (however it _should_ be set to 'Guest
> Agent' by default).
> > >>>>
> > >>>> To sum it up, SSO should happen (on the engine side) if all
> these conditions are true:
> > >>>> - user is connecting via userportal (not webadmin),
> > >>>> - guest agent presence is reported to engine,
> > >>>> - state of VM is strictly "Up"
> > >>>> - VM has SSO method set to "Guest agent" (Itamar's mail).
> > >>>>
> > >>>> If these conditions are fulfilled and SSO still doesn't work,
> there must be something wrong with the engine (or with reporting GA
> presence).
> > >>>>
> > >>>> Also VmLogon command should print some information to engine's
> log - could you take a look?
> > >>>>
> > >>>> Cheers,
> > >>>> Franta.
> > >>>>
> > >>>>
> > >>>> ----- Original Message -----
> > >>>> From: "Itamar Heim" <iheim at redhat.com>
> > >>>> To: "SimmInfo" <simon at simminfo.com>, users at ovirt.org, "Frantisek
> Kobzik" <fkobzik at redhat.com>
> > >>>> Sent: Monday, February 17, 2014 3:35:08 AM
> > >>>> Subject: Re: [Users] SSO from user portal to Windows 7 guest
> > >>>>
> > >>>>> On 02/15/2014 07:51 AM, SimmInfo wrote:
> > >>>>> Ok, after more investigation on agent logs and some code
> modification it seem that the agent is receiving commands from virtio
> device. As it should. I have seen commands lock-screen, shutdown, etc...
> But not the "login" command. Look like engine trouble... I will do more
> testing tomorrow.
> > >>>>>
> > >>>>> Simon
> > >>>>> _______________________________________________
> > >>>>> Users mailing list
> > >>>>> Users at ovirt.org
> > >>>>> http://lists.ovirt.org/mailman/listinfo/users
> > >>>>
> > >>>> make sure it is enabled for the VM?
> > >>>>
> > >>>> commit abd645d5af8a5e4f7986bef00f470171a63be823
> > >>>> Author: Frantisek Kobzik <fkobzik at redhat.com>
> > >>>> Date: Tue Nov 26 11:16:26 2013 +0100
> > >>>>
> > >>>> frontend: Allow enabling/disabling SSO
> > >>>>
> > >>>> This small feature allows controlling SSO per VM.
> > >>>> Changes:
> > >>>> - new radio buttons in New/Edit VM/Template/VmPool dialog.
> > >>>>
> > >>>> Change-Id: I213110a1554cd67b6cd8560477b5d7551e89f24e
> > >>>> Signed-off-by: Frantisek Kobzik <fkobzik at redhat.com>
> > >>>> Bug-Url: https://bugzilla.redhat.com/1035279
> > >>
> >
> > engine log?
> Get no time for testing with fedora guest but there is some log output
> of the connection to the vm from user portal :
> I've noticed that error : *Error in finding LDAP servers for domain
> rstemis.reg01.rtss.qc.ca using user levsim01 at CSSSBASQUES.REG01.RTSS.QC.CA*
> This domain : *rstemis.reg01.rtss.qc.ca* is not my domain but another
> domain member of the same forest...
> 2014-02-20 00:02:47,721 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (org.ovirt.thread.pool-6-thread-40) [63705695] Correlation ID: 63705695,
> Job ID: bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom
> Event ID: -1, Message: VM test was started by admin (Host:
> csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca).
> 2014-02-20 00:02:50,795 INFO
> [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
> (DefaultQuartzScheduler_Worker-47) VM test
> 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from WaitForLaunch -->
> PoweringUp
> 2014-02-20 00:02:50,804 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand]
> (DefaultQuartzScheduler_Worker-47) START, FullListVdsCommand(HostName =
> csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =
> 0e900351-de49-4646-a4b1-394343e32f81,
> vds=Host[csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca],
> vmIds=[8bf43efc-9424-4ffd-b5c6-1c92623267ea]), log id: 4714a293
> 2014-02-20 00:02:50,813 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.FullListVdsCommand]
> (DefaultQuartzScheduler_Worker-47) FINISH, FullListVdsCommand, return:
> [Ljava.util.HashMap;@1bbd855a, log id: 4714a293
> 2014-02-20 00:02:50,815 INFO
> [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
> (DefaultQuartzScheduler_Worker-47) Received a console Device without an
> address when processing VM 8bf43efc-9424-4ffd-b5c6-1c92623267ea devices,
> skipping device: {alias=console0, specParams={}, device=console,
> type=console, deviceId=dd007a77-cbf1-4c58-9cea-39427e770d5d}
> 2014-02-20 00:03:48,442 INFO
> [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
> (DefaultQuartzScheduler_Worker-44) VM test
> 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from PoweringUp --> Up
> 2014-02-20 00:03:48,449 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler_Worker-44) Correlation ID: 63705695, Job ID:
> bba86395-6eaa-4539-9557-2a0ba45b161c, Call Stack: null, Custom Event ID:
> -1, Message: VM test started on Host
> csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca
> 2014-02-20 00:03:59,757 WARN
> [org.ovirt.engine.core.bll.GetConfigurationValueQuery]
> (ajp--127.0.0.1-8702-2) calling GetConfigurationValueQuery
> (UserMessageOfTheDay) with null version, using default general for version
> 2014-02-20 00:04:21,710 INFO
> [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
> (DefaultQuartzScheduler_Worker-99) VM test
> 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from Up --> RebootInProgress
> 2014-02-20 00:05:01,101 INFO
> [org.ovirt.engine.core.vdsbroker.VdsUpdateRunTimeInfo]
> (DefaultQuartzScheduler_Worker-66) VM test
> 8bf43efc-9424-4ffd-b5c6-1c92623267ea moved from RebootInProgress --> Up
> 2014-02-20 00:05:31,126 ERROR
> [org.ovirt.engine.core.bll.adbroker.DirectorySearcher]
> (ajp--127.0.0.1-8702-5) Error in finding LDAP servers for domain
> rstemis.reg01.rtss.qc.ca using user levsim01 at CSSSBASQUES.REG01.RTSS.QC.CA
> 2014-02-20 00:05:31,593 INFO
> [org.ovirt.engine.core.bll.LoginUserCommand] (ajp--127.0.0.1-8702-5)
> Running command: LoginUserCommand internal: false.
> 2014-02-20 00:05:31,600 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-5) Correlation ID: null, Call Stack: null, Custom
> Event ID: -1, Message: User levsim01 logged in.
> 2014-02-20 00:05:34,780 INFO
> [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-5)
> [6916f2f] Running command: SetVmTicketCommand internal: false. Entities
> affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM
> 2014-02-20 00:05:34,787 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-5) [6916f2f] START, SetVmTicketVDSCommand(HostName
> = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =
> 0e900351-de49-4646-a4b1-394343e32f81,
> vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=y5bNXmtoILn7,
> validTime=120,m userName=levsim01,
> userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: 44ef4679
> 2014-02-20 00:05:34,806 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-5) [6916f2f] FINISH, SetVmTicketVDSCommand, log id:
> 44ef4679
> 2014-02-20 00:05:34,813 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-5) [6916f2f] Correlation ID: 6916f2f, Call Stack:
> null, Custom Event ID: -1, Message: user levsim01 initiated console
> session for VM test
> 2014-02-20 00:05:49,829 INFO
> [org.ovirt.engine.core.bll.SetVmTicketCommand] (ajp--127.0.0.1-8702-4)
> [50148fc] Running command: SetVmTicketCommand internal: false. Entities
> affected : ID: 8bf43efc-9424-4ffd-b5c6-1c92623267ea Type: VM
> 2014-02-20 00:05:49,832 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-4) [50148fc] START, SetVmTicketVDSCommand(HostName
> = csl01basqu0vh01.csssbasques.reg01.rtss.qc.ca, HostId =
> 0e900351-de49-4646-a4b1-394343e32f81,
> vmId=8bf43efc-9424-4ffd-b5c6-1c92623267ea, ticket=thO14QusWk0w,
> validTime=120,m userName=levsim01,
> userId=4643e1c0-bd18-493c-8c51-a342802168b0), log id: b7b1cf
> 2014-02-20 00:05:49,849 INFO
> [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand]
> (ajp--127.0.0.1-8702-4) [50148fc] FINISH, SetVmTicketVDSCommand, log id:
> b7b1cf
> 2014-02-20 00:05:49,862 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (ajp--127.0.0.1-8702-4) [50148fc] Correlation ID: 50148fc, Call Stack:
> null, Custom Event ID: -1, Message: user levsim01 initiated console
> session for VM test
> 2014-02-20 00:05:52,547 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler_Worker-59) Correlation ID: null, Call Stack:
> null, Custom Event ID: -1, Message: User
> levsim01 at csssbasques.reg01.rtss.qc.ca is connected to VM test.
> 2014-02-20 00:06:07,732 INFO
> [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector]
> (DefaultQuartzScheduler_Worker-81) Correlation ID: null, Call Stack:
> null, Custom Event ID: -1, Message: User
> levsim01 at csssbasques.reg01.rtss.qc.ca got disconnected from VM test.
> Also, i get this error each hour :
> 2014-02-19 23:46:15,522 ERROR
> [org.ovirt.engine.core.utils.timer.SchedulerUtilQuartzImpl]
> (DefaultQuartzScheduler_Worker-37) Failed to invoke scheduled method
> refreshAllUsers: java.lang.reflect.InvocationTargetException
> at sun.reflect.GeneratedMethodAccessor175.invoke(Unknown Source)
> [:1.7.0_51]
> at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> [rt.jar:1.7.0_51]
> at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_51]
> at
> org.ovirt.engine.core.utils.timer.JobWrapper.execute(JobWrapper.java:60)
> [scheduler.jar:]
> at org.quartz.core.JobRunShell.run(JobRunShell.java:213) [quartz.jar:]
> at
> org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:557)
> [quartz.jar:]
> Caused by: java.lang.NullPointerException
> at
> org.ovirt.engine.core.bll.DbUserCacheManager.refreshUser(DbUserCacheManager.java:220)
> [bll.jar:]
> at
> org.ovirt.engine.core.bll.DbUserCacheManager.refreshUsers(DbUserCacheManager.java:137)
> [bll.jar:]
> at
> org.ovirt.engine.core.bll.DbUserCacheManager.refreshAllUsers(DbUserCacheManager.java:92)
> [bll.jar:]
> ... 6 more
> Somthing wrong with my directory config?
> Thanks
yair?
More information about the Users
mailing list