[ovirt-users] autologin into vm desktop

[Adolfo]

Yap, that the solution i was thinking about as "last resort".

We have direct connection to engine, and currently we get connection 
parameters as this (after initializing connection, etc...):


             display = vm.get_display()
             ticket = vm.ticket().get_ticket()
             return {
                 'type': display.get_type(),
                 'address': display.get_address(),
                 'port': display.get_port(),
                 'secure_port': display.get_secure_port(),
                 'monitors': display.get_monitors(),
                 'cert_subject': display.get_certificate().get_subject(),
                 'ticket': {
                     'value': ticket.get_value(),
                     'expiry': ticket.get_expiry()
                 }

So we get all we need to connect. (we replace with returned data the 
".vv" file created by oVirt admin on connect, and it works). Don't know 
exactly right now how to use vdsClient code for this, but i have already 
seen that it uses xmlrcp, so maybe, i can "invoke" the desktopLogin 
command using directly xmlrpc... will see

We will make some tests on this, and let's see what happens

Thank you very much for your help ;)

Adolfo Gómez

El 07/05/2015 a las 4:55, Dan Yasny escribió:
> You can pass the credentials directly to the guest agent using 
> vdsClient on the host, among other things:
>
> desktopLock
>         <vmId>
>         Logoff current user
> desktopLogin
>         <vmId> <domain> <user> <password>
>         Login to vmId desktop using the supplied credentials
> desktopLogoff
>         <vmId> <force>
>         Lock user session. force should be set to true/false
>
> Will probably require key based remote ssh execution, and API calls to 
> the engine, to determine the host and VM UUID
>
> On Wed, May 6, 2015 at 10:45 PM, Adolfo <agomez at virtualcable.es 
> <mailto:agomez at virtualcable.es>> wrote:
>
>     I know, but this all is used from "ovirt portal", and we are only
>     using ovirt api, the portal is provided by own broker :)
>
>     I'm currently looking at the code of vdsClient, to see if i can
>     replicate the "desktopLogin" feature.
>
>     This was why i was wondering if this is the place to post this,
>     because it's more related to "development", but not to de
>     development of ovirt itself (or yes, don't know right now... :) )
>
>     Thank you
>
>     Adolfo Gómez
>
>
>
>     El 07/05/2015 a las 4:40, Dan Yasny escribió:
>>     This is exactly what the SSO feature is for.
>>
>>     http://www.ovirt.org/Features/SSO
>>     http://www.ovirt.org/OVirt_Guest_Agent/Single_Sign_On/Windows
>>     https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.1/html/Power_User_Portal_Guide/Single_Sign_On-Windows.html
>>
>>
>>
>>     On Wed, May 6, 2015 at 10:24 PM, Adolfo <agomez at virtualcable.es
>>     <mailto:agomez at virtualcable.es>> wrote:
>>
>>         Hello,
>>
>>         My name is Adolfo. I'm in charge of the development of UDS,
>>         an open source connection broker (with commercial support if
>>         requested)
>>         (http://www.ovirt.org/Universidad_de_Sevilla_Case_Study is
>>         done with it for example).
>>
>>         I don't know if this is the place to post this "request for
>>         help", if not, please forgive me :)
>>
>>         The case is that we are including Spice as an accepted
>>         protocol for connecting to VMs (currently we allow rdp, rgs,
>>         nx, ...) provided by oVirt, and we have found the following
>>         "issue".
>>
>>         It's ease to get the connection parameters for the VM using
>>         REST api, even get the ticket for allowing connection, but i
>>         have been looking for a way "logging user" directly into
>>         desktop, not only connect to "display" but also "log in" into
>>         remote without needed to use a second authentication.
>>
>>         I have seen that oVirt Portal currently allows this, and i
>>         have found also that vsdClient can do login using "vdsClient
>>         -s <HOSTIP> desktopLogin <VMID> <DOMAIN> <USER> <PASSWORD>",
>>         and although it is possible to use this, it will be a bit
>>         "tricky" to get it working i think.
>>
>>         My question is... ¿Is any way of doing "desktop login" using
>>         REST API, or any other "simple method" from an external app
>>         such as this broker?.
>>
>>         ¿If yes, how? :-)
>>         ¿If not, will be support for this an anyone knows how?
>>
>>         Thank you, and again, if this is not the correct list, sorry
>>         for the annoyance.
>>
>>         Adolfo Gómez
>>
>>         _______________________________________________
>>         Users mailing list
>>         Users at ovirt.org <mailto:Users at ovirt.org>
>>         http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20150507/4fc26b25/attachment-0001.html>