[ovirt-users] remote-viewer from admin vs user portal

[Gianluca Cecchi]

On Mon, Nov 21, 2016 at 9:26 AM, Tomas Jelinek <tjelinek at redhat.com> wrote:

>
> >
> > $ diff user_portal.txt admin_portal.txt
> > 5c5
> > < password=USuJCbk3UhzK
> > ---
> > > password=4ZAr/w23pFPV
> > 16c16
> > <
> > usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,224
> 5,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
> > ---
> > > usb-filter=-1,-1,-1,-1,0
>
> This is not related but looks like a bug. Could you please open a bug
> against user portal with the fact the usb-filter is not filled in user
> portal?
>

Hello, sorry for the late answer. I was busy on other things
But I have to fill bug against user portal or web admin portal?
Because the situation is this
[root at ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv |
grep usb
<
usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
> usb-filter=-1,-1,-1,-1,0
[root at ope46 g.cecchi]#

So it seems the admin portal the one with all "-1".....
What do you mean with "not filled"? Perhaps it is this I don't understand.



>
> > 19a20
> > > proxy= http://192.168.1.215:3128/
> > 27c28
>
> This looks like the most interesting difference. Where do you have your
> spice proxy defined? I guess on cluster.
> I have a suspicion that there is a bug that when the user does not have
> access to the cluster (e.g. basic user)
> than it can not see the spice proxy.
>
> Could you please try to connect to the console from user portal using an
> admin user and check if the
> proxy is filled correctly?
>
>
I have this configured at engine level:

[root at ovirt ~]# engine-config -g SpiceProxyDefault
SpiceProxyDefault: http://192.168.1.215:3128/ version: general
[root at ovirt ~]#

I just tried now from a Fedora 24 client and the full difference for the
.vv files is this:

[root at ope46 g.cecchi]# diff console_userportal.vv console_adminportal.vv
5c5
< password=VykX40qEKrXN
---
> password=/dT1qiHNTZIk
16c16
<
usb-filter=-1,60186,10000,256,1|-1,1118,245,-1,1|-1,1133,2245,-1,1|-1,1133,2242,5,1|8,-1,-1,-1,1|7,-1,-1,-1,1|-1,-1,-1,-1,0
---
> usb-filter=-1,-1,-1,-1,0
28c28
<
sso-token=Hbb-_gd8Apsw7qdjfjWivONAodYIzyM2zozEpmD2YHZX3m7mgTeu8zlhOnJbHZ-RVA8JkuNc1fSnS-g8JePeGA
---
>
sso-token=EGYM496UMVtAzdukJH8ipN584Hyrfz34QpfAN15DqETtBsZ4n59ptj8LrVpiH8g40qXr0jL9sscaGklPqkMa3w
[root at ope46 g.cecchi]#

so the proxy line seems populated in both the portals...

Initially I got 11 TCP connections to proxy ip
After about 18 minutes I see that they are only 4 in ESTABLISHED state, the
other ones are CLOSE_WAIT

[root at ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort |
uniq -c ; date
      7 192.168.1.215:3128 CLOSE_WAIT
      4 192.168.1.215:3128 ESTABLISHED
[root at ope46 ~]#
And the console still works

After about 4 hours

 [root at ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort
| uniq -c ; date
      2 192.168.1.215:3128 ESTABLISHED

remote-viewer app itself seems to work (I can select menu options) bit I
have black screen without being able to interact.
Also switching to full screen I only have black screen

The same with user portal...
After 24 minutes

[root at ope46 ~]# netstat -tpn|grep 215:3128 | awk '{print $5" "$6}' | sort |
uniq -c ; date
      9 192.168.1.215:3128 CLOSE_WAIT
      2 192.168.1.215:3128 ESTABLISHED

and console session hung....




> > <
> > sso-token=f5PtHwvwE6erjVBfGpaLeUWmD9iEOeM3OXzAAocXDz4VQ-uYNs
> TUt1x9NXohbCalxFUw947sZfzZyvfevTEaBA
> > ---
> > > sso-token=pFNiF5viL6jiu9FZIdeEsvD74eA2OuPGjzZTFa_IfPoGXFMRkQ
> STmrGTB0J5lbTJ6Na_rKkGVMExxUsneLfhzw
> >
>
> The strange thing is also that there is no difference between the
> admin=1 in webadmin vs admin=0 for user portal.
>
> So, long story short, are you using the same user to test this from
> webadmin/userportal?
> If not, could you please try to connect from user portal with the same
> user as from webadmin and check if the
> diff between the two .vv files is smaller?
>
>
Yes, the user was the same. I gave admin PowerUserRole on the VM so to be
able to connect as admin also in User Portal.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20161201/2e0f30ce/attachment-0001.html>