<div dir="ltr"><div><div>Itamar,<br></div>Nail on the head. Pretty much what I describe here is sorely needed:<br><a href="http://lists.ovirt.org/pipermail/users/2013-February/012562.html">http://lists.ovirt.org/pipermail/users/2013-February/012562.html</a><br>
<br></div>- DHC<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Mar 12, 2013 at 5:53 PM, Itamar Heim <span dir="ltr"><<a href="mailto:iheim@redhat.com" target="_blank">iheim@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On 03/12/2013 11:38 PM, Dead Horse wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Remote console access IMHO is still a very weak point in ovirt/RHEV.<br>
SPICE is a very nice protocol but IMHO is in dire need of a platform<br>
independent client and tighter integration into the user and web<br>
</blockquote>
<br></div>
tighter integration or support non integrated clients (the mime based approach which won't require the XPI/ActiveX)?<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
portals. Something I have done to workaround issues like these is to<br>
disable spice certificate checking and SSL.<br>
<br>
psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' where option_name = 'SSLEnabled'"<br>
psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' where option_name = '<u></u>UseSecureConnectionWithServers<u></u>'"<br>
psql engine -U postgres -c "UPDATE vdc_options set option_value = 'false' where option_name ='<u></u>EnableSpiceRootCertificateVali<u></u>dation'<br>
<br>
- DHC<br>
<br>
<br>
<br>
On Fri, Mar 8, 2013 at 10:22 AM, Michal Skrivanek<br></div><div><div class="h5">
<<a href="mailto:michal.skrivanek@redhat.com" target="_blank">michal.skrivanek@redhat.com</a> <mailto:<a href="mailto:michal.skrivanek@redhat.com" target="_blank">michal.skrivanek@<u></u>redhat.com</a>>> wrote:<br>
<br>
<br>
On 8 Mar 2013, at 15:51, Karli Sjöberg wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
tor 2013-03-07 klockan 13:52 +0100 skrev David Jaša:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi,<br>
<br>
Karli Sjöberg píše v Čt 07. 03. 2013 v 10:01 +0000:<br>
> Hi, it me again,<br>
><br>
> the last time this was discussed, the problem seemed to be centred<br>
> around Win/IE, but since patching to:<br>
> # rpm -qa | grep ovirt<br>
> ovirt-engine-config-3.1.0-4.<u></u>fc17.noarch<br>
> ovirt-engine-dbscripts-3.1.0-<u></u>4.fc17.noarch<br>
> ovirt-log-collector-3.1.0-0.<u></u>git10d719.fc17.noarch<br>
> ovirt-engine-restapi-3.1.0-4.<u></u>fc17.noarch<br>
> ovirt-image-uploader-3.1.0-0.<u></u>git9c42c8.fc17.noarch<br>
> ovirt-engine-genericapi-3.1.0-<u></u>4.fc17.noarch<br>
> ovirt-iso-uploader-3.1.0-0.<u></u>git1841d9.fc17.noarch<br>
> ovirt-engine-webadmin-portal-<u></u>3.1.0-4.fc17.noarch<br>
> ovirt-engine-setup-3.1.0-4.<u></u>fc17.noarch<br>
> ovirt-engine-sdk-3.2.0.2-1.<u></u>fc17.noarch<br>
> ovirt-engine-backend-3.1.0-4.<u></u>fc17.noarch<br>
> ovirt-engine-tools-common-3.1.<u></u>0-4.fc17.noarch<br>
> ovirt-engine-3.1.0-4.fc17.<u></u>noarch<br>
> ovirt-engine-userportal-3.1.0-<u></u>4.fc17.noarch<br>
> ovirt-engine-notification-<u></u>service-3.1.0-4.fc17.noarch<br>
><br>
> No one is able to connect to a spice console though the Userportal at<br>
> all.<br>
<br>
Looks like no one is getting host subject - again. Tomáš?<br>
</blockquote>
<br>
Come on guys, please tell me if there´s anything we can do to<br>
troubleshoot this issue, to help solve a real show-stopper for us!<br>
</blockquote>
Would you be able to try it in 3.2?<br>
It was known to be broken somewhere around 3.1 release….<br>
<br>
Thanks,<br>
michal<br>
<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">
<br>
In using oVirt, our organisation is so close to being able to ship<br>
out thin-client kiosks instead of buying expensive new HW on a<br>
yearly basis, and have our users access their desktops from<br>
practically anywhere, even from home if they´d wish. The rest of<br>
the entire system works flawlessly, just to fall flat on it´s face<br>
right on the finish line. I think that is so sad and silly,<br>
because I really love the rest of this product! We´ve set up<br>
oVirt-3.1, made a POC template, defined a pool and have been able<br>
to have them prestarted as well. But if our users aren´t able to<br>
access their console in a seamless, easy way, then what good is<br>
it? And knowing that the console works just fine from the<br>
adminportal in several different client systems (Fedora, CentOS,<br>
Win7) makes me hope that it´s just this small, yet important piece<br>
that needs to be corrected.<br>
<br>
Anxiously awaiting your response<br>
Karli Sjöberg<br>
<br>
<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div class="h5">
David<br>
<br>
> I´ve tried this from my workstation, running Fedora 17:<br>
> ==============================<u></u>==============================<u></u>====================<br>
> $ SPICEC_DEBUG_LEVEL=0 firefox<br>
> (plugin-container:18293): SpiceXPI-CRITICAL **: controller connect:<br>
> Filen eller katalogen finns inte<br>
> (plugin-container:18293): SpiceXPI-CRITICAL **: controller connect:<br>
> Filen eller katalogen finns inte<br>
> (plugin-container:18293): SpiceXPI-CRITICAL **: could not get browser<br>
> window, when trying to call OnDisconnected<br>
> ==============================<u></u>==============================<u></u>====================<br>
><br>
><br>
> Here´s a collegue of mine, running Win7/IE9:<br>
> ==============================<u></u>==============================<u></u>====================<br>
> 1362648766 INFO [7196:5208] spicex_init_logger: started<br>
> 1362648766 DEBUG [7196:5208] COSpiceX::put_DynamicMenu: DynamicMenu<br>
> 1362648766 INFO [7196:5208] COSpiceX::put_FullScreen: New FullScreen<br>
> request newVal=0xffffffff<br>
> 1362648766 DEBUG [7196:5208] COSpiceX::Connect: Running spicec (C:<br>
> \Users\jope\AppData\Local\<u></u>virt-viewer\bin\remote-viewer.<u></u>exe<br>
> --spice-controller)<br>
> 1362648766 INFO [7196:5208] COSpiceX::Connect: spicec pid 1640<br>
> 1362648766 DEBUG [7196:5208] COSpiceX::Connect: connecting to spice<br>
> client's pipe<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_init: sending init<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 1 :<br>
> str <a href="tel:130.238.96.135" value="+13023896135" target="_blank">130.238.96.135</a> (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id 2<br>
> value 5906<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id 3<br>
> value 5907<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending password<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 11 :<br>
> str IT-Avdelningen-1:%d - Press SHIFT+F12 to Release Cursor (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_value: sending msg id 10<br>
> value 1<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 14 :<br>
> str release-cursor=shift+f12,<u></u>toggle-fullscreen=shift+f11 (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 5 :<br>
> str main,inputs,scursor,splayback,<u></u>srecord,sdisplay (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 7 :<br>
> str DEFAULT (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_wstr: sending msg id 8 :<br>
> str C:\Users\jope\AppData\Local\<u></u>Temp\truststore.pem (1)<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_msg: sending msg id 16<br>
> 1362648767 DEBUG [7196:5208] COSpiceX::send_msg: sending msg id 17<br>
> 1362648767 INFO [7196:5208] COSpiceX::ExecuteUsbCtrl: USB sharing is<br>
> not requested<br>
> 1362648771 INFO [7196:7480] COSpiceX::event_thread: exit_code=0<br>
> error_code=1<br>
> ==============================<u></u>==============================<u></u>====================<br>
><br>
><br>
> And another collegue running CentOS-6.3/Firefox:<br>
> ==============================<u></u>==============================<u></u>====================<br>
> 2013-03-07 09:42:41,651 DEBUG nsPluginInstance::SetHostIP:<br>
> <a href="tel:130.238.96.132" value="+13023896132" target="_blank">130.238.96.132</a><br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetPort: 5900<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetTitle:<br>
> IT-Avdelningen-2:%d - Press SHIFT+F12 to Release Cursor<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::<u></u>SetDynamicMenu:<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::<u></u>SetFullScreen: 1<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::SetPassword: Password<br>
> set<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::<u></u>SetNumberOfMonitors: 1<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::<u></u>SetUsbListenPort: 0<br>
> 2013-03-07 09:42:41,652 DEBUG nsPluginInstance::<u></u>SetAdminConsole: 1<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetSecurePort: 5901<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetSSLChannels:<br>
> original channels: smain,sinputs,scursor,<u></u>splayback,srecord,sdisplay<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetSSLChannels:<br>
> modified channels: main,inputs,cursor,playback,<u></u>record,display<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetGuestHostName:<br>
> IT-Avdelningen-2<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetCipherSuite:<br>
> DEFAULT<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetTrustStore:<br>
> Certificate:<br>
> Data:<br>
> Version: 3 (0x2)<br>
> Serial Number: 15 (0xf)<br>
> Signature Algorithm: sha1WithRSAEncryption<br>
> Issuer: C=US, O=SLU, CN=CA-storm.slu.se.80985<br>
> Validity<br>
> Not Before: Sep 26 14:21:06 2012<br>
> Not After : Sep 25 12:21:06 2022 GMT<br>
> Subject: C=US, O=SLU, CN=CA-storm.slu.se.80985<br>
> Subject Public Key Info:<br>
> Public Key Algorithm: rsaEncryption<br>
> Public-Key: (1024 bit)<br>
> Modulus:<br>
> 00:a2:94:89:18:26:79:49:6b:c6:<u></u>28:6c:f2:95:e9:<br>
> a7:71:00:22:c6:79:c2:9e:10:63:<u></u>ef:34:5c:ab:62:<br>
> 36:a0:7a:84:d0:79:77:4c:9d:3d:<u></u>39:8f:97:93:c5:<br>
> f6:fb:5b:0b:f8:9b:ad:d8:53:2d:<u></u>a6:b6:03:45:d4:<br>
> 76:45:f1:af:99:42:74:07:4c:48:<u></u>7d:28:96:31:9e:<br>
> 88:cf:90:d9:e7:d9:cf:55:a8:bd:<u></u>37:a0:8f:f1:26:<br>
> 89:a9:ab:64:78:a4:02:60:9b:3a:<u></u>a7:07:db:6e:75:<br>
> 32:e5:8f:51:7f:50:02:15:d8:c8:<u></u>7b:68:c1:54:e1:<br>
> 9f:c2:d2:cf:53:c3:58:b3:15<br>
> Exponent: 65537 (0x10001)<br>
> X509v3 extensions:<br>
> X509v3 Subject Key Identifier:<br>
><br>
> FE:8F:57:F1:A0:AF:45:36:9F:AC:<u></u>C9:6B:EE:F9:D1:3E:18:78:B9:EA<br>
> Authority Information Access:<br></div></div>
> CA Issuers - URI:<a href="http://storm.slu.se:80/ca.crt" target="_blank">http://storm.slu.se:80/ca.<u></u>crt</a> <<a href="http://storm.slu.se/ca.crt" target="_blank">http://storm.slu.se/ca.crt</a>><div>
<div class="h5"><br>
><br>
> X509v3 Authority Key Identifier:<br>
><br>
> keyid:FE:8F:57:F1:A0:AF:45:46:<u></u>9F:NC:C9:6B:EE:F9:D1:3E:18:78:<u></u>B9:EA<br>
> DirName:/C=US/O=SLU/CN=CA-<u></u>storm.slu.se.80985<br>
> serial:0F<br>
><br>
> X509v3 Basic Constraints: critical<br>
> CA:TRUE<br>
> X509v3 Key Usage: critical<br>
> Certificate Sign, CRL Sign<br>
> Signature Algorithm: sha1WithRSAEncryption<br>
> 45:e4:15:23:fa:55:78:89:24:66:<u></u>7c:e2:33:41:ea:98:00:12:<br>
> 0c:25:e5:e6:3a:c7:f8:f9:4d:83:<u></u>47:d3:80:9b:c0:78:bc:ab:<br>
> 61:ae:6d:a1:cf:43:cb:cb:31:2c:<u></u>94:72:21:b0:58:f0:8b:69:<br>
> 0d:c4:73:f2:44:95:52:06:23:6c:<u></u>71:7a:9b:fc:5f:98:21:35:<br>
> 26:e1:a3:bb:65:bb:d2:81:bb:48:<u></u>96:99:b7:04:e6:15:af:93:<br>
> a1:60:e4:bf:05:d3:b0:4b:e4:e2:<u></u>4b:21:82:d7:2b:3d:19:ef:<br>
> a4:5a:23:58:74:ef:1a:80:14:8b:<u></u>89:b2:a7:bd:c2:21:66:1f:<br>
> e0:7e<br>
> -----BEGIN CERTIFICATE-----<br>
> MIIC1DCCAj2gAwIBAgIBDzANBgkqhk<u></u>iG9w0BAQUFADA7MQswCQYDVQQGEwJV<u></u>UzEM<br>
> MAoGA1UEChMDU0xVMR4wHAYDVQQDEx<u></u>VDQS1zdG9ybS5zbHUuc2UuODA5ODUw<u></u>IhcR<br>
> MTIwOTI2MTQyMTA2LTAxMDAXDTIyMD<u></u>kyNTEyMjEwNlowOzELMAkGA1UEBhMC<u></u>VVMx<br>
> DDAKBgNVBAoTA1NMVTEeMBwGA1UEAx<u></u>MVQ0Etc3Rvcm0uc2x1LnNlLjgwOTg1<u></u>MIGf<br>
> MA0GCSqGSIb3DQEBAQUAA4GNADCBiQ<u></u>KBgQCilIkYJnlJa8YobPKV6adxACLG<u></u>ecKe<br>
> EGPvNFyrYjageoTQeXdMnT05j5eTxf<u></u>b7Wwv4m63YUy2mtgNF1HZF8a+<u></u>ZQnQHTEh9<br>
> KJYxnojPkNnn2c9WqL03oI/<u></u>xJompq2R4pAJgmzqnB9tudTLlj1F/<u></u>UAIV2Mh7aMFU<br>
> 4Z/<u></u>C0s9Tw1izFQIDAQABo4HjMIHgMB0GA<u></u>1UdDgQWBBT+j1fxoK9FRp+syWvu+<u></u>dE+<br>
> GHi56jA5BggrBgEFBQcBAQQtMCswKQ<u></u>YIKwYBBQUHMAKGHWh0dHA6Ly9zdG9y<u></u>bS5z<br>
> bHUuc2U6ODAvY2EuY3J0MGMGA1UdIR<u></u>cMFqAFP6PV/Ggr0VGn6zJa+<u></u>750T4YeLnq<br>
> oT+<u></u>kPTA7MQswCQYDVQQGEwJVUzEMMAoGA<u></u>1UEChMDU0xVMR4wHAYDVQQDExVDQS1<u></u>z<br>
> dG9ybS5zbHUuc2UuODA5ODWCAQ8wDw<u></u>YDVR0TAQH/BAUwAwEB/<u></u>zAOBgNVHQ8BAf8E<br>
> BAMCAQYwDQYJKoZIhvcNAQEFBQADgY<u></u>EAReQVI/<u></u>pVeIkkZnziM0HqmAASDCXl5jrH<br>
> +<u></u>PlNg0fTgJvAeLyrYa5toc9Dy8sxLJR<u></u>yIbBY8ItpDcRz8kSVUgYjbHF6m/<u></u>xfmCE1<br>
> JuGju2W70oG7SGaZtwTmFa+<u></u>ToWDkvwXTsEvk4kshgtcrPRnvpFojW<u></u>HTvGoAUi4my<br>
> p73CIWYf4H4=<br>
> -----END CERTIFICATE-----<br>
><br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::SetHotKeys:<br>
> release-cursor=shift+f12,<u></u>toggle-fullscreen=shift+f11<br>
> 2013-03-07 09:42:41,653 DEBUG nsPluginInstance::<u></u>SetNoTaskMgrExecution:<br>
> 0<br>
> 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::<u></u>SetSendCtrlAltDelete:<br>
> 0<br>
> 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::<u></u>SetUsbAutoShare: 1<br>
> 2013-03-07 09:42:41,654 DEBUG nsPluginInstance::<u></u>SetUsbFilter:<br>
> -1,60186,10000,256,1|-1,1118,<u></u>245,-1,1|-1,1133,2245,-1,1|-1,<u></u>1133,2242,5,1|8,-1,-1,-1,1|7,-<u></u>1,-1,-1,1|-1,-1,-1,-1,0<br>
> 2013-03-07 09:42:41,654 INFO nsPluginInstance::Connect:<br>
> SPICE_XPI_SOCKET: /tmp/spicec-scQYmJ/spice-xpi<br>
> 2013-03-07 09:42:41,654 INFO nsPluginInstance::Connect:<br>
> SPICE_FOREIGN_MENU_SOCKET: /tmp/spicec-scQYmJ/spice-<u></u>foreign<br>
> 2013-03-07 09:42:41,655 DEBUG nsPluginInstance::Connect: Controller<br>
> pid: 10340<br>
> 2013-03-07 09:42:41,655 DEBUG QErrorHandler: Something went wrong:<br>
> connect error, 2<br>
> 2013-03-07 09:42:41,655 DEBUG SpiceController::Connect: Connect Error<br>
> 2013-03-07 09:42:41,655 DEBUG QErrorHandler: Something went wrong:<br>
> connect error, 2<br>
> 2013-03-07 09:42:41,655 DEBUG SpiceController::Connect: Connect Error<br>
> 2013-03-07 09:42:41,655 INFO nsPluginInstance::Connect:<br>
> Launching /usr/libexec/spice-xpi-client<br>
> 2013-03-07 09:42:42,655 DEBUG SpiceController::Connect: Connected!<br>
> 2013-03-07 09:42:44,723 INFO nsPluginInstance::Connect: Initiating<br>
> connection with controller<br>
> 2013-03-07 09:42:48,652 DEBUG nsPluginInstance::<u></u>ControllerWaitHelper:<br>
> Controller finished, pid: 10340, exit code: 0<br>
> 2013-03-07 09:42:48,653 ERROR nsPluginInstance::<u></u>CallOnDisconnected:<br>
> could not get browser window, when trying to call OnDisconnected<br>
> ==============================<u></u>==============================<u></u>====================<br>
><br>
><br>
> If there´s anything we can do to help resolve this issue once and for<br>
> all, just name it! It so hurts to see this otherwise great product<br>
> tripping over on it´s face so close to the finish line:(<br>
><br>
> Best Regards<br>
> Karli Sjöberg<br>
> ______________________________<u></u>_________________<br>
> Users mailing list<br></div></div>
><a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>><br>
><a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a><br>
<br>
</blockquote>
<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a><br>
</blockquote>
<br>
<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a> <mailto:<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>><div class="im"><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a><br>
<br>
<br>
<br>
<br>
______________________________<u></u>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/<u></u>mailman/listinfo/users</a><br>
<br>
</div></blockquote>
<br>
</blockquote></div><br></div>