<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Jul 15, 2016, at 11:50 AM, Tadas <<a href="mailto:tadas@ring.lt" class="">tadas@ring.lt</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello,<br class="">i'm struggling to get oVirt SSO working on Linux guest VM.<br class="">I can confirm, that SSO is fully functional on Windows guest (please<br class="">note it's not a full oVirt installation - I'm just testing oVirt guest<br class="">agent on virtual machines running on plain KVM hypervisor).<br class=""><br class="">Steps I've made:<br class="">got oVirt guest agent up and running, I can communicate with it from<br class="">hypervisor:<br class=""><br class="">socat /var/lib/libvirt/qemu/channel/target/domain-80-KDE64_1/com.kvm-<br class="">vdi.0 -<br class="">{"__name__": "os-version", "version": "4.6.0-1-amd64"}<br class="">Compiled and copied pam_ovirt_cred.so to /lib/x86_64-linux-gnu/security<br class=""><br class="">Configured /etc/pam.d/kdm-ovirt-cred with:<br class=""><br class="">%PAM-1.0<br class="">auth required pam_ovirt_cred.so<br class="">auth include password-auth<br class="">account include password-auth<br class="">password include password-auth<br class="">session required pam_selinux.so close<br class="">session required pam_selinux.so open<br class="">session include password-auth<br class=""><br class="">Compiled and copied kgreet_ovirtcred.so to /usr/lib/kde4<br class=""><br class="">Configured /etc/kde4/kdm/kdmrc with:<br class=""><br class="">PluginsLogin=ovirtcred<br class=""></div></div></blockquote><div><br class=""></div><div>you should just add ovirtcred and not remove all the other options, without the other options you’re not able to login</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Symptoms:<br class="">After starting kdm, I get login prompt with barely visible title (I<br class="">assume it should spell "oVirt Authentication" from<br class="">kgreet_ovirtcred.cpp). Username and password boxes are inactive - i<br class="">cannot enter anything to them. After emitting username/password to<br class="">oVirt agent, I can see the following log entries:<br class=""><br class="">Dummy-1::INFO::2016-07-15 12:29:51,628::CredServer::207::root::The<br class="">following users are allowed to connect: [0]<br class="">Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::273::root::Opening<br class="">credentials channel...<br class="">Dummy-1::INFO::2016-07-15 12:29:51,629::CredServer::132::root::Emitting<br class="">user authenticated signal (509542).<br class="">CredChannel::INFO::2016-07-15<br class="">12:29:56,634::CredServer::241::root::Credentials channel timed out.<br class=""><br class="">The only thing that worries me, - are the entries in kdm.log file:<br class=""><br class="">klauncher(6100) kdemain: No DBUS session-bus found. Check if you have<br class="">started the DBUS server. <br class=""></div></div></blockquote><div><br class=""></div><div>To me it looks like that you’re missing </div><div><a href="https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-guest-agent/org.ovirt.vdsm.Credentials.conf" class="">https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-guest-agent/org.ovirt.vdsm.Credentials.conf</a></div><div><br class=""></div><div><br class=""></div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Since oVirt guest agent sends wakeup message to greeter plugin via<br class="">Dbus, perhaps this is the problem? Maybe someone had the same problem<br class="">here?<br class="">This happens on Debian 8 and 9.<br class=""></div></div></blockquote><div><br class=""></div><div><br class=""></div><div>However the KDM support is basically not really developed anymore as the majority of our users are rather using GDM. So there’s quite the possibility that there’s a problem.</div><br class=""><blockquote type="cite" class=""><div class=""><div class=""><br class="">Thank you.<br class=""><br class=""><br class="">_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class="">http://lists.ovirt.org/mailman/listinfo/users<br class=""></div></div></blockquote></div><br class=""></body></html>