[ovirt-users] EVENT_ID not generated for VM Reboot

[Sigbjorn Lie-Soland]

Hi list,

When a user powers down a VM from within the VM operating system (poweroff), a 
"moved from 'Up' --> 'Down'" message is written to engine.log, and a EVENT_ID: 
VM_DOWN is created

--
2019-05-08 20:53:03,495+02 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(ForkJoinPool-1-worker-3) [] VM '-3966-4da2-a505-'(vmname1) 
moved from 'Up' --> 'Down'
2019-05-08 20:53:03,550+02 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(ForkJoinPool-1-worker-3) [] EVENT_ID: VM_DOWN(61), VM vmname1 is down. Exit 
message: User shut down from within the guest
--

When a user starts a VM from the webadmin, a "moved from 'WaitForLaunch' --> 
'PoweringUp'" and "'PoweringUp' --> 'Up'" is written to engine.log, and the 
events EVENT_ID: USER_STARTED_VM and EVENT_ID: USER_RUN_VM is created.

--
2019-05-08 20:53:20,976+02 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(EE-ManagedThreadFactory-engine-Thread-1388598) 
[-da2d-452d-a604-] EVENT_ID: USER_STARTED_VM(153), VM 
vmname1 was started by adminuser@ipadomain (Host: hypervisor1).
2019-05-08 20:53:24,091+02 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(ForkJoinPool-1-worker-3) [] VM '-3966-4da2-a505-'(vmname1) 
moved from 'WaitForLaunch' --> 'PoweringUp'
2019-05-08 20:53:45,140+02 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(ForkJoinPool-1-worker-3) [] VM '-3966-4da2-a505-'(vmname1) 
moved from 'PoweringUp' --> 'Up'
2019-05-08 20:53:45,238+02 INFO  
[org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] 
(ForkJoinPool-1-worker-3) [] EVENT_ID: USER_RUN_VM(32), VM vmname1 started on 
Host hypervisor1
--


However when a user reboots a VM from within the VM operating system, the 
messages "moved from 'Up' --> 'RebootInProgress'" and "moved from 
'RebootInProgress' --> 'Up'" is written to the engine.log, but no EVENT_ID is 
generated. --
--
2019-05-08 20:52:27,367+02 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(ForkJoinPool-1-worker-1) [] VM '-3966-4da2-a505-'(vmname1) 
moved from 'Up' --> 'RebootInProgress'
2019-05-08 20:52:49,926+02 INFO  
[org.ovirt.engine.core.vdsbroker.monitoring.VmAnalyzer] 
(ForkJoinPool-1-worker-1) [] VM '-3966-4da2-a505-'(vmname1) 
moved from 'RebootInProgress' --> 'Up'
--

So systems like CloudForms/ManageIQ which reads the manager event log via the 
manager REST API is not notified when a VM is rebooted, and is therefore unable 
to perform any EmsEvent when the VM reboots. 

Why is there no EVENT_ID generated when a VM reboots? Is it possible to enable 
EVENT_ID's to be created for VM reboot events?



Regards,
Siggi
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/IHW2RQT3RRPV7IJJZP4EQCIGF5TZYS6Z/

[ovirt-users] Hypervisor host CPU utilization metrics

[Sigbjorn Lie-Soland]

Hi,

Linux see twice the amount of CPUs for a host with SMT/hyperthreading enabled. 
Inspecting the individual cores presented to the operating system using mpstat 
shows that the guests are running primarily on the “physical cores”, which is 
expected as the system is SMT aware. The “hyperthreaded cores” are showing 
guest activity when the host cpu is heavily loaded. Using the traditional tools 
such as top and vmstat does not take hyperthreading into consideration when 
calculating the total cpu% usage, again, as expected.

How is the hypervisor host CPU utilization metrics in Ovirt calculated when a 
hypervisor host has SMT/hyperthreading enabled? Does Ovirt calculate in the 
same manner as the traditional vmstat/top/etc Linux tools, or does it only 
count CPU usage on the “physical cores” on the hypervisor? Does it read CPU 
metrics from the Intel PCM (https://github.com/opcm/pcm 
) ?

Does the “Count Threads as Cores” setting affect how the host hypervisor CPU 
utilization metrics are calculated?

The reason for asking is when using tools for capacity and utilization 
reporting to attempt to establish cluster growth and to anticipate when and how 
much hypervisor capacity to add, we need the input utilization data to be a 
correct representation of what is happening at the hypervisor host.

Thanks.



Regards,
Siggi

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/HX2QEUZBQXETISGJLTPH55EYEUTVDA53/

Re: [ovirt-users] centos 7.1 and up & ixgbe

[Sigbjorn Lie]

Hi,

Is this on CentOS/RHEL 7.2?

Log in as root as see if you can see any messages from ixgbe about "tx queue 
hung" in dmesg. I
currently have an open support case for RHEL7.2 and the ixgbe driver, where 
there is a driver
issue causing the network adapter to reset continuously when there are network 
traffic.


Regards,
Siggi



On Thu, March 17, 2016 12:52, Nir Soffer wrote:
> On Thu, Mar 17, 2016 at 10:49 AM, Johan Kooijman  
> wrote:
>
>> Hi all,
>>
>>
>> Since we upgraded to the latest ovirt node running 7.2, we're seeing that
>> nodes become unavailable after a while. It's running fine, with a couple of 
>> VM's on it, untill it
>> becomes non responsive. At that moment it doesn't even respond to ICMP. 
>> It'll come back by
>> itself after a while, but oVirt fences the machine before that time and 
>> restarts VM's elsewhere.
>>
>>
>> Engine tells me this message:
>>
>>
>> VDSM host09 command failed: Message timeout which can be caused by
>> communication issues
>>
>> Is anyone else experiencing these issues with ixgbe drivers? I'm running on
>> Intel X540-AT2 cards.
>>
>
> We will need engine and vdsm logs to understand this issue.
>
>
> Can you file a bug and attach ful logs?
>
>
> Nir
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] el6 and el7 clusters and SPM

[Sigbjorn Lie]

Hi

I am looking to migrate several el6 rhev-h nodes to el7 rhev-h nodes. There are 
multiple clusters
in the datacenter and it will take a while (several months) to have all the 
clusters in the data
center migrated to el7.

Is there be any potential issues to look out for with regards to having the SPM 
for this
datacenter running on a el6 or a el7 node in this datacenter? Any cross 
compatability issues to
look out for?

RHEV-M is currently at version 3.5.6. We are using FC storage.



Regards,
Siggi


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] VDI non-persistant desktops

[Sigbjorn Lie]

Hi,

We've had the same experience as you with vm pools and have moved away from vm 
pools to non-pool vms and manual assignment for Windows vms. We have an open 
ticket with RH support for enabling stateful vm pool. This is the bugzilla 
entry if you’d like to add your interest for the stateful vm pools feature: 
https://bugzilla.redhat.com/show_bug.cgi?id=1234394 



Regards,
Siggi


> On 29 Jan 2016, at 13:20, Colin Coe  wrote:
> 
> Hi all
> 
> We're using RHEV 3.5.7 and have about 40 desktop VMs that are all clones from 
> a single original.
> 
> In the very beginning we used desktop pools but this was torn down when we 
> started getting "The trust relationship between this workstation and the 
> primary domain failed" error messages.
> 
> We use DHCP for all desktops however every VM is defined on the DHCP server 
> and unknown MACs are rejected.
> 
> I'd like to revisit desktop pools but I'd like to know if other are using 
> this and what their experiences have been.
> 
> Kind of thing I'd like to know is
> - how is patching done
> - what is the performance like
> - what tuning if any is done on the desktops
> - GPO vs LPO
> 
> Any comments?
> 
> Thanks
> 
> CC
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] aaa ldap+http sso & user portal

[Sigbjorn Lie]

Ah, I am using 3.5.4. :)

I will test 3.5.5. Thank you.



Regards,
Siggi



> On 26 Oct 2015, at 19:29, Alon Bar-Lev  wrote:
> 
> 
> 
> - Original Message -
>> From: "Sigbjorn Lie" 
>> To: Users@ovirt.org
>> Sent: Monday, October 26, 2015 8:18:24 PM
>> Subject: [ovirt-users] aaa ldap+http sso & user portal
>> 
>> Hi,
>> 
>> The aaa ldap+http sso works perfectly in 3.5.:)
>> 
>> However when logging in to the User Portal there is a slight problem. As I am
>> logged in directly, I am unable to uncheck the “Connect Automatcally”
>> checkbox. The user has access to several machines (Linux and Windows), and
>> it’s not a good idea to simply connect to any one of them.
>> 
>> I have’t been able to find anywhere I can disable the “Connect
>> Automatically”. I see that it’s code for having is configurable per user in
>> a later version, but how may I make this go away in the current version?
>> Perhaps a hack which rips out the ConnectAutomatically() function entirely
>> and replaces it with a simple “return true”?
> 
> What version do you use? I think it was fixed in 3.5.5[1]
> 
> [1] https://bugzilla.redhat.com/show_bug.cgi?id=1256662 
> <https://bugzilla.redhat.com/show_bug.cgi?id=1256662>
> 
>> 
>> 
>> Regards,
>> Siggi
>> ___
>> Users mailing list
>> Users@ovirt.org <mailto:Users@ovirt.org>
>> http://lists.ovirt.org/mailman/listinfo/users 
>> <http://lists.ovirt.org/mailman/listinfo/users>
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] aaa ldap+http sso & user portal

[Sigbjorn Lie]

Hi,

The aaa ldap+http sso works perfectly in 3.5.:)

However when logging in to the User Portal there is a slight problem. As I am 
logged in directly, I am unable to uncheck the “Connect Automatcally” checkbox. 
The user has access to several machines (Linux and Windows), and it’s not a 
good idea to simply connect to any one of them.

I have’t been able to find anywhere I can disable the “Connect Automatically”. 
I see that it’s code for having is configurable per user in a later version, 
but how may I make this go away in the current version? Perhaps a hack which 
rips out the ConnectAutomatically() function entirely and replaces it with a 
simple “return true”?


Regards,
Siggi
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] Support for QinQ

[Sigbjorn Lie]

Ok. Thanks for your quick response. Sorry for my late reply back :)

I had a request to have multiple concurrent labs of testing end point equipment 
which required to see a vlan trunk having the exact same vlan numbers across 
all the labs. The vlans coming from each lab had to be mapped to different vms. 
The different lab networks could not be joined. This required adding the vlan 
trunk from each lab into a qinq trunk which connects to the same hypervisor. Or 
using networking equipment having the ability to rewrite the vlans of the lab 
vlan trunks into other vlan numbers before they reach the hypervisor.


Regards, 
Siggi

 

Den 7. september 2015 16:27:33 CEST, skrev Dan Kenigsberg :
>On Mon, Sep 07, 2015 at 02:45:04PM +0200, Sigbjorn Lie wrote:
>> Hi list,
>> 
>> I've been looking around the web for QinQ support in Ovirt. I see
>that QinQ is supported in CentOS
>> 6.x and above. However I cannot see any documented support in Ovirt.
>I've come across the page
>> below which details QinQ as a future feature.
>> 
>> Is QinQ still a future feature, or is it possible to use QinQ with
>Ovirt today somehow?
>> 
>> http://www.ovirt.org/Networking
>
>I'm afraid we do not support QinQ, and it's not on our immediate
>roadmap.
>
>However, we would love to understand your use case (do you want to
>tunnel VM traffic within QinQ? why?)
>
>I believe you can use network custom properties and
>before/after_network_setup hookpoint in order to tinker with this
>yourself.
>
>Regards,
>Dan.

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] Support for QinQ

[Sigbjorn Lie]

Hi list,

I've been looking around the web for QinQ support in Ovirt. I see that QinQ is 
supported in CentOS
6.x and above. However I cannot see any documented support in Ovirt. I've come 
across the page
below which details QinQ as a future feature.

Is QinQ still a future feature, or is it possible to use QinQ with Ovirt today 
somehow?

http://www.ovirt.org/Networking




Regards,
Siggi


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] User Portal 'Open in Full Screen'

[Sigbjorn Lie]

On Thu, August 7, 2014 10:27, Michal Skrivanek wrote:
>

> On Aug 6, 2014, at 20:09 , Sigbjorn Lie  wrote:
>
>
>> On Mon, 2014-08-04 at 13:37 +0200, Michal Skrivanek wrote:
>>
>>> On Jul 28, 2014, at 12:33 , Sigbjorn Lie  wrote:
>>>
>>>
>>>> Hi,
>>>>
>>>>
>>>> In version 3.3 the "Open in Full Screen" under Spice Console Options in 
>>>> the User Portal was
>>>> not enabled by default. In version 3.4 the "Open in Full Screen" is now 
>>>> enabled by default.
>>>>
>>>> Is it possible to manage the default behaviour of this setting? I would 
>>>> like it *not* to be
>>>>  enabled by default.
>>>
>>> Not yet.
>>> It's "fixed" in 3.4 to match the previous <3.3 behavior
>>> I wonder at what level such an option should be. We can make it global..but 
>>> currently we have
>>> a different behavior in webadmin&power user portal vs user portal. Per user 
>>> global might make
>>> sense too thoughts?
>>>
>>
>> What is the difference between the power user portal and the user portal
>> with regards to the default of "Open in Full Screen"?
>
> well, basic UP has full screen by default, power user portal and webadmin not 
> a global setting for
> each portal may be ok indeed
>

Ok.

Where is this actual setting set today? Is there any way that I can change a 
parameter i the
database or a parameter in a file manually to change the full screen setting 
for the UP?


Regards,
Siggi


>>
>> A global setting configured by ovirt-config/rhevm-config for the User
>> Portal would be fine.
>>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [ovirt-users] User Portal "Open in Full Screen"

[Sigbjorn Lie]

On Mon, 2014-08-04 at 13:37 +0200, Michal Skrivanek wrote:
> On Jul 28, 2014, at 12:33 , Sigbjorn Lie  wrote:
> 
> > Hi,
> > 
> > In version 3.3 the "Open in Full Screen" under Spice Console Options in the 
> > User Portal was not
> > enabled by default. In version 3.4 the "Open in Full Screen" is now enabled 
> > by default.
> > 
> > Is it possible to manage the default behaviour of this setting? I would 
> > like it *not* to be
> > enabled by default.
> 
> Not yet.
> It's "fixed" in 3.4 to match the previous <3.3 behavior
> I wonder at what level such an option should be. We can make it global..but 
> currently we have a different behavior in webadmin&power user portal vs user 
> portal. Per user global might make sense too
> thoughts?
> 

What is the difference between the power user portal and the user portal
with regards to the default of "Open in Full Screen"?

A global setting configured by ovirt-config/rhevm-config for the User
Portal would be fine.



Regards,
Siggi



___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[ovirt-users] User Portal "Open in Full Screen"

[Sigbjorn Lie]

Hi,

In version 3.3 the "Open in Full Screen" under Spice Console Options in the 
User Portal was not
enabled by default. In version 3.4 the "Open in Full Screen" is now enabled by 
default.

Is it possible to manage the default behaviour of this setting? I would like it 
*not* to be
enabled by default.


Regards,
Siggi


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Unable to log on with expired passord

[Sigbjorn Lie]

On 26/01/14 20:17, Itamar Heim wrote:

On 01/26/2014 08:33 PM, Sigbjorn Lie wrote:

On 04/12/13 06:47, Itamar Heim wrote:

On 12/04/2013 12:19 AM, Sigbjorn Lie wrote:

On 16/10/13 00:22, Itamar Heim wrote:

On 10/15/2013 10:31 AM, Sigbjorn Lie wrote:

Hi,

I am doing a POC of RHEV 3.2 VDI for a customer. Their users are
located in an IPA server, and
RHEV and IPA has been connected using rhevm-manage-domains.

During the POC we discovered that users which have expired password
cannot log on. They receive an
Incorrect password error message.

1. They should at least receive a Your password has expired error
instead of the Incorrect
password error message as this is confusing for the user.


3.3 has the motd to provide some info/url to IPA password changing.


I've installed 3.3 as a test and I can see that it's now correctly
advising the user that his password has expired. But it does not 
provide

the user with an option to change his/her password.



2. This creates a problem, as every time a password is reset in IPA,
it's automatically set to be
expired so the user will change password at next logon.

Is there a way around this?


use the IPA web form to change the password by the user.


This is a manual process for the user to be aware of and will generate
calls to the helpdesk. I believe it would create a much better user
experience to allow the password to the changed as a part of the login
procedure.

Or adding an option to work the same way as our current Secure Global
Desktop solution allows us to do; Logging in the user with the expired
password, and then the password is being changed as a part of the 
login

procedure to the Linux Desktop.

And this is a scenario that will be coming up often, as that every 
time

a new user is added or a password is reset for an existing user in Red
Hat IdM, the password is set to be expired so that the user is 
forced to

change it on next logon, and no option is provided in Red Hat IdM to
work around this.

In our environment the users who will use the Linux VDI solution 
through

the User Portal will be using a Windows desktop and this will be their
only link into the Linux environment where they're required to log on
using a username and password from Red Hat IdM.


the problem is each authentication provider has a different method to
change password (no standard for this).
as a first step, we added in 3.3 the motd option (message of the day),
you can use that to put a text specifying in case of password
expirtaion to use the IPA web url.

we'll another tweak to manage domains, to allow specyfing the password
expirtation web form change url per domain, and show it for password
expirtaion.

then we can look about actually supporting this for specific providers.


I've got a RHEV 3.3 test environment up running, and I'm trying the motd
option you recommended. I can set the UserMessageOfTheDay using
rhevm-config sucessfully, and I see the message displayed on the User
Portal web page.

However any attempt on adding an URL (to the IPA server) with a  tag or without any html tag, displays the URL and not a link the
user can click on as expected. Neither can I copy and paste from the 
MOTD.


Is there any way to produce a clickable link in the motd? Or at least
allow cut and paste from the motd?


Regards,
Siggi



this was recently fixed via http://gerrit.ovirt.org/#/c/23373/ and 
backported to 3.4 via http://gerrit.ovirt.org/#/c/23622/
barak/yair - please review if this is stable-3.3 branch material (for 
the older global motd config of course).

Any update on this?


Regards,
Siggi

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Unable to log on with expired passord

[Sigbjorn Lie]

On 04/12/13 06:47, Itamar Heim wrote:

On 12/04/2013 12:19 AM, Sigbjorn Lie wrote:

On 16/10/13 00:22, Itamar Heim wrote:

On 10/15/2013 10:31 AM, Sigbjorn Lie wrote:

Hi,

I am doing a POC of RHEV 3.2 VDI for a customer. Their users are
located in an IPA server, and
RHEV and IPA has been connected using rhevm-manage-domains.

During the POC we discovered that users which have expired password
cannot log on. They receive an
Incorrect password error message.

1. They should at least receive a Your password has expired error
instead of the Incorrect
password error message as this is confusing for the user.


3.3 has the motd to provide some info/url to IPA password changing.


I've installed 3.3 as a test and I can see that it's now correctly
advising the user that his password has expired. But it does not provide
the user with an option to change his/her password.



2. This creates a problem, as every time a password is reset in IPA,
it's automatically set to be
expired so the user will change password at next logon.

Is there a way around this?


use the IPA web form to change the password by the user.


This is a manual process for the user to be aware of and will generate
calls to the helpdesk. I believe it would create a much better user
experience to allow the password to the changed as a part of the login
procedure.

Or adding an option to work the same way as our current Secure Global
Desktop solution allows us to do; Logging in the user with the expired
password, and then the password is being changed as a part of the login
procedure to the Linux Desktop.

And this is a scenario that will be coming up often, as that every time
a new user is added or a password is reset for an existing user in Red
Hat IdM, the password is set to be expired so that the user is forced to
change it on next logon, and no option is provided in Red Hat IdM to
work around this.

In our environment the users who will use the Linux VDI solution through
the User Portal will be using a Windows desktop and this will be their
only link into the Linux environment where they're required to log on
using a username and password from Red Hat IdM.


the problem is each authentication provider has a different method to 
change password (no standard for this).
as a first step, we added in 3.3 the motd option (message of the day), 
you can use that to put a text specifying in case of password 
expirtaion to use the IPA web url.


we'll another tweak to manage domains, to allow specyfing the password 
expirtation web form change url per domain, and show it for password 
expirtaion.


then we can look about actually supporting this for specific providers.

I've got a RHEV 3.3 test environment up running, and I'm trying the motd 
option you recommended. I can set the UserMessageOfTheDay using 
rhevm-config sucessfully, and I see the message displayed on the User 
Portal web page.


However any attempt on adding an URL (to the IPA server) with a href..> tag or without any html tag, displays the URL and not a link the 
user can click on as expected. Neither can I copy and paste from the MOTD.


Is there any way to produce a clickable link in the motd? Or at least 
allow cut and paste from the motd?



Regards,
Siggi

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] hot add ram to a vm

[Sigbjorn Lie]

+1 for this feature

On 10/12/13 10:00, Sven Kieske wrote:

Hi,

just want to say that we are also interested in this
feature.




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Unable to log on with expired passord

[Sigbjorn Lie]

On 16/10/13 00:22, Itamar Heim wrote:

On 10/15/2013 10:31 AM, Sigbjorn Lie wrote:

Hi,

I am doing a POC of RHEV 3.2 VDI for a customer. Their users are 
located in an IPA server, and

RHEV and IPA has been connected using rhevm-manage-domains.

During the POC we discovered that users which have expired password 
cannot log on. They receive an

Incorrect password error message.

1. They should at least receive a Your password has expired error 
instead of the Incorrect

password error message as this is confusing for the user.


3.3 has the motd to provide some info/url to IPA password changing.

I've installed 3.3 as a test and I can see that it's now correctly 
advising the user that his password has expired. But it does not provide 
the user with an option to change his/her password.




2. This creates a problem, as every time a password is reset in IPA, 
it's automatically set to be

expired so the user will change password at next logon.

Is there a way around this?


use the IPA web form to change the password by the user.

This is a manual process for the user to be aware of and will generate 
calls to the helpdesk. I believe it would create a much better user 
experience to allow the password to the changed as a part of the login 
procedure.


Or adding an option to work the same way as our current Secure Global 
Desktop solution allows us to do; Logging in the user with the expired 
password, and then the password is being changed as a part of the login 
procedure to the Linux Desktop.


And this is a scenario that will be coming up often, as that every time 
a new user is added or a password is reset for an existing user in Red 
Hat IdM, the password is set to be expired so that the user is forced to 
change it on next logon, and no option is provided in Red Hat IdM to 
work around this.


In our environment the users who will use the Linux VDI solution through 
the User Portal will be using a Windows desktop and this will be their 
only link into the Linux environment where they're required to log on 
using a username and password from Red Hat IdM.




I would like to see the user being able to log on the User Portal 
with the expired password, and
then he will be asked to change his password as usual once he's 
logging into his Linux VDI

machine.


for ovirt, open a BZ for an RFE to show expired password and link to 
web page for changing it.

for rhev, open a support ticket to get proper tracking, etc.


https://bugzilla.redhat.com/show_bug.cgi?id=1037844

A ticket has been opened for RHEV referencing the BZ above.

Thanks.



Thanks,
   Itamar





Regards,
Siggi





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] Unable to log on with expired passord

[Sigbjorn Lie]

Hi,

I am doing a POC of RHEV 3.2 VDI for a customer. Their users are located in an 
IPA server, and
RHEV and IPA has been connected using rhevm-manage-domains.

During the POC we discovered that users which have expired password cannot log 
on. They receive an
Incorrect password error message.

1. They should at least receive a Your password has expired error instead of 
the Incorrect
password error message as this is confusing for the user.

2. This creates a problem, as every time a password is reset in IPA, it's 
automatically set to be
expired so the user will change password at next logon.

Is there a way around this?

I would like to see the user being able to log on the User Portal with the 
expired password, and
then he will be asked to change his password as usual once he's logging into 
his Linux VDI
machine.



Regards,
Siggi





___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] so, what do you want next in oVirt?

[Sigbjorn Lie]

Hi,

I would like to this existing feature request implemented:

https://bugzilla.redhat.com/show_bug.cgi?id=884653

Bug 884653 - [RFE] support single sign-on to user and admin portals



Thanks


Regards,
Siggi



On Tue, August 20, 2013 23:19, Itamar Heim wrote:
> earlier in the year we did a survey for feature requests / improvements / etc.
>
>
> since a lot of things were added, and priorities usually change, I'd like to 
> ask again for "what
> do you need the most from oVirt / what are your pain points" next?
>
> below[1] I've listed my understanding of what already went in from previous 
> survey requests (to
> various degrees of coverage).
>
> Thanks,
> Itamar
>
>
> [1] from the top 12
> V Allow disk resize
> V Integrate Nagios/Zabbix monitoring - via a ui plugin
> V Highly Available engine - via hosted engine[2]
> V Open vSwitch integration - via neutron integration
> X Allow cloning VMs without template
> ? Enable hypervisor upgrade/updates through engine[3]
> V Allow engine on an oVirt hosted VM - via hosted engine[2]
> V Enable guest configuration (root password, SSH keys, network) via
> guest agent in engine - via cloud-init X Integrate v2v into engine
> ? Bond/extend ovirtmgmt with a second network for HA/increased
> bandwidth[4] X Integrate scheduling of snapshots and VM export for backups in
> engine[5] V Spice – support Google Chrome - via mime based launch
>
>
>
> Other items mentioned in previous survey which should be covered by now:
> - Fix timeout when adding local host during all-in-one configuration
> - Fix engine set-up when SELinux is disabled
> - Provide packages for el6 (CentOS, Red Hat Enterprise Linux)
> - Allow multiple VMs to be deployed from the same template at the same
> time - ISO domains on local/GlusterS
> - Show IP addresses in Virtual Machines->Network Interfaces
> - OpenStack Quantum support (now called Neutron)
> - noVNC support
> - Support spice.html5 and websocket proxy
> - Add other guest OSes to list
> - Port oVirt guest agent to Ubuntu[6]
> - SLA - Allow resource time-sharing
> - Spice - Mac client (via mime based launch)
> - Spice - port XPI plug-in to Windows (not sure this will happen, but
> mime based launch allows using firefox now) - Spice - client for 
> Ubuntu/Debian (should be covered
> via mime based launch)
>
>
> [2] hosted engine is in active development, but not released yet.
> [3] host update is supported, but not for general yum update.
> [4] a lot of improvements were done in this space, but i'm not sure if
> they cover this exact use case [5] backup api is now being pushed to master, 
> and orchestration of
> backups should probably happen via 3rd part backup vendors? [6] I'm not sure 
> packaging exists yet,
> but ubuntu is covered for the basic functionality of the guest agent.
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] What do you want to see in oVirt next?

[Sigbjorn Lie]

On 01/03/2013 05:08 PM, Itamar Heim wrote:

Hi Everyone,

as we wrap oVirt 3.2, I wanted to check with oVirt users on what they 
find good/useful in oVirt, and what they would like to see 
improved/added in coming versions?


Thanks,
   Itamar
___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users


I would also like to see single sign on capabilities (Kerberos) on the 
WebAdmin and UserPortal when using IPA as authentication source.



Regards,
Siggi

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] What do you want to see in oVirt next?

[Sigbjorn Lie]

Hi,

What will happen in case of a shutdown of all nodes and both ovirt-engine vm's?

Will the nodes be able to start it's virtual machines without a connection to 
the ovirt-engine?


Rgds,
Siggi



On Wed, January 9, 2013 13:27, Marcelo Barbosa wrote:
> Siggi,
>
>
> Great idea is running this oVIrt-engine to two or more vm's in to oVirt,
> example:
>
>
> * Install 2 nodes or more and running oVirt-engine provisory in laptop,
> for example, after create 2 vm's HA for permanent engine virtualized and HA.
>
> Only suggestion.
>
>
> Marcelo Barbosa
> *mr.marcelo.barb...@gmail.com*
>
>
>
> On Wed, Jan 9, 2013 at 9:32 AM, Sigbjorn Lie  wrote:
>
>
>>
>> On Thu, January 3, 2013 17:08, Itamar Heim wrote:
>>
>>> Hi Everyone,
>>>
>>>
>>>
>>> as we wrap oVirt 3.2, I wanted to check with oVirt users on what they
>> find good/useful in oVirt,
>>> and what they would like to see improved/added in coming versions?
>>
>> Hi,
>>
>>
>> +1 for clustered ovirt manager for availability.
>>
>>
>> I've seen a pdf document describing how to configure Red Hat Cluster and
>> GFS with RHEV-M, but I
>> feel Red Hat Cluster and GFS adds too much complexity compared to what is 
>> required for ovirt
>> manager.
>>
>> Perhaps the use of glusterfs and keepalived (http://www.keepalived.org/)
>> would be sufficient to create an easy to configure ovirt manager failover 
>> cluster?
>>
>>
>> Regards,
>> Siggi
>>
>>
>>
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] What do you want to see in oVirt next?

[Sigbjorn Lie]

On Thu, January 3, 2013 17:08, Itamar Heim wrote:
> Hi Everyone,
>
>
> as we wrap oVirt 3.2, I wanted to check with oVirt users on what they find 
> good/useful in oVirt,
> and what they would like to see improved/added in coming versions?

Hi,

+1 for clustered ovirt manager for availability.

I've seen a pdf document describing how to configure Red Hat Cluster and GFS 
with RHEV-M, but I
feel Red Hat Cluster and GFS adds too much complexity compared to what is 
required for ovirt
manager.

Perhaps the use of glusterfs and keepalived (http://www.keepalived.org/) would 
be sufficient to
create an easy to configure ovirt manager failover cluster?


Regards,
Siggi


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Single Sign On (Kerberos) to the user portal

[Sigbjorn Lie]

On 12/16/2012 01:30 AM, Alon Bar-Lev wrote:


- Original Message -

From: "Sigbjorn Lie" 
To: "Alon Bar-Lev" 
Cc: users@ovirt.org
Sent: Sunday, December 16, 2012 2:22:37 AM
Subject: Re: [Users] Single Sign On (Kerberos) to the user portal

On 12/15/2012 07:50 PM, Alon Bar-Lev wrote:

- Original Message -----

From: "Sigbjorn Lie" 
To: users@ovirt.org
Sent: Saturday, December 15, 2012 6:25:22 PM
Subject: [Users] Single Sign On (Kerberos) to the user portal

Hi,

Is it possible to do Single Sign On to the user portal using
Kerberos?

We have deployed FreeIPA where all our workstations are
authenticating.
We are already using SSO w/kerberos for web servers, and it would
be
handy if we could use SSO w/kerberos to authenticate to the User
Portal too.

Hi,

Not right now... we need some more work to make it happen.
Can you help in this?

Alon

I think I will struggle with the programming side. However I can be
of
assistance testing it out.

I believe most of the work will already be done if there exists a
similar module for jboss such as the "mod_auth_kerb" for Apache.

Has there been any work done at all with implementing SSO in the user
portal so far?

What I would like to do is to support external authentication in ovirt, so that 
it will take the user name out of the ajp protocol ?remote_user field, which 
maps into the HttpServletRequest.getUserPrincipal() at J2EE side.

Then use mod_auth_kerb to authenticate the user as I guess you would already 
have...




Yes we use mod_auth_kerb with Apache today. It works well.

I do not think I will be of much use with the programming, sorry.

Is there any ongoing work to get this implemented?



Regards,
Siggi




___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Single Sign On (Kerberos) to the user portal

[Sigbjorn Lie]

On 12/15/2012 07:50 PM, Alon Bar-Lev wrote:


- Original Message -

From: "Sigbjorn Lie" 
To: users@ovirt.org
Sent: Saturday, December 15, 2012 6:25:22 PM
Subject: [Users] Single Sign On (Kerberos) to the user portal

Hi,

Is it possible to do Single Sign On to the user portal using
Kerberos?

We have deployed FreeIPA where all our workstations are
authenticating.
We are already using SSO w/kerberos for web servers, and it would be
handy if we could use SSO w/kerberos to authenticate to the User
Portal too.

Hi,

Not right now... we need some more work to make it happen.
Can you help in this?

Alon


I think I will struggle with the programming side. However I can be of 
assistance testing it out.


I believe most of the work will already be done if there exists a 
similar module for jboss such as the "mod_auth_kerb" for Apache.


Has there been any work done at all with implementing SSO in the user 
portal so far?




Regards,
Siggi


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] Single Sign On (Kerberos) to the user portal

[Sigbjorn Lie]

Hi,

Is it possible to do Single Sign On to the user portal using Kerberos?

We have deployed FreeIPA where all our workstations are authenticating. 
We are already using SSO w/kerberos for web servers, and it would be 
handy if we could use SSO w/kerberos to authenticate to the User Portal too.



Regards,
Siggi

___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

[Users] Native USB redirection does not work - (remote-viewer) did not claim interface 0 before use

[Sigbjorn Lie]

Hi,

I receive the following errors when I attempt to use native USB redirection in 
RHEV 3.1 beta. It's
a smart card reader I am attempting to redirect into a virtual Windows 7 x64 
machine.

Is this a known error?

I've also posted this message to the spice-devel list. Not sure which list is 
the correct list for
this issue.



Regards,
Siggi



Nov 28 12:16:31 workstation kernel: usb 3-2: new full speed USB device number 4
using ohci_hcd
Nov 28 12:16:31 workstation kernel: usb 3-2: New USB device found, 
idVendor=076b,
idProduct=3021
Nov 28 12:16:31 workstation kernel: usb 3-2: New USB device strings: Mfr=1,
Product=2, SerialNumber=0
Nov 28 12:16:31 workstation kernel: usb 3-2: Product: Smart Card Reader USB
Nov 28 12:16:31 workstation kernel: usb 3-2: Manufacturer: OMNIKEY AG
Nov 28 12:16:31 workstation kernel: usb 3-2: configuration #1 chosen from 1 
choice
Nov 28 12:16:31 workstation pcscd: hotplug_libhal.c:342:HPAddDevice() Adding USB
device: usb_device_76b_3021_noserial_if0
Nov 28 12:16:32 workstation pcscd: readerfactory.c:1024:RFInitializeReader()
Attempting startup of Generic CCID Reader 00 00 using
/usr/lib64/pcsc/drivers/openct-ifd.bundle/Contents/Linux/openct-ifd.so
Nov 28 12:16:32 workstation pcscd: readerfactory.c:846:RFBindFunctions() 
Loading IFD
Handler 2.0
Nov 28 12:16:32 workstation pcscd: readerfactory.c:249:RFAddReader() Using the 
pcscd
polling thread
Nov 28 12:16:42 workstation kernel: usb 3-2: reset full speed USB device number 
4
using ohci_hcd
Nov 28 12:16:42 workstation spice: libusb:warning [op_reset_device] failed to
re-claim interface 0 after reset
Nov 28 12:16:42 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:43 workstation kernel: usb 3-2: reset full speed USB device number 
4
using ohci_hcd
Nov 28 12:16:43 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:44 workstation spice: libusb:error [submit_bulk_transfer] submiturb
failed error -1 errno=16
Nov 28 12:16:44 workstation spice:
Nov 28 12:16:44 workstation spice: (remote-viewer:5630): GSpice-CRITICAL **:
usbredirhost error: submitting bulk transfer on ep 05: -1
Nov 28 12:16:44 workstation kernel: usb 3-2: usbfs: process 5630 
(remote-viewer) did
not claim interface 0 before use
Nov 28 12:16:44 workstation spice: libusb:error [submit_bulk_transfer] submiturb
failed error -1 errno=16
Nov 28 12:16:44 workstation spice:
Nov 28 12:16:44 workstation spice: (remote-viewer:5630): GSpice-CRITICAL **:
usbredirhost error: submitting bulk transfer on ep 05: -1
Nov 28 12:16:44 workstation kernel: usb 3-2: usbfs: process 5630 
(remote-viewer) did
not claim interface 0 before use
Nov 28 12:16:44 workstation spice: libusb:error [submit_bulk_transfer] submiturb
failed error -1 errno=16
Nov 28 12:16:44 workstation spice:
Nov 28 12:16:44 workstation spice: (remote-viewer:5630): GSpice-CRITICAL **:
usbredirhost error: submitting bulk transfer on ep 05: -1
Nov 28 12:16:44 workstation kernel: usb 3-2: usbfs: process 5630 
(remote-viewer) did
not claim interface 0 before use
Nov 28 12:16:48 workstation kernel: usb 3-2: reset full speed USB device number 
4
using ohci_hcd
Nov 28 12:16:48 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:48 workstation kernel: usb 3-2: reset full speed USB device number 
4
using ohci_hcd
Nov 28 12:16:48 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:55 workstation pcscd: eventhandler.c:429:EHStatusHandlerThread() 
Card
inserted into Generic CCID Reader 00 00
Nov 28 12:16:55 workstation pcscd: eventhandler.c:443:EHStatusHandlerThread() 
Error
powering up card.
Nov 28 12:16:57 workstation spice:
Nov 28 12:16:57 workstation spice: (remote-viewer:5630): GSpice-CRITICAL **:
usbredirhost error: could not set active configuration to 0: -6
Nov 28 12:16:57 workstation kernel: usb 3-2: usbfs: interface 0 claimed by usbfs
while 'remote-viewer' sets config #0
Nov 28 12:16:57 workstation ifdhandler[5789]: usb_submiturb failed: Device or
resource busy
Nov 28 12:16:57 workstation ifdhandler[5789]: ccid: begin capture: -5
Nov 28 12:16:57 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:58 workstation ifdhandler[5789]: usb_submiturb failed: Device or
resource busy
Nov 28 12:16:58 workstation ifdhandler[5789]: ccid: begin capture: -5
Nov 28 12:16:58 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:16:59 workstation ifdhandler[5789]: usb_submiturb failed: Device or
resource busy
Nov 28 12:16:59 workstation ifdhandler[5789]: ccid: begin capture: -5
Nov 28 12:16:59 workstation kernel: usb 3-2: usbfs: process 5789 (ifdhandler) 
did
not claim interface 0 before use
Nov 28 12:17:00 workstation ifdhandler[5789]: usb_submiturb failed: Device or
resource busy
No

Re: [Users] Managing Remote Access to Physical Workstations

[Sigbjorn Lie]

Hi,

Then you should still have a look at the Leostream Connection Broker. 
(www.leostream.com) One of
the latest features we're integration with Red Hat Enterprise Virtualization / 
(ovirt). And they
support both Windows and Linux.

They support a wide variety of protocols and flexible configurations as well.


Regards,
Siggi


On Thu, August 2, 2012 15:13, Randall Wood wrote:
> Yes, I have a few of those available. They are nice (when the
> bandwidth is there to support them).
>
> I'm looking for a single broker interface for both physical and
> virtual machines that supports both Windows and Linux.
>
> On Thu, Aug 2, 2012 at 9:03 AM, Sigbjorn Lie  wrote:
>
>> Hi,
>>
>>
>> Have you looked at Teradici PCoIP? They have a hardware solution based on a 
>> PCIe card in the
>> host machine, and a PCoIP thin client. The performance is stunning. You 
>> don't even notice that
>> you're connected to a thin client. I'm using this on a daily basis myself.
>>
>> To get a broker you can use Leostream's Connection Broker which supports 
>> Teradici PCoIP both
>> for Windows and Linux.
>>
>>
>> You will be needing the thin client when connecting. I don't think you can 
>> use a software
>> client to connect to the physical machines. You can ask Leostream about this.
>>
>> See the following youtube video for more info:
>> http://www.youtube.com/watch?v=NWjhAHDQZ7E
>>
>>
>> This solution is for physical machines, not virtual machines.
>>
>>
>>
>> Regards,
>> Siggi
>>
>>
>>
>>
>>
>> On Thu, August 2, 2012 14:44, Randall Wood wrote:
>>
>>> Sorry for the delay in responding.
>>>
>>>
>>>
>>> I have a set of users (about 50) who have Linux workstations at their
>>> desks. These users have root access to these workstations, and these 
>>> workstations are
>>> frequently host VMs or are used for hardware driver development and 
>>> support. These users have
>>> access to a pool of managed Windows 7 VMs (for MS Office applications) in 
>>> oVirt, so they are
>>> already using the oVirt user portal. I would like to give these users 
>>> remote access to their
>>> workstations (from thin clients in conference rooms, from home, from 
>>> corporate laptops on the
>>>  road, etc) using the same User Portal that they already use for the 
>>> Windows VMs.
>>>
>>> VMware View and Citrix XenDesktop support providing users access to a
>>> mixed set of managed-virtual-machine or 
>>> unmanaged-physical-or-virtual-machine through a single
>>>  broker, but neither of them support access to Linux desktops.
>>>
>>> On Sat, Jul 21, 2012 at 2:33 AM, Johan Kragsterman
>>>  wrote:
>>>
>>>
>>>> Hi, Randall!
>>>>
>>>>
>>>>
>>>> What you need is a "broker", and a terminal server is working as a 
>>>> "broker". There are
>>>> several solutions that will work, but first I would want to know why you 
>>>> need physical
>>>> machines? Are there demanding graphical applications you're going to run, 
>>>> or...?
>>>>
>>>> Rgrds Johan
>>>>
>>>>
>>>>
>>>> -users-boun...@ovirt.org skrev: -
>>>> Till: Itamar Heim 
>>>> Från: Randall Wood
>>>> Sänt av: users-boun...@ovirt.org
>>>> Datum: 2012.07.20 22:37
>>>> Kopia: "users@ovirt.org" 
>>>> Ärende: Re: [Users] Managing Remote Access to Physical Workstations
>>>>
>>>>
>>>>
>>>> On Jul 20, 2012, at 16:30, Itamar Heim  wrote:
>>>>
>>>>
>>>>
>>>>> On 07/20/2012 11:13 PM, Randall Wood wrote:
>>>>>
>>>>>
>>>>>>
>>>>>>> No. oVirt's focus is virtual machines so the user portal only lets you 
>>>>>>> open up
>>>>>>> consoles on VMs managed by oVirt engine.
>>>>>>
>>>>>> I thought so.
>>>>>>
>>>>>>
>>>>>>
>>>>>>> When you say physical machines - would they be Linux or could they be 
>>>>>>> Windows?
>>>>>>> I might have an idea ..
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> The physical machines would all be RHEL, CentOS, or Fedora.
>>>>>>
>>>>>>
>>>>>
>>>>> which protocol would you expect users to use to gain access to this 
>>>>> physical machines?
>>>>
>>>> I would prefer SPICE, but could use SPICE, VNC, or RDP.
>>>> ___
>>>> Users mailing list
>>>> Users@ovirt.org
>>>> http://lists.ovirt.org/mailman/listinfo/users
>>>>
>>>>
>>>
>>>
>>>
>>> --
>>> Randall Wood
>>> Alexandria Software
>>> http://www.alexandriasoftware.com
>>> randall.h.w...@alexandriasoftware.com 202.683.8604
>>> ___
>>> Users mailing list
>>> Users@ovirt.org
>>> http://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>>
>>
>>
>
>
>
> --
> Randall Wood
> Alexandria Software
> http://www.alexandriasoftware.com
> randall.h.w...@alexandriasoftware.com 202.683.8604
>
>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Re: [Users] Managing Remote Access to Physical Workstations

[Sigbjorn Lie]

Hi,

Have you looked at Teradici PCoIP? They have a hardware solution based on a 
PCIe card in the host
machine, and a PCoIP thin client. The performance is stunning. You don't even 
notice that you're
connected to a thin client. I'm using this on a daily basis myself.

To get a broker you can use Leostream's Connection Broker which supports 
Teradici PCoIP both for
Windows and Linux.

You will be needing the thin client when connecting. I don't think you can use 
a software client
to connect to the physical machines. You can ask Leostream about this.

See the following youtube video for more info:
http://www.youtube.com/watch?v=NWjhAHDQZ7E

This solution is for physical machines, not virtual machines.


Regards,
Siggi




On Thu, August 2, 2012 14:44, Randall Wood wrote:
> Sorry for the delay in responding.
>
>
> I have a set of users (about 50) who have Linux workstations at their
> desks. These users have root access to these workstations, and these 
> workstations are frequently
> host VMs or are used for hardware driver development and support. These users 
> have access to a
> pool of managed Windows 7 VMs (for MS Office applications) in oVirt, so they 
> are
> already using the oVirt user portal. I would like to give these users remote 
> access to their
> workstations (from thin clients in conference rooms, from home, from 
> corporate laptops on the
> road, etc) using the same User Portal that they already use for the Windows 
> VMs.
>
> VMware View and Citrix XenDesktop support providing users access to a
> mixed set of managed-virtual-machine or unmanaged-physical-or-virtual-machine 
> through a single
> broker, but neither of them support access to Linux desktops.
>
> On Sat, Jul 21, 2012 at 2:33 AM, Johan Kragsterman
>  wrote:
>
>> Hi, Randall!
>>
>>
>> What you need is a "broker", and a terminal server is working as a "broker". 
>> There are several
>> solutions that will work, but first I would want to know why you need 
>> physical machines? Are
>> there demanding graphical applications you're going to run, or...?
>>
>> Rgrds Johan
>>
>>
>> -users-boun...@ovirt.org skrev: -
>> Till: Itamar Heim 
>> Från: Randall Wood
>> Sänt av: users-boun...@ovirt.org
>> Datum: 2012.07.20 22:37
>> Kopia: "users@ovirt.org" 
>> Ärende: Re: [Users] Managing Remote Access to Physical Workstations
>>
>>
>> On Jul 20, 2012, at 16:30, Itamar Heim  wrote:
>>
>>
>>> On 07/20/2012 11:13 PM, Randall Wood wrote:
>>>

> No. oVirt's focus is virtual machines so the user portal only lets you 
> open up consoles
> on VMs managed by oVirt engine.

 I thought so.


> When you say physical machines - would they be Linux or could they be 
> Windows?
> I might have an idea ..
>

 The physical machines would all be RHEL, CentOS, or Fedora.

>>>
>>> which protocol would you expect users to use to gain access to this 
>>> physical machines?
>>
>> I would prefer SPICE, but could use SPICE, VNC, or RDP.
>> ___
>> Users mailing list
>> Users@ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
>
> --
> Randall Wood
> Alexandria Software
> http://www.alexandriasoftware.com
> randall.h.w...@alexandriasoftware.com 202.683.8604
> ___
> Users mailing list
> Users@ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>


___
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users