RE: Virtualizing the Virtualization Server

[Anu Chirinos]

What about if we want to have ESXi as an image that can be deployed on number 
of identical servers? Will that require xcat underneath, or can we just capture 
the base esxi as image and then deploy it. If so, are there anything specific 
before capturing that image?


Anu Chirinos
University Technology Services
Office: 305-348-0275, Cell 786-712-9025


From: Aaron Peeler [fapee...@ncsu.edu]
Sent: Tuesday, November 29, 2011 9:27 AM
To: vcl-user@incubator.apache.org
Subject: Re: Virtualizing the Virtualization Server

Yes. This requires xCAT http://xcat.sourceforge.net/ xCAT is fairly
straight forward and well supported for the IBM bladeCenter hardware,
but has worked with other hardware also. The xCAT developers are
mostly IBMers - hardware group.


Some xCAT pre-install steps.
1) Make to include the private IP addresses of your blades or phyiscal
machines in the management nodes /etc/hosts file
2) make a copy of your existing dhcpd.conf file

The xcat starting point documentation is:
http://sourceforge.net/apps/mediawiki/xcat/index.php?title=Setting_Up_a_Linux_xCAT_Mgmt_Node

Once xcat is installed you will need to follow these steps to add
support for partimage, this is the component that does the imaging.
https://cwiki.apache.org/VCL/adding-support-for-partimage-and-partimage-ng-to-xcat-2x-unofficial.html

Aaron

On Tue, Nov 29, 2011 at 8:55 AM, Evelio Quiros  wrote:
> Hello,
> First, thanks for all the helpful advice. We were able to get up and going
> thanks to you all.
> Is it possible to capture the image of the Vmware server itself, and then
> replicate it to other bare metal server?
> Is there some documentation on that procedure?
> Thanks Again,
> Al Quiros



--
Aaron Peeler
Program Manager
Virtual Computing Lab
NC State University

All electronic mail messages in connection with State business which
are sent to or received by this account are subject to the NC Public
Records Law and may be disclosed to third parties.

Re: xmlrpc

[Mani Shafa'atDoost]

Josh,

Thank you. Do you have any proper documentation for functions that you
provided by XML RPC?

Best Regards
Mani

On Tue, Nov 29, 2011 at 4:32 PM, Josh Thompson wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Mani,
>
> Unfortunately, the example code is way out of date and uses API version 1
> which is no longer supported.
>
> A more current example, though in python, is available here:
>
>
> https://svn.apache.org/repos/asf/incubator/vcl/sandbox/useful_scripts/managegroups.py
>
> Josh
>
> On Sunday November 20, 2011, Mani Shafa'atDoost wrote:
> > Hello,
> >
> > I just used your sample file to use VCL through XMLRPC, but I received
> > following error :
> >
> > *Notice*:  xmlrpc: Unsupported API version, cannot continue.
> >
> > I just modified username and password in your sample PHP file. I will
> > appreciate if you could guide me.
> >
> >
> > Best Regards
> >
> > Mani
> - --
> - ---
> Josh Thompson
> VCL Developer
> North Carolina State University
>
> my GPG/PGP key can be found at pgp.mit.edu
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iEYEARECAAYFAk7VT1MACgkQV/LQcNdtPQP+5ACfTAXRcH07hlq+Efkt1NTSfoey
> vBYAnRhq3Tu0u0C7+9l3eIva8oY4zdQB
> =vdCS
> -END PGP SIGNATURE-
>

Re: Testing the VCL Frontend Code

[Dmitri Chebotarov]

Ben, 

On RedHat/CentOS 'yum install php' doesn't restart httpd service. 

* On Ubuntu it will restart apache service as part of install (apt-get install 
php). 

Thanks.

On Nov 29, 2011, at 16:59 , James O'Dell wrote:

> 
> Hash: SHA1
> 
> Wouldn't a 'yum install php' force the httpd service
> to restart?
> 
> On 11/29/2011 1:55 PM, Dmitri Chebotarov wrote:
>> Ben
>> 
>> Could you please restart httpd service and try to access testsetup.php 
>> again? 
>> 
>> You probably installed all necessary PHP packages, but httpd task needs to 
>> restarted to re-read .conf files to include PHP.
>> 
>> Thanks
>> On Nov 29, 2011, at 16:06 , ben.m...@valpo.edu wrote:
>> 
>>> Hi,
>>> 
>>> I'm having issues testing the VCL frontend code.  I'm trying to open the 
>>> testsetup.php file in firefox, but it Firefox is prompting to have me open 
>>> or download the file.  I am trying to open this up locally for now, but I 
>>> don't know if I did something wrong when modifying conf.php or secrets.php, 
>>> or if it's something with the server.  If anyone has any insight, I'd 
>>> appreciate it.
>>> 
>>> Thanks,
>>> 
>>> --
>>> Benjamin B. Macy
>>> 
>>> Valparaiso University 
>>> Student Senate Junior Representative
>>> Student Alumni Association
>>> Sigma Phi Epsilon
>>> Electrical Engineering Student
>>> ben.m...@valpo.edu
>>> 616.648.3516
>>> 
>> 
> 
> 
> - -- 
> Jim O'Dell
> Network Analyst
> California State University Fullerton
> Email: jod...@fullerton.edu
> Phone: (657) 278-2256
> 



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: Testing the VCL Frontend Code

[James O'Dell]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Wouldn't a 'yum install php' force the httpd service
to restart?

On 11/29/2011 1:55 PM, Dmitri Chebotarov wrote:
> Ben
> 
> Could you please restart httpd service and try to access testsetup.php again? 
> 
> You probably installed all necessary PHP packages, but httpd task needs to 
> restarted to re-read .conf files to include PHP.
> 
> Thanks
> On Nov 29, 2011, at 16:06 , ben.m...@valpo.edu wrote:
> 
>> Hi,
>>
>> I'm having issues testing the VCL frontend code.  I'm trying to open the 
>> testsetup.php file in firefox, but it Firefox is prompting to have me open 
>> or download the file.  I am trying to open this up locally for now, but I 
>> don't know if I did something wrong when modifying conf.php or secrets.php, 
>> or if it's something with the server.  If anyone has any insight, I'd 
>> appreciate it.
>>
>> Thanks,
>>
>> --
>> Benjamin B. Macy
>>
>> Valparaiso University 
>> Student Senate Junior Representative
>> Student Alumni Association
>> Sigma Phi Epsilon
>> Electrical Engineering Student
>> ben.m...@valpo.edu
>> 616.648.3516
>>
> 


- -- 
Jim O'Dell
Network Analyst
California State University Fullerton
Email: jod...@fullerton.edu
Phone: (657) 278-2256
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7VVdsACgkQREVHAOnXPYRiZgCgwZXZdByEjQP2vvnb4OA285gB
ZMAAn1U2tjac2b54roQaNhcDyhVMWZyK
=gxRe
-END PGP SIGNATURE-

Re: secrets.php

[Mani Shafa'atDoost]

Josh,

No, my problem didn't solve. So, I just skipped that step for now and I am
using from another version of VCL. once I solve this problem, I will post
it here.

Best Regards
Mani

On Tue, Nov 29, 2011 at 4:34 PM, Josh Thompson wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Mani,
>
> I'm guessing you got this working since you emailed about the XML RPC
> example.
> Would you mind sharing what you needed to do to get it to work so others
> that
> might encounter the same problem will have an idea what to do?
>
> Thanks,
> Josh
>
> On Tuesday November 15, 2011, Mani Shafa'atDoost wrote:
> > I just checked the file and there is no error on this file, but when I
> try
> > to read my secrets.php from other folders, I can't retrieve any data but
> I
> > can open the file.
> >
> > On Tue, Nov 15, 2011 at 12:28 PM, Josh Thompson
> wrote:
> > > Mani,
> > >
> > > Everything looks good in the secrets.php file you included below.  I
> > > would suggest running the secrets.php script from the command line
> using
> > > the php command line interpreter:
> > >
> > > php secrets.php
> > >
> > > Any problems in it would then be reported.
> > >
> > > Also, just to be sure, you are talking about secrets.php and not
> > > secrets-default.php, right?
> > >
> > > Josh
> > >
> > > On Sunday November 13, 2011, Mani Shafa'atDoost wrote:
> > > > Hello,
> > > >
> > > > When I run testsetup.php, I just receive following errors:
> > > > Error: fopen(http://localhost/vcl/testsetup.php?includesecretstest=1
> ):
> > > > failed to open stream: Permission denied
> > > > PHP version: 5.3.8
> > > > Including .ht-inc/secrets.php ...
> > > >
> > > >- unable to include .ht-inc/secrets.php - this is probably due to
> a
> > > >syntax error in .ht-inc/secrets.php
> > > >- skipping tests for contents of .ht-inc/secrets.php
> > > >
> > > > Including .ht-inc/conf.php ...
> > > >
> > > >- cannot include .ht-inc/conf.php when including of
> > >
> > > .ht-inc/secrets.php
> > >
> > > >fails
> > > >
> > > > Testing for required php extensions ...
> > > >
> > > >- All required modules are installed
> > > >
> > > > Testing mcrypt ...
> > > >
> > > >- Cannot test encryption without $mcryptkey and $mcryptiv from
> > > >.ht-inc/secrets.php
> > > >
> > > > checking openssl encryption keys ...
> > > >
> > > >- Cannot test private key file without $pemkey from
> > >
> > > .ht-inc/secrets.php
> > >
> > > >- successfully created public key from public key file
> > > >
> > > > Testing openssl encryption ...
> > > >
> > > >- cannot test encryption without a valid private key
> > > >
> > > > Testing for existance of dojo directory ...
> > > >
> > > >- dojo directory exists
> > > >- dojo directory is readable
> > > >
> > > > Checking value of PHP display_errors ...
> > > >
> > > >- display_errors: *disabled*
> > > >- NOTE: Displaying errors in a production system is a security
> risk;
> > > >however,
> > > >while getting VCL up and running, having them displayed makes
> > >
> > > debugging
> > >
> > > >a little easier. Edit your php.ini file to modify this setting.
> > > >
> > > > Done
> > > >
> > > > my secrets.php file is like this:
> > > >
> > > >  > > > $vclhost = 'localhost'; # name of mysql server
> > > > $vcldb = 'vcl'; # name of mysql database
> > > > $vclusername = 'mani';  # username to access database
> > > > $vclpassword = 'mani';  # password to access database
> > > >
> > > > $mcryptkey = 'password';  # random password - won't ever have to type
> > > > it
> > >
> > > so
> > >
> > > > make it long
> > > > $mcryptiv = '12345678'; // must be 8 hex chars
> > > >
> > > > $pemkey = 'password'; # random passphrase - same as given to
> genkeys.sh
> > > > - should be long
> > > > ?>
> > > >
> > > > can you guide me, what should i do to fix this file?
> > > >
> > > >
> > > > Best Regards
> > > > Mani
> > >
> > > - --
> > > - ---
> > > Josh Thompson
> > > VCL Developer
> > > North Carolina State University
> > >
> > > my GPG/PGP key can be found at pgp.mit.edu
> - --
> - ---
> Josh Thompson
> VCL Developer
> North Carolina State University
>
> my GPG/PGP key can be found at pgp.mit.edu
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2.0.17 (GNU/Linux)
>
> iEYEARECAAYFAk7VT9kACgkQV/LQcNdtPQNNpwCbBmJtGW0tjBDpcKdrC6NUIuPS
> pmAAn32C4ftb78Vp5p+7FlGX8GgBno+l
> =iMFp
> -END PGP SIGNATURE-
>

Re: Testing the VCL Frontend Code

[Dmitri Chebotarov]

Ben

Could you please restart httpd service and try to access testsetup.php again? 

You probably installed all necessary PHP packages, but httpd task needs to 
restarted to re-read .conf files to include PHP.

Thanks
On Nov 29, 2011, at 16:06 , ben.m...@valpo.edu wrote:

> Hi,
> 
> I'm having issues testing the VCL frontend code.  I'm trying to open the 
> testsetup.php file in firefox, but it Firefox is prompting to have me open or 
> download the file.  I am trying to open this up locally for now, but I don't 
> know if I did something wrong when modifying conf.php or secrets.php, or if 
> it's something with the server.  If anyone has any insight, I'd appreciate it.
> 
> Thanks,
> 
> --
> Benjamin B. Macy
> 
> Valparaiso University 
> Student Senate Junior Representative
> Student Alumni Association
> Sigma Phi Epsilon
> Electrical Engineering Student
> ben.m...@valpo.edu
> 616.648.3516
> 



signature.asc
Description: Message signed with OpenPGP using GPGMail

Re: Testing the VCL Frontend Code

[James O'Dell]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1


It doesn't sound like php is installed correctly.
Php code is normally interpreted by the web server.
Which, in turn, returns HTML code to the
web browser.

For example, the Redhat Apache file
'/etc/httpd/conf.d/php.ini' contains
the line 'AddHandler php5-script .php'
which tells the Apache web server to run
files with the '.php' extension through the php
interpreter.

Also, HTML code normally contains a header that the browser
should recognize.

i.e. 'view source' contains the document type of HTML at the top


If the browser recognizes the document type as html,
it shouldn't ask you to 'save to file'.

Try 'yum list installed | grep php' to see if php
is installed.

You should see something like:

> [root@vcl conf.d]# yum list installed | grep php
> php.x86_64 5.1.6-27.el5_5.3
> installed
> php-cli.x86_64 5.1.6-27.el5_5.3
> installed
> php-common.x86_64  5.1.6-27.el5_5.3
> installed
> php-devel.x86_64   5.1.6-27.el5_5.3
> installed
> php-gd.x86_64  5.1.6-27.el5_5.3
> installed
> php-ldap.x86_645.1.6-27.el5_5.3
> installed
> php-mbstring.x86_645.1.6-27.el5_5.3
> installed
> php-mcrypt.x86_64  5.1.6-15.el5.centos.1   
> installed
> php-mysql.x86_64   5.1.6-27.el5_5.3
> installed
> php-pdo.x86_64 5.1.6-27.el5_5.3
> installed
> php-pear.noarch1:1.4.9-6.el5   
> installed
> php-pecl-apc.x86_643.0.19-2.el5
> installed
> php-pecl-memcache.x86_64   2.2.6-1.el5 
> installed
> php-xml.x86_64 5.1.6-27.el5_5.3
> installed
> php-xmlrpc.x86_64  5.1.6-27.el5_5.3
> installed

I'm guessing we've got a chicken and the egg problem. How go you run
'testsetup.php' to test your php installation before you've installed
php?

On 11/29/2011 1:06 PM, ben.m...@valpo.edu wrote:
> Hi,
> 
> I'm having issues testing the VCL frontend code.  I'm trying to open the
> testsetup.php file in firefox, but it Firefox is prompting to have me
> open or download the file.  I am trying to open this up locally for now,
> but I don't know if I did something wrong when modifying conf.php or
> secrets.php, or if it's something with the server.  If anyone has any
> insight, I'd appreciate it.
> 
> Thanks,
> 
> --
> Benjamin B. Macy
> 
> Valparaiso University
> Student Senate Junior Representative
> Student Alumni Association
> Sigma Phi Epsilon
> Electrical Engineering Student
> ben.m...@valpo.edu 
> 616.648.3516
> 


- -- 
Jim O'Dell
Network Analyst
California State University Fullerton
Email: jod...@fullerton.edu
Phone: (657) 278-2256
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk7VUdQACgkQREVHAOnXPYQuHwCgtuJLh18JwWjMlna2n5+jtkTL
gtIAoJmDL8NjjrRuauET1tW5fM29tTXS
=KCfI
-END PGP SIGNATURE-

Re: secrets.php

[Josh Thompson]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mani,

I'm guessing you got this working since you emailed about the XML RPC example.  
Would you mind sharing what you needed to do to get it to work so others that 
might encounter the same problem will have an idea what to do?

Thanks,
Josh

On Tuesday November 15, 2011, Mani Shafa'atDoost wrote:
> I just checked the file and there is no error on this file, but when I try
> to read my secrets.php from other folders, I can't retrieve any data but I
> can open the file.
> 
> On Tue, Nov 15, 2011 at 12:28 PM, Josh Thompson 
wrote:
> > Mani,
> > 
> > Everything looks good in the secrets.php file you included below.  I
> > would suggest running the secrets.php script from the command line using
> > the php command line interpreter:
> > 
> > php secrets.php
> > 
> > Any problems in it would then be reported.
> > 
> > Also, just to be sure, you are talking about secrets.php and not
> > secrets-default.php, right?
> > 
> > Josh
> > 
> > On Sunday November 13, 2011, Mani Shafa'atDoost wrote:
> > > Hello,
> > > 
> > > When I run testsetup.php, I just receive following errors:
> > > Error: fopen(http://localhost/vcl/testsetup.php?includesecretstest=1):
> > > failed to open stream: Permission denied
> > > PHP version: 5.3.8
> > > Including .ht-inc/secrets.php ...
> > > 
> > >- unable to include .ht-inc/secrets.php - this is probably due to a
> > >syntax error in .ht-inc/secrets.php
> > >- skipping tests for contents of .ht-inc/secrets.php
> > > 
> > > Including .ht-inc/conf.php ...
> > > 
> > >- cannot include .ht-inc/conf.php when including of
> > 
> > .ht-inc/secrets.php
> > 
> > >fails
> > > 
> > > Testing for required php extensions ...
> > > 
> > >- All required modules are installed
> > > 
> > > Testing mcrypt ...
> > > 
> > >- Cannot test encryption without $mcryptkey and $mcryptiv from
> > >.ht-inc/secrets.php
> > > 
> > > checking openssl encryption keys ...
> > > 
> > >- Cannot test private key file without $pemkey from
> > 
> > .ht-inc/secrets.php
> > 
> > >- successfully created public key from public key file
> > > 
> > > Testing openssl encryption ...
> > > 
> > >- cannot test encryption without a valid private key
> > > 
> > > Testing for existance of dojo directory ...
> > > 
> > >- dojo directory exists
> > >- dojo directory is readable
> > > 
> > > Checking value of PHP display_errors ...
> > > 
> > >- display_errors: *disabled*
> > >- NOTE: Displaying errors in a production system is a security risk;
> > >however,
> > >while getting VCL up and running, having them displayed makes
> > 
> > debugging
> > 
> > >a little easier. Edit your php.ini file to modify this setting.
> > > 
> > > Done
> > > 
> > > my secrets.php file is like this:
> > > 
> > >  > > $vclhost = 'localhost'; # name of mysql server
> > > $vcldb = 'vcl'; # name of mysql database
> > > $vclusername = 'mani';  # username to access database
> > > $vclpassword = 'mani';  # password to access database
> > > 
> > > $mcryptkey = 'password';  # random password - won't ever have to type
> > > it
> > 
> > so
> > 
> > > make it long
> > > $mcryptiv = '12345678'; // must be 8 hex chars
> > > 
> > > $pemkey = 'password'; # random passphrase - same as given to genkeys.sh
> > > - should be long
> > > ?>
> > > 
> > > can you guide me, what should i do to fix this file?
> > > 
> > > 
> > > Best Regards
> > > Mani
> > 
> > - --
> > - ---
> > Josh Thompson
> > VCL Developer
> > North Carolina State University
> > 
> > my GPG/PGP key can be found at pgp.mit.edu
- -- 
- ---
Josh Thompson
VCL Developer
North Carolina State University

my GPG/PGP key can be found at pgp.mit.edu
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk7VT9kACgkQV/LQcNdtPQNNpwCbBmJtGW0tjBDpcKdrC6NUIuPS
pmAAn32C4ftb78Vp5p+7FlGX8GgBno+l
=iMFp
-END PGP SIGNATURE-

Joining a VCL Virtual Machine to an MS Active Directory Domain

[Fay, Cornelius R.]

Dear VCL Community,

We would like to streamline our VCL user experience by allowing them to 
(re-)authenticate to the Windows VM image using their Active Directory 
credentials.
We have succeeded in allowing them to use their AD password in the VCL 
Reservation component.  However we cannot pass those credentials to the RDP 
file, but if we can 'join' the virtual machine to the AD domain, Users could 
use their AD password (a second time) to start the Windows image in place of 
the random pswd generated by the VCL system.

Has anyone tried this?
Does it seem possible (assuming a unique SID is issued for each new image)?

Thanks,
Neil Fay, Hood College

Re: xmlrpc

[Josh Thompson]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Mani,

Unfortunately, the example code is way out of date and uses API version 1 
which is no longer supported.

A more current example, though in python, is available here:

https://svn.apache.org/repos/asf/incubator/vcl/sandbox/useful_scripts/managegroups.py

Josh

On Sunday November 20, 2011, Mani Shafa'atDoost wrote:
> Hello,
> 
> I just used your sample file to use VCL through XMLRPC, but I received
> following error :
> 
> *Notice*:  xmlrpc: Unsupported API version, cannot continue.
> 
> I just modified username and password in your sample PHP file. I will
> appreciate if you could guide me.
> 
> 
> Best Regards
> 
> Mani
- -- 
- ---
Josh Thompson
VCL Developer
North Carolina State University

my GPG/PGP key can be found at pgp.mit.edu
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk7VT1MACgkQV/LQcNdtPQP+5ACfTAXRcH07hlq+Efkt1NTSfoey
vBYAnRhq3Tu0u0C7+9l3eIva8oY4zdQB
=vdCS
-END PGP SIGNATURE-

Re: Testing the VCL Frontend Code

[Josh Thompson]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Ben,

It sounds like your web server might not be executing the php code but just 
giving you the php file directly.  If you download the file, does it contain 
php code?

As a simpler test, you could create a simple php script with the following in 
it:

- --- don't include this line 

- --- don't include this line 

If you load that page and get only "Hello world", it is processing php 
correctly.  If it prompts you to open or download the file, you have a php 
processing problem, in which case you'll need to look at the documentation for 
your linux distro on setting up php.

Josh

On Tuesday November 29, 2011, ben.m...@valpo.edu wrote:
> Hi,
> 
> I'm having issues testing the VCL frontend code.  I'm trying to open the
> testsetup.php file in firefox, but it Firefox is prompting to have me open
> or download the file.  I am trying to open this up locally for now, but I
> don't know if I did something wrong when modifying conf.php or secrets.php,
> or if it's something with the server.  If anyone has any insight, I'd
> appreciate it.
> 
> Thanks,
> 
> --
> Benjamin B. Macy
> 
> Valparaiso University
> Student Senate Junior Representative
> Student Alumni Association
> Sigma Phi Epsilon
> Electrical Engineering Student
> ben.m...@valpo.edu
> 616.648.3516
- -- 
- ---
Josh Thompson
VCL Developer
North Carolina State University

my GPG/PGP key can be found at pgp.mit.edu
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.17 (GNU/Linux)

iEYEARECAAYFAk7VTvIACgkQV/LQcNdtPQPWDQCeJnaQ3GmP2WAlUdHWFP9wUQqo
W7sAn3VKBWmgQrQzE5KKte0LLuL1ucgw
=M4b7
-END PGP SIGNATURE-

Testing the VCL Frontend Code

[ben.m...@valpo.edu]

Hi,

I'm having issues testing the VCL frontend code.  I'm trying to open the
testsetup.php file in firefox, but it Firefox is prompting to have me open
or download the file.  I am trying to open this up locally for now, but I
don't know if I did something wrong when modifying conf.php or secrets.php,
or if it's something with the server.  If anyone has any insight, I'd
appreciate it.

Thanks,

--
Benjamin B. Macy

Valparaiso University
Student Senate Junior Representative
Student Alumni Association
Sigma Phi Epsilon
Electrical Engineering Student
ben.m...@valpo.edu
616.648.3516

Re: rdp file auto login

[Dmitri Chebotarov]

Looks like with RDP v6 protocol, user's credentials are stored in %userprofile% 
on local PC and not in .rdp file. Plus, password is encrypted using hash from 
user's Windows login password. This practically makes it impossible to generate 
.rdp file with username/password included. 

I found http://www.remkoweijnen.nl/blog/2007/10/17/launch-rdp-from-commandline/ 
utility, which works as a wrapper for mstsc.exe and can pass username/password 
and auto-connect to a RDP session. This is probably closest it gets to 
auto-login...

Thanks.
On Nov 22, 2011, at 16:37 , Aaron Coburn wrote:

> On Nov 22, 2011, at 2:58 PM, Alexander Kurt Keller wrote:
>> I believe years ago (RDP version 4?) the password could be defined in clear 
>> text within the RDP file but that is long unsupported. Here is a write-up 
>> and a lively comments discussion on the  MSTSC embedded password encryption 
>> function:
>> 
>> http://www.remkoweijnen.nl/blog/2007/10/18/how-rdp-passwords-are-encrypted/
>> 
>> it looks like they use the machine or user SID to salt the hash?
> 
> 
> I tried implementing this particular solution a while ago but was never able 
> to get it to work. The basic idea described in the website is that the target 
> machine needs to encrypt the password and that encrypted string goes into the 
> RDP file as:
> 
> password 51:b:{encrypted password}
> 
> For instance, if a suitable encryption program is installed on the VCL 
> Windows machine, the management node could, in theory, request a hashed copy 
> of the password before generating the RDP file for the user.
> 
> I certainly don't want to dissuade anyone from trying to get this to work as 
> described in the link above, but given that there is no reference to 
> 'password 51' fields in the current Terminal Services documentation, I am not 
> entirely sure that the field is still supported: 
> http://technet.microsoft.com/en-us/library/ff393708%28WS.10%29.aspx
> http://support.microsoft.com/?kbid=885187
> 
> The closest I have come to an auto-login solution is to use protocol handlers 
> in the form of a link. Something like this:
> 
> ...
> 
> For this to work on a user's computer, the protocol handler must be 
> registered at the OS level, which introduces an additional level of 
> complexity. On Mac OS X, this is done automatically when a user installs an 
> RDP client such as CoRD. On linux, a user will need to execute something like 
> this to enable the handler:
> gconftool-2 -s /desktop/gnome/url-handlers/rdp/command '/usr/bin/rdesktop %s' 
> --type String
> gconftool-2 -s /desktop/gnome/url-handlers/rdp/enabled --type Boolean true
> I am not entirely sure about how to get this to work on Windows, though. 
> First of all, mstsc.exe doesn't seem to accept a username or password 
> argument from the command line. Nevertheless, if you want the protocol 
> handler to work on Windows, you'll need to modify the registry in 
> HKEY_CLASSES_ROOT\\rdp -- the documentation here will give you a start: 
> http://msdn.microsoft.com/en-us/library/aa767914.aspx
> 
> Please let me know if you make any progress on this!
> 
> Best regards,
> Aaron
> 
> 
> --
> Aaron Coburn
> Systems Administrator and Programmer
> Academic Technology Services, Amherst College
> (413) 542-5451 acob...@amherst.edu
> 
> 
> 
>> -Original Message-
>> From: Josh Thompson [mailto:josh_thomp...@ncsu.edu] 
>> Sent: Tuesday, November 22, 2011 11:12 AM
>> To: vcl-user@incubator.apache.org
>> Subject: Re: rdp file auto login
>> 
>> It's been several years since I tried to get this to work.  However, unless 
>> things have changed (which I'm guessing they haven't), you can't make it 
>> auto- login.  The password is provided in a clear text form in the rdp file. 
>>  
>> Unfortunately, the windows and mac RDC apps won't use the clear text 
>> version.  
>> You can save a password in an encrypted form in an rdp file; however, RDC 
>> uses cryptographic stuff specific to the computer that actually saves the 
>> file, meaning there's no way to generate the encrypted form of the password 
>> unless you are actually on the end user's machine.
>> 
>> If anyone wants to try to investigate this again, I think everyone in the 
>> community would love to see it work.  Or, everyone can switch to linux/unix 
>> platforms that can use rdesktop that will happily accept the password at the 
>> command line.  :)  I have a nice wrapper script for rdesktop that will take 
>> the rdp file and do the auto-login into the remote windows node.
>> 
>> Josh
>> 
>> On Tue November 22 2011 1:29:09 PM Gene Lui wrote:
>>> Dmitri,
>>> 
>>> If you download the rdp file from the connection reservation and open 
>>> it with a editor, you see that the rdp file has both a user name and 
>>> password within the setting file.  For example, the last rdp file had 
>>> the following key entries:
>>> 
>>> username:s:gkl25
>>> clear password:s:LDgKQM
>>> 
>>> I would have thought that this would be passed to the remote desktop 
>>> wh

Re: Virtualizing the Virtualization Server

[Aaron Peeler]

Yes. This requires xCAT http://xcat.sourceforge.net/ xCAT is fairly
straight forward and well supported for the IBM bladeCenter hardware,
but has worked with other hardware also. The xCAT developers are
mostly IBMers - hardware group.


Some xCAT pre-install steps.
1) Make to include the private IP addresses of your blades or phyiscal
machines in the management nodes /etc/hosts file
2) make a copy of your existing dhcpd.conf file

The xcat starting point documentation is:
http://sourceforge.net/apps/mediawiki/xcat/index.php?title=Setting_Up_a_Linux_xCAT_Mgmt_Node

Once xcat is installed you will need to follow these steps to add
support for partimage, this is the component that does the imaging.
https://cwiki.apache.org/VCL/adding-support-for-partimage-and-partimage-ng-to-xcat-2x-unofficial.html

Aaron

On Tue, Nov 29, 2011 at 8:55 AM, Evelio Quiros  wrote:
> Hello,
> First, thanks for all the helpful advice. We were able to get up and going
> thanks to you all.
> Is it possible to capture the image of the Vmware server itself, and then
> replicate it to other bare metal server?
> Is there some documentation on that procedure?
> Thanks Again,
> Al Quiros



-- 
Aaron Peeler
Program Manager
Virtual Computing Lab
NC State University

All electronic mail messages in connection with State business which
are sent to or received by this account are subject to the NC Public
Records Law and may be disclosed to third parties.

Virtualizing the Virtualization Server

[Evelio Quiros]

Hello,
First, thanks for all the helpful advice. We were able to get up and going 
thanks to you all.
Is it possible to capture the image of the Vmware server itself, and then 
replicate it to other bare metal server?
Is there some documentation on that procedure?

Thanks Again,
Al Quiros