Hey Everyone!

I solved it! I friggin solved it, and it didn´t have anything to do with the 
spice-client, spice-plugin(ActiveX or XPI), or userportal specifically, it´s in 
the engine itself! So Juanjo here said that it works for him, and I took a 
guess that´s because he is only using admin@internal<mailto:admin@internal> for 
testing (correct me if I´m wrong Juanjo), so I added a "UserRole" to admin on a 
test VM, logged into Userportal, clicked for console, and it worked! So, since 
our setup is a little more complex, as it´s connected to our ActiveDirectory, I 
concluded that it must be a permissions related issue. I created a new 
UserRole, called "ConsoleOwner" that only have "Login Permissions" and 
"RemoteLogin" and added that role to our engine´s "System Permissions" on a 
directory group as "broad" as possible. After that if I also added an explicit 
UserRole permission for a directory user on any VM now it works 100%. Me so 
happy!:)

A question goes out the developers: Should you have to do that? I thought that 
permissions where supposed to be calculated like Windows ACLs "Effective 
Permissions", so that if I just add sufficient permissions for a directory user 
on a VM, it´s effective permissions should have granted the necessary abilities 
in the system, without me having to first add that as a "big" system permission 
to have them granted? Bug, or intended?

Thank you so much Juanjo, for posting the versions you are currently using that 
proved that it "should" work, and that it had to be something else that 
prevented us from using it (which it was). Thank you!

Best Regards
Karli Sjöberg

tor 2013-04-11 klockan 16:42 +0200 skrev Juan Jose:
Hello again Karli,



In this mail thread itself, David give me some indication about how I could to 
debug my spice connection in the client looking at spicex.log or installing 
debug-helper.exe. I try to search spicex.log and I tried to install 
debug-helper.exe. Searching this debug application I found this thread in 
u...@ovirt.org<mailto:u...@ovirt.org> historical mail list:


http://lists.ovirt.org/pipermail/users/2013-January/011466.html


And as you see in the Itamar Heim response to Dennis Böck, the host has to be 
accessible and resolvable and to have spice ports open to the client. I didn't 
have my host, or node as you want name it, machine configured in the client 
hosts file. I had spice ports opened, I only tried to configure node hostname 
in the client host file and "voilà", it works. This is all my history. Of 
course, I have also the engine machine configure in the client hosts file. I 
have this configuration because this both machines aren't configure in my 
corporative DNS.


Again, I hope that it was useful.


Juanjo.


On Thu, Apr 11, 2013 at 1:21 PM, Karli Sjöberg 
<karli.sjob...@slu.se<mailto:karli.sjob...@slu.se>> wrote:
tor 2013-04-11 klockan 13:12 +0200 skrev Juan Jose:
Hello Karli,



No problem, the output of rpm query is:


[root@ovirt-engine ~]# rpm -qa | grep ovirt
ovirt-image-uploader-3.1.0-0.git9c42c8.fc17.noarch
ovirt-engine-restapi-3.1.0-2.fc17.noarch
ovirt-engine-backend-3.1.0-2.fc17.noarch
ovirt-engine-config-3.1.0-2.fc17.noarch
ovirt-release-fedora-4-2.noarch
ovirt-engine-sdk-3.1.0.4-1.fc17.noarch
ovirt-log-collector-3.1.0-0.git10d719.fc17.noarch
ovirt-engine-genericapi-3.1.0-2.fc17.noarch
ovirt-engine-tools-common-3.1.0-2.fc17.noarch
ovirt-engine-dbscripts-3.1.0-2.fc17.noarch
ovirt-engine-userportal-3.1.0-2.fc17.noarch


What the heck, 3.1.0-2?! Then why the doodoo doesn´t it work for us on 
3.1.0-4?! Have you turned off SSL or something? I´m wondering what could be 
different on your system compared to ours...


ovirt-engine-notification-service-3.1.0-2.fc17.noarch
ovirt-iso-uploader-3.1.0-0.git1841d9.fc17.noarch
ovirt-engine-webadmin-portal-3.1.0-2.fc17.noarch
ovirt-engine-setup-3.1.0-2.fc17.noarch
ovirt-engine-3.1.0-2.fc17.noarch


I hope this help you to test your system. If you need some other information I 
will be happy to help.


Yeah, how did you reach the conslusion that you needed to edit your host-file 
for it to start working? Did you follow any debugging instructions previously 
mentioned, and if you did, please explain how step by step so I can test and 
try to debug our systems as well?




Juanjo.


On Thu, Apr 11, 2013 at 6:55 AM, Karli Sjöberg 
<karli.sjob...@slu.se<mailto:karli.sjob...@slu.se>> wrote:
ons 2013-04-10 klockan 17:22 +0200 skrev Juan Jose:

Yes, User portal works fine at the moment. I want to install spice-guest-tools 
to improve the windows VM integration in client machine. After that I will try 
to add a server user validation.


Great to hear that! Although the topic is "3.2 final status...", I would like 
the output of "rpm -qa | grep ovirt" from your engine. I´m stuck at 3.1.0-4, 
since it is still impossible to upgrade. But as soon as that´s fixed I´ll be 
able to try and confirm this as well.


/Karli



Many thanks,


Juanjo.


On Wed, Apr 10, 2013 at 6:46 AM, Karli Sjöberg 
<karli.sjob...@slu.se<mailto:karli.sjob...@slu.se>> wrote:
tis 2013-04-09 klockan 17:11 +0200 skrev Juan Jose:
Yes host or node, is my machine that has the hypervisor and yes I tried open 
console from Admin-Portal and It didn't work. Now both are working in a Win7 
client with IE 9.
Is the User-portal working as well?





Many thanks again,


Juanjo.


On Tue, Apr 9, 2013 at 2:53 PM, Karli Sjöberg 
<karli.sjob...@slu.se<mailto:karli.sjob...@slu.se>> wrote:
tis 2013-04-09 klockan 13:49 +0200 skrev Juan Jose:

Hello David,


My problem was that I needed to add my host to 
\windows\system32\driver\etc\hosts file moreover to have virt-viewer installed 
in the Windows 7 client. Now I can open the console after that.
When you say "host", I´m guessing you mean the hypervisor that is running the 
VM you want to access. Have you tried opening console through Admin-portal, 
User-portal, or both? And they all work?

/Karli


Many thanks,


Juanjo.




On Mon, Apr 8, 2013 at 4:23 PM, David Jaša 
<dj...@redhat.com<mailto:dj...@redhat.com>> wrote:
Hi Juan,

Juan Jose píše v Po 08. 04. 2013 v 14:36 +0200:
>
> Hello evrybody,
>
>
> I'm testing open console in a Windows 7 client with IE 9 and when I
> try to click in console when I'm inside User Portal with wirt-viewer
> installad, it is launched but and virt-viewer give me the message
> "Unable to connect to graphic server" and It can't connect to my VM.
> Any suggest?


I've described the debugging steps on this list in the past, please look
them up and go through spicex.log. If that isn't sufficient, please use
debug-helper.exe (IIRC I described it in another mail here) to get
remote-viewer debug output.

HTH,

David

>
>
> Many thanks in avanced,
>
>
> Juanjo.
>
>
> On Thu, Mar 21, 2013 at 1:49 PM, Gianluca Cecchi
> <gianluca.cec...@gmail.com<mailto:gianluca.cec...@gmail.com>> wrote:
>         On Wed, Mar 20, 2013 at 10:43 PM, Jeff Bailey wrote:
>         > On 3/20/2013 5:20 AM, Christophe Fergeau wrote:
>         >>
>         >> On Tue, Mar 19, 2013 at 05:11:56PM -0400, Jeff Bailey
>         wrote:
>         >
>
>         > Heh, heh, maybe it's a secret. :)
>         >
>         > Actually, I believe I got it from
>         http://elmarco.fedorapeople.org/spice.cab
>         > and it seems to be version 5.0.2.2.
>         >
>
>
>
>         As already pointed in another mail of this same thread from
>         Michal
>         Skrivanek (about a month ago), the info is at
>         http://wiki.ovirt.org/How_to_Connect_to_SPICE_Console_With_Portal
>         and the page indeed contains the same link to spice.cab file
>         you are referring
>         so possibly difficult to find but not a secret... ;-)
>
>         Gianluca
>         _______________________________________________
>         Users mailing list
>         Users@ovirt.org<mailto:Users@ovirt.org>
>         http://lists.ovirt.org/mailman/listinfo/users
>
>
>
> _______________________________________________
> Users mailing list
> Users@ovirt.org<mailto:Users@ovirt.org>
> http://lists.ovirt.org/mailman/listinfo/users


--

David Jaša, RHCE

SPICE QE based in Brno
GPG Key:     22C33E24
Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24







--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjob...@slu.se<mailto:karli.sjob...@adm.slu.se>



--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjob...@slu.se<mailto:karli.sjob...@adm.slu.se>



--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjob...@slu.se<mailto:karli.sjob...@adm.slu.se>



--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66<tel:%2B46-%280%2918-67%2015%2066>
karli.sjob...@slu.se<mailto:karli.sjob...@adm.slu.se>



--

Med Vänliga Hälsningar
-------------------------------------------------------------------------------
Karli Sjöberg
Swedish University of Agricultural Sciences
Box 7079 (Visiting Address Kronåsvägen 8)
S-750 07 Uppsala, Sweden
Phone:  +46-(0)18-67 15 66
karli.sjob...@slu.se<mailto:karli.sjob...@adm.slu.se>
_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

Reply via email to