I am running MAC OS X but I was able to import the CA Cert and I can see it in 
my Keychain.  However, when I try to bring up the console I get:
Can't connect to websocket proxy server wss://lfg-kvm.corp.lfg.com:6100. Please 
check that:
websocket proxy service is running,
firewalls are properly set,
websocket proxy certificate is trusted by your browser. Default CA certificate 
<https://lfg-kvm.corp.lfgardens.com/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA>.


Louis
-<<—->>-
Louis Bohm
louisb...@gmail.com

 
<https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/public_url>
 
<https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/public_url>

> On May 27, 2020, at 11:01 AM, Scott Dickerson <sdick...@redhat.com> wrote:
> 
> 
> On Wed, May 27, 2020 at 7:42 AM Louis Bohm <louisb...@gmail.com 
> <mailto:louisb...@gmail.com>> wrote:
> OS: Oracle Linux 7.8 (unbreakable kernel)
> Using Oracle Linux Virtualization Manager: Software Version:4.3.6.6-1.0.9.el7
> 
> Since I am running all of it on one physical machine I opted to install the 
> ovirt-engine using the accept defaults option.
> 
> When I try to start a noVNC console I see this in the messages file:
> May 26 16:49:12 lfg-kvm saslpasswd2: Could not find keytab file: 
> /etc/qemu/krb5.tab: No such file or directory
> May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: 
> BDB0073 DB_NOTFOUND: No matching key/data pair found
> May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: 
> BDB0073 DB_NOTFOUND: No matching key/data pair found
> May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: 
> BDB0073 DB_NOTFOUND: No matching key/data pair found
> May 26 16:49:12 lfg-kvm saslpasswd2: error deleting entry from sasldb: 
> BDB0073 DB_NOTFOUND: No matching key/data pair found
> May 26 16:49:14 lfg-kvm journal: 2020-05-26 16:49:14,704-0400 
> ovirt-websocket-proxy: INFO msg:824 handler exception: [SSL: 
> SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:618)
> May 26 16:49:14 lfg-kvm ovirt-websocket-proxy.py: 
> ovirt-websocket-proxy[14582] INFO msg:824 handler exception: [SSL: 
> SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:618)
> 
> I have checked the following:
> [root@lfg-kvm ~]#  engine-config -g WebSocketProxy
> WebSocketProxy: lfg-kvm.corp.lfg.com:6100 <http://lfg-kvm.corp.lfg.com:6100/> 
> version: general
> [root@lfg-kvm ~]# engine-config -g SpiceProxyDefault
> SpiceProxyDefault: http://lfg-kvm.corp.lfg.com:6100 
> <http://lfg-kvm.corp.lfg.com:6100/> version: general
> 
> This is a brand new install.
> 
> I also am unable to get a VNC console up and running.  I have tried with an 
> Ubuntu VM running on my MAC where I installed virt-manager.  The viewer comes 
> up for a second says it cannot connect and then shutsdown.
> 
> 
> If you're only using noVNC, then you need to make sure you import the CA Cert 
> and trust it in your browser.  There is no way to interactively accept the 
> self-signed cert from the engine when noVNC connects via the websocket proxy.
>  
> Anyone have any clue?
> -<<—->>-
> Louis Bohm
> louisb...@gmail.com <mailto:louisb...@gmail.com>
>  
> <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/public_url>
>  
> <https://www.youracclaim.com/badges/f11e0d65-21ad-4458-895b-2c5b5cb11134/public_url>
> _______________________________________________
> Users mailing list -- users@ovirt.org <mailto:users@ovirt.org>
> To unsubscribe send an email to users-le...@ovirt.org 
> <mailto:users-le...@ovirt.org>
> Privacy Statement: https://www.ovirt.org/privacy-policy.html 
> <https://www.ovirt.org/privacy-policy.html>
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/ 
> <https://www.ovirt.org/community/about/community-guidelines/>
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/U66GSTI4QJSGPM6LUVF2WC2UW5JQCNCX/
>  
> <https://lists.ovirt.org/archives/list/users@ovirt.org/message/U66GSTI4QJSGPM6LUVF2WC2UW5JQCNCX/>
> 
> 
> -- 
> Scott Dickerson
> Senior Software Engineer
> RHV-M Engineering - UX Team
> Red Hat, Inc

_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/GXC6DGKUKHGPSVPQQRTUDMQ5ANLA2EUW/

Reply via email to