Hello, Well a quick check of the hosts say that they have ovirt- vmconsole enabled on their firewall, but there doesn't seem to be any logs for the vmconsoles on them. Running wireshark on one of the end- user machines shows that the host does send packets back and forth but then the end-user machine TCP resets the connection. (I assume due to the credential failure.) So it doesn't seem to be a firewall issue.
Is there anything I can do to get some more logs from the vmconsoles on the Host? Thanks. -Patrick Hibbs On Tue, 2021-12-14 at 12:56 +0000, Staniforth, Paul wrote: > Hello Patrick, > with noVNC the connection is made via the > websocket-poxy service (probably on the engine server). > The remote-viewer connects directly from the client machine to the > virtual host the VM is running on. Maybe check the network/firewall > between the client and the host, also the OTP expires after 120 > seconds. > > > Regards, > > Paul S. > From: Strahil Nikolov via Users <[email protected]> > Sent: 14 December 2021 12:12 > To: [email protected] <[email protected]>; oVirt Users > Mailing List <[email protected]> > Subject: [ovirt-users] Re: remote-viewer VNC mode issue > Caution External Mail: Do not click any links or open any attachments > unless you trust the sender and know that the content is safe. > The most common problem is the CA of oVirt not trusted in the web > browser of the client. > > > Best Regards, > Strahil Nikolov > > > On Sun, Dec 12, 2021 at 0:00, Patrick Hibbs > > <[email protected]> wrote: > > Hello, > > > > As oVirt unfortuately now requires VNC for the VM consoles, > > I've been attempting to get VNC mode working on my end user > > clients. > > > > The noVNC browser client works just fine, but for some reason > > the default download to remote-viewer fails on the same hosts. > > > > All the end-user gets is a quick flash of the remote-viewer window > > on > > their screen. > > > > Running remote-viewer in debug mode I get this: > > > > ---log snip--- > > > > $ remote-viewer -v --debug Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Opening > > display > > to Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.906: Guest (null) > > has > > a vnc display > > Guest (null) has a vnc display > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Spice > > foreign > > menu updated > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: After open > > connection callback fd=-1 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.952: Opening > > connection to display at Downloads/console.vv > > Opening connection to display at Downloads/console.vv > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: fullscreen > > display 0: 0 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:35.953: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: Insert > > display 0 > > 0x560a423fa1e0 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.032: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Allocated > > 1024x740 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.052: Child > > allocate > > 1024x640 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.053: Got VNC > > credential request for 1 credential(s) > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Not removing > > main window 0 0x560a4195d910 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: Disconnected > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.067: close > > vnc=0x560a419fc220 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: notebook > > show > > status 0x560a419d2280 > > (remote-viewer:4056): virt-viewer-DEBUG: 16:35:36.068: Guest (null) > > display has disconnected, shutting down > > Guest (null) display has disconnected, shutting down > > > > ---log snip--- > > > > It seems to be failing a credential request, but I'm not sure why. > > The > > engine logs only show the VM console ticket being created, but does > > not > > show any connection attempts unless noVNC is used. > > > > ---log snip--- > > > > 2021-12-11 16:48:23,402-05 INFO > > [org.ovirt.engine.core.bll.SetVmTicketCommand] (default task-16) > > [68b90cfe] Running command: SetVmTicketCommand internal: false. > > Entities affected : ID: bb05ab12-91e5-4ab6-92b1-b911ed78f64f Type: > > VMAction group CONNECT_TO_VM with role type USER > > 2021-12-11 16:48:23,414-05 INFO > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > (default task-16) [68b90cfe] START, SetVmTicketVDSCommand(HostName > > = -- > > REDACTED--, SetVmTicketVDSCommandParameters:{hostId='1fdd841b-477f- > > 4d13-9935-7908924dd5a1', vmId='bb05ab12-91e5-4ab6-92b1- > > b911ed78f64f', > > protocol='VNC', ticket='ocziPsEOF4km', validTime='120', userName='-- > > REDACTED--@--REDACTED--', userId='e83ab2b3-c464-49a4-a0ab- > > 4e62e8131304', disconnectAction='LOCK_SCREEN'}), log id: f6dccdd > > 2021-12-11 16:48:23,435-05 INFO > > [org.ovirt.engine.core.vdsbroker.vdsbroker.SetVmTicketVDSCommand] > > (default task-16) [68b90cfe] FINISH, SetVmTicketVDSCommand, return: > > , > > log id: f6dccdd > > 2021-12-11 16:48:23,461-05 INFO > > [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirect > > or] > > (default task-16) [68b90cfe] EVENT_ID: VM_SET_TICKET(164), User -- > > REDACTED--@--REDACTED--@--REDACTED-- initiated console session for > > VM > > Test > > # > > > > ---log snip--- > > > > What else can I do to troubleshoot this? > > > > - Patrick Hibbs > > > > _______________________________________________ > > Users mailing list -- [email protected] > > To unsubscribe send an email to [email protected] > > Privacy Statement: https://www.ovirt.org/privacy-policy.html > > oVirt Code of Conduct: > > https://www.ovirt.org/community/about/community-guidelines/ > > List Archives: > > > https://lists.ovirt.org/archives/list/[email protected]/message/Q5ENXJJU5V7LJOHFB6D6VODNRAW33KQQ/ > To view the terms under which this email is distributed, please go > to:- > https://leedsbeckett.ac.uk/disclaimer/email
_______________________________________________ Users mailing list -- [email protected] To unsubscribe send an email to [email protected] Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/[email protected]/message/NIC3UVOX3R2YFC4UZG52IXVDFOHQ2G6V/
