<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html>
<head>
<meta name="Generator" content="Zarafa WebAccess v7.0.0-27791">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<title>Problem with Sunstone and x509 Auth</title>
<style type="text/css">
body
{
font-family: Arial, Verdana, Sans-Serif ! important;
font-size: 12px;
padding: 5px 5px 5px 5px;
margin: 0px;
border-style: none;
background-color: #ffffff;
}
p, ul, li
{
margin-top: 0px;
margin-bottom: 0px;
}
</style>
</head>
<body>
<p>Hey!</p><p>I'm trying to get sunstone to work with x509 certificates but fail miserably</p><p>My configuration looks as follows:</p><p> </p><p>Opennebula Version 3.0.0 compiled from source</p><p> </p><p>Opennebula with passwords works as a charm and also with x509 on the CLI</p><p> </p><p>What i'm trying to achieve is logging in from sunstone but i get a "</p><div id="one_error" style="display: block;">OpenNebula is not running" message.</div><div style="display: block;"> </div><div style="display: block;">I already searched the newslist a bit and found a more detailed error after</div><p>using that fix<br />http://www.mail-archive.com/users@lists.opennebula.org/msg04410.html</p><p> </p><p> </p><p>The Error message is:</p><p> Authentication failed. Username not found in certificate chain</p><p> </p><p> </p><p> </p><p>I already checked the config for mistakes but because it's working on the CLI i don't think there's anything wrong with the certificates.</p><p> </p><p>The sunstone configuration looks as following:</p><p> </p><p>======================================</p><p># OpenNebula sever contact information<br />:one_xmlrpc: http://localhost:2633/RPC2<br /><br /># Server Configuration<br />:host: 127.0.0.1<br />:port: 9869<br /><br />#:auth: basic<br />:auth: x509<br /><br /># VNC Configuration<br />:vnc_proxy_base_port: 29876<br />:novnc_path: /srv/cloud/one/share/noVNC</p><p> </p><p>======================================</p><p> </p><p> </p><p>For a secure web connection i use apache as proxy having following config</p><p> </p><p> </p><p>======================================</p><p> </p><p><VirtualHost *:443><br /> DocumentRoot /var/www<br /> SSLEngine On<br /> SSLCertificateFile /etc/apache2/sslzert.pem<br /> SSLVerifyClient require<br /> SSLVerifyDepth 2<br /> SSLCACertificateFile /srv/cloud/one/certs/cacert.pem<br /> SSLOptions +StdEnvVars +ExportCertData</p><p> </p><p><br /> ProxyRequests Off<br /><br /><Proxy *><br />Order deny,allow<br />Allow from all<br /></Proxy><br /><br />ProxyPass /admin/ http://localhost:9869/<br />ProxyPassReverse /admin/ http://localhost:9869/<br /></VirtualHost></p><p> </p><p> </p><p>My assumption is that there's something wrong with the apache/sunstone configuration, but i'm stuck at the moment</p><p> </p><p>Any help would be aprecciated =)</p><p> </p><p>Have a nice Day!</p><p>Georg</p>
</body>
</html>