<div dir="ltr">Hi Gary,<div><br></div><div style>thanks for reporting your progress with this issue, I was trying to figure out how to help you but didn't know how, so I'm glad you figured it out :)</div><div style>
<br></div><div style>By the way, the funcionality you were looking for is an interesting one. Would you be interested in creating a feature request in <a href="http://dev.opennebula.org">dev.opennebula.org</a> detailing what you would expect by restricting the config options for regular users, etc?</div>
<div style><br></div><div style>cheers,<br>Jaime</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Mar 28, 2013 at 4:41 PM, Gary S. Cuozzo <span dir="ltr"><<a href="mailto:gary@isgsoftware.net" target="_blank">gary@isgsoftware.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div style="font-size:12pt;font-family:arial,helvetica,sans-serif">Ok, I figured it out. I traced through the code on the sunstone server and also did some debugging on the frontend javascript. I found that when I login as the user which doesn't work, the code would blow up when trying to get some configuration settings. I then remembered that I had turned off config tab in sunstone-plugins.yaml because I wanted to strip the interface down for regular users to limit what they can do.<br>
<br>So, I turned that module back on and it's working now. Obviously that is a required module. :)<br><br>Thanks,<br>gary<br><br><br><hr><div><div class="h5"><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal">
<br><div style="font-size:12pt;font-family:arial,helvetica,sans-serif">Did a bit more poking around. Tried all sorts of things with users, groups, acl's, no luck & no errors. Gonna see if I can take a look at the code and gain any knowledge there. I'm assuming it has to be something with my setup as I would expect lots of folks have many users accessing guests via websockets/vnc.<br>
<br>Thanks,<br>gary<br><br><br><hr><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal"><br><div style="font-size:12pt;font-family:arial,helvetica,sans-serif">
Ok, I looked at this a bit more. I killed the websocket server and started a new one via a shell so I can see the output. When I login as my main admin user, I can click on a vm and view the vnc console. I see this logged by websocket to stdout:<br>
<br> 1: 74.94.xxx.xx: SSL/TLS (wss://) WebSocket connection<br> 1: 74.94.xxx.xx: Version hybi-13, base64: 'True'<br> 1: 74.94.xxx.xx: Path: '/?token=nafe4fgtywxlqjnrf68m'<br> 1: connecting to: vmhost:6146<br>
<br>I then use a separate browser session and login as my regular user. When I click the vnc icon, nothing is logged by the websocket server. Sunstone GUI reports a startvnc request is made. I see in the sunstone.log file this entry:<br>
<br> Thu Mar 28 11:08:13 2013 [I]: 127.0.0.1 - - [28/Mar/2013 11:08:13] "POST /vm/245/startvnc HTTP/1.0" 200 48 0.0483<br><br>Is there a way I can find out more specifically what happens during the /vm/245/startvnc request?<br>
<br>Thanks,<br>gary<br><br><br><br><br><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal"><div style="font-size:12pt;font-family:arial,helvetica,sans-serif">
<blockquote>I am trying to give another user access to the VNC console to their VM in sunstone. Here is what I tried:<br>* give the user a login using their email address as username & a password<br>* create a unique group and add the new user to the group<br>
* set user/group ownership for image/template/vm to the new user & group<br>* set permissions for user & group to "use" for each image/template/vm<br><br>When I try to login as the new user, I can see the resources in sunstone. The "vnc access" icon for the VM is enabled. I can click it, but nothing at all happens. No window pops up, nothing in the log, no error.<br>
<br>Can somebody let me know if I'm doing something wrong and what the proper process to give access to a user?<br><br>I'm using ONE 3.8.1.<br><br>Thanks in advance,<br>gary<br></blockquote><br></div><br></div></div>
<br>_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br><a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
</div><br></div><br>_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br><a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
</div><br></div></div></div></div><br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Jaime Melis<br>Project Engineer<br>OpenNebula - The Open Source Toolkit for Cloud Computing<br><a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:jmelis@opennebula.org" target="_blank">jmelis@opennebula.org</a>
</div>