Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1134315

Summary: ovirt-guest-agent installed on Win7-32bit,but SSO not work
Product: [Retired] oVirt Reporter: rainmarks <rainmarks>
Component: ovirt-guest-agentAssignee: Vinzenz Feenstra [evilissimo] <vfeenstr>
Status: CLOSED CURRENTRELEASE QA Contact: Jiri Belka <jbelka>
Severity: high Docs Contact:
Priority: unspecified    
Version: 3.4CC: ecohen, gklein, iheim, oourfali, rbalakri, Rhev-m-bugs, yeylon
Target Milestone: ---Keywords: Triaged
Target Release: 3.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: virt
Fixed In Version: ovirt-engine 3.5 rc1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-10-17 12:29:50 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
logs none

Description rainmarks 2014-08-27 09:39:10 UTC
Created attachment 931359 [details]
logs

Description of problem:

I'm following the step to install ovirt-guest-agent:

1.Create ad domain on windows 2008 r2 
2.Add win7 host to ad
3.Add the domain to ovirt directory service configuration
4.Install the spice-guest-tools-0.74.exe on win7
5.Install python-2.7.3.msi pywin32-216.win32-py2.7.exe
6.Download ovirt-guest-agent-ovirt-3.4.zip from https://github.com/oVirt/ovirt-guest-agent and compile the OVirtCredProv.dll with vs2008, Then copy the ovirtcredprov.dll into the C:\Windows\system32 folder And execute the Register.reg
7.Copy the configuration files:default.ini,default-logger.ini and default-logger.ini to the ovirt-guest-agent directory, last following the instructions in https://github.com/oVirt/ovirt-guest-agent/blob/master/ovirt-guest-agent/README-windows.txt,
Install and Run the service:
> python OVirtGuestService.py install
> net start OVirtGuestService
8.Reboot
9.Login the admin portal of ovirt, I can see the FQDN, IP Addresses, Installed Applications, and memory info of the win7.
10.Login the user potal by the domain account,the win7's screen was still loced and it seems the guest-agent sso does not working.

view the rhev-agent.log,it seems that the agent didn't received the auto-login command but exist lock-screen command.

I was try to install the ovirt-guest-tools-3.5-1.iso http://resources.ovirt.org/pub/ovirt-3.5-pre/iso/ovirt-guest-tools/ovirt-guest-tools-3.5-1.iso
it seems the same result.

what's the problem of my environment? The question puzzled me for several days.
who can tell me ,thanks.

Version-Release number of selected component (if applicable):
ovirt-engin-3.4.2
spice-guest-tools-0.74
python-2.7.3
ovirt-guest-agent-ovirt-3.4


Actual results:
SSo not works.

Expected results:
SSo works while accessing guest console .

Additional info:

Comment 1 Vinzenz Feenstra [evilissimo] 2014-08-28 08:48:22 UTC
There's a limitation in the 3.4 engine (which has been changed for 3.5) that it checks for the guest agent application to be installed. However since the naming of the guest agent varies that much upstream, I have posted a patch for this in 3.5 that it does no longer require the application to be present when sending the login info.

To me it looks like that this is the cause of the SSO issue, since the engine is not even sending the information at all.

ovirt engine 3.5 has fixed this issue and the SSO should work

Comment 2 Vinzenz Feenstra [evilissimo] 2014-08-28 08:52:39 UTC
@rainmarks:

If you would like to verify this with the ovirt-3.5 rc1, please also beware that there's a known issue on Windows 7 x86 that a policy in the registry has to be set for SSO to work with secure logon.

The policy is located at: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System 

There should be a REG_DWORD value with the name SoftwareSASGeneration and the value 3

If this is not present please set it, and if it is present set the value to either 1 or 3

Thanks.

Comment 3 rainmarks 2014-08-28 09:28:44 UTC
Thanks very mutch.
it seems not a hard problem.
Is there any simple way to let the ovirt-guest-agent sso work in 3.4 engin?

Comment 4 rainmarks 2014-08-28 09:29:05 UTC
Thanks very mutch.
it seems not a hard problem.
Is there any simple way to let the ovirt-guest-agent sso work in 3.4 engin?

Comment 5 rainmarks 2014-08-29 09:21:18 UTC
Excuse me again, if it's convenient could you tell me which files modified in voirt-engine src? I want to compare the code have a look what the problem is.

Thanks very match。

(In reply to Vinzenz Feenstra [evilissimo] from comment #1)
> There's a limitation in the 3.4 engine (which has been changed for 3.5) that
> it checks for the guest agent application to be installed. However since the
> naming of the guest agent varies that much upstream, I have posted a patch
> for this in 3.5 that it does no longer require the application to be present
> when sending the login info.
> 
> To me it looks like that this is the cause of the SSO issue, since the
> engine is not even sending the information at all.
> 
> ovirt engine 3.5 has fixed this issue and the SSO should work

Comment 6 Jiri Belka 2014-09-03 14:38:51 UTC
ok

# systemctl list-unit-files | egrep "qemu|ovirt"
ovirt-guest-agent.service                   enabled 
qemu-guest-agent.service                    static

Comment 7 Jiri Belka 2014-09-03 14:39:12 UTC
ooops, bad tab :)

Comment 8 Sandro Bonazzola 2014-10-17 12:29:50 UTC
oVirt 3.5 has been released and should include the fix for this issue.