Project

General

Profile

Tâche #25477

Scénario #25264: L'interface noVNC de Sunstone doit avoir accès aux certificats - HP-001-02 - Test Pré paramétrage HAPY avec image EOLE 2.5.2 - ACA (2.7.0-b1)

Déployer un module et analyser la situation

Added by Gérald Schwartzmann almost 5 years ago. Updated almost 5 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Gérald Schwartzmann
Target version:
sprint 2018 41-43 Equipe MENSR
Start date:
10/09/2018
Due date:
% Done:

0%

Estimated time:
0.00 h
Spent time:
7.00 h
Remaining (hours):
0.0

History

#1 Updated by Gérald Schwartzmann almost 5 years ago

  • Status changed from Nouveau to En cours

#2 Updated by Gérald Schwartzmann almost 5 years ago

  • Assigned To set to Gérald Schwartzmann

#3 Updated by Gérald Schwartzmann almost 5 years ago

http://hapy.ac-test.fr:29876/

Error response

Error code 405.

Message: Method Not Allowed.

Error code explanation: 405 = Specified method is invalid for this resource..

https://hapy.ac-test.fr:29876/

Échec de la connexion sécurisée

root@hapy:~# service opennebula-novnc status
● opennebula-novnc.service - OpenNebula noVNC Server
   Loaded: loaded (/lib/systemd/system/opennebula-novnc.service; disabled; vendor preset: enabled)
   Active: active (running) since Tue 2018-10-09 11:10:06 CEST; 56min ago
  Process: 975 ExecStart=/usr/bin/novnc-server start (code=exited, status=0/SUCCESS)
  Process: 926 ExecStartPre=/usr/sbin/logrotate -f /etc/logrotate.d/opennebula-novnc -s /var/lib/one/.logrotate.status (code=exited, status=0/SUCCESS)
 Main PID: 1019 (python2)
    Tasks: 1 (limit: 4659)
   CGroup: /system.slice/opennebula-novnc.service
           └─1019 python2 /usr/share/one/websockify/websocketproxy.py --target-config=/var/lib/one/sunstone_vnc_tokens --cert /etc/ssl/certs/eole.crt --key /e

oct. 09 11:09:59 hapy systemd[1]: Starting OpenNebula noVNC Server...
oct. 09 11:10:06 hapy novnc-server[975]: VNC proxy started
oct. 09 11:10:06 hapy systemd[1]: Started OpenNebula noVNC Server.
lines 1-13/13 (END)

/etc/one/sunstone-server.conf

:vnc_proxy_port: 29876
:vnc_proxy_support_wss: yes
:vnc_proxy_cert: /etc/ssl/certs/eole.crt
:vnc_proxy_key: /etc/ssl/private/eole.key
:vnc_proxy_ipv6: false
:vnc_request_password: false

root@hapy:/etc/ssl/certs# ll /etc/ssl/certs/eole.crt
-rw-r--r-- 1 root root 1444 oct.   8 19:28 /etc/ssl/certs/eole.crt

root@hapy:/etc/ssl/certs# ll /etc/ssl/private/eole.key
-rw------- 1 root root 1679 oct.   8 19:28 /etc/ssl/private/eole.key
root@hapy:/etc/ssl/certs# 


root@hapy:/etc/ssl/certs# tail -f /var/log/rsyslog/local/novnc-server/novnc-server.info.log 
2018-10-09T11:10:06.379876+02:00 hapy.ac-test.fr novnc-server[975]: VNC proxy started

#4 Updated by Gérald Schwartzmann almost 5 years ago 

root@hapy:~# systemctl -p Group show --value opennebula-novnc
oneadmin
root@hapy:~# systemctl -p User show --value opennebula-novnc
oneadmin
root@hapy:~#

#5 Updated by Gérald Schwartzmann almost 5 years ago

Le service est lancé avec eoleone alors que l'utilisation des certificats est autorisé pour root.

#6 Updated by Gérald Schwartzmann almost 5 years ago

  • Estimated time set to 0.00 h
  • Remaining (hours) set to 0.0

#7 Updated by Gérald Schwartzmann almost 5 years ago

  • Status changed from En cours to Résolu

#8 Updated by Scrum Master almost 5 years ago

  • Status changed from Résolu to Fermé

Also available in: Atom PDF