[SOLVED] Websocket connection invalid pvevnc ticket

[JVisi]

Hello
Reading through the API call I can successfuly make request to the following endpoints:

post - api2/json/access/ticket
post - api2/json/nodes/node/lxc/vmid/vncproxy
get api2/json/nodes/node/lxc/vmid/vncwebsocket

From these (besides other things) I have the pvevnc-ticket, the websocket port and a pveauthcookie
but then when I'm trying to call:

wss://ip:8006/api2/json/nodes/node/lxc/vmid/vncwebsocket?port=5902&vncticket=PVEVNC..

fails with: Connect Error: Error: Server responded with a non-101 status: 401 permission denied - invalid PVEVNC ticket

The vnc ticket is encoded in both cases and it works fine when I GET ../vmid/vncwebsocket

Am I missing something?

 

[dcsapak]

are you sure the ticket is urlencoded?
should work, since we do basically the same in novnc

 

[JVisi]

are you sure the ticket is urlencoded?
should work, since we do basically the same in novnc

I rewrote this part in an another environment it worked, copy pasted back and it works, maybe it was a typo somewhere I couldnt see, thanks for your time

 

[BrunoSilva]

Estou passando pela mesma coisa.

Algumas coisas que notei foram.
Se eu estiver conectado ao servidor Proxmox e chamar a url https://10.0.0.101:8006?console=kvm...BF2::DxnjWLwscU0FDC059GxpLOfMvf9vPgFXoanqdTn9 yl CueUx4R/qI6CMAbSOWwAexaFXLbwvTeo4IJj0sbW1Q3FNC71urbTYBaD2BhkLrR06Onw05aJM72/R9kESnhiYk9nt0Vhud0XtSg2zttjG5247m39rkKiDIGvgqijMEVOn0jD2hoFRCrTGTr6O 1 TnUY7D+EfSxtnVXpcE4jU85U0YiKLb1Ifyyb2G4f2zw+KerZ /CTTXtcuB4GHq9P+ pskTPZcFzhajnxTSVKdGT2Y+n9MIS1DWEa2d7W0dGvo/5+VHS2Ilef58dFChSPnjywPrCtbqnOEbb6e6ZV4wlx7YLA==&port=5900

Funciona.

Agora, se eu fizer logoff, os tokens de autorização param de funcionar.

Inspecionando a página do console chamada notei que tem um script java com as credenciais

Deve ficar assim:


if (typeof(PVE) === 'indefinido') PVE = {};
PVE.UserName = 'root@pam';
PVE.CSRFPreventionToken = '64E35C3E:rGVgFRAeNk1A+qKoeITZ0K+nzjlw2+CxY52WD2Sm1Rg';
INCLUDE_URI='/novnc/include';
</script>

mais fique assim

<script type="text/javascript">
if (typeof(PVE) === 'undefined') PVE = {};
PVE.UserName = '';
PVE.CSRFPreventionToken = 'nulo';
INCLUDE_URI='/novnc/include';
</script>