noVNC cannot connect the server

when i was open the ‘launch desktop’ it show me cannot connet to the server

the user log(ondemand/data/sys/dashboard/batch_connect/sys/bc_desktop/**/output/4716a39e-ca01-48a3-a4ec-5ff3064618d9):
system-config-printer-applet: failed to start NewPrinterNotification service
system-config-printer-applet: failed to start PrinterDriversInstaller service: org.freedesktop.DBus.Error.AccessDenied: Connection “:1.2006” is not allowed to own the service “com.redhat.PrinterDriversInstaller” due to security policies in the configuration file
Initializing caja-image-converter extension
Initializing caja-open-terminal extension
*** ERROR ***
TI:09:31:53 TH:0x11eb060 FI:gpm-manager.c FN:gpm_manager_systemd_inhibit,1784

  • Error in dbus - GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: Permission denied
    Traceback:
    mate-power-manager() [0x418b9f]
    mate-power-manager() [0x411220]
    /lib64/libgobject-2.0.so.0(g_type_create_instance+0x1fb) [0x7f566254b4eb]
    /lib64/libgobject-2.0.so.0(+0x151fd) [0x7f566252f1fd]
    /lib64/libgobject-2.0.so.0(g_object_new_with_properties+0x27d) [0x7f5662530aad]
    /lib64/libgobject-2.0.so.0(g_object_new+0xc1) [0x7f5662531491]
    mate-power-manager() [0x411a22]
    mate-power-manager() [0x4080b8]
    /lib64/libc.so.6(__libc_start_main+0xf5) [0x7f566193b445]
    mate-power-manager() [0x4083db]

(mate-panel:518107): GLib-GObject-CRITICAL **: 09:31:54.569: g_object_unref: assertion ‘G_IS_OBJECT (object)’ failed

@flybirdkh thanks for bringing the questions here.

To me this looks like the key line from the message you included:

There’s an answer on StackOverflow about DBus policies: https://stackoverflow.com/a/17575910/1015786. It appears that you may need to either explicitly approve the service, or tweak the access control for the service. Copying Juan’s answer:

The simplest way to get going with the example above is to edit /etc/dbus-1/system.conf and add the following line:

<policy>
    ...
    <allow own="org.testobj.service"/>
</policy>

I’ve just encountered this error as well. My user session log contains the much the same output, although no reference to dbus. Log output at end of comments. Major difference is that my system is reporting ‘nm-applet’ network manager not running. I’m not familiar with this, and will look into that now. No complaints about dbus in this case.

Our situation is that following performing the update from v1.5 -> v1.6, reverse proxy is not succeeding on our cluster, and generating the “PrinterDriversInstall” error. OnDemand was originally installed here with v1.3 in October 2018, and the reverse proxy to support interactive applications had been successfully installed soon thereafter. In Feb 2019 we cleaned up the system configuration by adopting the vnc script_wrapper approach (from .yml):

vnc:
      script_wrapper: "module purge\nmodule load gcc/6.3.0\nmodule load ondemand-vnc/1.3\n%s"
      set_host: "host=$(hostname)"

VNC support was pretty robust since February, and was not affected by the upgrade v1.3 -> v1.5.

Thanks all

from   data/sys/dashboard/batch_connect/sys/bc_desktop/smaster/output/<long-hash>/output.log
(xfwm4:25494): xfwm4-WARNING **: 11:40:48.720: Error opening /dev/dri/card0: Permission denied
SELinux Troubleshooter: Applet requires SELinux be enabled to run.
/usr/share/system-config-printer/applet.py:44: PyGIWarning: Notify was imported without specifying a version first. Use gi.require_version('Notify', '0.7') before import to ensure that the right version gets loaded.
  from gi.repository import Notify
system-config-printer-applet: failed to start NewPrinterNotification service
system-config-printer-applet: failed to start PrinterDriversInstaller service: org.freedesktop.DBus.Error.AccessDenied: Connection ":1.1985" is not allowed to own the service "com.redhat.PrinterDriversInstaller" due to security policies in the configuration file

(nm-applet:25509): nm-applet-WARNING **: 11:40:50.918: NetworkManager is not running
slurmstepd: error: *** JOB 13730687 ON compt162 CANCELLED AT 2019-08-12T14:17:35 ***

thank you for your reply ,but the error is not changed when i add the service into de file (/etc/dbus-1/system.conf


either change it in ondemand node or compute node is the same error

I would expect that it should be:

<allow own="com.redhat.PrinterDriversInstaller" />

I am going to check in with one of our sysadmins about that to be sure.

@flybirdkh The file /etc/dbus-1/system.d/com.redhat.PrinterDriversInstaller.conf is what you can modify and it comes from system-config-printer-libs package. If you don’t need that package it may be easier to just uninstall it. I don’t know enough about that particular dbus interface or dbus itself to know if it’s safe to change the policy for default context.

@flybirdkh a little bit of googling and I found that there are policy kits for mate, xfce and gnome. Do you have these packages installed on your system?

[johrstrom@o0807 ~]$ rpm -q polkit-gnome xfce-polkit mate-polkit polkit
polkit-gnome-0.106-0.1.20170423gita0763a2.el7.x86_64
xfce-polkit-0.2-8.el7.x86_64
mate-polkit-1.16.0-2.el7.x86_64
polkit-0.112-14.el7.x86_64

here’s the bug report with a stack trace that’s very similar to yours. Looks like that person had to get polkit, but you may or may not need all of those for the various flavors. That rpm -q was taken from our VNC/batch connect host.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761471

@emily.dragowsky I don’t know off hand what’s going on with your site, but we’ll look into it. Off the top I’d guess what you did, look into this network manager applet and ensure it boots?

@emily.dragowsky after a little bit of reading, it looks like all those messages may be OK. They’re just applets after all, and if they fail to boot it shouldn’t stop gnome from booting. I also get the bit about not being able to read /dev/dri/card0 so that’s nothing also.

I would look in journalctl or /var/log/messages for something that may be killing the process(es). I’d also be interested in knowing what the exit status was. It doesn’t seem like anything was that wrong, then all the sudden it’s cancelled?

I do check and change some policy ,also do remove the package(mate-power-manager) ,now the last error is

either ondemand or compute node,there is no evident error in /var/log/message

just change the /etc/dbus-1/system.d/com.redhat.PrinterDriversInstaller.conf

Did you find a solution?

just solve the print error.
the “(mate-panel:518107): GLib-GObject-CRITICAL **: 09:31:54.569: g_object_unref: assertion ‘G_IS_OBJECT (object)’ failed” is the main error which is still here.

can you show me your yml files(/etc/ood/config/clusters.d/my_cluster.yml)?
I’m not sure what makes this error

its over ,i’ve solved it by change the hostname.

Thank you for all the reply :hugs::grimacing:

Hi, the suggestion to review the config files was useful.

The regex used in our local ‘ood_portal.yml’ had been changed (not sure what happened). Restoring that regex: ‘(comp)\d+’ --> ‘(compt)\d+’ resolved the issue. So the literal error presented in the webpage (URL not found) should have been taken more literally by myself. And I think that this broke the reverse proxy because this form (comp) of the hostnames was inconsistent with the submit files used with the interactive applications – but I’m not convinced that that is true. I’m not even convinced that I should think of this as having “broken the reverse proxy”. I mean it worked fine, but it the application was launched on compt143, and the ood_portal.yml could only supply comp143 for a request, is that truly a broken reverse proxy?

In any event, consistency is now restored in our environment.Our interactive apps are stable for the past day since having this realization.

And the selectable ‘quality’ and ‘compression’ have been exercised, and are appreciated, now that the apps are functional.

Cheers

Thanks very much for your reply ,i’ve solved this problem which occured by getting a wrong hostname.