[libvirt] PATCH: Support SASL auth for QEMU VNC servers

Daniel P. Berrange berrange at redhat.com
Wed Mar 11 14:58:15 UTC 2009


On Fri, Mar 06, 2009 at 02:14:40PM +0100, Daniel Veillard wrote:
> On Thu, Mar 05, 2009 at 04:37:06PM +0000, Daniel P. Berrange wrote:
> > This patch adds a config option to /etc/libvirt/qemu.conf to allow the
> > enablement of SASL authentication of the QEMU VNC servers. The patches
> > to QEMU are posted upstream, and though their merge is delayed while the
> > QEMU release is sorted out, I expect them to be merged in a week or so.
> > I'm posting this patch for review now, though best not to commit it to
> > CVS until the QEMU stuff is finally merged.
> [...]
> > @@ -1295,6 +1315,15 @@ int qemudBuildCommandLine(virConnectPtr 
> >                                        driver->vncTLSx509certdir);
> >                  }
> >              }
> > +
> > +            if (driver->vncSASL) {
> > +                virBufferAddLit(&opt, ",sasl");
> > +
> > +                if (driver->vncSASLdir)
> > +                    ADD_ENV_PAIR("SASL_CONF_DIR", driver->vncSASLdir);
> > +
> > +                /* TODO: Support ACLs later */
> 
>   Just a suggestion: add what dependancy is missing for not adding
> it immediately so if one hit the comment later it's easier to understand
> why this is missing and how to fill in.
> 
>   Okay, patch looks fine, but agreed let's wait for the dependancy in
> QEmu to be commited before pushing this to CVs,

FYI, the SASL support is now committed to upstream QEMU SVN repository,
so it should be safe to apply this to libvirt now


Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|




More information about the libvir-list mailing list