[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL support to VNC



On Tue, May 16, 2017 at 12:03 AM, Simon Waterman
<watermansrdev@xxxxxxxxx> wrote:
> This patch series back-ports SASL authentication from
> upstream QEMU to the VNC server in qemu-xen-traditional.
> It enables authentication to the VNC console of a domain
> to be controlled using any SASL mechanism when using an
> IOEMU stubdom.
>
> SASL can be used with or without X509 certificates.
>
> The option is currently enabled during build by adding
> --enable-vnc-sasl to the configure line in xen-setup in the
> root of the QEMU tree.
>
> SASL auth can be enabled for a domain using the 'vnclisten'
> option in the Xen config file:
> vnclisten="0.0.0.0:5,tls,x509verify=/etc/ssl,sasl"
>
> Details of how to configure SASL in QEMU can be found here:
> https://qemu.weilnetz.de/doc/qemu-doc.html#vnc_005fsec_005fsasl

Hmm, I don't think this counts as "small patch with simple changes",
but I'll let Ian comment.

 -George

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.