Re: web interface?

["Daniel P. Berrange" <berrange-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>]

On Tue, Jul 31, 2007 at 09:33:30AM -0700, Matthew Kent wrote:
> >  The problem is security, 
> > Authenticating users on the page is simple enough, but i cant see a 
> > method by which i could put a password on the vnc port in qemu?
> > 
> 
> http://fedoraproject.org/wiki/Releases/FeatureVirtSecurity is a project
> tasked with improving VNC security among other things, right now qemu
> doesn't have many options in that regard.

Yep, this is the code I'm just finishing off now in preparation for review
on QEMU mailing lists.

> > Ideally, what i would like to be able to do is when someone accesses the 
> > console it sets the password randomly, then embed's it into the request. 
> > Once everyone disconnects it resets the password (but thats not quite so 
> > important at this point).
> > 
> 
> Xen has patches to qemu vnc for supporting passwords if you need a
> starting point. Though iirc they are pulled from the xenstore or
> whatever they call it, so it would need some work I'd imagine.

The Xenstore integration made it pretty useless as a basis for password
support in general QEMU codebase :-(

Dan.
-- 
|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=| 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/