Re: web interface?

Daniel P. Berrange
2007-07-31T18:05:28Z

On Tue, Jul 31, 2007 at 09:33:30AM -0700, Matthew Kent wrote:
> > The problem is security,
> > Authenticating users on the page is simple enough, but i cant see a
> > method by which i could put a password on the vnc port in qemu?
> >
>
> http://fedoraproject.org/wiki/Releases/FeatureVirtSecurity is a project
> tasked with improving VNC security among other things, right now qemu
> doesn't have many options in that regard.

Yep, this is the code I'm just finishing off now in preparation for review
on QEMU mailing lists.

> > Ideally, what i would like to be able to do is when someone accesses the
> > console it sets the password randomly, then embed's it into the request.
> > Once everyone disconnects it resets the password (but thats not quite so
> > important at this point).
> >
>
> Xen has patches to qemu vnc for supporting passwords if you need a
> starting point. Though iirc they are pulled from the xenstore or
> whatever they call it, so it would need some work I'd imagine.

The Xenstore integration made it pretty useless as a basis for password
support in general QEMU codebase :-(

Dan.
--
|=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=|
|=- Perl modules: http://search.cpan.org/~danberr/ -=|
|=- Projects: http://freshmeat.net/~danielpb/ -=|
|=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|