Re: web interface?

["Daniel P. Berrange" <berrange-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>]

On Wed, Aug 01, 2007 at 01:52:39AM +1000, Paul J R wrote:
> Hi guys, I had a quick question.
> 
> I was playing around writing a php-based web interface for KVM. 
> Basically something that would allow you to use a tiny distro and let 
> you manage disk/net etc via php (atm its crude to say the least).
> 
> It all seems relatively straight forward except for one component - the 
> console bits. I wanted to make it so you could click on your new vm, 
> then click on a "console" link and *poof* your console appears on your 
> web browser via an embedded java applet. The problem is security, 
> Authenticating users on the page is simple enough, but i cant see a 
> method by which i could put a password on the vnc port in qemu?

Watch this space. I will be submitting patches to upstream QEMU either
today or tomorrow which will enable password support in VNC. It will
also provide for optional TLS encryption, and x509 certificates for both
client and server validation & authentication.

> Ideally, what i would like to be able to do is when someone accesses the 
> console it sets the password randomly, then embed's it into the request. 
> Once everyone disconnects it resets the password (but thats not quite so 
> important at this point).

My patches will cope with that scenario. They provide a monitor command
to let you change the password on the fly.

Regards,
Dan.
-- 
|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=| 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/