From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NKDLq-0002Iq-8j for qemu-devel@nongnu.org; Mon, 14 Dec 2009 11:00:46 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NKDLl-0002Hk-St for qemu-devel@nongnu.org; Mon, 14 Dec 2009 11:00:45 -0500 Received: from [199.232.76.173] (port=40170 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NKDLl-0002Hh-MW for qemu-devel@nongnu.org; Mon, 14 Dec 2009 11:00:41 -0500 Received: from mx1.redhat.com ([209.132.183.28]:20554) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1NKDLl-0007D0-5F for qemu-devel@nongnu.org; Mon, 14 Dec 2009 11:00:41 -0500 Message-ID: <4B266125.8010005@redhat.com> Date: Mon, 14 Dec 2009 18:00:37 +0200 From: Avi Kivity MIME-Version: 1.0 Subject: Re: [Qemu-devel] Re: Spice project is now open References: <4B231182.1080208@codemonkey.ws> <20091212144433.GA26966@random.random> <4B23B0BE.7080408@codemonkey.ws> <20091212160626.GB26966@random.random> <4B23D585.70400@codemonkey.ws> <4B241A99.2000704@redhat.com> <4B242B40.4050409@codemonkey.ws> <4B24C5EF.2090607@redhat.com> <4B264EC4.7020500@codemonkey.ws> <20091214151056.GG23733@redhat.com> In-Reply-To: <20091214151056.GG23733@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: "Daniel P. Berrange" Cc: Andrea Arcangeli , Paolo Bonzini , dlaor@redhat.com, qemu-devel@nongnu.org On 12/14/2009 05:10 PM, Daniel P. Berrange wrote: > > The model I had in mind was for the proxy to define a VNC extension that > allows the client to query what 'desktops' are available and request > switching between them at any time. The list of desktop would of course > be authorized per client, and strong authentication is a must for this. > > Any time a switch was made, the RFB protocol would return to the > 'ServerInit' state. The idea is that you should not assume a homogenous > environment, and you really don't want to fall down to the lowest common > denominator of extensions, nor have the proxy doing re-encoding on the FB > data updates. Returning to the ServerInit state allowing the client to > re-negotiate the set of encodings for the new desktop, and so the proxy > can be fairly stateless and while needing to understand the wire protocol, > it can just pass through the actual FB update data unchanged. > > The combo of the an extension for switching desktops on the fly and the > encryption state problem doesn't really seem to fit with passing the VNC > FD over with SCM_RIGHTS. > You can still implement this with SCM_RIGHTS. Authenticate, select guest, drop tls, pass fd to qemu, authenticate, hack hack hack, drop tls, pass fd back to proxy, goto 10. -- error compiling committee.c: too many arguments to function