Xen 
 
Home About Xen.org Xen Xen Summit Wiki Mailing List Bug Tracker Xen Downloads
 
   
 

xen-devel

Re: [Xen-devel] Re: [resend] [PATCH] [XS-TEST] Support for Xen-API authe

To: Stefan Berger <stefanb@xxxxxxxxxx>
Subject: Re: [Xen-devel] Re: [resend] [PATCH] [XS-TEST] Support for Xen-API authenticated session
From: Ewan Mellor <ewan@xxxxxxxxxxxxx>
Date: Wed, 27 Dec 2006 17:20:06 +0000
Cc: Xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxx>, xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 27 Dec 2006 09:19:54 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <OFE67D2B64.F458AF76-ON85257251.005991F5-85257251.005D0791@xxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <20061227160946.GB31234@xxxxxxxxxxxxxxxxxxxxxx> <OFE67D2B64.F458AF76-ON85257251.005991F5-85257251.005D0791@xxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.9i
On Wed, Dec 27, 2006 at 11:56:55AM -0500, Stefan Berger wrote:

> On my system I had quite a few problems when I copied the xm-config.xml
> file to /etc/xen. Probably you should change its contents so it does not
> use Xen-API by default, yet, since for example Fedora core installs don't
> come with a pyhton PAM module - at least I could not find it and many
> others might not have installed the package, either.

The version I've just committed keeps the config settings at their defaults,
yes.

For full authenticated access, you need Python-PAM, yes.  As an
alternative, you can now set your Xen-API server up to use no
authentication, with something like this in xend-config.sxp:

(xen-api-server ((127.0.0.1:9363 none)))

This will open TCP port 9363, listening only on the local interface, using no
authentication.

> The patch I sent before was due to me trying to create a VM using the
> Xen_API and the ramdisk not becoming available. So I think there is a need
> for testing the
> raw Xen-API as well. I wrote a basic test case for this and put it into a
> new directory tests/xapi into the xm-test suite.

Certainly, I'd like to see tests that hit the raw API too.  It's still a
moving target, of course, but things are starting to settle down a bit,
so comprehensive test suites, either through the Python bindings, or
even the C bindings or the CIM providers would all be good.

Cheers,

Ewan.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel