Xen 
 
Home About Xen.org Xen Xen Summit Wiki Mailing List Bug Tracker Xen Downloads
 
   
 

xen-devel

Re: [Xen-devel] PATCH: 3/4: Add VNC auth support from upstream QEMU

To: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Subject: Re: [Xen-devel] PATCH: 3/4: Add VNC auth support from upstream QEMU
From: Pasi Kärkkäinen <pasik@xxxxxx>
Date: Tue, 30 Oct 2007 09:53:59 +0200
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx
Delivery-date: Tue, 30 Oct 2007 00:54:38 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20071029215247.GJ1053@xxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <20071029214858.GG1053@xxxxxxxxxx> <20071029215247.GJ1053@xxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.5.13 (2006-08-11)
On Mon, Oct 29, 2007 at 09:52:47PM +0000, Daniel P. Berrange wrote:
> This patch adds in the upstream QEMU VNC authentication code. This spports 
> the previous
> VNC password auth scheme, as well as the VeNCrypt protocol extenion. The 
> latter allows
> for performing a TLS handshake, and client verification of the server 
> identify using
> x509 certificates. It is also possible for the server to request a client 
> certificate
> and validate that as a simple auth scheme. The code depends on GNU TLS for 
> SSL APIs,
> and the configure script will auto-detect this.
> 

Hi!

Might be a stupid question as I don't know what upstream QEMU VNC supports,
but would it make sense to add user+pass authentication support (via pam) ?

UltraVNC supports this, at least against Windows/AD users.

-- Pasi

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel