Re: [libvirt PATCH 0/2] docs: less docs for insecure SASL mechanisms

2021-03-08 Thread Daniel P . Berrangé
On Mon, Mar 08, 2021 at 12:00:03PM +0100, Erik Skultety wrote: > On Mon, Mar 08, 2021 at 10:41:55AM +, Daniel P. Berrangé wrote: > > On Fri, Mar 05, 2021 at 08:02:49AM +0100, Erik Skultety wrote: > > > On Thu, Mar 04, 2021 at 06:10:11PM +, Daniel P. Berrangé wrote: > > > > GSSAPI and

Re: [libvirt PATCH 0/2] docs: less docs for insecure SASL mechanisms

2021-03-08 Thread Erik Skultety
On Mon, Mar 08, 2021 at 10:41:55AM +, Daniel P. Berrangé wrote: > On Fri, Mar 05, 2021 at 08:02:49AM +0100, Erik Skultety wrote: > > On Thu, Mar 04, 2021 at 06:10:11PM +, Daniel P. Berrangé wrote: > > > GSSAPI and SCRAM-SHA-256 are the only two SASL mechanisms we > > > especially want

Re: [libvirt PATCH 0/2] docs: less docs for insecure SASL mechanisms

2021-03-08 Thread Daniel P . Berrangé
On Fri, Mar 05, 2021 at 08:02:49AM +0100, Erik Skultety wrote: > On Thu, Mar 04, 2021 at 06:10:11PM +, Daniel P. Berrangé wrote: > > GSSAPI and SCRAM-SHA-256 are the only two SASL mechanisms we > > especially want people to be using. Even the latter is a little > > questionable due to storing

Re: [libvirt PATCH 0/2] docs: less docs for insecure SASL mechanisms

2021-03-04 Thread Erik Skultety
On Thu, Mar 04, 2021 at 06:10:11PM +, Daniel P. Berrangé wrote: > GSSAPI and SCRAM-SHA-256 are the only two SASL mechanisms we > especially want people to be using. Even the latter is a little > questionable due to storing passwords in cleartext on the server. At what point of the

[libvirt PATCH 0/2] docs: less docs for insecure SASL mechanisms

2021-03-04 Thread Daniel P . Berrangé
GSSAPI and SCRAM-SHA-256 are the only two SASL mechanisms we especially want people to be using. Even the latter is a little questionable due to storing passwords in cleartext on the server. Daniel P. Berrangé (2): docs: convert auth page into RST format docs: stop mentioning insecure /