This patch series back-ports SASL authentication from upstream QEMU to the VNC server in qemu-xen-traditional. It enables authentication to the VNC console of a domain to be controlled using any SASL mechanism when using an IOEMU stubdom.
SASL can be used with or without X509 certificates. The option is currently enabled during build by adding --enable-vnc-sasl to the configure line in xen-setup in the root of the QEMU tree. SASL auth can be enabled for a domain using the 'vnclisten' option in the Xen config file: vnclisten="0.0.0.0:5,tls,x509verify=/etc/ssl,sasl" Details of how to configure SASL in QEMU can be found here: https://qemu.weilnetz.de/doc/qemu-doc.html#vnc_005fsec_005fsasl Makefile.target | 6 configure | 34 +++ vnc-auth-sasl.c | 613 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ vnc-auth-sasl.h | 67 ++++++ vnc.c | 533 ++++++++++++++++++++++++++++-------------------- vnc.h | 231 ++++++++++++++++++++- 6 files changed, 1257 insertions(+), 227 deletions(-) _______________________________________________ Xen-devel mailing list Xen-devel@lists.xen.org https://lists.xen.org/xen-devel
