Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-09-10 Thread David Jaša
Fernando Lozano píše v St 28. 08. 2013 v 12:36 -0300: > Hi Uri, > >> I am also worried about authentication using spice+tls. Any user, from > >> any machine, can connect to the spice+tl port. But using an ssh tunnel > >> means each user needs his own ssh password or key. > > > > One can use passwor

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-28 Thread Fernando Lozano
Hi Uri, I am also worried about authentication using spice+tls. Any user, from any machine, can connect to the spice+tl port. But using an ssh tunnel means each user needs his own ssh password or key. One can use passwords (aka tickets), to limit the access to the remote machine. It is set on

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-28 Thread Uri Lublin
On 08/28/2013 03:43 AM, Fernando Lozano wrote: Hi Uri, I want access to the guest consoles, which means spice connections to the host. But I want those connections secured either by TLS or SSH. So far can get only plain insecure spice connections from a windows workstation to the kvm host. You

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-27 Thread Fernando Lozano
Hi Uri, >> I want access to the guest consoles, which means spice connections to >> the host. But I want those connections secured either by TLS or SSH. >> So far can get only plain insecure spice connections from a windows >> workstation to the kvm host. > > You should be able to use secure ports

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-27 Thread Uri Lublin
On 08/26/2013 06:46 PM, Fernando Lozano wrote: Hi Alon, So you want to access the guest or the host? If the guest, that's exactly what I meant, since spice doesn't have any other connection except to the host, i.e. the process running the spice-server (qemu/qemu-kvm). I want access to the gues

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-26 Thread Fernando Lozano
Hi Alon, So you want to access the guest or the host? If the guest, that's exactly what I meant, since spice doesn't have any other connection except to the host, i.e. the process running the spice-server (qemu/qemu-kvm). I want access to the guest consoles, which means spice connections to th

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-26 Thread Alon Levy
> Hi Alon, > >> At least, the virt-viewer (remote-viewer) port should either embed a ssh > >> client or use an external putty under the covers (like Xming does), and > >> work with both ssh keys and password auth directly from the connection > >> dialog (which today is non-existant, just "type a UR

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-26 Thread Fernando Lozano
Hi Alon, At least, the virt-viewer (remote-viewer) port should either embed a ssh client or use an external putty under the covers (like Xming does), and work with both ssh keys and password auth directly from the connection dialog (which today is non-existant, just "type a URL") Sounds like a g

Re: [Spice-devel] Feature requests for virt-viewer windows port

2013-08-26 Thread Alon Levy
> Hi there, > > I apreciate very much the hard work from red hat/fedora developers on > this, spice looks amazing (defintely much better than vnc) but when you > have easy to use graphical admin tools for proprietary hypervisors (and > the now open-sourced XenServer) managing a KVM/RHEV host is ve

[Spice-devel] Feature requests for virt-viewer windows port

2013-08-26 Thread Fernando Lozano
Hi there, I apreciate very much the hard work from red hat/fedora developers on this, spice looks amazing (defintely much better than vnc) but when you have easy to use graphical admin tools for proprietary hypervisors (and the now open-sourced XenServer) managing a KVM/RHEV host is very hard.