Simon Waterman writes ("Re: [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL
support to VNC"):
> It's not the QEMU in the stubdom that would need to be newer
> but rather the one that's spawned in domain-0 to provide the
> VNC backend when you use an IOEMU stubdom. As I understand
> it this also nee
On 16/05/17 14:28, Ian Jackson wrote:
George Dunlap writes ("Re: [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL support to
VNC"):
On 16/05/17 14:16, Ian Jackson wrote:
Simon: What is stopping you moving to a modern version of qemu ?
I think from his previous query, it was the fact that there
George Dunlap writes ("Re: [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL
support to VNC"):
> On 16/05/17 14:16, Ian Jackson wrote:
> > Simon: What is stopping you moving to a modern version of qemu ?
>
> I think from his previous query, it was the fact that there is no
> suitable stubdom for qemu
On 16/05/17 14:16, Ian Jackson wrote:
> George Dunlap writes ("Re: [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL
> support to VNC"):
>> Hmm, I don't think this counts as "small patch with simple changes",
>> but I'll let Ian comment.
>
> I'm quite uneasy about this. It seems like the addition of
George Dunlap writes ("Re: [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL
support to VNC"):
> Hmm, I don't think this counts as "small patch with simple changes",
> but I'll let Ian comment.
I'm quite uneasy about this. It seems like the addition of a lot of
code; effectively, a fork of the SASL
On Tue, May 16, 2017 at 12:03 AM, Simon Waterman
wrote:
> This patch series back-ports SASL authentication from
> upstream QEMU to the VNC server in qemu-xen-traditional.
> It enables authentication to the VNC console of a domain
> to be controlled using any SASL mechanism when using an
> IOEMU st
This patch series back-ports SASL authentication from
upstream QEMU to the VNC server in qemu-xen-traditional.
It enables authentication to the VNC console of a domain
to be controlled using any SASL mechanism when using an
IOEMU stubdom.
SASL can be used with or without X509 certificates.
The op
