This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


[Xen-devel] [PATCH] VNC password auth for paravirt framebuffer

To: xen-devel@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-devel] [PATCH] VNC password auth for paravirt framebuffer
From: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Date: Tue, 5 Dec 2006 15:38:10 +0000
Delivery-date: Tue, 05 Dec 2006 07:38:17 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Reply-to: "Daniel P. Berrange" <berrange@xxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mutt/1.4.1i
Attached to this mail is an update of my original patches to add VNC pasword
authentication support for the paravirt framebuffer server. These bring the
PVFB VNC server to (near?) feature parity with the HVM VNC server. The rules
for configuring the password are equivalent of those used for HVM, but the
actual guest config option is a little different as a result of the recent
refactoring of the PVFB config file syntax.

 - If the 'vfb' option in the guest config has a 'vncpasswd' parameter
      - If the passwd is not zero length, use that
      - Else run with no authentication (important as it enables override
        of next rule) 
 - Else-if the xend-config.sxp has a password specified use that
 - Else run with no authentication

Example configuration:

 - To set an explicit guest password:

    vfb = [ "type=vnc,vncunused=1,vnclisten=,vncpasswd=123456"]
 - To disable authentication, overriding any XenD configured
   defalt password

    vfb = [ "type=vnc,vncunused=1,vnclisten=,vncpasswd="]

 - To run with default XenD configured password (if any)

    vfb = [ "type=vnc,vncunused=1,vnclisten="]

The changes basically affect 3 areas:

 - tools/xenfb/vncfb.c  - read the password from XenStore & configure
    LibVNCServer's authentication routines.
 - tools/python/xen/xm/create.py - add vncpasswd parameter as a valid option
 - tools/python/xen/xend/server/vfbif.py - read password from config file
   and write it into xenstore to access by xen-vncfb server

A functionally equivalent version of this patch is already in use in Fedora
Core 5, 6 and RHEL-5  betas, so has seen some real world testing already.

   Signed-off-by: Daniel P. Berrange <berrange@xxxxxxxxxx>

|=- Red Hat, Engineering, Emerging Technologies, Boston.  +1 978 392 2496 -=|
|=-           Perl modules: http://search.cpan.org/~danberr/              -=|
|=-               Projects: http://freshmeat.net/~danielpb/               -=|
|=-  GnuPG: 7D3B9505   F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505  -=| 

Attachment: xen-3.0.4-vncpassword-pvfb-4.patch
Description: Text document

Xen-devel mailing list
<Prev in Thread] Current Thread [Next in Thread>
  • [Xen-devel] [PATCH] VNC password auth for paravirt framebuffer, Daniel P. Berrange <=