Bug 842272

Summary: include-passwd option can't worked when using domdisplay.
Product: Red Hat Enterprise Linux 6 Reporter: zhe peng <zpeng>
Component: libvirtAssignee: Martin Kletzander <mkletzan>
Status: CLOSED ERRATA QA Contact: Virtualization Bugs <virt-bugs>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.4CC: acathrow, dallan, dyasny, dyuan, mzhan, rwu, veillard, zhpeng
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: libvirt-0.10.0-0rc0.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-21 07:19:30 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description zhe peng 2012-07-23 10:06:03 UTC
Description of problem:
--include-passwd option can't worked when using domdisplay

Version-Release number of selected component (if applicable):
libvirt-0.9.13-3.el6.x86_64

How reproducible:
always

Steps to Reproduce:
Steps to Reproduce:
1. prepare a guest with spice graphic
2. setup spice ssl env.
3. give a password to spice
#virsh dumpxml $guest --security-info
  ......
   <graphics type='spice' port='5900' tlsPort='5907' autoport='yes' listen='0.0.0.0' keymap='en-us' passwd='redhat' passwdValidTo='2022-02-27T19:46:10' connected='disconnect'>
      <listen type='address' address='0.0.0.0'/>
      <channel name='main' mode='secure'/>
      <channel name='inputs' mode='secure'/>
    </graphics>
  ......
4. use virt-viewer to connect guest
# remote-viewer spice://$IP?port=5900\&tls-port=5907 --spice-host-subject="C=IL,L=Raanana,O=Red Hat,CN=my server" --spice-ca-file='/etc/pki/libvirt-spice/ca-cert.pem'
worked well with input correct password
5. using domdisplay to show spice URI
# virsh domdisplay $guest --include-password


Actual results:
spice://localhost?port=5900&tls-port=5907
no password shown up in URI.

Expect result:

should providing the password for the SPICE channel.



additional :
i check the patch,
virAsprintf(&xpath, "string(/domain/devices/graphics"
                     "[ type='%s']/@passwd)", scheme[iter]);

maybe should be:
virAsprintf(&xpath, "string(/domain/devices/graphics[ type='%s']"
                     "/@passwd)", scheme[iter]);

Comment 2 Martin Kletzander 2012-07-23 18:58:40 UTC
Patches has been posted upstream:

https://www.redhat.com/archives/libvir-list/2012-July/msg01235.html

Comment 3 Martin Kletzander 2012-07-25 09:09:02 UTC
Patches have been commited upstream, moving to POST:

commit 8101d434336a2ad89f6d2dbfbff54f79b3eb6890
Author: Martin Kletzander <mkletzan>
Date:   Tue Jul 24 16:00:14 2012 +0200

    virsh: fixed domdisplay command

Comment 7 zhpeng 2012-08-07 01:56:13 UTC
I'm sorry for that i made a mistake...

test it with libvirt-0.10.0-0rc0.el6:

virsh # domdisplay rhel63q
spice://localhost?port=5900&tls-port=5901
virsh # domdisplay rhel63q --include-password 
spice://localhost?port=5900&tls-port=5901&password=redhat

So this is verified.

Comment 8 errata-xmlrpc 2013-02-21 07:19:30 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2013-0276.html