Bug 958589
| Summary: | Unable to use gssapi with sasl | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Community] Virtualization Tools | Reporter: | schmitt953 | ||||||
| Component: | libvirt | Assignee: | Libvirt Maintainers <libvirt-maint> | ||||||
| Status: | CLOSED DEFERRED | QA Contact: | |||||||
| Severity: | urgent | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | unspecified | CC: | crobinso, rbalakri | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2016-04-09 22:58:03 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Attachments: |
|
||||||||
Created attachment 742405 [details]
/etc/libvirt/libvirtd.conf
I'm sorry this never received a response. I don't have a setup to try and reproduce. Given the age of this bug I'm just closing it as DEFERRED, but if anyone can still reproduce with modern libvirt, please reopen |
Created attachment 742404 [details] /etc/sasl2/libvirt.conf Description of problem: When I try to authenticate using qemu+tcp I get an authentication failed message. No traffic is actually being sent to the kdc, though I get a different error message without kerberos credentials. The error message is: error: failed to connect to the hypervisor error: authentication failed: authentication failed Version-Release number of selected component (if applicable): How reproducible: Every time Steps to Reproduce: 1. Install libvirt with sasl and sasl with kerberos support 2. Get keytab 3. Configure /etc/sasl2/libvirt.conf 4. Configure tcp connections for libvirt 5. Disable tls 6. Make init.d use --listen for libvirtd 7. Try to authenticate Actual results: Fails to authenticate, here are the logs. 2013-05-01 18:54:38.307+0000: 4381: error : virNetSASLSessionServerStart:533 : authentication failed: Failed to start SASL negotiation: -13 (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context) 2013-05-01 18:54:38.307+0000: 4381: error : remoteDispatchAuthSaslStart:2651 : authentication failed: authentication failed 2013-05-01 18:54:38.307+0000: 4380: error : virNetSocketReadWire:1323 : End of file while reading data: Input/output error Expected results: Successful authentication. Additional info: