Bug 958589 - Unable to use gssapi with sasl
Summary: Unable to use gssapi with sasl
Keywords:
Status: CLOSED DEFERRED
Alias: None
Product: Virtualization Tools
Classification: Community
Component: libvirt
Version: unspecified
Hardware: Unspecified
OS: Linux
unspecified
urgent
Target Milestone: ---
Assignee: Libvirt Maintainers
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-05-02 00:18 UTC by schmitt953
Modified: 2016-04-09 22:58 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2016-04-09 22:58:03 UTC
Embargoed:


Attachments (Terms of Use)
/etc/sasl2/libvirt.conf (1.24 KB, text/plain)
2013-05-02 00:18 UTC, schmitt953
no flags Details
/etc/libvirt/libvirtd.conf (12.68 KB, text/plain)
2013-05-02 00:19 UTC, schmitt953
no flags Details

Description schmitt953 2013-05-02 00:18:57 UTC
Created attachment 742404 [details]
/etc/sasl2/libvirt.conf

Description of problem: When I try to authenticate using qemu+tcp I get an authentication failed message. No traffic is actually being sent to the kdc, though I get a different error message without kerberos credentials. The error message is:
error: failed to connect to the hypervisor
error: authentication failed: authentication failed



Version-Release number of selected component (if applicable):


How reproducible: Every time


Steps to Reproduce:
1. Install libvirt with sasl and sasl with kerberos support
2. Get keytab
3. Configure /etc/sasl2/libvirt.conf
4. Configure tcp connections for libvirt
5. Disable tls
6. Make init.d use --listen for libvirtd
7. Try to authenticate
  
Actual results:
Fails to authenticate, here are the logs.

2013-05-01 18:54:38.307+0000: 4381: error : virNetSASLSessionServerStart:533 : authentication failed: Failed to start SASL negotiation: -13 (SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context)
2013-05-01 18:54:38.307+0000: 4381: error : remoteDispatchAuthSaslStart:2651 : authentication failed: authentication failed
2013-05-01 18:54:38.307+0000: 4380: error : virNetSocketReadWire:1323 : End of file while reading data: Input/output error

Expected results:
Successful authentication.

Additional info:

Comment 1 schmitt953 2013-05-02 00:19:28 UTC
Created attachment 742405 [details]
/etc/libvirt/libvirtd.conf

Comment 2 Cole Robinson 2016-04-09 22:58:03 UTC
I'm sorry this never received a response. I don't have a setup to try and reproduce. Given the age of this bug I'm just closing it as DEFERRED, but if anyone can still reproduce with modern libvirt, please reopen


Note You need to log in before you can comment on or make changes to this bug.