[Xen-devel] [PATCH RFC 0/6] qemu-xen-trad: sasl: add SASL support to VNC

[Simon Waterman <watermansrdev@xxxxxxxxx>]

This patch series back-ports SASL authentication from
upstream QEMU to the VNC server in qemu-xen-traditional.
It enables authentication to the VNC console of a domain
to be controlled using any SASL mechanism when using an
IOEMU stubdom.

SASL can be used with or without X509 certificates.

The option is currently enabled during build by adding
--enable-vnc-sasl to the configure line in xen-setup in the
root of the QEMU tree.

SASL auth can be enabled for a domain using the 'vnclisten'
option in the Xen config file:
vnclisten="0.0.0.0:5,tls,x509verify=/etc/ssl,sasl"

Details of how to configure SASL in QEMU can be found here:
https://qemu.weilnetz.de/doc/qemu-doc.html#vnc_005fsec_005fsasl

 Makefile.target |    6
 configure       |   34 +++
 vnc-auth-sasl.c |  613 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 vnc-auth-sasl.h |   67 ++++++
 vnc.c           |  533 ++++++++++++++++++++++++++++--------------------
 vnc.h           |  231 ++++++++++++++++++++-
 6 files changed, 1257 insertions(+), 227 deletions(-)


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
https://lists.xen.org/xen-devel