[libvirt] how to get started with libvirt & central access control
- First Post
- Replies
- Stats
-
Go to
- ----- 2025 -----
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
Quite new to libvirt (and kvm). I played with a few vm's with
libvirt/kvm and vnc/virsh/virt-manager. I would now like to implement
access control for my vm's (of any format: xen, kvm, etc) to a remote
backend (mysql/ldap/other). Where does one begin? I would later want
to do the same but in the context of a cluster of hosts (each running
multiple vm's). Thanks in advance for any advice.
/juan
On Sun, Dec 07, 2008 at 10:40:14AM -0500, Juan Miscaro wrote:
Quite new to libvirt (and kvm). I played with a few vm's with
libvirt/kvm and vnc/virsh/virt-manager. I would now like to implement
access control for my vm's (of any format: xen, kvm, etc) to a remote
backend (mysql/ldap/other). Where does one begin? I would later want
to do the same but in the context of a cluster of hosts (each running
multiple vm's). Thanks in advance for any advice.
/juan
Hi Juan. You might have a look at oVirt (http://ovirt.org), our
virtualization management project. Although it doesn't work with Xen
yet, it does use FreeIPA and LDAP for access control.
Good luck,
--Hugh
On Sun, Dec 07, 2008 at 10:40:14AM -0500, Juan Miscaro wrote:
Quite new to libvirt (and kvm). I played with a few vm's with
libvirt/kvm and vnc/virsh/virt-manager. I would now like to implement
access control for my vm's (of any format: xen, kvm, etc) to a remote
backend (mysql/ldap/other). Where does one begin? I would later want
to do the same but in the context of a cluster of hosts (each running
multiple vm's). Thanks in advance for any advice.
libvirt does not currently apply any fine grained access controsl over
objects it manages. The only access control is done at time the
virConnectPtr object is created, either based on your UNIX userid,
or PolicyKit, or Kerberos/SASL, or SSL/x509.
We may add fine grained access control over objects in the future, but
there's no ETA for that. In the meantime such checks would be done in
your application
Daniel
--
|: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :|
|: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|
5903
days inactive
5904
days old
2 comments
3 participants
tags (0)
participants (3)
-
Daniel P. Berrange -
Hugh O. Brock -
Juan Miscaro