RE: [libvirt] [RFC]: Secure migration

From: libvir-list-bounces(a)redhat.com [mailto:libvir-list- bounces(a)redhat.com] On Behalf Of Daniel P. Berrange

> c) libvirtd is using SASL gssapi on the dst machine. When the src machine tries > to connect to the dst, it needs to have the right configuration (i.e. > /etc/krb5.conf and /etc/sasl2/libvirt.conf need to work), and it also has to get > some kind of principal from the kerberos server (but which principal?). Each server has a kerberos principal, so I'd expect they can directly auth to each other, assuming suitable ACL configs.