[libvirt-users] Question about vnc connection password set to empty
Hello, everybody
here I have a question about graphical buffers for rhel7. Thanks so much in advance who
can give me some suggestions about that.
When I try to do regression for
bug859317(https://bugzilla.redhat.com/show_bug.cgi?id=859317) on RHEL7， I found that guest
could be connected success with virt-viewer when set/update the graphics passwd to empty.
But according to comment 2 in this bug, libvirt will blocks all access to the VNC server
when set a password to empty.
So could you please help us check is it acceptable on RHEL7?
Below is my test steps on RHEL7:
Version-Release number of selected component (if applicable):
libvirt-1.2.8-3.el7.x86_64
qemu-kvm-rhev-2.1.0-5.el7.x86_64
kernel-3.10.0-150.el7.x86_64
How reproducible:
100%
Steps to Reproduce:
1. Define guest with a graphics device like:
.........................................
<graphics type='vnc' port='-1' autoport='yes'
passwd=""/>
.........................................
2. Connecting with vncviewer or virt-viewer .
# virsh start dom2
# virsh dumpxml dom2 --security-info |grep graphics
<graphics type='vnc' port='5900' autoport='yes'
listen='127.0.0.1' passwd=''>
</graphics>
# virt-viewer dom2
connect the guest success with empty password
3. The problem can be reproduced when changed the graphics passwd from an non-empty to an
empty
# virsh dumpxml dom2 --security-info |grep graphics
<graphics type='vnc' port='5900' autoport='yes'
listen='127.0.0.1' passwd='123'>
</graphics>
# cat change-passwd.xml
<graphics type='vnc' port='-1' autoport='yes'
listen='127.0.0.1' passwd=''/>
# virsh update-device dom2 change-passwd.xml
# virsh dumpxml dom2 --security-info |grep graphics
<graphics type='vnc' port='5900' autoport='yes'
listen='127.0.0.1' passwd=''>
</graphics>
login the guest with virt-viewer command
# virt-viewer testks
also can connect the guest dom2 success with empty password
4. I produce the same steps on RHEL6.6 libvirt-0.10.2-46.el6.x86_64, the guest can not be
connected when set graphics vnc password to empty, the same result with bug 859317.
Actual results:
we can login the guest when set the graphics passwd empty
Expected results:
I am not sure what is the right behaviour for RHEL7?
thank