Hi list,<div><br></div><div>I&#39;ve been thinking and I think the right question is:</div><div>- about which is libvirt access to sasl, socket?</div><div>- which is transmitted?</div><div>and</div><div>- what is expected libvirt?</div>
<div><br></div><div>(e.g. shadow have no service/application assignment)
</div><div><br></div><div><br></div><div>:) regards</div><div><br></div><div>Robyn</div><div><br></div><div><br></div><div><br><br><div class="gmail_quote">2012/1/18 Robyn Bachofer <span dir="ltr">&lt;<a href="mailto:r.bachofer@googlemail.com">r.bachofer@googlemail.com</a>&gt;</span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi list,
<div><br></div><div>i have a problem with virt-manager authentication over tcp.</div><div><br></div><div><br></div><div>I tried it with virt-manager over non-TLS &quot;TCP (SASL/Kerberos)&quot; auth. and the sasl mechanism &quot;shadow&quot;.</div>

<div>The user (tested with unprivileged user and root) is allready in the group libvirt(d) and the process is running as root.</div><div><br></div><div>The result on host:</div><div>Jan 18 21:05:31 host libvirtd: 21:05:31.620: error : remoteDispatchAuthSaslStep:3691 : sasl step failed -20 (SASL(-13): user not found: no secret in database)</div>

<div><br></div><div>on client (virt-manager gui):</div><div>...</div><div>(&#39;virtConnectOpenAuth() faild&#39;)</div><div>..</div><div><br></div><div><br></div><div>I have tested it with tool &quot;testsaslauthd&quot; and their result:</div>

<div>e.g.: # testsaslauthd -u root -p root</div><div><div>0: OK &quot;Success.&quot;</div></div><div><br></div><div>When i set it manually with saslpasswd:</div><div>#  saslpasswd2 -a libvirt root -p</div><div>it works.</div>

<div><br></div><div>Although I use, in the configuration of sasl, shadow, libvirt does not use it (i think so).</div><div><br></div><div><div>Host:</div><div>debian6.0.3 (squeez)</div><div>libvirt 0.8.3 (deb)</div><div>sasl2.1.23 (deb)</div>

</div><div><br></div><div>:-)</div><div><br></div><div>Best regards,</div><div>Robyn</div></blockquote></div>
</div>