Displaying 11 results from an estimated 11 matches for "auth_unix_ro".
Did you mean:
auth_unix_rw
2011 Jan 27
1
libvirtd + vir-manager + kerberos
...ssword. Setup seems to
be identical. Is there a way to debug, what is going on on this
server? I'd like to have both respect kerberos and allow logging in
with no password it already authenticated!
Here is what I've set up:
/etc/sasl2/libvirt.conf
listen_tls = 0
listen_tcp = 1
mdns_adv = 0
auth_unix_ro = "none"
auth_unix_rw = "none"
auth_tcp = "sasl"
/etc/sasl2/libvirt.conf
mech_list: gssapi
keytab: /etc/libvirt/krb5.kqemu
sasldb_path: /etc/libvirt/passwd.db
I start libvirtd with:
KRB5_KTNAME=/etc/libvirt/krb5.kqemu
/usr/sbin/libvirtd -d --listen
In virt-manager I...
2013 Apr 03
1
Cannot recv data: Connection reset by peer
...guest failed to start: PATH=/bin:/sbin TERM=linux
container=lxc-libvirt
container_uuid=168edaae-e3b5-2d06-7c65-9aa444a6f234
LIBVIRT_LXC_UUID=168edaae-e3b5-2d06-7c65-9aa444a6f234
LIBVIRT_LXC_NAME=lxcvm1 /bin/sh
error receiving signal from container: Input/output error
In libvirtd.conf I have:
auth_unix_ro = "none"
auth_unix_rw = "none"
auth_tcp = "none"
auth_tls = "none"
And in libvirt.conf everything is commented.
I have this error as normal user (in libvirtd group) and also as root.
Any hints to go further in the debugging are welcome.
Regards,
Guillaum...
2013 Sep 09
2
Re: Problems with user namespaces
...ccess. What bothers me is that connection
gets reseted. By the way, i'm using systemd, with process started in
forking mode and as daemon. Could this cause any problems?
This is my libvirtd.conf, if it helps anything:
unix_sock_group = "libvirtd"
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"
Can you please tell me easy to setup distro with systemd that user
namespaces work, so i can compare.
Thanks!
On Mon, Sep 9, 2013 at 3:08 AM, Gao feng <gaofeng@cn.fujitsu.com> wrote:
> On 09/06/2013 07:32 PM, Jaka Hudoklin wrote:
>...
2020 Apr 08
0
PolKit rule and API matchaccess_drivers = [ "polkit" ]
...it/blob - examples/polkit/libvirt-acl.rules
|
|
|
Adapted the setup so that I included user sfrag.
Always the user was asked to authenticate via root and not via SELF but ONLY if running "virsh -c qemu:///system list --all"
Had to change /etc/libvirt/libvirtd.conf to include:
auth_unix_ro = "polkit"access_drivers = [ "polkit" ]log_filters="1:access.accessdriverpolkit"log_outputs="1:file:/var/log/libvirt/libvirtd.log"
All polkit rules for user sfrag was removed at this point.
Now the user sfrag running 'virsh list --all' gives no out...
2008 Feb 22
0
virt-manager on RH AS 5.1
...on-virtinst-0.103.0-3.el5_1.1
# egrep -v ''(^#|^$)'' /etc/libvirt/libvirtd.conf
listen_tls = 1
listen_tcp = 1
tls_port = "16514"
tcp_port = "16509"
unix_sock_group = "libvirtd"
unix_sock_ro_perms = "0777"
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"
# ps -ef | grep libvirt
root 31142 1 0 17:29 ? 00:00:00 libvirt_qemud --system
--daemon
nobody 31167 31142 0 17:29 ? 00:00:00 dnsmasq
--keep-in-foreground --strict-order --bind-interfaces --pid-file
--conf-file --listen-...
2012 Aug 07
0
Authentication via SASL and LDAP?
...he host using qemu+tcp, which I have configured as follows:
/etc/default/libvirt-bin:
start_libvirtd="yes"
libvirtd_opts="-d -l"
/etc/libvirt/libvirtd.conf:
listen_tls = 0
listen_tcp = 1
unix_sock_group = "libvirtd"
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"
auth_tcp = "sasl"
The libvirt documentation ( http://libvirt.org/auth.html ) does not specify if it is possible to use SASL with a different authentication method other than DIGEST-MD5. I would like to authenticate users via LDAP - i...
2014 Mar 28
0
Facing some error when restarting the libvirtd.
hi,
i installed libvirt-1.2.1 from the source with xen-4.3.1 and i am facing
the following error when restarting the libvirt.
Installation steps:
./autogen.sh --system --with-xen=yes --with-libxl=yes
make
make install
and in the libvirtd.conf i enabled the following things
auth_unix_ro
auth_unix_rw
unix_sock_group
unix_sock_ro_perms
unix_sock_rw_perms
unix_sock_dir
and libvirt logs
when running the following commands i got error message in libvirtd.log
tools/libvirtd -f /etc/libvirt/libvirtd.conf -d
Error message:
2014-03-28 12:44:59.480+0000: 20024: info : libvirt version: 1....
2013 Sep 09
0
Re: Problems with user namespaces
...nection
> gets reseted. By the way, i'm using systemd, with process started in
> forking mode and as daemon. Could this cause any problems?
>
> This is my libvirtd.conf, if it helps anything:
> unix_sock_group = "libvirtd"
> unix_sock_rw_perms = "0770"
> auth_unix_ro = "none"
> auth_unix_rw = "none"
>
> Can you please tell me easy to setup distro with systemd that user
> namespaces work, so i can compare.
>
> Thanks!
>
>
> On Mon, Sep 9, 2013 at 3:08 AM, Gao feng <gaofeng@cn.fujitsu.com> wrote:
>
>>...
2012 Apr 12
0
Live migration of instance using KVM hypervisor fails
...nied
/etc/qemu-ifdown: could not launch network script
Libvirt version on both hosts:
$ libvirtd --version
libvirtd (libvirt) 0.9.2
$ virsh --version
0.9.2
Here are my libvirtd.conf details:
listen_tls = 0
listen_tcp = 1
unix_sock_group = "libvirtd"
unix_sock_rw_perms = "0770"
auth_unix_ro = "none"
auth_unix_rw = "none"
auth_tcp = "none"
Would be great if someone can point out the issue here.
Note: I have disable apparmor for libvirtd profile and am able to list the instances running on the remote host (from both the servers).
Thanks & Regards,
Un...
2015 Jan 31
3
libvirt errors after applying RPMS from 2015:X002
Thanks for the info.
I am trying to connect to the Xen hypervisor, via a localhost connection defined in the virt-manager configuration.
here is the detail provided in the error dialog:
?????????
Unable to open a connection to the Xen hypervisor/daemon.
Verify that:
- A Xen host kernel was booted
- The Xen service has been started
internal error: DBus support not compiled into this
2013 Sep 06
3
Re: Problems with user namespaces
Hello!
Okay i tried again with only staticly linked busybox:
offlinehacker:~/ $ /home/offlinehacker/busybox/busybox
BusyBox v1.17.1 (Debian 1:1.17.1-8) multi-call binary.
Copyright (C) 1998-2009 Erik Andersen, Rob Landley, Denys Vlasenko
and others. Licensed under GPLv2.
See source distribution for full notice.
....
Again my id:
uid=499(offlinehacker) gid=100(users)