search for: secret

Implement the GUESTFS_ADD_DRIVE_OPTS_SECRET argument of guestfs_add_drive_opts. For libvirt we have to save the secret in libvirtd first, get a UUID, and then pass the UUID back through the domain XML. --- src/launch-libvirt.c | 227 ++++++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 224 insertions(+), 3 deletions(-) diff...

Since v1: - Base64 decode the Ceph secret before passing it to libvirt. - Don't call virSecretFree (NULL) [libvirt bug?] - Small cleanups.

...to work out what > is the matter with it, and perhaps why it is in that situation. Hmm... I have no lslocks on FreeBSD; will lsof do? In case, here's an excerpt: > samba 72462 root txt VREG 4,1302659313 430080 32007 /usr/jails/dc/var/db/samba4/private/secrets.tdb > samba 72462 root 46u VREG 4,1302659313 430080 32007 /usr/jails/dc/var/db/samba4/private/secrets.tdb > smbd 72466 root txt VREG 4,1302659313 430080 32007 /usr/jails/dc/var/db/samba4/private/secrets.tdb > smbd 7...

I know there is the command "wbinfo -t". But when it says that "could not check secret", how do I know it's the secret is bad, or something else wrong, like winbind went crazy maybe? Also, sometimes I saw problems like "wbinfo -t" just says "secret is bad", when all the daemons were running. It sure was good at some point before. So my question i...

...fset=8, ltype=3, flags=TDB_LOCK_WAIT) at ../../common/lock.c:390 #6 0x0000000800831808 in _tdb_transaction_start (tdb=0x80161f000, lockflags=TDB_LOCK_WAIT) at ../../common/transaction.c:490 #7 0x000000000040188b in backup_tdb ( old_name=0x7fffffffddd6 "/var/db/samba4/private/secrets.ldb", new_name=0x80161c000 "/var/db/samba4/private/secrets.ldb.copy.tdb", hash_size=<optimized out>, nolock=<optimized out>, readonly=<optimized out>) at ../../tools/tdbbackup.c:157 #8 0x0000000000401528 in main (argc=<optimized out>, argv=0x...

...bvirt supports encrypted snapshots,Here are my versions of libvirt and qemu [root@xx ~]# libvirtd -V libvirtd (libvirt) 4.5.0 [root@xx ~]# qemu-img -V qemu-img version 2.12.0 (qemu-kvm-ev-2.12.0-33.1.el7_7.4) Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers 1. assign $MYSECRET to libvirt secret using the secret-define and secret-set-value commands,and $MYSECRET is in base64 format MYSECRET=`printf %s "123456" | base64` 2. created a disk encrypted in luks format qemu-img create --object secret,id=sec0,data=$MYSECRET,format=base64 -f qcow2 -o encrypt.format=lu...

What I want to do is share the same session across many Rails applications. All of them are using Rails 2.2.2. I know that, to share the session, it''s (supposedly) just a matter of sharing the same key and secret among the apps, like this: config.action_controller.session = { :session_key => ''_apps_session'', :secret => ''71b94f37789bbedf9062616218dab005f2ffae65de2cac6313423a70eeff07189c7694d71d5fc0996'' } This being put in config/environment.rb of all...

Hi， I used 'virsh snapshot-create' create an encrypted external snapshot, when I try to use 'qemu-img check' top file, found no entrance to pass backing-file's secret-id 1、Version centos-release-8.2-2.2004.0.1.el8.x86_64 libvirt.x86_64 6.0.0-17.el8 qemu-kvm.x86_64 15:4.2.0-19.el82、Reproduce Steps 1)Create an encrypted qcow2 qemu-img create --object secret,id=se...

I would like to suggest a feature that I believe would help out one usability aspect of rysnc. The patch I am suggesting will allow the rysnc module to return 1 of multiple secrets from the password file, essentially allowing you to check ANY user's (whom belong to a team) secret to see if it matches. For example: For 2 users (user1 and user2) belonging to team1, it would check all users passwords when they authenticates to their team share - User1 - password &...

I'm trying to understand how to properly setup the /etc/rsyncd.conf file to run an rsync daemon with a secrets file specified in a module - the rsync.conf manpage does not spell it out clearly enough. Rsync server is rsync-2.5.6. If this is my /etc/rsyncd.conf file: ------------------------------------ log file = /var/log/rsync uid = root gid = root [test] uid = rsync1 gid = rsync1...

Read also the secrets associated to disks (<secret> tag within <auth>), so qemu can properly open them later on. --- src/libvirt-domain.c | 130 +++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 122 insertions(+), 8 deletions(-) diff --git a/src/libvirt-domain.c b/src/libvirt-domain.c in...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We're power failing a unit before it goes into production, and we've noticed that every time we fail it during a data transfer, smbd loses the domain connection. I've traced it down to the secrets.tdb file. After a power failure, tdbdump secrets.tdb says: { key = "SECRETS/SID/IN28C29E" data = "\01\04\00\00\00\00\00\05\15\00\00\00\D4r\9A\B6Sd\A3N\0A5\D7\DE\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\00\0...

Hi, I recently did a complete upgrade and reinstall of one of our Samba servers. No problem, I backed up all the data, the Samba configuration files, and the secrets.tdb. Just compiled 3.0.8 on the new server (which has the same hostname), copied the smb.conf to /usr/local/samba/lib and copied th secrets.tdb to /usr/local/samba/private. Started Samba, did 'net getlocalsid' and it reports a different SID than my old server had. Just to be sure th...

Hello, I have virtual machines running with a ceph storage backend. When creating an external qcow2 snapshot with a libvirt version without support for the new object secret passing, the backing file info would list the ceph secret in plain,e.g. # virsh snapshot-create-as vm-123 --no-metadata --disk-only --diskspec sda,file=/var/lib/libvirt/qemu/snapshot/vm-123-wrapper.qcow2 # qemu-img info /var/lib/libvirt/qemu/snapshot/vm-123-wrapper.qcow2 ... backing file: rbd:vms...

hi friend need ur help in dial plan, i want to allow exten 2000 to 2005 can make call outside and exten 2006 to 2010 can not make call outside. heres my dial plan. ? sip.conf ? [general] port = 5060 bindaddr = 0.0.0.0 context = others [2000] type=friend context=outside secret=1234 host=dynamic [2001] type=friend context=outside secret=1234 host=dynamic [2002] type=friend context=outside secret=1234 host=dynamic [2003] type=friend contex=outside secret=1234 host=dynamic ? [2004] type=friend contex=outside secret=1234 host=dynamic [2005] type=friend contex=outside sec...

I have setup a Rysnc server in Mandrake 9.1 When I add a auth user into my Rsync.conf and rsync.secrets, it do not work, everytime it shows [root@html]# rsync chris@mandrake82::XXXXX/.html/. / Password: @ERROR: auth failed on module XXXXX rsync: connection unexpectedly closed (89 bytes read so far) rsync error: error in rsync protocol data stream (code 12) at io.c(165) This is my rsync's conf...

...27.0.0.1 localhost > > # The following lines are desirable for IPv6 capable hosts > > ::1 localhost ip6-localhost ip6-loopback > > ff02::1 ip6-allnodes > > ff02::2 ip6-allrouters > > > > # This server name and ip. > > 10.0.0.221 main.arbeitsgruppe.secret.tld main > > 10.0.0.224 backup.arbeitsgruppe.secret.tld backup > > > > > > Second. Post you resolv.conf that was asked already. > > That should contain something like: > > search arbeitsgruppe.secret.tld > > Server IP_of_DC > > > > > > Rem...

...gt; > `kerberos method` is set to "dedicated keytab". When the kerberos > > method is in "dedicated keytab" mode, dedicated keytab file must be > > set to specify the location of the keytab file. > > > > So you options are > > kerberos method = secret only ( the default.) > > so no changes in smb.conf by default. > > kerberos method = system keytab > > assumes the system default ( /etc/krb5.keytab ) > > Sorry, but no it doesn't ;-), the 'system keytab' is by default in memory. Ok, but...

...starting from libvirt-5.10 (but I strongly suggest using at least 6.1) > > [root@xx ~]# qemu-img -V > > qemu-img version 2.12.0 (qemu-kvm-ev-2.12.0-33.1.el7_7.4) And qemu-4.2 > > Copyright (c) 2003-2017 Fabrice Bellard and the QEMU Project developers > > 1. assign $MYSECRET to libvirt secret using the secret-define and secret-set-value commands,and $MYSECRET is in base64 format > > MYSECRET=`printf %s "123456" | base64` > > 2. created a disk encrypted in luks format > > qemu-img create --object secret,id=sec0,data=$MYSECRET,format=base64...

...ly. By shared, I mean that the ./private directory is on a shared filesystem (via Veritas clustered filesystem). Each server is running its own independent binaries and ./var/locks. But only one server is running nmbd at time. The other one is always ready to start nmbd upon nmbd failure. If secrets.tdb is shared, would this really only be involved with nmbd/smbd during domain membership . BTW - These samba servers are domain members only. Thanks, Bill Pappas - System Integration Engineer - SAN St. Jude Children's Research Hospital 332 North Lauderdale Memphis, TN 38105 Dan...