<html><head><meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"><style>body { line-height: 1.5; }body { font-size: 10.5pt; font-family: ????; color: rgb(0, 0, 0); line-height: 1.5; }body { font-size: 10.5pt; color: rgb(0, 0, 0); line-height: 1.5; }</style></head><body>
<div style="font-size: 16px;"><span></span><span style="color: rgb(0, 0, 0); background-color: rgba(0, 0, 0, 0);">Hi list:<br><br>I want to setup security for libvirtd.<br>I have read these articles:<br>https://wiki.openstack.org/wiki/OSSN/OSSN-0007<br>https://www.ibm.com/support/knowledgecenter/en/linuxonibm/liabp/liabpkvmsecsrmsasl.htm<br><br>My current conf is /etc/libvirt/libvirtd.conf:<br>listen_tls = 0<br>listen_tcp = 1<br>auth_tcp = "sasl"<br><br>And now I try :<br>nova live-migration --block-migrate 4309758f-2e66-4c66-bcbb-5f5ee33956ad ip-10-8-8-232.clouds.com<br><br>I found error on the src hv :<br>Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+tcp://ip-10-8-8-232.clouds.com/system: authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs found)<br><br>I try it with virsh ,it worked :<br>root@ip-10-8-8-243:/var/log/nova# virsh -c qemu+tcp://ip-10-8-8-232.clouds.com/system<br>Please enter your authentication name: admin<br>Please enter your password: <br>Welcome to virsh, the virtualization interactive terminal.<br><br>Type: 'help' for help with commands<br> 'quit' to quit<br><br>virsh # <br>virsh # <br><br><br><br><br>My question is that : <br>How to make the SASL auth successfully when live-migration.<br><br>Thank you !</span></div>
<div><br></div><hr style="width: 210px; height: 1px;" color="#b5c4df" size="1" align="left">
<div><span>sosogh</span></div>
</body></html>