[Openstack] libvirtd remote access security for Live migration

sosogh sosogh at mail.com
Fri Apr 7 01:27:16 UTC 2017


Hi list:

I want to setup security for libvirtd.
I have read these articles:
https://wiki.openstack.org/wiki/OSSN/OSSN-0007
https://www.ibm.com/support/knowledgecenter/en/linuxonibm/liabp/liabpkvmsecsrmsasl.htm

My current conf is /etc/libvirt/libvirtd.conf:
listen_tls = 0
listen_tcp = 1
auth_tcp = "sasl"

And now I try :
nova live-migration  --block-migrate  4309758f-2e66-4c66-bcbb-5f5ee33956ad  ip-10-8-8-232.clouds.com

I found error on the src hv :
Live Migration failure: operation failed: Failed to connect to remote libvirt URI qemu+tcp://ip-10-8-8-232.clouds.com/system: authentication failed: Failed to start SASL negotiation: -4 (SASL(-4): no mechanism available: No worthy mechs found)

I try it with virsh ,it worked :
root at ip-10-8-8-243:/var/log/nova# virsh -c qemu+tcp://ip-10-8-8-232.clouds.com/system
Please enter your authentication name: admin
Please enter your password: 
Welcome to virsh, the virtualization interactive terminal.

Type:  'help' for help with commands
       'quit' to quit

virsh # 
virsh # 




My question is that : 
How to make the SASL auth successfully when live-migration.

Thank you !



sosogh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20170407/05e14b42/attachment.html>


More information about the Openstack mailing list