Re: remote-viewer spice auth

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, Oct 19, 2013 at 11:53:55AM -0400, Marc-André Lureau wrote:
> > Why? Using SASL without username is a bit limited - or do I miss something?
> 
> Current SASL implementation in Spice doesn't support username.
> 
> > And you can still use tickets if you check for strlen(username) == 0 ?
> 
> There is noneed to ask the user a username for the current methods. He
> wouldn't do what to put there.

I don't think mandating that the username we use for SASL is the unix user
name the client runs as makes a lot of sense. Imo it would be better if we
always asked for username/password when SASL asks for it, and prefill the
username field with the local unix user name.
For what it's worth, when using vnc+sasl, we get asked for a username when
using digest-md5.

Christophe

Attachment: pgpL50J5qR4yr.pgp
Description: PGP signature

_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
http://lists.freedesktop.org/mailman/listinfo/spice-devel

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]     [Monitors]