[virt-tools-list] virt-viewer with sasl

[Mario Goppold]

Hi list,

I can not connect to guest via vnc if sasl is enabled.
The error message is:

"Unable to connect to the graphics server localhost:5900"

user at earth:~> virt-viewer --debug -c qemu://virtserv1/system test

fail with the above message even if I connect from a machine that is not
the virtualisation host itself.
I was surprised that "vncviewer virtserv1:0" show the guest.

The same command on virtserv1 is ok and work as expected.

Any hints for me?

Mario


###################

Some things about my environement:

virtserv1:~ # cat /etc/SuSE-release
openSUSE 11.4 (x86_64)
VERSION = 11.4
CODENAME = Celadon


virtserv1:~ # uname -a
Linux virtserv1 2.6.37.6-0.7-default #1 SMP 2011-07-21 02:17:24 +0200
x86_64 x86_64 x86_64 GNU/Linux

virtserv1:~ # rpm -q libvirt virt-viewer
libvirt-0.9.6-165.1.x86_64
virt-viewer-0.4.1-30.1.x86_64

virtserv1:~ # sasldblistusers2 -f /etc/libvirt/passwd.db
tux at virtserv1: userPassword

virtserv1:~ # grep -v "^#" /etc/libvirt/qemu.conf | sed -e '/^$/d'
vnc_listen = "0.0.0.0"
vnc_sasl = 1


virtserv1:~ # virsh dumpxml test | grep graphics
    <graphics type='vnc' port='5900' autoport='yes' keymap='de'/>


virtserv1:~ # tail -3 /var/log/libvirt/qemu/test.log
2011-10-11 15:31:42.559: starting up
LC_ALL=C
PATH=/sbin:/usr/sbin:/usr/local/sbin:/root/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/X11R6/bin:/usr/games:/usr/lib64/jvm/jre/bin
HOME=/root USER=root LOGNAME=root QEMU_AUDIO_DRV=none /usr/bin/qemu-kvm
-S -M pc-0.14 -cpu
core2duo,+lahf_lm,+xtpr,+cx16,+tm2,+est,+vmx,+ds_cpl,+pbe,+tm,+ht,+ss,+acpi,+ds
-enable-kvm -m 1024 -smp 1,sockets=1,cores=1,threads=1 -name test -uuid
ba48c504-e05e-40ce-74dd-8ba00964a08d -nodefconfig -nodefaults -chardev
socket,id=charmonitor,path=/var/lib/libvirt/qemu/test.monitor,server,nowait
-mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc
-no-shutdown -drive
file=/var/lib/libvirt/images/test.img,if=none,id=drive-virtio-disk0,format=raw,cache=none,aio=threads
-device
virtio-blk-pci,bus=pci.0,multifunction=on,addr=0x4.0x0,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1
-drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw
-device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0
-netdev tap,fd=22,id=hostnet0 -device
virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:c8:0c:03,bus=pci.0,multifunction=on,addr=0x3.0x0
-chardev pty,id=charserial0 -device
isa-serial,chardev=charserial0,id=serial0 -usb -vnc 0.0.0.0:0,sasl -k de
-vga cirrus -device
virtio-balloon-pci,id=balloon0,bus=pci.0,multifunction=on,addr=0x5.0x0
char device redirected to /dev/pts/2

user at earth:~> cat virt-viewer_client.log
** (virt-viewer:487): DEBUG: fullscreen display 0: 0
** (virt-viewer:487): DEBUG: fullscreen display 0: 0
** (virt-viewer:487): DEBUG: Opening connection to libvirt with URI
qemu://virtserv1/system

** (virt-viewer:487): DEBUG: Add handle 7 1 0x6f77a0
** (virt-viewer:487): DEBUG: Got libvirt credential request for 2
credential(s)
** (virt-viewer:487): DEBUG: Got 'tux' 3 2
** (virt-viewer:487): DEBUG: Got '********' 7 5
** (virt-viewer:487): DEBUG: Return 0
** (virt-viewer:487): DEBUG: Add timeout 0x77d3a0 -1 0x7f1504072860
0x6ef400 1
** (virt-viewer:487): DEBUG: notebook show status 0x681000
** (virt-viewer:487): DEBUG: notebook show status 0x681000
** (virt-viewer:487): DEBUG: Guest test is running, determining display

** (virt-viewer:487): DEBUG: Set connect info:
(null),(null),(null),(null),(null),(null),0
** (virt-viewer:487): DEBUG: Guest (null) has a vnc display

** (virt-viewer:487): DEBUG: Guest graphics address is localhost:5900
** (virt-viewer:487): DEBUG: Set connect info:
virtserv1,localhost,5900,(null),(null),(null),0
** (virt-viewer:487): DEBUG: Opening direct TCP connection to display at
localhost:5900

** (virt-viewer:487): DEBUG: notebook show status 0x681000
** (virt-viewer:487): DEBUG: notebook show status 0x681000
** (virt-viewer:487): DEBUG: Guest (null) display has disconnected,
shutting down

(virt-viewer:487): Gtk-WARNING **: A floating object was finalized. This
means that someone
called g_object_unref() on an object that had only a floating
reference; the initial floating reference is not owned by anyone
and must be removed with g_object_ref_sink().
Opening connection to libvirt with URI qemu://virtserv1/system
Guest test is running, determining display
Guest (null) has a vnc display
Opening direct TCP connection to display at localhost:5900
Guest (null) display has disconnected, shutting down