[Kimchi-devel] [Kimchi] [RFC] Issue #1063: Upon migrating guest to remote server, password less ssh is permanent

Archana Singh archus at linux.vnet.ibm.com
Tue Nov 8 13:46:21 UTC 2016


*Currently*:

Upon migrating guest to remote server, password less ssh is permanent.
Due to that, from terminal able to log on to the remote server with out 
prompting password

*Propose*:

Upon completion of migration, password-less ssh has to revoke.

Option 1: As migration need password-less ssh, without which migration 
cannot be done, so it should be delete once migration is completed.

Option 2: lets update user that on migration password-less ssh will be 
established till migration is not completed(May be as document or in 
UI). And ask user if he was to delete the password-less ssh login or not 
in migration UI panel.

Option 3: Using libvirt.openauth. However I was not able to figure out 
any proper documentation on how to use openauth.

As this is kind of security issue, we can go with Option - 1 to fix the 
issue for now, enhancement is always possible. :)

Thanks,
Archana Singh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/kimchi-devel/attachments/20161108/f28f08c4/attachment.html>


More information about the Kimchi-devel mailing list