Ovirt console ticket time threshold and password
------BKFKJ8HFVSAML87AJHD1T3RNOSRSVF Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 Hi all, Is there any standard recommended way to alter the default value of 120 secs set on spice console? Also, can the password be disabled if needed? There are several hacks floating arround, but none seems clean. Thanx, Alex -- Sent from my Android device with K-9 Mail. Please excuse my brevity. ------BKFKJ8HFVSAML87AJHD1T3RNOSRSVF Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit Hi all,<br> <br> Is there any standard recommended way to alter the default value of 120 secs set on spice console?<br> Also, can the password be disabled if needed? There are several hacks floating arround, but none seems clean.<br> <br> Thanx,<br> Alex<br> <br> <br> -- <br> Sent from my Android device with K-9 Mail. Please excuse my brevity. ------BKFKJ8HFVSAML87AJHD1T3RNOSRSVF--
Without console password everybody could vnc/spice to a console port on your host. I suppose you don't want this in multi-user environment. j. ----- Original Message ----- From: "rightkicktech.gmail.com" <rightkicktech@gmail.com> To: "Ovirt Users Mailing List" <Users@ovirt.org> Sent: Saturday, January 28, 2017 11:23:53 AM Subject: [ovirt-users] Ovirt console ticket time threshold and password Hi all, Is there any standard recommended way to alter the default value of 120 secs set on spice console? Also, can the password be disabled if needed? There are several hacks floating arround, but none seems clean. Thanx, Alex -- Sent from my Android device with K-9 Mail. Please excuse my brevity. _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
------4ZSMS4RDMX7X50GGLG3VBAX4CGC26W Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 Hi Jiri, I understand that. What I was doing with plain KVM was to have a static password for vnc. Is this possible with ovirt? Alex On February 8, 2017 3:55:19 PM EET, Jiri Belka <jbelka@redhat.com> wrote:
Without console password everybody could vnc/spice to a console port on your host. I suppose you don't want this in multi-user environment.
j.
----- Original Message ----- From: "rightkicktech.gmail.com" <rightkicktech@gmail.com> To: "Ovirt Users Mailing List" <Users@ovirt.org> Sent: Saturday, January 28, 2017 11:23:53 AM Subject: [ovirt-users] Ovirt console ticket time threshold and password
Hi all,
Is there any standard recommended way to alter the default value of 120 secs set on spice console? Also, can the password be disabled if needed? There are several hacks floating arround, but none seems clean.
Thanx, Alex
-- Sent from my Android device with K-9 Mail. Please excuse my brevity.
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
-- Sent from my Android device with K-9 Mail. Please excuse my brevity. ------4ZSMS4RDMX7X50GGLG3VBAX4CGC26W Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html><head></head><body>Hi Jiri,<br> <br> I understand that.<br> What I was doing with plain KVM was to have a static password for vnc. Is this possible with ovirt?<br> <br> Alex<br><br><div class="gmail_quote">On February 8, 2017 3:55:19 PM EET, Jiri Belka <jbelka@redhat.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <pre class="k9mail">Without console password everybody could vnc/spice to a console port on your host.<br />I suppose you don't want this in multi-user environment.<br /><br />j.<br /><br />----- Original Message -----<br />From: "<a href="http://rightkicktech.gmail.com">rightkicktech.gmail.com</a>" <rightkicktech@gmail.com><br />To: "Ovirt Users Mailing List" <Users@ovirt.org><br />Sent: Saturday, January 28, 2017 11:23:53 AM<br />Subject: [ovirt-users] Ovirt console ticket time threshold and password<br /><br />Hi all, <br /><br />Is there any standard recommended way to alter the default value of 120 secs set on spice console? <br />Also, can the password be disabled if needed? There are several hacks floating arround, but none seems clean. <br /><br />Thanx, <br />Alex <br /><br /></pre></blockquote></div><br> -- <br> Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html> ------4ZSMS4RDMX7X50GGLG3VBAX4CGC26W--
I doubt you can have it "static" and open consoles from Admin/User Portals. You can submit a feature request but IMO this feature goes against all AAA implemented in oVirt. Anyway, what about a libvirt/vdsm hook for following? ~~~ virsh # qemu-monitor-command 10 --hmp 'set_password spice foobar keep' virsh # qemu-monitor-command 10 --hmp 'expire_password spice never' virsh # qemu-monitor-command 10 --hmp 'info spice' Server: address: 0:5908 migrated: false auth: spice compiled: 0.12.4 mouse-mode: server Channels: none ~~~ $ remote-viewer spice://${host}?port=5908 j.
participants (2)
-
Jiri Belka -
rightkicktech.gmail.com