[Bug 92918] Use correct SASL service name

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=92918

--- Comment #10 from Marek Kasik <mkasik at redhat.com> ---
(In reply to Christophe Fergeau from comment #9)
> (In reply to Marek Kasik from comment #8)
> > Thank you for pointing me there. SASL creates the path to the configuration
> > file from the "appname" passed to it which is "qemu" when running qemu (see
> > https://cgit.cyrus.foundation/cyrus-sasl/tree/lib/server.c#n653). stracing
> > qemu shows that it really opened the /etc/sasl2/qemu.conf instead of the
> > /etc/sasl2/spice.conf so it could not find the correct keytab file. Not
> > allowing the application to initialize the "appname" makes the
> > authentication working.
> 
> I don't understand what you mean by "it could not find the correct keytab
> file"? Do you refer to the keytab: /etc/qemu/krb5.tab field in
> /etc/sasl2/qemu.conf?

Yes, I was referring to the line which specifies the keytab file in the sasl
service config file. 

> Is there anything wrong with using this keytab file
> rather than /etc/spice/something.tab?

It should be at least possible if we will create the "/etc/sasl2/spice.conf"
which can configure the keytab file.

Btw, I used FreeIPA's guide to create the keytab and the command
"ipa-getkeytab" doesn't allow me to create keytab with more than 1 principal
(see
https://docs.fedoraproject.org/en-US/Fedora/15/html/FreeIPA_Guide/Configuring_Service_Principals-Creating_and_Using_Service_Principals.html).

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/spice-bugs/attachments/20151118/ae4a5efe/attachment.html>