Public bug reported:
When using mech=scram-sha-1 it's not possible to connect to libvirtd.
To reproduce:
libauthen-sasl-perl/disco,disco,now 2.1600-1 all [installed,automatic]
libgsasl7/disco,now 1.8.0-8ubuntu3 amd64 [installed,automatic]
libsasl2-2/disco,now 2.1.27+dfsg-1 amd64 [installed,automatic]
libsasl2-2/disco,now 2.1.27+dfsg-1 i386 [installed,automatic]
libsasl2-dev/disco,now 2.1.27+dfsg-1 amd64 [installed]
libsasl2-modules-db/disco,now 2.1.27+dfsg-1 amd64 [installed,automatic]
libsasl2-modules-db/disco,now 2.1.27+dfsg-1 i386 [installed,automatic]
libsasl2-modules-gssapi-heimdal/disco,now 2.1.27+dfsg-1 amd64 [installed]
libsasl2-modules/disco,now 2.1.27+dfsg-1 amd64 [installed]
libsasl2-modules/disco,now 2.1.27+dfsg-1 i386 [installed,automatic]
sasl2-bin/disco,now 2.1.27+dfsg-1 amd64 [installed]
in /etc/sasl2libvirt.conf:
mech_list: scram-sha-1
in /etc/libvirt/libvirtd.conf:
listen_tls = 0
listen_tcp = 1
tcp_port = "16509"
listen_addr = "127.0.0.1"
auth_unix_rw = "none"
auth_tcp = "sasl
to configure user:
$ saslpasswd2 -a libvirt user
Then you could start the daemon with:
$ libvirtd -l
$ virsh connect test+tcp://127.0.0.1/default
error: failed to connect to the hypervisor
error: unable to connect to server at '127.0.0.1:16509': Connection refused
<< libvirtd logs >>
2019-07-04 14:37:42.913+0000: 19247: error :
virNetSASLSessionListMechanisms:393 : internal error: cannot list SASL
mechanisms -4 (SASL(-4): no mechanism available: Internal Error -4 in
../../lib/server.c near line 1762)
2019-07-04 14:37:42.913+0000: 19247: error : remoteDispatchAuthSaslInit:3585 :
authentication failed: authentication failed
2019-07-04 14:37:42.913+0000: 19238: error : virNetSocketReadWire:1805 : End of
file while reading data: Input/output error
<< end logs >>
Swithing to 'digest-md5' in /etc/sasl2libvirt.conf worked fine:
mech_list: digest-md5
$ virsh connect test+tcp://127.0.0.1/default
Please enter your authentication name: user
Please enter your password:
** Affects: libvirt (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1835427
Title:
sasl authentication fails when using mech scram-sha-1
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1835427/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
