[libvirt] Debug the username/passwords

Bryan Kearney bkearney at redhat.com
Wed Jul 29 12:44:30 UTC 2009


Daniel P. Berrange wrote:
> On Tue, Jul 28, 2009 at 04:58:17PM -0400, Bryan Kearney wrote:
>> Hopefully this is the last question I have on the Java drivers. I am 
>> trying to debug the callback from openAuth(). I am passing back what I 
>> think is valid information, but I see in /var/log/messages the following:
>>
>> Jul 28 16:21:24 localhost libvirtd: sasl step failed -20 (SASL(-13): 
>> user not found: no secret in database)
> 
> That says its getting a username, but not matching.
> 
> NB, make sure you use VIR_CRED_USERNAME, rather than VIR_CRED_AUTHNAME.
> The latter is most never what you want

If I switch to VIR_CRED_USERNAME I am only presented with the password 
credential. Is this to be expected using md5-digest?

> 
>> Is there a way to output what I have passed back in the credential 
>> responses? Setting the following in the /etc/libvirt/libvirtd.conf file 
>> does not seem to increase the logging:
> 
> We explicitly don't include auth credentials in the debug log to
> avoid compromising them. So your best option is to attach GDB to
> the process.  The qemud/remote.c file, in the remoteDispatchAuthSaslStep
> method, you want to peek at the 'args->data.data_val' string.
> 
> 

will do.. thanks.

-- bk




More information about the libvir-list mailing list