[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-block] [PATCH v3 2/6] nbd: allow authorization with nbd-server
From: |
Juan Quintela |
Subject: |
Re: [Qemu-block] [PATCH v3 2/6] nbd: allow authorization with nbd-server-start QMP command |
Date: |
Wed, 17 Oct 2018 14:28:53 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) |
Daniel P. Berrangé <address@hidden> wrote:
> From: "Daniel P. Berrange" <address@hidden>
>
> As with the previous patch to qemu-nbd, the nbd-server-start QMP command
> also needs to be able to specify authorization when enabling TLS encryption.
>
> First the client must create a QAuthZ object instance using the
> 'object-add' command:
>
> {
> 'execute': 'object-add',
> 'arguments': {
> 'qom-type': 'authz-list',
> 'id': 'authz0',
> 'parameters': {
> 'policy': 'deny',
> 'rules': [
> {
> 'match': '*CN=fred',
> 'policy': 'allow'
> }
> ]
> }
> }
> }
>
> They can then reference this in the new 'tls-authz' parameter when
> executing the 'nbd-server-start' command:
>
> {
> 'execute': 'nbd-server-start',
> 'arguments': {
> 'addr': {
> 'type': 'inet',
> 'host': '127.0.0.1',
> 'port': '9000'
> },
> 'tls-creds': 'tls0',
> 'tls-authz': 'authz0'
> }
> }
>
> Signed-off-by: Daniel P. Berrange <address@hidden>
Reviewed-by: Juan Quintela <address@hidden>
similar to previous patch in series.
- [Qemu-block] [PATCH v3 0/6] Add authorization support to all network services, Daniel P . Berrangé, 2018/10/09
- [Qemu-block] [PATCH v3 1/6] qemu-nbd: add support for authorization of TLS clients, Daniel P . Berrangé, 2018/10/09
- [Qemu-block] [PATCH v3 2/6] nbd: allow authorization with nbd-server-start QMP command, Daniel P . Berrangé, 2018/10/09
- Re: [Qemu-block] [PATCH v3 2/6] nbd: allow authorization with nbd-server-start QMP command,
Juan Quintela <=
- [Qemu-block] [PATCH v3 3/6] migration: add support for a "tls-authz" migration parameter, Daniel P . Berrangé, 2018/10/09
- [Qemu-block] [PATCH v3 4/6] chardev: add support for authorization for TLS clients, Daniel P . Berrangé, 2018/10/09
- [Qemu-block] [PATCH v3 5/6] vnc: allow specifying a custom authorization object name, Daniel P . Berrangé, 2018/10/09
- [Qemu-block] [PATCH v3 6/6] monitor: deprecate acl_show, acl_reset, acl_policy, acl_add, acl_remove, Daniel P . Berrangé, 2018/10/09