From efeb9d710d83d730d7e145e0b18a3b79148f6529 Mon Sep 17 00:00:00 2001
From: Andrew Miloradovsky
Since the libvirt SASL config file defaults to using GSSAPI (Kerberos), a
-config change is rquired to enable plain password auth. This is done by
+config change is required to enable plain password auth. This is done by
editting /etc/sasl2/libvirt.conf
to set the mech_list
parameter to scram-sha-1
.
cyrus-sasl-gssapi
.
To check whether the Kerberos plugin is installed run the pluginviewer
-program and verify that gssapi
is listed,eg:
+program and verify that gssapi
is listed, e.g.:
# pluginviewer @@ -359,7 +359,7 @@ kadmin.local: quitAny client application wishing to connect to a Kerberos enabled libvirt server merely needs to run
kinit
to gain a user principal. This may well -be done automatically when a user logs into a desktop session, if PAM is setup +be done automatically when a user logs into a desktop session, if PAM is set up to authenticate against Kerberos.