<div dir="ltr">Thank you everyone for your feedback. A working proposal for authentication is available on the development email list, so please feel free to join the discussion there.<div> </div><div><a href="https://www.redhat.com/archives/pulp-dev/2016-September/msg00049.html">https://www.redhat.com/archives/pulp-dev/2016-September/msg00049.html</a> </div><div> </div><div>Michael</div></div><div class="gmail_extra"> <div class="gmail_quote">On Mon, Aug 29, 2016 at 9:20 AM, Russell E. Glaue <<a href="mailto:rglaue@cait.org" target="_blank">rglaue@cait.org</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">We use the current two authentication methods. 1. We use cert-based auth for connections from our continuous integration environment, managed by Jenkins. 2. We also use the basic auth for connections to the REST API. We'd love to have something more REST friendly, like JSON Web Tokens (JWT), that we can use in place of Basic Auth. <a href="https://jwt.io/" rel="noreferrer" target="_blank">https://jwt.io/</a> Though we do like and want to keep Basic Auth too, for some one-off tasks. Is the community considering to use the Django REST framework? <a href="http://www.django-rest-framework.org/" rel="noreferrer" target="_blank">http://www.django-rest-framework.org/</a> It supports Oauth.... but it would be great to have the JWT support! <a href="https://github.com/GetBlimp/django-rest-framework-jwt" rel="noreferrer" target="_blank">https://github.com/GetBlimp/django-rest-framework-jwt</a> -RG <div class="HOEnZb"><div class="h5"> ----- Original Message ----- From: "Aurélien DESBRIÈRES" <<a href="mailto:aurelien.desbrieres@gmail.com">aurelien.desbrieres@gmail.com</a>> To: "Konstantin M. Khankin" <<a href="mailto:khankin.konstantin@gmail.com">khankin.konstantin@gmail.com</a>>, "Michael Hrivnak" <<a href="mailto:mhrivnak@redhat.com">mhrivnak@redhat.com</a>> Cc: "pulp-list" <<a href="mailto:pulp-list@redhat.com">pulp-list@redhat.com</a>> Sent: Sunday, August 28, 2016 6:53:51 AM Subject: Re: [Pulp-list] Feedback needed: new user/auth system in 3.0 Hum ... Hope I will have not to rebuild all once again. On Sun, Aug 28, 2016, 12:41 PM Konstantin M. Khankin < <a href="mailto:khankin.konstantin@gmail.com">khankin.konstantin@gmail.com</a> > wrote: I use PAM auth, which is in turn authenticates login requests through FreeIPA. I don't create any roles other than admin though 2016-07-15 22:29 GMT+03:00 Michael Hrivnak < <a href="mailto:mhrivnak@redhat.com">mhrivnak@redhat.com</a> > : As many of you know, we are switching from mongodb to postgres in Pulp 3.0. This will come with quite a few changes. For one in particular, we need your input about how you use Pulp's user and permission system. Anything you can tell us about how you use the current user/perm system would be very helpful. We are considering the use of Django's built-in user/auth system [0] as a replacement for what Pulp currently has. If we hear silence, we might be more likely to change things, so let us know what is important to you. Have you integrated Pulp with a separate authentication source? Which one? Do you assign permissions to specific users? How granular do you need that to be? Have you created "roles" in Pulp? Anything else you want us to know or to think about? If you would like to provide input confidentially, you are welcome to contact me directly. [0] <a href="https://docs.djangoproject.com/en/1.8/topics/auth/" rel="noreferrer" target="_blank">https://docs.djangoproject.com/en/1.8/topics/auth/</a> Thank you! Michael _______________________________________________ Pulp-list mailing list <a href="mailto:Pulp-list@redhat.com">Pulp-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pulp-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a> -- Ханкин Константин _______________________________________________ Pulp-list mailing list <a href="mailto:Pulp-list@redhat.com">Pulp-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pulp-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a> _______________________________________________ Pulp-list mailing list <a href="mailto:Pulp-list@redhat.com">Pulp-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/pulp-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a> </div></div></blockquote></div> </div>