[Spacewalk-list] A flexible authn_spacewalk for Cobbler / related topics

[Michael DeHaan]

Justin Sherrill wrote:
> Michael DeHaan wrote:
>   
>> As folks may not be aware, we have a authentication plugin that allows
>> Cobbler to work with Spacewalk.
>>
>> Currently this uses a shared secret mechanism to allow spacewalk to
>> manipulate cobbler.
>>
>> A couple things:
>>
>> * Euclid on IRC points out that it would be awesome if this could work
>> with older Satellites (like 5.X) as well as just the new stuff
>> (Spacewalk 0.4+).  I agree.   Is there an API we can use to check the
>> versions and try older calls to do auth against Satellite's that don't
>> yet have Cobbler integration? 
>>     
>
> You can use 'api.getVersion()'  (with no parameters) to provide you the
> api version.
>
>   
>> * As I understand it, internally Spacewalk is using special tokens for
>> this auth.   Can we also make this accept username and passwords so
>> folks can access CobblerWeb?  That would be great, because Cobbler web
>> serves as sort of a "cobbler command line for people who don't like
>> command lines".   It's another web app but it does surface some things
>> that spacewalk won't surface for some time, and if it allows the same
>> username/passwords that will be really simple to access.
>>     
>
> I think if spacewalk is older than 0.4 (whichever api version that
> corresponds to), we should just call  'auth.login()' instead of
> 'auth.checkAuthToken()'
>
> For the newer versions we should call 'auth.checkAuthToken()' and if
> that fails, try 'auth.login()'.  Seems simple enough and that should
> take care of both cases.
>
> -Justin
>
>   
>> Any suggestions on how to change the authenticator to best do both of
>> these?
>>
>> Here's the latest I have now, written for Spacewalk:
>>
>> http://git.fedorahosted.org/git/?p=cobbler;a=blob_plain;f=cobbler/modules/authn_spacewalk.py;hb=1aae8e137ddf857e65027f492fbdff9a373fdd13
>>
>>
>> Thanks!
>>
>> --Michael
>>
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>     
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>   

Thanks! I'll open up a cobbler bug on this one and we can do this for 
1.4.1 I think.

--Michael