[Spacewalk-list] Spacewalk and Cobblers Webgui

[Michael DeHaan]

Michael DeHaan wrote:
> Michael DeHaan wrote:
>> Mike McCune wrote:
>>> Johannes König wrote:
>>>> Hi,
>>>>
>>>> since the marriage^^ of Spacewalk and Cobbler i can't use the 
>>>> Cobbler webgui.
>>>> Is there a way to use it and Spacewalk can still talk to Cobbler? I 
>>>> wanted to use the Cobbler webgui for the adding of new server. I 
>>>> don't want to have user logins on the commandline.
>>>>
>>>
>>> On a machine with Spacewalk and Cobbler installed the authorization 
>>> is setup such that the only webui you can use is Spacewalk's.  You 
>>> can still use Cobbler's CLI and of course can use Spacewalk's GUI to 
>>> create kickstart distributions and profiles.
>>>
>>> Mike
>>>
>>
>> I expect to have a patch to cobbler's "authn_spacewalk" module that 
>> will let you use Cobbler's GUI today.
>>
>> Right now it's not possible as it only allows spacewalk "tokens",not 
>> also the username/password combos.
>>
>> Will let you know when I have it working.
>>
>> --Michael
>>
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> Justin and I were working on this for a bit, and we now have a Cobbler 
> authn_spacewalk module that not only accepts tokens, but also valid 
> spacewalk usernames/passwords.
>
> This will be included in Cobbler 1.4.3 when it comes out.
>
> Note:  We probably need to limit what users can get into cobbler this 
> way.    Right now it lets everyone with a spacewalk account in, so 
> this will be fixed soon.
>
> http://tinyurl.com/b57th7
>
> Anyhow, testing welcome, and if you want to just replace this one file 
> in your cobbler install, restart cobblerd, and test it that would be 
> great.
>
> Thanks!
>
> --Michael
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list


This is now done.   Users of Cobbler 1.4.3 and later can now set 
"redhat_management_permissive" to 1 to allow their Satellite 
config_admins and org_admins access to Cobbler.

The install config file comes with appropriate warnings as to whether 
it's smart to turn this on in a Satellite multi-org setup.  It is off by 
default, which means no Cobbler Web access
until it is enabled.

--Michael