[Spacewalk-list] Spacewalk and Cobblers Webgui

[Michael DeHaan]

Johannes König wrote:
> Michael DeHaan schrieb:
>> Michael DeHaan wrote:
>>> Michael DeHaan wrote:
>>>> Mike McCune wrote:
>>>>> Johannes König wrote:
>>>>>> Hi,
>>>>>>
>>>>>> since the marriage^^ of Spacewalk and Cobbler i can't use the 
>>>>>> Cobbler webgui.
>>>>>> Is there a way to use it and Spacewalk can still talk to Cobbler? 
>>>>>> I wanted to use the Cobbler webgui for the adding of new server. 
>>>>>> I don't want to have user logins on the commandline.
>>>>>>
>>>>>
>>>>> On a machine with Spacewalk and Cobbler installed the 
>>>>> authorization is setup such that the only webui you can use is 
>>>>> Spacewalk's.  You can still use Cobbler's CLI and of course can 
>>>>> use Spacewalk's GUI to create kickstart distributions and profiles.
>>>>>
>>>>> Mike
>>>>>
>>>>
>>>> I expect to have a patch to cobbler's "authn_spacewalk" module that 
>>>> will let you use Cobbler's GUI today.
>>>>
>>>> Right now it's not possible as it only allows spacewalk 
>>>> "tokens",not also the username/password combos.
>>>>
>>>> Will let you know when I have it working.
>>>>
>>>> --Michael
>>>>
>>>>
>>>> _______________________________________________
>>>> Spacewalk-list mailing list
>>>> Spacewalk-list at redhat.com
>>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>>
>>> Justin and I were working on this for a bit, and we now have a 
>>> Cobbler authn_spacewalk module that not only accepts tokens, but 
>>> also valid spacewalk usernames/passwords.
>>>
>>> This will be included in Cobbler 1.4.3 when it comes out.
>>>
>>> Note:  We probably need to limit what users can get into cobbler 
>>> this way.    Right now it lets everyone with a spacewalk account in, 
>>> so this will be fixed soon.
>>>
>>> http://tinyurl.com/b57th7
>>>
>>> Anyhow, testing welcome, and if you want to just replace this one 
>>> file in your cobbler install, restart cobblerd, and test it that 
>>> would be great.
>>>
>>> Thanks!
>>>
>>> --Michael
>>>
>>>
>>> _______________________________________________
>>> Spacewalk-list mailing list
>>> Spacewalk-list at redhat.com
>>> https://www.redhat.com/mailman/listinfo/spacewalk-list
>>
>>
>> This is now done.   Users of Cobbler 1.4.3 and later can now set 
>> "redhat_management_permissive" to 1 to allow their Satellite 
>> config_admins and org_admins access to Cobbler.
>>
>> The install config file comes with appropriate warnings as to whether 
>> it's smart to turn this on in a Satellite multi-org setup.  It is off 
>> by default, which means no Cobbler Web access
>> until it is enabled.
>>
>> --Michael
>>
>>
>> _______________________________________________
>> Spacewalk-list mailing list
>> Spacewalk-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/spacewalk-list
> Hello Michael,
>
> thank you for that information. I will install the patch today on my 
> testserver.
>
> Johannes
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list

Yeah, in order to limit what users can log in based on spacewalk roles 
you'll need the version from git (it required changes to a few more 
files) -- though if you want to let any user in the above patch will 
work for you.

If you're the only spacewalk user (or you trust the other ones), no problem.

--Michael