[Spacewalk-list] cobbler - authn_spacewalk - xmlrpc api

[Justin Sherrill]

On 7/7/10 3:11 PM, Tom Brown wrote:
> Hi
>
> We use cobbler with spacewalk over the top and there is an auth
> mechanism called authn_spacewalk which as far as i can tell is
> provided by Spacewalk. I am trying to use the xmlrpc api to add
> systems into cobbler but all i ever get is ....
>
> Traceback (most recent call last):
>   File "xml-rpc.py", line 13, in ?
>     token = conn.login("testuser","testpass")
>   File "/usr/lib64/python2.4/xmlrpclib.py", line 1096, in __call__
>     return self.__send(self.__name, args)
>   File "/usr/lib64/python2.4/xmlrpclib.py", line 1383, in __request
>     verbose=self.__verbose
>   File "/usr/lib64/python2.4/xmlrpclib.py", line 1147, in request
>     return self._parse_response(h.getfile(), sock)
>   File "/usr/lib64/python2.4/xmlrpclib.py", line 1286, in _parse_response
>     return u.close()
>   File "/usr/lib64/python2.4/xmlrpclib.py", line 744, in close
>     raise Fault(**self._stack[0])
> xmlrpclib.Fault:<Fault 1: "cobbler.cexceptions.CX:'login failed: testuser'">
>
> 'testuser' using 'testpass' can log into Spacewalk just fine. Anyone
> tried this or have any clues?
>
> # authentication:
> # what users can log into the WebUI and Read-Write XMLRPC?
> # choices:
> #    authn_denyall    -- no one (default)
> #    authn_configfile -- use /etc/cobbler/users.digest (for basic setups)
> #    authn_passthru   -- ask Apache to handle it (used for kerberos)
> #    authn_ldap       -- authenticate against LDAP
> #    authn_spacewalk  -- ask Spacewalk/Satellite (experimental)
> #    authn_testing    -- username/password is always testing/testing (debug)
> #    (user supplied)  -- you may write your own module
> # WARNING: this is a security setting, do not choose an option blindly.
> # for more information:
> # https://fedorahosted.org/cobbler/wiki/CobblerWebInterface
> # https://fedorahosted.org/cobbler/wiki/CustomizableSecurity
> # https://fedorahosted.org/cobbler/wiki/CobblerWithKerberos
> # https://fedorahosted.org/cobbler/wiki/CobblerWithLdap
>
> [authentication]
> module = authn_spacewalk
>
> thanks
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>    
By default authn_spacewalk doesn't allow logins using spacewalk 
usernames and passwords.  It's only really meant to allow the spacewalk 
server to communicate with cobbler (Which uses it's own auth 
mechanism).  If you do want to be able to login to cobbler using 
spacewalk usernames and passwords, simply edit /etc/cobbler/settings and 
set:

redhat_management_permissive: 1


Then restart cobbler.  The user you login with has to be a config_admin 
or org_admin, but other than that, it should work.

-Jusitn