[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-API] Authentication mismatch in API to create pool


  • To: xen-api <xen-api@xxxxxxxxxxxxxxxxxxx>
  • From: Marco Sinhoreli <msinhore@xxxxxxxxx>
  • Date: Tue, 24 Nov 2009 22:59:25 -0200
  • Delivery-date: Tue, 24 Nov 2009 16:59:36 -0800
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=wsMd8tzouO2Izo8+3HWuIM2yNkOq4eu0PpSDr9R7P5CVWcK4ytVGPOOd73fE1cWLGr EN3aJJECuy+4MMQEqSbjaIZE5pdZqeo6ZVAUcrGyWdY3jZ9JLVxtrulH5kNfWcYV+GjT IOBqZ9nSI5/wYfjaEdmzL0xqZgkAJ8QJX+bSg=
  • List-id: Discussion of API issues surrounding Xen <xen-api.lists.xensource.com>

Hello everybody,

I'm trying to create a pool with PAM authentication enabled in my XCP
hosts. I have a rpm package used to configure the hosts. I'm running
these commands:

<code>
    xe pool-enable-external-auth auth-type=PAM config:user=xswm
service-name=$(hostname)
    xe subject-add subject-name=xswm
    subject_uuid=$(xe subject-list  | awk '/^uuid/{print $5}')
   role_uuid=$(xe role-list  name=pool-operator params=uuid | awk
'/^uuid/{print $5}')
   xe subject-role-add uuid=${subject_uuid} role-uuid=${role_uuid}
</code>

This is configured in all hosts using the same user. Looking for code
to create pool in API, I saw this entries in file xapi_pool.ml:

<code>
               debug "Verifying if external auth configuration of
master %s (auth_type=%s service_name=%s) matches that of slave-to-be
%s (auth-type=%s servi\
ce_name=%s)"
                        (Client.Host.get_name_label ~rpc ~session_id
~self:master) master_auth_type master_auth_service_name
                        (Db.Host.get_name_label ~__context
~self:slavetobe) slavetobe_auth_type slavetobe_auth_service_name;
                if (slavetobe_auth_type <> master_auth_type)
                || (slavetobe_auth_service_name <> master_auth_service_name) 
then begin
                        error "Cannot join pool whose external
authentication configuration is different";
                        raise
(Api_errors.Server_error(Api_errors.pool_joining_external_auth_mismatch,
[]))
                end in
</code>

This check isn't let me create the pool, is returning this message:

<code>
Cannot join pool whose external authentication configuration is different.
</code>

Well, as I told, I have the same auth method in all hosts using and
connecting with the same user. Is this some routine mistake or is this
right?

PS: I'm using in XenServer 5.0.0 a PAM user without problem.

Cheers,

-- 
Marco Sinhoreli

_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/mailman/listinfo/xen-api


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.