WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-api

[Xen-API] Authentication mismatch in API to create pool

To: xen-api <xen-api@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-API] Authentication mismatch in API to create pool
From: Marco Sinhoreli <msinhore@xxxxxxxxx>
Date: Tue, 24 Nov 2009 22:59:25 -0200
Delivery-date: Tue, 24 Nov 2009 16:59:36 -0800
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:content-type; bh=WbESdIAAb8VV/x3kguc7iwzeEL3fq0WWYWrl2BBNVjc=; b=kl5RATGp6ZB8s8MFuDX+MnxkFcv3i60EDRQZGmJnL9c5mS6LisaHSVJUvw5hz/aqzl zM7VAnga70gXEshufCjgzY0o3BjnTPomwyzSOOKt1G7jifQFy4QddCWq40MKz6p397VY t9JxnGXjQOrmjJL1/eneHpzMvUqJBKxAdRpAo=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=wsMd8tzouO2Izo8+3HWuIM2yNkOq4eu0PpSDr9R7P5CVWcK4ytVGPOOd73fE1cWLGr EN3aJJECuy+4MMQEqSbjaIZE5pdZqeo6ZVAUcrGyWdY3jZ9JLVxtrulH5kNfWcYV+GjT IOBqZ9nSI5/wYfjaEdmzL0xqZgkAJ8QJX+bSg=
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-api-request@lists.xensource.com?subject=help>
List-id: Discussion of API issues surrounding Xen <xen-api.lists.xensource.com>
List-post: <mailto:xen-api@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-api>, <mailto:xen-api-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-api>, <mailto:xen-api-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-api-bounces@xxxxxxxxxxxxxxxxxxx
Hello everybody,

I'm trying to create a pool with PAM authentication enabled in my XCP
hosts. I have a rpm package used to configure the hosts. I'm running
these commands:

<code>
    xe pool-enable-external-auth auth-type=PAM config:user=xswm
service-name=$(hostname)
    xe subject-add subject-name=xswm
    subject_uuid=$(xe subject-list  | awk '/^uuid/{print $5}')
   role_uuid=$(xe role-list  name=pool-operator params=uuid | awk
'/^uuid/{print $5}')
   xe subject-role-add uuid=${subject_uuid} role-uuid=${role_uuid}
</code>

This is configured in all hosts using the same user. Looking for code
to create pool in API, I saw this entries in file xapi_pool.ml:

<code>
               debug "Verifying if external auth configuration of
master %s (auth_type=%s service_name=%s) matches that of slave-to-be
%s (auth-type=%s servi\
ce_name=%s)"
                        (Client.Host.get_name_label ~rpc ~session_id
~self:master) master_auth_type master_auth_service_name
                        (Db.Host.get_name_label ~__context
~self:slavetobe) slavetobe_auth_type slavetobe_auth_service_name;
                if (slavetobe_auth_type <> master_auth_type)
                || (slavetobe_auth_service_name <> master_auth_service_name) 
then begin
                        error "Cannot join pool whose external
authentication configuration is different";
                        raise
(Api_errors.Server_error(Api_errors.pool_joining_external_auth_mismatch,
[]))
                end in
</code>

This check isn't let me create the pool, is returning this message:

<code>
Cannot join pool whose external authentication configuration is different.
</code>

Well, as I told, I have the same auth method in all hosts using and
connecting with the same user. Is this some routine mistake or is this
right?

PS: I'm using in XenServer 5.0.0 a PAM user without problem.

Cheers,

-- 
Marco Sinhoreli

_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/mailman/listinfo/xen-api

<Prev in Thread] Current Thread [Next in Thread>