Bug 1199853 - bkr CLI options to authenticate as another account using proxy_user powers
Summary: bkr CLI options to authenticate as another account using proxy_user powers
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Beaker
Classification: Retired
Component: command line
Version: 19
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: 20.0
Assignee: Amit Saha
QA Contact: tools-bugs
URL:
Whiteboard:
: 1203041 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-03-09 00:05 UTC by Dan Callaghan
Modified: 2018-02-06 00:41 UTC (History)
11 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-04-20 02:22:46 UTC
Embargoed:


Attachments (Terms of Use)

Description Dan Callaghan 2015-03-09 00:05:56 UTC
Since 0.6 Beaker has had the "proxy user" feature whereby accounts can be granted permission to authenticate to Beaker as any other user. The purpose of this feature is for bots or scripts running as trusted service accounts (generally, under the control of the Beaker administrator only) to perform actions on behalf of real users.

A service needs to pass an extra parameter to the auth.login_* XMLRPC methods:

https://beaker-project.org/docs/server-api/xmlrpc.html#authentication

The bkr client should also expose this functionality, so that scripts can use this feature when invoking bkr (without having to make XMLRPC calls directly).

Comment 2 Dan Callaghan 2015-03-09 00:07:54 UTC
I suggest a new common option --proxy-user=<username> which, when set, is passed as the extra param to the login methods.

This option should *not* be included in --help, we don't want it to appear in the help message for every single subcommand and confuse people when regular users will never be able to use it. It should appear in bkr(1) alongside the other common auth options however.

Comment 3 Jan Stancek 2015-03-09 13:24:58 UTC
(In reply to Dan Callaghan from comment #2)
> I suggest a new common option --proxy-user=<username> which, when set, is
> passed as the extra param to the login methods.

Proposed patch v1:
  http://gerrit.beaker-project.org/#/c/4030/

Comment 4 Dan Callaghan 2015-03-20 04:13:01 UTC
*** Bug 1203041 has been marked as a duplicate of this bug. ***

Comment 5 Amit Saha 2015-03-24 22:43:24 UTC
Patch which was merged: http://gerrit.beaker-project.org/#/c/4035/


This fix is available for testing in the beaker client packages (beaker-client-19.4-0.git.109.fc3396d)  available from https://beaker-project.org/nightlies/develop/

Comment 10 Dan Callaghan 2015-04-20 02:22:46 UTC
Beaker 20.0 has been released.


Note You need to log in before you can comment on or make changes to this bug.