Logging into the API on Juju 2.0

[Andrew Wilkins]

On Sat, Feb 27, 2016 at 1:10 AM Adam Stokes <adam.stokes at canonical.com>
wrote:

> Also, will the API support non admin users to login and query the various
> modelmanager methods they have access to? If so, will this be available by
> GA release?
>
> On Fri, Feb 26, 2016 at 11:45 AM, Adam Stokes <adam.stokes at canonical.com>
> wrote:
>
>> Currently, the only way to login to the Juju 2.0 api is to use the Tag of
>> 'user-admin'.
>>
>
You can log in with additional users. With the CLI, you can do:
  - juju add-user bob
  - juju change-user-password bob
  - juju switch-user bob
(or you could use the "register" command to add another controller entry;
you'll still end up with the "bob" user)

However, all the files created by juju during bootstrap (accounts.yaml,
>> models.yaml, controllers.yaml) only mention the admin user as 'admin at local'
>> for the controller.
>>
>
"admin" is equivalent to "admin at local"; the latter form is canonical. What
you're passing over the API is a different form altogether: it is a "tag".
The tag form of a user is: user-<username>[@domain].

So for the "admin at local" user, the tag form is "user-admin at local". You can
also supply just "user-admin", and the "local" is implied.

When will the API login support logging in as the admin user for the
>> specified controller?
>>
>> An example of the request being passed to the api server:
>>
>> {'Type': 'Admin',
>>  'Version': 3,
>>  'Request': 'Login',
>>  'RequestId': 1,
>>  'Params': {'auth-tag': user,
>>        'credentials': password}}
>>
>> user = 'user-admin' and not 'admin at local' as seen in the yaml configs.
>>
>
That should be working. Please file a bug if it's not, with steps to
reproduce.

Cheers,
Andrew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/juju/attachments/20160227/1a74ca81/attachment.html>