I noticed that the CloudStack UI allows VM control to accounts that don't have an API key set defined.
How does its authentication mechanism work? E.g. 1. How are API calls authenticated and authorized if they are not signed with API keys? 2. Does this work equally well when LDAP is to authenticate username / password? DL