ingox commented on issue #168: URL: https://github.com/apache/cloudstack-cloudmonkey/issues/168#issuecomment-3160131808
Leave that bash thing out for now. Here are the steps: - I have a single profile in my config file with username (admin) and password. - Once I login to cmk (command: "cmk") I do a "list users" to check who I am. It is admin now. - I logout again. - Now I login again by using the APIkey and Secret of a specific user "cmk -s <secret> -k <apikey> - List users will show that I'm ACSUser now (example). - Now I logout again and remove just one character from the key or secret (potential mistake). - I would expect an error now. But there is no error. I'm logged in into cmk again. - List users shows me that I'm admin. That is quite risky from my point of view. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@cloudstack.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org
