Hi Apollon, I went through the same issues, more or less ;-) What I was thinking is using PAM that allows you Nth level of flexibility, including several kind of backends. It should be easy to implement and there's some libs available such as: https://github.com/gnosek/python-pam
you just need to call in pam authenticate(username, password=None, service='login') inside the authenticate function of ganeti-rapi: https://github.com/sigmike/ganeti/blob/master/daemons/ganeti-rapi (line 163) I hoped to do that myself, but I was caught in so many things to do ..... :((((( Have a great weekend to the list! Cheers, Giuseppe
