Thee implementation is now ready. All the current tests are adapted to the new implementation. New functionality (pam authentication) has been tested with an artificial pam module.
Oleg Ponomarev (7): Add design document for PAM RAPI support Move RAPI users config parsing to a separate file Incapsulate RAPI authentication into a separate module Implement a module performing PAM authentication Add a new --pam-authentication option to RAPI daemon Add an authenticated user name to an opcode's reason trail Add ``user`` predicate to Ganeti query language Makefile.am | 10 + doc/design-optables.rst | 2 + doc/design-rapi-pam.rst | 132 ++++++++++++ doc/index.rst | 1 + doc/rapi.rst | 1 + lib/http/auth.py | 155 ++++++-------- lib/rapi/auth/__init__.py | 53 +++++ lib/rapi/auth/basic_auth.py | 148 +++++++++++++ lib/rapi/auth/pam.py | 367 +++++++++++++++++++++++++++++++++ lib/rapi/auth/users_file.py | 137 ++++++++++++ lib/rapi/baserlib.py | 12 ++ lib/rapi/rlib2.py | 4 + lib/rapi/testutils.py | 21 +- lib/server/rapi.py | 161 +++------------ man/gnt-filter.rst | 6 + qa/qa_rapi.py | 2 +- src/Ganeti/Constants.hs | 11 + src/Ganeti/JQScheduler/Filtering.hs | 14 ++ src/Ganeti/Objects.hs | 3 + test/py/ganeti.http_unittest.py | 45 ++-- test/py/ganeti.server.rapi_unittest.py | 47 +++-- 21 files changed, 1062 insertions(+), 270 deletions(-) create mode 100644 doc/design-rapi-pam.rst create mode 100644 lib/rapi/auth/__init__.py create mode 100644 lib/rapi/auth/basic_auth.py create mode 100644 lib/rapi/auth/pam.py create mode 100644 lib/rapi/auth/users_file.py -- 2.6.0.rc2.230.g3dd15c0
