Hi Hinrich,
Have a look at the XE commands subject-list, subject-add, subject-role-add.
It's only possible to log in to XenServer by using a subject with a role. But
since you say you were able to successfully log in, you should already have
one. You can also have a look at /var/log/xensource.log and see if you find any
relevant debug messages when calling get_this_host.
It works for me with root, and both with a pool-admin user and a read-only user
(h04 is the master):
$ python
Python 2.5.2 (r252:60911, Jan 20 2010, 21:48:48)
[GCC 4.2.4 (Ubuntu 4.2.4-1ubuntu3)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import xmlrpclib
>>> x=xmlrpclib.Server("http://h04";)
>>> session_root=x.session.login_with_password("root","password")['Value']
>>> x.session.get_this_host(session_root,session_root)
{'Status': 'Success', 'Value': 'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>> session_ad_user_pool_admin=x.session.login_with_password("user_pool_admin","password")['Value']
>>> x.session.get_this_host(session_ad_user_pool_admin,session_ad_user_pool_admin)
{'Status': 'Success', 'Value': 'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>> session_ad_user_read_only=x.session.login_with_password("user_read_only","password")['Value']
>>> x.session.get_this_host(session_ad_user_read_only,session_ad_user_read_only)
{'Status': 'Success', 'Value': 'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>> x.host.get_all_records(session_ad_user_read_only)
{'Status': 'Success', 'Value':
{'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf': { 'hostname': 'h04',
'name_label': 'h04', 'PBDs': ['OpaqueRef:c6938a14-e867-a825-a2e8-8caf6c46d19a',
'OpaqueRef:da701650-470e-f279-243a-e64aee6d12df',
'OpaqueRef:badd8c04-a95f-983e-9cfd-ce44e332d486',
'OpaqueRef:c6bccba6-21c2-dca5-4331-f3958880a86b'], 'supported_bootloaders':
['pygrub', 'eliloader'], 'host_CPUs':
['OpaqueRef:e4d4b690-5ae5-0f08-6895-059b43fdcdb1',
'OpaqueRef:5c93742e-dba1-6d93-91ba-df33ecdc308a'], 'API_version_minor': '7',
'allowed_operations': ['vm_migrate', 'evacuate', 'shutdown', 'provision',
'reboot', 'vm_resume', 'vm_start'], 'cpu_info': {'physical_features':
'0000e3bd-bfebfbff-00000001-20100000', 'modelname': 'Intel(R) Core(TM)2 CPU
6400 @ 2.13GHz', 'vendor': 'GenuineIntel', 'features':
'0000e3bd-bfebfbff-00000001-20100000', 'family': '6', 'maskable': 'false',
'cpu_count': '2', 'flags': 'fpu de tsc msr pae mce cx8 apic sep mtrr mca cmov
pat clflush acpi mmx fxsr sse sse2 ss ht nx constant_tsc pni vmx est ssse3',
'stepping': '2', 'model': '15', 'features_after_reboot':
'0000e3bd-bfebfbff-00000001-20100000', 'speed': '2131.206'},
'API_version_vendor_implementation': {}, 'name_description': 'Default install
of XenServer', 'API_version_vendor': 'XenSource', 'uuid':
'029ee6db-74e4-46a7-b044-5fd7f3fe32f8', 'ha_statefiles': [], 'capabilities':
['xen-3.0-x86_64', 'xen-3.0-x86_32p', 'hvm-3.0-x86_32', 'hvm-3.0-x86_32p',
'hvm-3.0-x86_64', ''], 'PIFs':
['OpaqueRef:1b76df2b-c3a7-d56c-e164-8c5454f99788', 'OpaqueRef:db76d2f......
From: [email protected]
[mailto:[email protected]] On Behalf Of Hinrich Aue
Sent: 18 March 2010 13:43
To: [email protected]
Subject: [Xen-API] PERMISSION_DENIED on get_this_host
Hello list,
I was able to successfully log into xen api xmlrpc with username and password.
After that I called get_this_host - and I get
PERMISSION_DENIED
.
I don't have any idea how to find out where to set the right permissions, of
what actually failed due to invalid permissions.
Any clues?
Thanks in advance - Hinrich
Hinrich Aue
Sr. SW Engineer
Kofax Development GmbH
Wentzinger Strasse 19
79106 Freiburg
Germany
Tel: +49 (0) 761 45269 57234
Fax: +49 (0) 761 45269 58734
[email protected]
________________________________
This communication is only for the use of the intended recipient. It may
contain confidential or proprietary information. If you are not the intended
recipient or have received this communication in error, please notify the
sender via phone and destroy this communication immediately.
Kofax Deutschland AG
Sitz der Gesellschaft: Freiburg i.Brg.
Amtsgericht Freiburg: HRB 5319
Vorstand: Jörg Grundmann (Vorsitzender), Gabriele Froning
Aufsichtsratsvorsitzender: Stefan Gaiser
_______________________________________________
xen-api mailing list
[email protected]
http://lists.xensource.com/mailman/listinfo/xen-api
