search

cockpit-project / cockpit

Cockpit is a web-based graphical interface for servers.
http://www.cockpit-project.org/
GNU Lesser General Public License v2.1
11.28k stars 1.12k forks source link

D-Bus websocket with arbitrary credentials #145

Closed mvollmer closed 10 years ago

mvollmer commented 10 years ago

We should be able to open multiple websockets with different credentials. Thus the credentials should somehow be included in the weboscket connection request, probably as a cookie.

stefwalter commented 10 years ago

Why is this necessary? All machines are supposed to have their accounts in sync, and during setup we should use ssh + a script.

I also don't think it's really doable for anything but password authentication. It won't work for GSSAPI or basic auth where the browser handles the authentication for us.

mvollmer commented 10 years ago

It was meant as a survival feature in a ad-hoc, un-synchronized network of machines. This would allow us to skip synchronization for now and still have something useful.

It would only be necessary in situations where GSSAPI and basic auth do not work anyway.

But let's skip this and just do a proper initial setup right away.