It it possible over the API or CLI to generate a user's ticket without their password as an admin/root user? I'm working on a custom SSO for proxmox that would in the background generate a ticket for you then add it to your cookies so you never see a proxmox login page.
yes, but only root@pam can do that.
https://git.proxmox.com/?p=pve-acce...a4294be283347b1cb5d0155b0e5d003a;hb=HEAD#l131
POST /api2/json/access/ticket
basically call the create ticket API call with another username+realm and pass a valid root@pam ticket as 'password'. on the CLI,
https://git.proxmox.com/?p=pve-acce...a4294be283347b1cb5d0155b0e5d003a;hb=HEAD#l131
POST /api2/json/access/ticket
basically call the create ticket API call with another username+realm and pass a valid root@pam ticket as 'password'. on the CLI,
pveum ticket USERNAME@REALM serves the same purpose.
Thank you! Is it possible to generate a ticket for the root user over the CLI without a password? Running pveum ticket root@pam as the root user proved unsuccessful, but I assume that's just due to the fact pveum just then turns it into a request to the API
yeah, you can write a perl script that directly calls the ticket generation code 
e.g., similar to this example code for the perl API client: https://git.proxmox.com/?p=pve-apic...b34445f08c8303e6ff66309dfca11c16a1ae1;hb=HEAD
obviously, this only works when run as root user on the PVE system in question.
e.g., similar to this example code for the perl API client: https://git.proxmox.com/?p=pve-apic...b34445f08c8303e6ff66309dfca11c16a1ae1;hb=HEAD
obviously, this only works when run as root user on the PVE system in question.