golden hour

/opt/saltstack/salt/lib/python3.10/site-packages/salt/auth

⬆️ Go Up

Upload

File/Folder	Size	Actions
__init__.py	21.01 KB	Del OK
__pycache__	-	Del OK
auto.py	211 B	Del OK
django.py	6.47 KB	Del OK
file.py	8.37 KB	Del OK
keystone.py	943 B	Del OK
ldap.py	22.42 KB	Del OK
mysql.py	3.05 KB	Del OK
pam.py	7.03 KB	Del OK
pki.py	4.06 KB	Del OK
rest.py	2.8 KB	Del OK
sharedsecret.py	1.02 KB	Del OK
yubico.py	1.95 KB	Del OK

Edit: sharedsecret.py

"""Provide authentication using configured shared secret .. code-block:: yaml external_auth: sharedsecret: fred: - .* - '@jobs' The shared secret should be added to the master configuration, for example in /etc/salt/master.d/sharedsecret.conf (make sure that file is only readable by the user running the master): .. code-block:: yaml sharedsecret: OIUHF_CHANGE_THIS_12h88 This auth module should be used with caution. It was initially designed to work with a frontal that takes care of authentication (for example kerberos) and places the shared secret in the HTTP headers to the salt-api call. This salt-api call should really be done on localhost to avoid someone eavesdropping on the shared secret. See the documentation for cherrypy to setup the headers in your frontal. .. versionadded:: 2015.8.0 """ import logging log = logging.getLogger(__name__) def auth(username, password): """ Shared secret authentication """ return password == __opts__.get("sharedsecret")
Save