Using the Foreman REST API I've noticed there are some things not being
returned in my GET requests that I would expect to be there. Specifically:
api/v2/auth_source_ldaps does not return groups_base
api/v2/auth_source_ldaps does not return account_password
In general it seems no passwords in any of the APIs get returned. I
certainly see the merits of this, but it would be super handy if I could
somehow configure it especially for LDAP bind user passwords which are
stored in plain text anyway.
If not, groups_base definitely seems like something I'd want and wouldn't
pose any great security concerns.
Thanks for the consideration.
Hello,
sounds like you found a bug in API. We seem to miss these attributes in our
API views. Could you please create a redmine issue in our issue tracked at
[1]?
[1] http://projects.theforeman.org
Thanks
···
On Monday 09 of March 2015 12:07:09 Kendall Moore wrote:
> Using the Foreman REST API I've noticed there are some things not being
> returned in my GET requests that I would expect to be there. Specifically:
>
> api/v2/auth_source_ldaps does not return groups_base
> api/v2/auth_source_ldaps does not return account_password
>
> In general it seems no passwords in any of the APIs get returned. I
> certainly see the merits of this, but it would be super handy if I could
> somehow configure it especially for LDAP bind user passwords which are
> stored in plain text anyway.
>
> If not, groups_base definitely seems like something I'd want and wouldn't
> pose any great security concerns.
>
> Thanks for the consideration.
–
Marek