client and for some reason i always get an "401 Unauthorized" error even
though it looks to me like everything is configured correctly. i have
created a user on the salt master that is used for API access, i added
'@wheel' for the external authentication for the user in the salt master
configuration file and have also added the user to the wheel group on the
host even though i haven't seen anything requiring that in the
documentation but i always get the authentication error (i always restarted
salt-master and salt-api after making any changes for testing). does
anybody have any ideas or suggestions? everything seems to work OK if the
client argument is set to local. here is the output of curl on the salt
[root@srv ~]# curl -i -sSk https://localhost:8888/run -H 'Accept:
application/x-yaml' -d username=XXXX -d password=XXXX -d eauth=pam -d
fun=salt.wheel.key.list_all -d client=wheel
HTTP/1.1 401 Unauthorized
Access-Control-Expose-Headers: GET, POST
Allow: GET, HEAD, POST
Date: Mon, 16 Mar 2015 21:31:41 GMT
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
<meta http-equiv="Content-Type" content="text/html;
border-top: 2px solid black;
<p>No permission -- see authorization schemes</p>
<pre id="traceback">Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/cherrypy/_cprequest.py", line 656,
response.body = self.handler()
File "/usr/lib/python2.7/site-packages/cherrypy/lib/encoding.py", line
188, in __call__
self.body = self.oldhandler(*args, **kwargs)
line 390, in hypermedia_handler
HTTPError: (401, None)
<span>Powered by <a href="http://www.cherrypy.org">CherryPy
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firstname.lastname@example.org.
For more options, visit https://groups.google.com/d/optout.