Hi Hinrich,
Have a look at the XE commands
subject-list, subject-add, subject-role-add. It’s only possible to log in
to XenServer by using a subject with a role. But since you say you were able to
successfully log in, you should already have one. You can also have a look at
/var/log/xensource.log and see if you find any relevant debug messages when
calling get_this_host.
It works for me with root, and
both with a pool-admin user and a read-only user (h04 is the master):
$ python
Python 2.5.2 (r252:60911, Jan 20
2010, 21:48:48)
[GCC 4.2.4 (Ubuntu
4.2.4-1ubuntu3)] on linux2
Type "help",
"copyright", "credits" or "license" for more
information.
>>> import xmlrpclib
>>>
x=xmlrpclib.Server("http://h04")
>>>
session_root=x.session.login_with_password("root","password")['Value']
>>>
x.session.get_this_host(session_root,session_root)
{'Status': 'Success', 'Value':
'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>>
session_ad_user_pool_admin=x.session.login_with_password("user_pool_admin","password")['Value']
>>>
x.session.get_this_host(session_ad_user_pool_admin,session_ad_user_pool_admin)
{'Status': 'Success', 'Value':
'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>>
session_ad_user_read_only=x.session.login_with_password("user_read_only","password")['Value']
>>>
x.session.get_this_host(session_ad_user_read_only,session_ad_user_read_only)
{'Status': 'Success', 'Value':
'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf'}
>>>
x.host.get_all_records(session_ad_user_read_only)
{'Status': 'Success', 'Value':
{'OpaqueRef:4a50d6df-fd5f-5262-0c49-979f0a0d48bf': { 'hostname': 'h04', 'name_label':
'h04', 'PBDs': ['OpaqueRef:c6938a14-e867-a825-a2e8-8caf6c46d19a',
'OpaqueRef:da701650-470e-f279-243a-e64aee6d12df',
'OpaqueRef:badd8c04-a95f-983e-9cfd-ce44e332d486',
'OpaqueRef:c6bccba6-21c2-dca5-4331-f3958880a86b'], 'supported_bootloaders': ['pygrub',
'eliloader'], 'host_CPUs': ['OpaqueRef:e4d4b690-5ae5-0f08-6895-059b43fdcdb1',
'OpaqueRef:5c93742e-dba1-6d93-91ba-df33ecdc308a'], 'API_version_minor': '7',
'allowed_operations': ['vm_migrate', 'evacuate', 'shutdown', 'provision',
'reboot', 'vm_resume', 'vm_start'], 'cpu_info': {'physical_features':
'0000e3bd-bfebfbff-00000001-20100000', 'modelname': 'Intel(R) Core(TM)2
CPU 6400 @ 2.13GHz', 'vendor': 'GenuineIntel', 'features':
'0000e3bd-bfebfbff-00000001-20100000', 'family': '6', 'maskable': 'false',
'cpu_count': '2', 'flags': 'fpu de tsc msr pae mce cx8 apic sep mtrr mca cmov
pat clflush acpi mmx fxsr sse sse2 ss ht nx constant_tsc pni vmx est ssse3',
'stepping': '2', 'model': '15', 'features_after_reboot':
'0000e3bd-bfebfbff-00000001-20100000', 'speed': '2131.206'},
'API_version_vendor_implementation': {}, 'name_description': 'Default install
of XenServer', 'API_version_vendor': 'XenSource', 'uuid':
'029ee6db-74e4-46a7-b044-5fd7f3fe32f8', 'ha_statefiles': [], 'capabilities':
['xen-3.0-x86_64', 'xen-3.0-x86_32p', 'hvm-3.0-x86_32', 'hvm-3.0-x86_32p',
'hvm-3.0-x86_64', ''], 'PIFs':
['OpaqueRef:1b76df2b-c3a7-d56c-e164-8c5454f99788', 'OpaqueRef:db76d2f......
From:
xen-api-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:xen-api-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Hinrich Aue
Sent: 18 March 2010 13:43
To: xen-api@xxxxxxxxxxxxxxxxxxx
Subject: [Xen-API] PERMISSION_DENIED on get_this_host
Hello list,
I was able to successfully log into xen api xmlrpc with
username and password.
After that I called get_this_host – and I get
PERMISSION_DENIED
.
I don’t have any idea how to find out where to set the
right permissions, of what actually failed due to invalid permissions.
Any clues?
Thanks in advance - Hinrich
Hinrich
Aue
Sr. SW Engineer
Kofax Development GmbH
Wentzinger
Strasse 19
79106 Freiburg
Germany
Tel:
+49 (0) 761 45269 57234
Fax: +49 (0) 761 45269 58734
Hinrich.Aue@xxxxxxxxx
This
communication is only for the use of the intended recipient. It may contain
confidential or proprietary information. If you are not the intended recipient
or have received this communication in error, please notify the sender via
phone and destroy this communication immediately.
Kofax
Deutschland AG
Sitz der Gesellschaft: Freiburg i.Brg.
Amtsgericht Freiburg: HRB 5319
Vorstand: Jörg Grundmann (Vorsitzender), Gabriele Froning
Aufsichtsratsvorsitzender: Stefan Gaiser
