CAMPassport authorization #114
Conversation
added functionality to _build_authorization_token function to take gateway as an argument where gateway is the Cognos dispatcher used for CAM security. will use negotiated login attempt to get passport cookie for authorization header instead of taking username & password
|
Hi, thanks for the contribution to TM1py. Before I will merge the changes I want to challenge it. Unfortunately I currently can't get it to run with my setup. I got a TM1 instance that is using CAM and supporting SSO (IntegratedSecurityMode=5) ready. |
|
Correct, it's should also match the address returned in the WWW-Authenticate header if you send a request to the instance without any authorization header. |
- Fail when CAM gateaway auth fails even though credentials are provided - Handle case that response does not contain expected 'cam_passport' cookie
- Fail when CAM gateaway auth fails even though credentials are provided - Handle case that response does not contain expected 'cam_passport' cookie - Add new requests_negotiate_sspi dependency to setup.py
|
@adscheevel I will close this branch in favor of #120 , as I wanted to do a few (rather cosmetical) changes to the branch before it's merged into the master. #120 now contains your commit e58dd16 and my changes on top Thanks for your contribution! |
- Fail when CAM gateaway auth fails even though credentials are provided - Handle case that response does not contain expected 'cam_passport' cookie - Add new requests_negotiate_sspi dependency to setup.py
added functionality to _build_authorization_token function in RestService.py to take gateway as an argument where gateway is the Cognos dispatcher used for CAM security. will use negotiated login attempt to get passport cookie for authorization header instead of taking username & password. If the negotiated login fails, it will set the token to use the username and password, provided they were supplied. Attached is example of config.ini file for on premise installation with gateway parameter defined.
I did this modification because i didnt want to save the base64 password in a config file and am lucky to have cognos CAM with windows integrated authentication set up in our TM1 environment. My python skills are not great, my edits might not be the best way to accomplish what I set out to do.