|
Post by charkude on May 2, 2023 12:26:07 GMT
I need clarification regarding below section abour Host interfacing about 3 rd comment, Is DELETE can be performed using redfish on manager account representing bootstrap account ?
9.3 Recommendations for hosts
Anyone with root or administrative access to the host is able to make use of this mechanism for provisioning an account. However, it is recommended that this mechanism only be used during initial provisioning of a host. The overall workflow for using this interface is recommended to be:
1.Use this mechanism to create a bootstrap account. When issuing theGet Bootstrap Account Credentialscommand, do not set the "Disable credential bootstrapping control" parameter of the command toA5h.
2.Using the bootstrap account, create a permanent account for the host in the manager account collection found in the account service.
3.Perform a DELETE on the manager account representing the bootstrap account.
|
|
|
Post by mraineri on May 2, 2023 12:59:08 GMT
Yes, you should be able to perform a DELETE operation on a bootstrap account just like any other Redfish account. In the typical lifecycle of accounts, you POST to create, then use the account credentials, and when the account is no longer needed, you DELETE the account. Similar here, if the bootstrap account is no longer needed, the user can perform a DELETE operation on the bootstrap account to remove access from the temporary credentials.
|
|
|
Post by charkude on May 3, 2023 5:48:49 GMT
Ok, I am clear about DELETE, How about listing the bootstrap account in redfish, is it allowed ? e.g. for request GET https://${BMC_IP}/redfish/v1/AccountService/Accounts
Can we list manager account representing the bootstrap account in response to above URI ?
|
|
|
Post by mraineri on May 3, 2023 12:40:59 GMT
Yes, the bootstrap account is expected to be added to the accounts collection URI as you've shown above like any other manager account. This allows the account to be discovered by administrators who may need to revoke access.
|
|