Hello Dan, You're right in that there is a superuser you're not aware of. It's called the pivotal user and it's setup when you create your Chef server. It's primary function is to be used by Manage, the WebUI, to be able to make calls to do things like you're doing and setup organizations. A normal user in the system does not have access to do this. The chef-server-ctl org-create and related commands also make user of the pivotal user in this way. In fact, the chef-server-ctl commands are currently just a wrapper over knife-opc (which stands for knife opscode private chef, a bit outdated in its naming now). knife-opc is a knife addon that when configured with the pivotal user can perform cross organization calls. If you want to look at knife-opc as an example of what it's doing, it is open source and can be found here: https://github.com/opscode/knife-opc Thanks, Mark Mzyk " type="cite"> |
Archive powered by MHonArc 2.6.16.