# Can i authenticate myself as an admin using the RESTful API (in java code)? **URL:** \ **Category:** Chef Infra (archive)\ **Created:** [October 19, 2009, 10:02am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299 "2009-10-19T10:02:08Z")\ **Posts on this page:** 8\ **Page:** 1

**Author:** ![Dikang\_Gu](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/dikang_gu/32/911_2.png) [@Dikang\_Gu](https://discourse.chef.io/u/Dikang_Gu)\ **Post date:** [October 19, 2009, 10:02am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/1 "2009-10-19T10:02:08Z")

As per subject. So that I can do the operations just like users on the web UI? Thanks Dikang ---

**Author:** ![Adam\_Jacob](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/adam_jacob/32/292_2.png) [@Adam\_Jacob](https://discourse.chef.io/u/Adam_Jacob)\ **Post date:** [October 19, 2009, 6:25pm UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/2 "2009-10-19T18:25:53Z")

Sure - you need to just create a new client credential, and then set it to be an administrator. See the 'register' and 'authenticate' methods here: > Adam On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > As per subject. So that I can do the operations just like users on the web > UI? > Thanks > Dikang -- Opscode, Inc. Adam Jacob, CTO T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) ---

**Author:** ![Dikang\_Gu](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/dikang_gu/32/911_2.png) [@Dikang\_Gu](https://discourse.chef.io/u/Dikang_Gu)\ **Post date:** [October 20, 2009, 3:32am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/3 "2009-10-20T03:32:05Z")

Thank you Adam! And after the authentication, will I get any information (like some tokens), that I will use in the http call? To tell the chef-server that I have been authenticated? Thanks Dikang On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > Sure - you need to just create a new client credential, and then set > it to be an administrator. > > See the 'register' and 'authenticate' methods here: > > [gist:100837 · GitHub](http://gist.github.com/100837) > > Adam > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > As per subject. So that I can do the operations just like users on the > > web > > UI? > > Thanks > > Dikang > > -- > Opscode, Inc. > Adam Jacob, CTO > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) ---

**Author:** ![Dikang\_Gu](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/dikang_gu/32/911_2.png) [@Dikang\_Gu](https://discourse.chef.io/u/Dikang_Gu)\ **Post date:** [October 20, 2009, 3:37am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/4 "2009-10-20T03:37:26Z")

please refer to my mail: "A problem when implementing the java client of chef". On Tue, Oct 20, 2009 at 11:32 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > Thank you Adam! > And after the authentication, will I get any information (like some > tokens), that I will use in the http call? To tell the chef-server that I > have been authenticated? > > Thanks > Dikang > > On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > > > Sure - you need to just create a new client credential, and then set > > it to be an administrator. > > > > See the 'register' and 'authenticate' methods here: > > > > [http://gist.github.com/100837](http://gist.github.com/100837) > > > > Adam > > > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > > > As per subject. So that I can do the operations just like users on the > > > web > > > UI? > > > Thanks > > > Dikang > > > > -- > > Opscode, Inc. > > Adam Jacob, CTO > > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) ---

**Author:** ![Arjuna\_Christensen](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@Arjuna\_Christensen](https://discourse.chef.io/u/Arjuna_Christensen)\ **Post date:** [October 20, 2009, 3:54am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/5 "2009-10-20T03:54:49Z")

Hi, On 20/10/2009, at 4:37 PM, Dikang Gu wrote: > please refer to my mail: "A problem when implementing the java > client of chef". As per the Knife snippet, Chef::Rest#authenticate is called - [http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76](http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76) ``` def authenticate(user, pass) Chef::Log.debug("Authenticating #{user} via openid") response = post_rest('openid/consumer/start', { "openid_identifier" => "#{Chef::Config[:openid_url]}/openid/ ``` server/node/#{user}", "submit" =\> "Verify" }) post\_rest( "#{Chef::Config[:openid\_url]}#{response["action"]}", { "password" =\> pass } ) end Shouldn't be too hard to port that over to Java. You'll need to persist and use the cookie in subsequent authentication-required calls to the Chef Server [handled internally by Chef::Rest for the ruby client]. HTH! > On Tue, Oct 20, 2009 at 11:32 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) > wrote: > Thank you Adam! > > And after the authentication, will I get any information (like some > tokens), that I will use in the http call? To tell the chef-server > that I have been authenticated? > > Thanks > Dikang > > On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > Sure - you need to just create a new client credential, and then set > it to be an administrator. > > See the 'register' and 'authenticate' methods here: > > [gist:100837 · GitHub](http://gist.github.com/100837) > > Adam > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > As per subject. So that I can do the operations just like users on > > the web > > UI? > > Thanks > > Dikang > > -- > Opscode, Inc. > Adam Jacob, CTO > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) -- Arjuna Christensen, Software Development Engineer Opscode, Inc. E: [aj@opscode.com](mailto:aj@opscode.com) ---

**Author:** ![Dikang\_Gu](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/dikang_gu/32/911_2.png) [@Dikang\_Gu](https://discourse.chef.io/u/Dikang_Gu)\ **Post date:** [October 20, 2009, 4:08am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/6 "2009-10-20T04:08:04Z")

Hi Arjuna, Thank you for your information! Yes, I have converted the ruby authenticate code to java, and used the cookie in subsequent calls to Chef Server, but I still have the 401 error. I attach some of the debug log, could you help me to talk a look at it, please? Thanks Dikang 2009-10-20 12:01:58,705 DEBUG [httpclient.wire.header] - \<\>\> "POST /openid/server/decision HTTP/1.1[\r][\n]"\> 2009-10-20 12:01:58,705 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,705 DEBUG [httpclient.wire.header] - \<\>\> "Accept: application/json[\r][\n]"\> 2009-10-20 12:01:58,705 DEBUG [httpclient.wire.header] - \<\>\> "Content-Type: application/json[\r][\n]"\> 2009-10-20 12:01:58,706 DEBUG [httpclient.wire.header] - \<\>\> "Cookie: \_chef\_server\_session\_id=BAh7CCIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCI9T3BlbklEOjpD%250Ab25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVy%250AOjpvOilPcGVuSUQ6OkNvbnN1bWVyOjpEaXNjb3ZlcmVkU2VydmljZXMJOg1A%250AY3VycmVudEAHOg5Ac2VydmljZXNbADoSQHN0YXJ0aW5nX3VybCI8aHR0cDov%250AL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxh%250AcHRvcDoPQHlhZGlzX3VybCI8aHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5p%250AZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIQbGFzdF9vaWRyZXFvOiNP%250AcGVuSUQ6OlNlcnZlcjo6Q2hlY2tJRFJlcXVlc3QOOg9AaW1tZWRpYXRlRjoO%250AQGlkZW50aXR5IjxodHRwOi8vbG9jYWxob3N0OjQwMDEvb3BlbmlkL3NlcnZl%250Aci9ub2RlL3N0ZXBoZW4tbGFwdG9wOhFAb3BfZW5kcG9pbnQiKGh0dHA6Ly9s%250Ab2NhbGhvc3Q6NDAwMS9vcGVuaWQvc2VydmVyOhBAdHJ1c3Rfcm9vdCIqaHR0%250AcDovL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25zdW1lcjoNQG1lc3NhZ2Vv%250AOhRPcGVuSUQ6Ok1lc3NhZ2UIOhNAb3BlbmlkX25zX3VyaSIlaHR0cDovL3Nw%250AZWNzLm9wZW5pZC5uZXQvYXV0aC8yLjA6EEBuYW1lc3BhY2VzbzoZT3BlbklE%250AOjpOYW1lc3BhY2VNYXAIOhhAbmFtZXNwYWNlX3RvX2FsaWFzewYiJWh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wOhNudWxsX25hbWVzcGFjZToY%250AQGFsaWFzX3RvX25hbWVzcGFjZXsGOx1AGDoZQGltcGxpY2l0X25hbWVzcGFj%250AZXNbADoKQGFyZ3N7C1sHQBgiCW1vZGUiEmNoZWNraWRfc2V0dXBbB0AYIg9j%250AbGFpbWVkX2lkIjxodHRwOi8vbG9jYWxob3N0OjQwMDEvb3BlbmlkL3NlcnZl%250Aci9ub2RlL3N0ZXBoZW4tbGFwdG9wWwdAGCIRYXNzb2NfaGFuZGxlIiR7SE1B%250AQy1TSEExfXs0YWQyZDE0M317OXduUHpnPT19WwdAGCIOcmV0dXJuX3RvIjNo%250AdHRwOi8vbG9jYWxob3N0OjQwMDAvb3BlbmlkL2NvbnN1bWVyL2NvbXBsZXRl%250AWwdAGCIKcmVhbG1AFlsHQBgiDWlkZW50aXR5QBQ6EkBhc3NvY19oYW5kbGVA%250AJzoPQHJldHVybl90b0AqOwxAJDoKQG1vZGUiEmNoZWNraWRfc2V0dXA%253D--84e991d308ee059a6983fe0db0c5c99654f412c4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,710 DEBUG [httpclient.wire.header] - \<\>\> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"\> 2009-10-20 12:01:58,710 DEBUG [httpclient.wire.header] - \<\>\> "Host: localhost:4001[\r][\n]"\> 2009-10-20 12:01:58,710 DEBUG [httpclient.wire.header] - \<\>\> "Content-Length: 20[\r][\n]"\> 2009-10-20 12:01:58,711 DEBUG [httpclient.wire.header] - \<\>\> "[\r][\n]"\> 2009-10-20 12:01:58,711 DEBUG [httpclient.wire.content] - \<\>\> "{"password":"12345"}"\> 2009-10-20 12:01:58,753 DEBUG [org.apache.commons.httpclient.methods.EntityEnclosingMethod] - 2009-10-20 12:01:58,754 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 302 Moved Temporarily[\r][\n]"\> 2009-10-20 12:01:58,754 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 302 Moved Temporarily[\r][\n]"\> 2009-10-20 12:01:58,754 DEBUG [httpclient.wire.header] - \<\<\< "Connection: close[\r][\n]"\> 2009-10-20 12:01:58,754 DEBUG [httpclient.wire.header] - \<\<\< "Date: Tue, 20 Oct 2009 04:01:58 GMT[\r][\n]"\> 2009-10-20 12:01:58,757 DEBUG [httpclient.wire.header] - \<\<\< "Location: [http://localhost:4000/openid/consumer/complete?openid.assoc\_handle={HMAC-SHA1}{4ad2d143}{9wnPzg%3D%3D}&openid.claimed\_id=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.identity=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.mode=id\_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.op\_endpoint=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver&openid.response\_nonce=2009-10-20T04%3A01%3A58Zr8XZqF&openid.return\_to=http%3A%2F%2Flocalhost%3A4000%2Fopenid%2Fconsumer%2Fcomplete&openid.sig=wrJQBh2gKjiSqEcTTsLVvbQl2vI%3D&openid.signed=assoc\_handle%2Cclaimed\_id%2Cidentity%2Cmode%2Cns%2Cop\_endpoint%2Cresponse\_nonce%2Creturn\_to%2Csigned](http://localhost:4000/openid/consumer/complete?openid.assoc_handle=%7BHMAC-SHA1%7D%7B4ad2d143%7D%7B9wnPzg%3D%3D%7D&openid.claimed_id=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.identity=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.op_endpoint=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver&openid.response_nonce=2009-10-20T04%3A01%3A58Zr8XZqF&openid.return_to=http%3A%2F%2Flocalhost%3A4000%2Fopenid%2Fconsumer%2Fcomplete&openid.sig=wrJQBh2gKjiSqEcTTsLVvbQl2vI%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Cmode%2Cns%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned)[ \r][\n]"\> 2009-10-20 12:01:58,757 DEBUG [httpclient.wire.header] - \<\<\< "Content-Type: text/html; charset=utf-8[\r][\n]"\> 2009-10-20 12:01:58,762 DEBUG [httpclient.wire.header] - \<\<\< "Set-Cookie: \_chef\_server\_session\_id=BAh7CSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCI9T3BlbklEOjpD%250Ab25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVy%250AOjpvOilPcGVuSUQ6OkNvbnN1bWVyOjpEaXNjb3ZlcmVkU2VydmljZXMJOg1A%250AY3VycmVudEAHOg5Ac2VydmljZXNbADoSQHN0YXJ0aW5nX3VybCI8aHR0cDov%250AL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxh%250AcHRvcDoPQHlhZGlzX3VybCI8aHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5p%250AZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIQbGFzdF9vaWRyZXEwIg5h%250AcHByb3ZhbHNbBiIqaHR0cDovL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25z%250AdW1lcg%253D%253D--0a8963d9657dc8f45ad2075472b9da36644680f4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,779 DEBUG [httpclient.wire.header] - \<\<\< "Content-Length: 785[\r][\n]"\> 2009-10-20 12:01:58,779 DEBUG [httpclient.wire.header] - \<\<\< "[\r][\n]"\> 2009-10-20 12:01:58,779 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - \ 2009-10-20 12:01:58,780 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - 2009-10-20 12:01:58,780 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,780 DEBUG [httpclient.wire.content] - \<\<\< "You are being [redirected](http://localhost:4000/openid/consumer/complete?openid.assoc_handle=%7BHMAC-SHA1%7D%7B4ad2d143%7D%7B9wnPzg%3D%3D%7D&openid.claimed_id=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.identity=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.op_endpoint=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver&openid.response_nonce=2009-10-20T04%3A01%3A58Zr8XZqF&openid.return_to=http%3A%2F%2Flocalhost%3A4000%2Fopenid%2Fconsumer%2Fcomplete&openid.sig=wrJQBh2gKjiSqEcTTsLVvbQl2vI%3D&openid.signed=assoc_handle%2Cclaimed_id%2Cidentity%2Cmode%2Cns%2Cop_endpoint%2Cresponse_nonce%2Creturn_to%2Csigned)."\> 2009-10-20 12:01:58,780 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,780 DEBUG [org.apache.commons.httpclient.HttpConnection] - 2009-10-20 12:01:58,781 DEBUG [org.apache.commons.httpclient.HttpConnection] - 2009-10-20 12:01:58,781 DEBUG [httpclient.wire.header] - \<\>\> "GET /openid/consumer/complete?openid.assoc\_handle=%7BHMAC-SHA1%7D%7B4ad2d143%7D%7B9wnPzg%3D%3D%7D&openid.claimed\_id=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.identity=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver%2Fnode%2Fstephen-laptop&openid.mode=id\_res&openid.ns=http%3A%2F% [2Fspecs.openid.net](http://2Fspecs.openid.net)%2Fauth%2F2.0&openid.op\_endpoint=http%3A%2F%2Flocalhost%3A4001%2Fopenid%2Fserver&openid.response\_nonce=2009-10-20T04%3A01%3A58Zr8XZqF&openid.return\_to=http%3A%2F%2Flocalhost%3A4000%2Fopenid%2Fconsumer%2Fcomplete&openid.sig=wrJQBh2gKjiSqEcTTsLVvbQl2vI%3D&openid.signed=assoc\_handle%2Cclaimed\_id%2Cidentity%2Cmode%2Cns%2Cop\_endpoint%2Cresponse\_nonce%2Creturn\_to%2Csigned HTTP/1.1[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "Accept: application/json[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "Content-Type: application/json[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "Cookie: \_chef\_server\_session\_id=BAh7CSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCI9T3BlbklEOjpD%250Ab25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVy%250AOjpvOilPcGVuSUQ6OkNvbnN1bWVyOjpEaXNjb3ZlcmVkU2VydmljZXMJOg1A%250AY3VycmVudEAHOg5Ac2VydmljZXNbADoSQHN0YXJ0aW5nX3VybCI8aHR0cDov%250AL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxh%250AcHRvcDoPQHlhZGlzX3VybCI8aHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5p%250AZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIQbGFzdF9vaWRyZXEwIg5h%250AcHByb3ZhbHNbBiIqaHR0cDovL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25z%250AdW1lcg%253D%253D--0a8963d9657dc8f45ad2075472b9da36644680f4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "Host: localhost:4000[\r][\n]"\> 2009-10-20 12:01:58,782 DEBUG [httpclient.wire.header] - \<\>\> "[\r][\n]"\> 2009-10-20 12:01:58,797 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 302 Moved Temporarily[\r][\n]"\> 2009-10-20 12:01:58,797 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 302 Moved Temporarily[\r][\n]"\> 2009-10-20 12:01:58,798 DEBUG [httpclient.wire.header] - \<\<\< "Connection: close[\r][\n]"\> 2009-10-20 12:01:58,798 DEBUG [httpclient.wire.header] - \<\<\< "Date: Tue, 20 Oct 2009 04:01:58 GMT[\r][\n]"\> 2009-10-20 12:01:58,798 DEBUG [httpclient.wire.header] - \<\<\< "Location: [http://localhost:4000/nodes[\r][\n]](http://localhost:4000/nodes%5B%5Cr%5D%5B%5Cn%5D)"\> 2009-10-20 12:01:58,798 DEBUG [httpclient.wire.header] - \<\<\< "Content-Type: text/html; charset=utf-8[\r][\n]"\> 2009-10-20 12:01:58,799 DEBUG [httpclient.wire.header] - \<\<\< "Set-Cookie: \_chef\_server\_session\_id=BAh7DSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnQwIg5yZXR1cm5fdG8wIgpsZXZlbDoJbm9kZSI9T3BlbklEOjpDb25zdW1l%250Acjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVyOjowIg5u%250Ab2RlX25hbWUiE3N0ZXBoZW4tbGFwdG9wIg5hcHByb3ZhbHNbBiIqaHR0cDov%250AL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25zdW1lciIQbGFzdF9vaWRyZXEw%250AIgtvcGVuaWQiPGh0dHA6Ly9sb2NhbGhvc3Q6NDAwMS9vcGVuaWQvc2VydmVy%250AL25vZGUvc3RlcGhlbi1sYXB0b3A%253D--ea8d870e8fb41c144918c019d6e4730a8b88bba4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,799 DEBUG [httpclient.wire.header] - \<\<\< "Content-Length: 82[\r][\n]"\> 2009-10-20 12:01:58,799 DEBUG [httpclient.wire.header] - \<\<\< "[\r][\n]"\> 2009-10-20 12:01:58,799 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - \ 2009-10-20 12:01:58,799 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - 2009-10-20 12:01:58,799 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - \ 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - \ 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - \ 2009-10-20 12:01:58,800 DEBUG [httpclient.wire.content] - \<\<\< "Verification of [http://localhost:4001/openid/server/node/stephen-laptop](http://localhost:4001/openid/server/node/stephen-laptop) succeeded."\> 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpConnection] - \ 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpConnection] - 2009-10-20 12:01:58,800 DEBUG [httpclient.wire.header] - \<\>\> "GET /nodes HTTP/1.1[\r][\n]"\> 2009-10-20 12:01:58,800 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,801 DEBUG [httpclient.wire.header] - \<\>\> "Accept: application/json[\r][\n]"\> 2009-10-20 12:01:58,801 DEBUG [httpclient.wire.header] - \<\>\> "Content-Type: application/json[\r][\n]"\> 2009-10-20 12:01:58,801 DEBUG [httpclient.wire.header] - \<\>\> "Cookie: \_chef\_server\_session\_id=BAh7CSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCI9T3BlbklEOjpD%250Ab25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVy%250AOjpvOilPcGVuSUQ6OkNvbnN1bWVyOjpEaXNjb3ZlcmVkU2VydmljZXMJOg1A%250AY3VycmVudEAHOg5Ac2VydmljZXNbADoSQHN0YXJ0aW5nX3VybCI8aHR0cDov%250AL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxh%250AcHRvcDoPQHlhZGlzX3VybCI8aHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5p%250AZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIQbGFzdF9vaWRyZXEwIg5h%250AcHByb3ZhbHNbBiIqaHR0cDovL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25z%250AdW1lcg%253D%253D--0a8963d9657dc8f45ad2075472b9da36644680f4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,801 DEBUG [httpclient.wire.header] - \<\>\> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"\> 2009-10-20 12:01:58,802 DEBUG [httpclient.wire.header] - \<\>\> "Host: localhost:4000[\r][\n]"\> 2009-10-20 12:01:58,802 DEBUG [httpclient.wire.header] - \<\>\> "Cookie: $Version=0; \_chef\_server\_session\_id=BAh7DSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnQwIg5yZXR1cm5fdG8wIgpsZXZlbDoJbm9kZSI9T3BlbklEOjpDb25zdW1l%250Acjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVyOjowIg5u%250Ab2RlX25hbWUiE3N0ZXBoZW4tbGFwdG9wIg5hcHByb3ZhbHNbBiIqaHR0cDov%250AL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25zdW1lciIQbGFzdF9vaWRyZXEw%250AIgtvcGVuaWQiPGh0dHA6Ly9sb2NhbGhvc3Q6NDAwMS9vcGVuaWQvc2VydmVy%250AL25vZGUvc3RlcGhlbi1sYXB0b3A%253D--ea8d870e8fb41c144918c019d6e4730a8b88bba4; $Path=/[\r][\n]"\> 2009-10-20 12:01:58,802 DEBUG [httpclient.wire.header] - \<\>\> "[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 200 OK[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 200 OK[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "Connection: close[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "Date: Tue, 20 Oct 2009 04:01:58 GMT[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "Content-Type: application/json; charset=utf-8[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "Content-Length: 96[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.header] - \<\<\< "[\r][\n]"\> 2009-10-20 12:01:58,871 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,871 DEBUG [httpclient.wire.content] - \<\<\< "["http://localhost:4000/nodes/stephen-laptop","http://localhost:4000/nodes/test\_laptop"]"\> 2009-10-20 12:01:58,871 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,871 DEBUG [org.apache.commons.httpclient.HttpConnection] - 2009-10-20 12:01:58,872 DEBUG [org.apache.commons.httpclient.HttpConnection] - 2009-10-20 12:01:58,872 DEBUG [httpclient.wire.header] - \<\>\> "GET /nodes/stephen-laptop HTTP/1.1[\r][\n]"\> ---- errors in this call 2009-10-20 12:01:58,872 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,872 DEBUG [httpclient.wire.header] - \<\>\> "Accept: application/json[\r][\n]"\> 2009-10-20 12:01:58,872 DEBUG [httpclient.wire.header] - \<\>\> "Content-Type: application/json[\r][\n]"\> 2009-10-20 12:01:58,872 DEBUG [httpclient.wire.header] - \<\>\> "Cookie: \_chef\_server\_session\_id=BAh7CSIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCI9T3BlbklEOjpD%250Ab25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzOjpPcGVuSUQ6OkNvbnN1bWVy%250AOjpvOilPcGVuSUQ6OkNvbnN1bWVyOjpEaXNjb3ZlcmVkU2VydmljZXMJOg1A%250AY3VycmVudEAHOg5Ac2VydmljZXNbADoSQHN0YXJ0aW5nX3VybCI8aHR0cDov%250AL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxh%250AcHRvcDoPQHlhZGlzX3VybCI8aHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5p%250AZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIQbGFzdF9vaWRyZXEwIg5h%250AcHByb3ZhbHNbBiIqaHR0cDovL2xvY2FsaG9zdDo0MDAwL29wZW5pZC9jb25z%250AdW1lcg%253D%253D--0a8963d9657dc8f45ad2075472b9da36644680f4; path=/;[\r][\n]"\> 2009-10-20 12:01:58,873 DEBUG [httpclient.wire.header] - \<\>\> "User-Agent: Jakarta Commons-HttpClient/3.1[\r][\n]"\> 2009-10-20 12:01:58,873 DEBUG [httpclient.wire.header] - \<\>\> "Host: localhost:4000[\r][\n]"\> 2009-10-20 12:01:58,873 DEBUG [httpclient.wire.header] - \<\>\> "[\r][\n]"\> 2009-10-20 12:01:58,907 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 401 Unauthorized[\r][\n]"\> 2009-10-20 12:01:58,907 DEBUG [httpclient.wire.header] - \<\<\< "HTTP/1.1 401 Unauthorized[\r][\n]"\> 2009-10-20 12:01:58,907 DEBUG [httpclient.wire.header] - \<\<\< "Connection: close[\r][\n]"\> 2009-10-20 12:01:58,907 DEBUG [httpclient.wire.header] - \<\<\< "Date: Tue, 20 Oct 2009 04:01:58 GMT[\r][\n]"\> 2009-10-20 12:01:58,907 DEBUG [httpclient.wire.header] - \<\<\< "Content-Type: text/html; charset=utf-8[\r][\n]"\> 2009-10-20 12:01:58,908 DEBUG [httpclient.wire.header] - \<\<\< "Set-Cookie: \_chef\_server\_session\_id=BAh7CiIuT3BlbklEOjpDb25zdW1lcjo6bGFzdF9yZXF1ZXN0ZWRfZW5kcG9p%250AbnRvOiJPcGVuSUQ6Ok9wZW5JRFNlcnZpY2VFbmRwb2ludAw6DkBsb2NhbF9p%250AZDA6GEBkaXNwbGF5X2lkZW50aWZpZXIwOg9AdHlwZV91cmlzWwciLGh0dHA6%250ALy9zcGVjcy5vcGVuaWQubmV0L2F1dGgvMi4wL3NpZ25vbiIhaHR0cDovL29w%250AZW5pZC5uZXQvc2lnbm9uLzEuMDoQQHVzZWRfeWFkaXNUOhBAc2VydmVyX3Vy%250AbCIoaHR0cDovL2xvY2FsaG9zdDo0MDAxL29wZW5pZC9zZXJ2ZXI6EkBjYW5v%250AbmljYWxfaWQwOhBAY2xhaW1lZF9pZCI8aHR0cDovL2xvY2FsaG9zdDo0MDAx%250AL29wZW5pZC9zZXJ2ZXIvbm9kZS9zdGVwaGVuLWxhcHRvcCIOcmV0dXJuX3Rv%250AIhovbm9kZXMvc3RlcGhlbi1sYXB0b3AiPU9wZW5JRDo6Q29uc3VtZXI6OkRp%250Ac2NvdmVyZWRTZXJ2aWNlczo6T3BlbklEOjpDb25zdW1lcjo6bzopT3BlbklE%250AOjpDb25zdW1lcjo6RGlzY292ZXJlZFNlcnZpY2VzCToNQGN1cnJlbnRABzoO%250AQHNlcnZpY2VzWwA6EkBzdGFydGluZ191cmwiPGh0dHA6Ly9sb2NhbGhvc3Q6%250ANDAwMS9vcGVuaWQvc2VydmVyL25vZGUvc3RlcGhlbi1sYXB0b3A6D0B5YWRp%250Ac191cmwiPGh0dHA6Ly9sb2NhbGhvc3Q6NDAwMS9vcGVuaWQvc2VydmVyL25v%250AZGUvc3RlcGhlbi1sYXB0b3AiDmFwcHJvdmFsc1sGIipodHRwOi8vbG9jYWxo%250Ab3N0OjQwMDAvb3BlbmlkL2NvbnN1bWVyIhBsYXN0X29pZHJlcTA%253D--dcd442d85420d9495410a5a963b214277ec28520; path=/;[\r][\n]"\> 2009-10-20 12:01:58,908 DEBUG [httpclient.wire.header] - \<\<\< "Content-Length: 92868[\r][\n]"\> 2009-10-20 12:01:58,908 DEBUG [httpclient.wire.header] - \<\<\< "[\r][\n]"\> 2009-10-20 12:01:58,909 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - \ 2009-10-20 12:01:58,909 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - 2009-10-20 12:01:58,910 DEBUG [org.apache.commons.httpclient.HttpMethodDirector] - \ 2009-10-20 12:01:58,910 DEBUG [org.apache.commons.httpclient.HttpMethodBase] - 2009-10-20 12:01:58,910 DEBUG [httpclient.wire.content] - \<\<\< " 2009-10-20 12:01:58,911 DEBUG [httpclient.wire.content] - \<\<\< " " [http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"\>[\n]"](http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd%22%3E%5B%5Cn%5D%22)\> On Tue, Oct 20, 2009 at 11:54 AM, Arjuna Christensen [aj@opscode.com](mailto:aj@opscode.com) wrote: > Hi, > On 20/10/2009, at 4:37 PM, Dikang Gu wrote: > > please refer to my mail: "A problem when implementing the java client of > chef". > > As per the Knife snippet, Chef::Rest#authenticate is called - > [http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76](http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76) > > ``` > def authenticate(user, pass) > Chef::Log.debug("Authenticating #{user} via openid") > response = post_rest('openid/consumer/start', { > "openid_identifier" => "#{Chef::Config[:openid_url]}/openid/server/node/#{user}", > "submit" => "Verify" > }) > post_rest( > "#{Chef::Config[:openid_url]}#{response["action"]}", > { "password" => pass } > ) > end > > ``` > > Shouldn't be too hard to port that over to Java. You'll need to persist and > use the cookie in subsequent authentication-required calls to the Chef > Server [handled internally by Chef::Rest for the ruby client]. > > HTH! > > On Tue, Oct 20, 2009 at 11:32 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > Thank you Adam! > > And after the authentication, will I get any information (like some > > tokens), that I will use in the http call? To tell the chef-server that I > > have been authenticated? > > > > Thanks > > Dikang > > > > On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > > > > > Sure - you need to just create a new client credential, and then set > > > it to be an administrator. > > > > > > See the 'register' and 'authenticate' methods here: > > > > > > [gist:100837 · GitHub](http://gist.github.com/100837) > > > > > > Adam > > > > > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > > > > > As per subject. So that I can do the operations just like users on the > > > > web > > > > UI? > > > > Thanks > > > > Dikang > > > > > > -- > > > Opscode, Inc. > > > Adam Jacob, CTO > > > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) > > -- > Arjuna Christensen, Software Development Engineer > Opscode, Inc. > E: [aj@opscode.com](mailto:aj@opscode.com) ---

**Author:** ![Arjuna\_Christensen](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@Arjuna\_Christensen](https://discourse.chef.io/u/Arjuna_Christensen)\ **Post date:** [October 20, 2009, 4:40am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/7 "2009-10-20T04:40:52Z")

Hello, On 20/10/2009, at 5:08 PM, Dikang Gu wrote: > Hi Arjuna, > > Thank you for your information! > > Yes, I have converted the ruby authenticate code to java, and used > the cookie in subsequent calls to Chef Server, but I still have the > 401 error. I attach some of the debug log, could you help me to talk > a look at it, please? > > Thanks > Dikang > > {snip} Can you please post the chef-server logs in debug mode (-l debug or log\_level :debug in server.rb) showing the auth/authz failure 🙂 The default location is /var/log/chef/server.log > On Tue, Oct 20, 2009 at 11:54 AM, Arjuna Christensen > [aj@opscode.com](mailto:aj@opscode.com) wrote: > Hi, > > On 20/10/2009, at 4:37 PM, Dikang Gu wrote: > > > please refer to my mail: "A problem when implementing the java > > client of chef". > > As per the Knife snippet, Chef::Rest#authenticate is called - [http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76](http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76) > > ``` > def authenticate(user, pass) > > Chef::Log.debug("Authenticating #{user} via openid") > > response = post_rest('openid/consumer/start', { > > "openid_identifier" => "#{Chef::Config[:openid_url]}/openid/ > > ``` > > server/node/#{user}", > > ``` > "submit" => "Verify" > }) > > post_rest( > "#{Chef::Config[:openid_url]}#{response["action"]}", > > { "password" => pass } > ) > > end > > ``` > > Shouldn't be too hard to port that over to Java. You'll need to > persist and use the cookie in subsequent authentication-required > calls to the Chef Server [handled internally by Chef::Rest for the > ruby client]. > > HTH! > > > On Tue, Oct 20, 2009 at 11:32 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) > > wrote: > > Thank you Adam! > > > > And after the authentication, will I get any information (like some > > tokens), that I will use in the http call? To tell the chef-server > > that I have been authenticated? > > > > Thanks > > Dikang > > > > On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > > Sure - you need to just create a new client credential, and then set > > it to be an administrator. > > > > See the 'register' and 'authenticate' methods here: > > > > [gist:100837 · GitHub](http://gist.github.com/100837) > > > > Adam > > > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) > > wrote: > > > > > As per subject. So that I can do the operations just like users > > > on the web > > > UI? > > > Thanks > > > Dikang > > > > -- > > Opscode, Inc. > > Adam Jacob, CTO > > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) > > -- > Arjuna Christensen, Software Development Engineer > Opscode, Inc. > E: [aj@opscode.com](mailto:aj@opscode.com) -- Arjuna Christensen, Software Development Engineer Opscode, Inc. E: [aj@opscode.com](mailto:aj@opscode.com) ---

**Author:** ![Dikang\_Gu](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.chef.io/dikang_gu/32/911_2.png) [@Dikang\_Gu](https://discourse.chef.io/u/Dikang_Gu)\ **Post date:** [October 20, 2009, 5:10am UTC](https://discourse.chef.io/t/can-i-authenticate-myself-as-an-admin-using-the-restful-api-in-java-code/1299/8 "2009-10-20T05:10:35Z")

Hi Arjuna, I've solved this issue, by fixing a cookie bug! Thanks very much for your help! Thanks Dikang On Tue, Oct 20, 2009 at 12:40 PM, Arjuna Christensen [aj@opscode.com](mailto:aj@opscode.com) wrote: > Hello, > On 20/10/2009, at 5:08 PM, Dikang Gu wrote: > > Hi Arjuna, > > Thank you for your information! > > Yes, I have converted the ruby authenticate code to java, and used the > cookie in subsequent calls to Chef Server, but I still have the 401 error. I > attach some of the debug log, could you help me to talk a look at it, > please? > > Thanks > Dikang > > {snip} > > Can you please post the chef-server logs in debug mode (-l debug or > log\_level :debug in server.rb) showing the auth/authz failure 🙂 > > The default location is /var/log/chef/server.log > > On Tue, Oct 20, 2009 at 11:54 AM, Arjuna Christensen [aj@opscode.com](mailto:aj@opscode.com)wrote: > > > Hi, > > On 20/10/2009, at 4:37 PM, Dikang Gu wrote: > > > > please refer to my mail: "A problem when implementing the java client of > > chef". > > > > As per the Knife snippet, Chef::Rest#authenticate is called - > > [http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76](http://github.com/opscode/chef/blob/master/chef/lib/chef/rest.rb#L65-76) > > > > ``` > > def authenticate(user, pass) > > > > Chef::Log.debug("Authenticating #{user} via openid") > > response = post_rest('openid/consumer/start', { > > > > "openid_identifier" => "#{Chef::Config[:openid_url]}/openid/server/node/#{user}", > > "submit" => "Verify" > > }) > > post_rest( > > "#{Chef::Config[:openid_url]}#{response["action"]}", > > { "password" => pass } > > ) > > end > > > > ``` > > > > Shouldn't be too hard to port that over to Java. You'll need to persist > > and use the cookie in subsequent authentication-required calls to the Chef > > Server [handled internally by Chef::Rest for the ruby client]. > > > > HTH! > > > > On Tue, Oct 20, 2009 at 11:32 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > > > Thank you Adam! > > > And after the authentication, will I get any information (like some > > > tokens), that I will use in the http call? To tell the chef-server that I > > > have been authenticated? > > > > > > Thanks > > > Dikang > > > > > > On Tue, Oct 20, 2009 at 2:25 AM, Adam Jacob [adam@opscode.com](mailto:adam@opscode.com) wrote: > > > > > > > Sure - you need to just create a new client credential, and then set > > > > it to be an administrator. > > > > > > > > See the 'register' and 'authenticate' methods here: > > > > > > > > [gist:100837 · GitHub](http://gist.github.com/100837) > > > > > > > > Adam > > > > > > > > On Mon, Oct 19, 2009 at 3:02 AM, Dikang Gu [dikang85@gmail.com](mailto:dikang85@gmail.com) wrote: > > > > > > > > > As per subject. So that I can do the operations just like users on the > > > > > web > > > > > UI? > > > > > Thanks > > > > > Dikang > > > > > > > > -- > > > > Opscode, Inc. > > > > Adam Jacob, CTO > > > > T: (206) 508-7449 E: [adam@opscode.com](mailto:adam@opscode.com) > > > > -- > > Arjuna Christensen, Software Development Engineer > > Opscode, Inc. > > E: [aj@opscode.com](mailto:aj@opscode.com) > > -- > Arjuna Christensen, Software Development Engineer > Opscode, Inc. > E: [aj@opscode.com](mailto:aj@opscode.com)