Having started to review some of our filer automation scripts, I'm starting to look in a bit more detail at the API.
My first conclusion is - the perl SDK doesn't actually seem to do anything much - it seems to be a reimplementation of LWP and and XML Parser.
Given I have LWP and XML::Twig installed, and am making API calls just fine, is there anything I'm missing here?
Aside from that though - authentication types.
I currently use ssh public-private key pairs, in a trusted account on a management station to enable 'doing stuff' with filers. It _looks_ like my only option with the API is to create a designated service account, and assign permissions... and then embed a username and password in a script somewhere. That just doesn't sit well with me - I like what ssh-agent will do in 'unlocking' key files, and I don't like embedding (potentially privileged) usernames and passwords ... anywhere.
Does anyone have a better solution than a couple of designated API users (privileged and read only) with a file somewhere embedding their username and password?
Does anyone have a better approach?