7mode or Cmode?

For 7Mode I’ve used, hosts_equiv authentication (which arguably could be better/worse than username/password).

For Cmode I’ve setup certificate based authentication.

I make use of the Perl APIs, but started with them and never looked at just using LWP & XML Parser so I can’t comment on that part.

--rdp

From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Edward Rolison
Sent: Wednesday, March 18, 2015 11:34 AM
To: toasters@teaparty.net
Subject: NetApp API authentication

Having started to review some of our filer automation scripts, I'm starting to look in a bit more detail at the API.

My first conclusion is - the perl SDK doesn't actually seem to do anything much - it seems to be a reimplementation of LWP and and XML Parser. 

Given I have LWP and XML::Twig installed, and am making API calls just fine, is there anything I'm missing here? 

Aside from that though - authentication types. 

I currently use ssh public-private key pairs, in a trusted account on a management station to enable 'doing stuff' with filers. It _looks_ like my only option with the API is to create a designated service account, and assign permissions... and then embed a username and password in a script somewhere.
That just doesn't sit well with me - I like what ssh-agent will do in 'unlocking' key files, and I don't like embedding (potentially privileged) usernames and passwords ... anywhere.

Does anyone have a better solution than a couple of designated API users (privileged and read only) with a file somewhere embedding their username and password? 

Does anyone have a better approach?