Hammer CLI

I configured foreman to auth user by client cert:

1. in Settings/Authentication > Authorize Login delegation Yes
2. in Settings/Authentication > Authorize Login delegation API Yes
3. in /etc/httpd/conf.d/05-foreman-ssl.conf add SSLUserName SSL_CLIENT_S_DN_CN
4. restart httpd
5. create user test
6. generate the client cert puppet cert --generate test

Then use hammer with (or use the options in config file)

hammer --verify-ssl true --ssl-ca-file ca.pem --ssl-client-cert test.pem --ssl-client-key test.key host list

Also make sure the Apache config change have support in installer