|
Key
This line was removed.
This word was removed. This word was added.
This line was added.
|
Changes (12)
View Page Historyh3. Application connector
usernameAttribute: uid
nameAttribute: cn
nameAttribute: cn
passwordAttribute: password
principalDn: uid=admin,ou=personnes,dc=my-domain,dc=com
principalPassword: adminpass
principalDn: uid=admin,ou=personnes,dc=my-domain,dc=com
principalPassword: adminpass
{code}
| url | no | \- | URL to reach LDAP instance |
| usersDn | no | \- | Distinguished name |
| usersDn | no | \- | Distinguished name |
| usernameAttribute | no yes\\ | \- uid\\ | Attribute name used on LDAP to uniquely identify an user. |
| nameAttribute | yes | cn\\ | Attribute name used on LDAP as user display name |
| passwordAttribute | yes | password | Attribute name used on LDAP as password |
| principalDn\\ | yes\\ | \-\\ | Dn of the technical LDAP\\ |
| principalPassword\\ | yes\\ | \-\\ | Password of the technical LDAP account\\ |
The technical LDAP account is used to request the LDAP server, thus it must have read rights on LDAP server.
| principalPassword\\ | yes\\ | \-\\ | Password of the technical LDAP account\\ |
The technical LDAP account is used to request the LDAP server, thus it must have read rights on LDAP server.
Petals cockpit is not designed to be able to switch LDAP authentication on and off with a same installation. Users added through LDAP are not available without it, and vice versa. If you want to activate or deactivate LDAP authentication, it is advised to wipe the database in the meantime.
|| Argument || Short argument || Optionnal || Default || Description ||
| \--username | \-u | no | \- | The user's id, also his login. |
| \--username | \-u | no | \- | The user's id, also his login. |
| \--name | \-n \\ | no \\ | \- | The name under which the user will appear. |
| \--password \\ | \-p | no yes/no \\ | \- | The user's password. Required only for non-ldap users. \\ |
| \--admin | \-a | yes \\ | \- | Whether the user will be added as an admin or not. |
| \--ldapUser \\ | \-l \\ | yes \\ | \- | Whether the user to add is an ldap user or not. \\ |
| \--workspacename | \-w | yes \\ | \- | The user's workspace. Which will be created and set as current workspace for the user. |
Example:
Example:
{code}
Adding an ldap admin user
{code}
$ ./petals-cockpit.sh add-user --username myUserName --name myName -l -a
{code}
{code}
$ ./petals-cockpit.sh add-user --username myUserName --name myName -l -a
{code}
h1. Managing users
h3. Adding the first user with token
If no user are present in the database, a dialog box will allow you tu add one. You will have to use the token provided by the backend (if you used the link *\{ip\}:\{port\}/setup?token=\{token\}* the token field will be pre-filled). You must fill the remaining *username*, *password* and *name* fields to be able to add the user (the *password* is needed but will not be used in LDAP mode). You will be redirected to the login page.
<img login token>
h3. Managing existing users
On the right you can see the list of existing users. By clicking on an user an edition form will unfold. You can then:
* Set him a new *name* and / or *password.* Type in the new values in the corresponding field to change them. Leaving password empty will not change his password. Then click "SAVE" ;
It is possible to browse the list of available workspaces for the user (ie, having access to it) and navigate between the workspaces. You have to open the window of workspaces list, and click to the workspace of your choice to load this one.
Adding an admin user with workspace$ ./petals-cockpit.sh add-user \--username myUserName \--name myName \-p myPassword \-w myWorkspace \-a