Ticket #62 (closed enhancement: fixed)

Opened 6 years ago

Last modified 6 years ago

Plugin Request: Third party support

Reported by: mmcgrath Owned by: ynemoy
Priority: major Milestone:
Component: Port Other Apps Version:
Keywords: Cc:
Blocked By: Blocking:

Description

we need a plugin for the secondary arch guys so people can log in to various ppc and sparc machines and run their tests.

This plugin should work exactly as the normal setup would with fasClient (exporting groups and user lists and mappings via json) but should provide an invalid password (!! or * I think will work).

They should be getting group, user info, ssh keys, etc. just not the encrypted password.

The plugin should have a config option in it for what group has access to this information. For normal fas its systems, for testing in the plugin call it systems_secondary or something.

Change History

comment:1 Changed 6 years ago by ynemoy

  • Owner set to ynemoy
  • Status changed from new to assigned

comment:2 Changed 6 years ago by ynemoy

What is the criteria we need to use to make it spit out modified information? by IP address? by host name?

comment:3 Changed 6 years ago by mmcgrath

just if the user trying to authenticate is in the systems_secondary group (make that a config option) Eventually we're going to add machine level registration but its not implemented yet.

comment:4 Changed 6 years ago by ynemoy

Config per instance of FAS, or config per user, that the user can set it up?

It seem strange, because once the user becomes a member of this group, he no longer can log on to normal systems, just secondary ones.

Are we running a seperate FAS to auth these users?

comment:5 Changed 6 years ago by mmcgrath

I'd just have a var at the top of the controller that says "allowed_groups='systems_secondary'" or some such thing.

This all all tie in to the same FAS instance. Basically exactly what they'd get when they run fasClient -i now, except they'll specify a different URL and will not get passwords back but everything else they normally would.

comment:6 Changed 6 years ago by ynemoy

  • Status changed from assigned to closed
  • Resolution set to fixed

Done.

Note: See TracTickets for help on using tickets.