Remove the credentials from the resource model
Reported by Deleted User | November 22nd, 2010 @ 08:32 PM
Tying a username to a node in the resource is counter-intuitive when you have multiple service accounts on a machine.
For example. Let's say you have a "service" user and a "power" user that have specific privileges granted to them via sudoers. In the current model, you need two node definitions with duplicate information, one for power and another for service. The metadata about the node doesn't change, just the users associated with that "node." The only way to access this node is to filter on user.
Instead, the user should be able to choose from a list of credentials, both global and local to the logged in user. These credentials obey the rules of authorization. They are provided to the underlying dispatching command to authenticate the remote connection.
Comments and changes to this ticket
-
Alex-SF January 14th, 2011 @ 07:22 AM
- Milestone set to “Rundeck 1.2”
- Milestone order changed from “2” to “0”
-
Alex-SF February 1st, 2011 @ 11:49 AM
- Milestone changed from “Rundeck 1.2” to “Rundeck 1.3”
- Milestone order changed from “1” to “0”
-
Alex-SF March 21st, 2011 @ 07:49 AM
- Milestone order changed from “6” to “0”
Or make these credentials specific to the dispatcher that uses them. This might be done by creating custom node attributes.
-
Greg Schueler April 20th, 2011 @ 10:08 AM
It's possible to use node attributes for something similar, but it also depends on the underlying dispatcher mechanism.
It sounds like you want a new generic way of modeling credentials for nodes. See request #212 which could be a solution
-
Alex-SF June 8th, 2011 @ 11:12 AM
- Milestone cleared.
- Milestone order changed from “7” to “0”
Postponing until after 1.3 release to get feedback and see usage of dispatcher plugin and custom node attributes.
-
Alex-SF July 9th, 2011 @ 01:48 PM
- Tag set to “credentials node”
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
(DEPRECATED) Please use github issues for issue tracking at http://github.com/dtolabs/rundeck/issues
Alex-SF
Greg Schueler