Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Remove the credentials from the resource model

#89

Tying a username to a node in the resource is counter-intuitive when you have multiple service accounts on a machine.

For example. Let's say you have a "service" user and a "power" user that have specific privileges granted to them via sudoers. In the current model, you need two node definitions with duplicate information, one for power and another for service. The metadata about the node doesn't change, just the users associated with that "node." The only way to access this node is to filter on user.

Instead, the user should be able to choose from a list of credentials, both global and local to the logged in user. These credentials obey the rules of authorization. They are provided to the underlying dispatching command to authenticate the remote connection.

Reported by Deleted User · November 22nd, 2010 @ 08:32 PM

State: new
Milestone: none
Assigned to: nobody

Activity

  1. Alex-SF
    Alex-SF
    • Milestone set to Rundeck 1.2
    • Milestone order changed from 2 to 0

    January 14th, 2011 @ 07:22 AM

  2. Alex-SF
    Alex-SF
    • Milestone changed from Rundeck 1.2 to Rundeck 1.3
    • Milestone order changed from 1 to 0

    February 1st, 2011 @ 11:49 AM

  3. Alex-SF
    Alex-SF
    • Milestone order changed from 6 to 0

    Or make these credentials specific to the dispatcher that uses them. This might be done by creating custom node attributes.

    March 21st, 2011 @ 07:49 AM

  4. Greg Schueler
    Greg Schueler

    It's possible to use node attributes for something similar, but it also depends on the underlying dispatcher mechanism.

    It sounds like you want a new generic way of modeling credentials for nodes. See request #212 keyfile as resources which could be a solution

    April 20th, 2011 @ 10:08 AM

  5. Alex-SF
    Alex-SF
    • Milestone cleared.
    • Milestone order changed from 7 to 0

    Postponing until after 1.3 release to get feedback and see usage of dispatcher plugin and custom node attributes.

    June 8th, 2011 @ 11:12 AM

  6. Alex-SF
    Alex-SF
    • Tag set to credentials node

    July 9th, 2011 @ 01:48 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.