Open chrisdaaz opened 2 months ago
We can attempt to sync the login and analytics nodes to be near-instantaneous, whereas the compute nodes could be every 15 or 20 minutes.
The UIDs and GIDs that Quest currently uses are different than what the ISO Authentication System uses. Moving to the ISO Authentication System would require changing permissions on every file.
We will stick to our current local authentication system (IDM) in the meantime. We should use a centralized identity management solution, which will serve as the source of truth for authentication management. This would be baked into the RHEL 8 image. This project is happening with or without ColdFront. Red Hat IDM is the same as FreeIPA.
The FreeIPA app would check with LDAP for a match. FreeIPA manages UIDs and GIDs, which is not provided by LDAP.
Deliverables
Environments
Data Migration
/etc/passwd
,/etc/group
, andallocation_log.txt
entries into JSON objects for ColdFront importIdentity Management
There is an effort to overhaul user authentication and management in Quest as part of the move to RHEL 8, which will involve the creation of a centralized identity management solution.
Slurm