deNBI / perunKeystoneAdapter

Perun Keystone Adapter parses data propagated by Perun data and modifies a connected Keystone.
https://perunkeystoneadapter.readthedocs.io/en/latest/
Apache License 2.0
5 stars 0 forks source link

Support/Use propagated ssh-keys #29

Closed jkrue closed 2 years ago

jkrue commented 5 years ago

Since the portal supports adding a (public) ssh key to one account, this information is also propagated by perun. We should use this information to add a "key pair" when creating a user.

jkrue commented 2 years ago

After nearly 3 years it is time to integrate this feature. The following data is propagated for each user :

{
      "blacklisted" : null,
      "status" : "VALID",
      "login-namespace:elixir" : "user3",
      "login-namespace:elixir-persistent" : "bb01cabe-eae7-4e46-955f-b35db6e3d552__@elixir-europe.org",
      "denbiVmsRunning" : null,
      "id" : 50002,
      "preferredMail" : "user3@donotuse",
      "sshPublicKey" : [
               "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC580K3zIwR59Ur+A6NkcWYufWTUaSmrDFWiobhtLUXauqQFyYpJHXOfp4ZtPYtnlLDRFhlCdIta1NgYGx2klJa/ySObSmbaasg7gCRClTMRS/6vCOg3Vkw6JbQX1Si8xLVsy1dlpR9rf5PW3o7pPVZ8nRMwDN+qtqLNdFjhzjEmpEsFSFWDvXgGvCqWBEI0Zhutv3xdtb3yBI0oM2pJgGNbUCr3Hz2X2bVoLIxx0BvjWMjxGztBDDAcxGmaoJS6W0sTqWOX5EagA7fQAY3XTRJ6PMGJWfsdTsztmosBNYfOGtdq6/Gbjo40d/fxCWVY9z/a9o/kyls/XghwLIAZl4h user3@unkown.de"
            ]
}

We should also optional add "login-namespace:elixir", which can be useful when building multi-user-environments on top of the keystone project memberlist. The property "login-namespace:elixir can be used as username.

jkrue commented 2 years ago

fixed with #38