search

pulibrary / princeton_ansible

Ansible Roles and Playbooks for Princeton University Library
10 stars 4 forks source link

make sure lib-aspacesftp user does not have the suffix #4879

Open kayiwa opened 5 months ago

kayiwa commented 5 months ago

we have manually chmod of lib-aspacesftp to own the /alma/aspace directory. Remove the suffix on the role

regineheberlein commented 5 months ago

related to https://github.com/pulibrary/aspace_helpers/issues/540

regineheberlein commented 4 months ago

Could you do it for lib-sftp-prod 1 and also for lib-sftp-staging1 please? (https://github.com/pulibrary/aspace_helpers/issues/546)

acozine commented 4 months ago

More detail in this ticket would help a lot. What prompted this change? How was it implemented in production? Is the new user with no suffix still an AD user, or a local user? Did we choose the group name and create the group manually, or was that created some other way? It's difficult to understand what happened here, and that makes it difficult to be sure that changes to the automation will recreate a working system correctly.

kayiwa commented 4 months ago

Active Directory stopped working properly on production. (Was working in Staging) using getent passwd lib-aspacesftp (on staging) we manually added a posix user on prod (sans suffix) We modified the user with groupadd -g 123456789 pul_g useradd -o -u 123456789 -g 123456789 -m lib-aspacesftp (the -o flag allows for two UIDs to exist) passwd lib-aspacesftp (same password in the vault and lastpass) chown -R lib-aspacesftp /alma/aspace

kayiwa commented 3 months ago

related to #4938