Difference between revisions of "Services:Accounts"

From Kosmos Wiki
Jump to navigation Jump to search
(Update the instructions for the new LDAP directory structure, add XMPP to the list of services using unified credentials)
 
(7 intermediate revisions by 2 users not shown)
Line 3: Line 3:
 
'''''This is work in progress!''''' For now, unified accounts are only enabled on this wiki and [[Services:XMPP|XMPP]]. We have decided to use LDAP<ref>[https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol Lightweight Directory Access Protocol]</ref> to let users have the same credentials (username and password) across Kosmos services.
 
'''''This is work in progress!''''' For now, unified accounts are only enabled on this wiki and [[Services:XMPP|XMPP]]. We have decided to use LDAP<ref>[https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol Lightweight Directory Access Protocol]</ref> to let users have the same credentials (username and password) across Kosmos services.
  
The LDAP server is running on ldap.kosmos.org (on barnard, see [[Infrastructure#barnard.kosmos.org|Infrastructure]])
+
The LDAP server is running on ldap.kosmos.org<ref>[[Infrastructure#barnard.kosmos.org|Infrastructure]]</ref>.
  
You can [https://gitea.kosmos.org/kosmos/chef/issues/126 follow the status] of the switch to LDAP for the other Kosmos services
+
== Changing your password ==
  
=== Changing your password ===
+
Changing your password will be made possible in the upcoming [https://gitea.kosmos.org/kosmos/akkounts-web/issues/5 Kosmos Accounts Web UI]. But for now, you have these two options:
  
Changing your password will be made possible in the upcoming [https://gitea.kosmos.org/kosmos/akkounts-web/issues/5 Kosmos Accounts Web UI], but for now some command-line knowledge is required to change your password.
+
=== Via XMPP client ===
 +
 
 +
You can change your Kosmos account password globally from any XMPP client, which allows you to change your XMPP password.
 +
 
 +
=== Via command-line interface ===
  
 
The ''ldappasswd'' command-line tool is provided by different packages depending on your OS. For example ''ldap-utils'' on Ubuntu, ''openldap-clients'' on Fedora, ''openldap'' on Arch Linux. It is already provided in a default macOS installation.
 
The ''ldappasswd'' command-line tool is provided by different packages depending on your OS. For example ''ldap-utils'' on Ubuntu, ''openldap-clients'' on Fedora, ''openldap'' on Arch Linux. It is already provided in a default macOS installation.
  
The following command will set your new password, if you type your current password (replace '''yourusername''' with your username)
+
The following command will set your new password, if you type your current password (replace '''yourusername''' with your username):
  
 
  ldappasswd -x -D cn=''''yourusername'''',ou=kosmos.org,cn=users,dc=kosmos,dc=org -W -S -H "ldaps://ldap.kosmos.org"
 
  ldappasswd -x -D cn=''''yourusername'''',ou=kosmos.org,cn=users,dc=kosmos,dc=org -W -S -H "ldaps://ldap.kosmos.org"
Line 25: Line 29:
 
"New password" is the password that will be set on your LDAP account. "LDAP password" is your current password
 
"New password" is the password that will be set on your LDAP account. "LDAP password" is your current password
  
If you need any help do not hesitate to ask for help in our [[Main_Page#Chat|ops chatroom]]
+
If you need any help do not hesitate to ask for help in our [[Main_Page#Chat|chatroom]].
  
 
== References ==
 
== References ==
  
 
<references />
 
<references />

Latest revision as of 06:08, 16 September 2020

Unified accounts for Kosmos services

This is work in progress! For now, unified accounts are only enabled on this wiki and XMPP. We have decided to use LDAP[1] to let users have the same credentials (username and password) across Kosmos services.

The LDAP server is running on ldap.kosmos.org[2].

Changing your password

Changing your password will be made possible in the upcoming Kosmos Accounts Web UI. But for now, you have these two options:

Via XMPP client

You can change your Kosmos account password globally from any XMPP client, which allows you to change your XMPP password.

Via command-line interface

The ldappasswd command-line tool is provided by different packages depending on your OS. For example ldap-utils on Ubuntu, openldap-clients on Fedora, openldap on Arch Linux. It is already provided in a default macOS installation.

The following command will set your new password, if you type your current password (replace yourusername with your username):

ldappasswd -x -D cn='yourusername',ou=kosmos.org,cn=users,dc=kosmos,dc=org -W -S -H "ldaps://ldap.kosmos.org"

It will ask you the following passwords:

New password:
Re-enter new password:
Enter LDAP Password:

"New password" is the password that will be set on your LDAP account. "LDAP password" is your current password

If you need any help do not hesitate to ask for help in our chatroom.

References