Services:Accounts

From Kosmos Wiki
Revision as of 17:34, 29 January 2020 by Greg (talk | contribs) (Add information about the LDAP server and link to the tracking issue)
Jump to navigation Jump to search

Unified accounts for Kosmos services

This is work in progress! For now, unified accounts are only enabled on this wiki. We have decided to use LDAP[1] to let users have the same credentials (username and password) across Kosmos services.

The LDAP server is running on ldap.kosmos.org (on barnard, see Infrastructure)

You can follow the status of the switch to LDAP for the other Kosmos services

Changing your password

Changing your password will be made possible in the upcoming Kosmos Accounts Web UI, but for now some command-line knowledge is required to change your password.

The ldappasswd command-line tool is provided by different packages depending on your OS. For example ldap-utils on Ubuntu, openldap-clients on Fedora, openldap on Arch Linux. It is already provided in a default macOS installation.

The following command will set your new password, if you type your current password (replace yourusername with your username)

ldappasswd -x -D cn='yourusername',ou=users,dc=kosmos,dc=org -W -S -H "ldaps://ldap.kosmos.org"

It will ask you the following passwords:

New password:
Re-enter new password:
Enter LDAP Password:

"New password" is the password that will be set on your LDAP account. "LDAP password" is your current password

If you need any help do not hesitate to ask for help in our ops chatroom

References