Difference between revisions of "Services:Accounts"

From Kosmos Wiki
Jump to navigation Jump to search
m
Line 1: Line 1:
 
== Unified accounts for Kosmos services ==
 
== Unified accounts for Kosmos services ==
  
This is work in progress, for now unified accounts are only enabled on this wiki. We have decided to use LDAP<ref>[https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol Lightweight Directory Access Protocol]</ref> to let users have the same credentials (username and password) for Kosmos services. If you want to learn more about LDAP you can start with this page<ref>[https://ldap.com/basic-ldap-concepts/ Basic LDAP Concepts]</ref>.
+
This is work in progress. For now, unified accounts are only enabled on this wiki. We have decided to use LDAP<ref>[https://en.wikipedia.org/wiki/Lightweight_Directory_Access_Protocol Lightweight Directory Access Protocol]</ref> to let users have the same credentials (username and password) across Kosmos services.
 
 
We are currently [https://gitea.kosmos.org/kosmos/chef/issues/123 planning the migration of the next service], [[Services:XMPP|XMPP]] to also use LDAP.
 
  
 
=== Changing your password ===
 
=== Changing your password ===
Line 9: Line 7:
 
Changing your password will be made possible in [https://gitea.kosmos.org/kosmos/akkounts-web/issues/5 Akkounts], but for now some command-line knowledge is required to change your password.
 
Changing your password will be made possible in [https://gitea.kosmos.org/kosmos/akkounts-web/issues/5 Akkounts], but for now some command-line knowledge is required to change your password.
  
The ''ldappasswd'' command-line tool is provided by different packages depending on your OS. For example ''ldap-utils'' on Ubuntu, ''openldap-clients'' on Fedora, ''openldap'' on Arch. It is already provided in a default macOS installation.
+
The ''ldappasswd'' command-line tool is provided by different packages depending on your OS. For example ''ldap-utils'' on Ubuntu, ''openldap-clients'' on Fedora, ''openldap'' on Arch Linux. It is already provided in a default macOS installation.
  
 
The following command will set your new password, if you type your current password (replace '''yourusername''' with your username)
 
The following command will set your new password, if you type your current password (replace '''yourusername''' with your username)

Revision as of 17:16, 29 January 2020

Unified accounts for Kosmos services

This is work in progress. For now, unified accounts are only enabled on this wiki. We have decided to use LDAP[1] to let users have the same credentials (username and password) across Kosmos services.

Changing your password

Changing your password will be made possible in Akkounts, but for now some command-line knowledge is required to change your password.

The ldappasswd command-line tool is provided by different packages depending on your OS. For example ldap-utils on Ubuntu, openldap-clients on Fedora, openldap on Arch Linux. It is already provided in a default macOS installation.

The following command will set your new password, if you type your current password (replace yourusername with your username)

ldappasswd -x -D cn='yourusername',ou=users,dc=kosmos,dc=org -W -S -H "ldaps://ldap.kosmos.org"

It will ask you the following passwords:

New password:
Re-enter new password:
Enter LDAP Password:

"New password" is the password that will be set on your LDAP account. "LDAP password" is your current password

If you need any help do not hesitate to ask for help in our ops chatroom

References