Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

There are two distinct user types: Morpheus users and LDAP users. Each type of user serves a specific purpose and requires different methods for account creation.

Morpheus Users

...

Morpheus users are required to log in to the Morpheus platform using their credentials to perform tasks such as provisioning VMs, managing networks, and monitoring resource usage.

...

Please note Linux and Windows settings are not necessary to create a Morpheus user but can be created voluntary depending on your use cases.




LDAP Users

...

To create a new user which syncs across all VMs in the tenancy, you need to create it inside the LDAP. 

...

Note: Created users cannot be automatically added to the sudoers group for security reasons. However, you can grant sudo privileges manually from cli or web browser interface


Create a new user by accessing the LDAP itself

To create a user manually (this might be needed if you need to customize access to VMs, reset passwords, etc.) you can follow the guide at: EUMETSAT tenancy: Default setup or the last steps in Deploy FreeIPA LDAP and internal DNS serviceuse the following instructions to access and use the UI:

Connect using your browser to : https://ldap/

Proceed despite the security warning of the browser due to the self-signed certificate.  Log in using the username "admin" and the credentials stored in Morpheus (see under the Tools → Cypher menu and decrypt the entry for "ipa_admin" for the password).

Image Added

Adding a new user via the LDAP GUI

Under the users tab, add a new user

Image Added


Accessing via the command line

ssh to your ldap server (this likely requires you to go via a SSH proxy server or jumphost).  Once there, change to the LDAP admin user by running "su - admin" and the password stored in Morpheus under the Tools → Cypher menu (decrypt the entry for "ipa_admin" for the password).  Then run 

ipa user-add <USERNAME>--first=<FIRSTNAME> --last=<LASTNAME> --password