Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

There are two distinct user types: Morpheus users and LDAP users. Each type of user serves a specific purpose and requires different methods for account creation.

Table of Contents

Morpheus Users (Morpheus Web Interface Access)

Morpheus users are required to log in to the Morpheus platform using their credentials to perform tasks such as provisioning VMs, managing networks, and monitoring resource usage.

...

There are two ways to do it:Run the

Create a new LDAP

...

user inside Morpheus Running a Morpheus Workflow

Head over to the Provisioning tab in Morpheus and click your LDAP instance. 

...

Note: Created users cannot be automatically added to the sudoers group for security reasons. However, you can grant sudo privileges manually from cli or web browser interface


Create a new user by accessing the LDAP itself

To create a user manually (this might be needed if you need to customize access to VMs, reset passwords, etc.) you can follow the guide at: EUMETSAT tenancy: Default setup or use the following instructions to access and use the UI:

Connect using your browser to : https://ldap/

Proceed despite the security warning of the browser due to the self-signed certificate.  Log in using the username "admin" and the credentials stored in Morpheus (see under the Tools → Cypher menu and decrypt the entry for "ipa_admin" for the password).

...

ssh to your ldap server (this likely requires you to go via a SSH proxy server or jumphost).  Once there, change to the LDAP admin user by running "su - admin{take the user from Cypher secret/ipaadmin_username}" and the password stored in Morpheus under the Tools → Cypher menu (decrypt the entry for "ipa_admin" for the passwordpassword/ipaadmin). 

Then run 

Code Block
ipa user-add <USERNAME>--first=<FIRSTNAME> --last=<LASTNAME> --password