Contextualise motley-cue and pam-ssh-oidc on a VM Server
Project description
contextualise-ssh-server
Contextualise motley-cue and pam-ssh-oidc on a VM Server
Installation
contextualise-ssh-server is available on PyPI. Install using pip
:
pip install contextualise_ssh_server
Configuration
Config is read from /etc/contextualise_ssh_server.conf
There is a default config file in the place where pip installs this package
There you will also find templates for motley_cue.conf and feudal_adapter.conf
Environment Variables
These control the behaviour:
-
SSH_AUTHORISE_OTHERS_IN_MY_VO
: If set to a nonempty value ALL members of ALL VOs of the user will be authorised to log in. -
SSH_AUTHORISE_VOS
: If the above variable is not set and this variable specifies a json list of VOs (actually AARC-G069/G027 Entitlements) to authorise.Example:
export SSH_AUTHORISE_VOS="['urn:mace:egi.eu:group:cryoem.instruct-eric.eu:admins:role=owner#aai.egi.eu', 'urn:mace:egi.eu:group:umsa.cerit-sc.cz:admins:role=owner#aai.egi.eu']
Usage
The tools will output the two config files motley_cue.conf
and
feudal_adapter.conf
in the folder in which it is called.
Those need to be placed in /etc/motley_cue
with the access token of the
user as the only parameter:
contextualise_ssh_server <OIDC_ACCESS_TOKEN>
PAM
For enabling and disabling tokens in pam, you can use the scripts
enable-pam-ssh.sh
and disable-pam-ssh.sh
They are installed into the same folder as the python file, which you can
find with contextualise_ssh_server -b
VM Integration
Install packages to VM image:
yum install motley-cue pam-ssh-oidc
Include this in the VM startup:
# enable tokens in pam:
`contextualise_ssh_server -b`/enable-pam-ssh.sh
# create motley-cue config
cd /tmp
contextualise_ssh_server $USER_OIDC_ACCESS_TOKEN
# place them in /etc/motley_cue/
sudo cat motley_cue.conf > /etc/motley_cue/motley_cue.conf
sudo cat feudal_adapter.conf > /etc/motley_cue/feudal_adapter.conf
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for contextualise_ssh_server-0.8.1.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | f15db3aa6024851bacf8abace7bd2687c38e511efbde12762b4d1e7e6a6900de |
|
MD5 | 815ee023f40fbf12462b5cfadf9215dc |
|
BLAKE2b-256 | 575b4fdc8f73737bec7e046520b5293ba014666f2f0708a48d6ab497356f17fe |
Hashes for contextualise_ssh_server-0.8.1-py2.py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 573a8d10e2ce553fb204e2863e0e42fd8710b1b260bfdc26f33320a93dd3765f |
|
MD5 | 497e17c975b256ac98ce3c8ad90c1602 |
|
BLAKE2b-256 | 0d1dcd3c331880ddac0b046e53bb1eb348951eac4bb76acdfa3f147849fad4b4 |