785383 - New user for clientxx.

Status: RESOLVED FIXED

(Cloud Services :: Operations: Miscellaneous, task)

Description

[Tarek Ziadé (:tarek)]

I'd like to have a new application user called 'marteau' that will be used to run the funkload tests accross clientxx. box.

Please let me know if I should filed that as an IT bug. I am not sure

Comment 1

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

user has been placed into the puppet configuration for these hosts. please verify that it exists and does what you want ;)

Comment 2

[James Bonacci [:jbonacci]]

Verified the following new user on clientXX boxes:

client{12..30}.scl2.svc
marteau:x:460:460::/home/marteau:/bin/bash

Not sure how one logs in as marteau ;-)

Comment 3

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

well that's the thing. I am unclear on the use case for the account. Is it for actual logging in purposes or is it just so one can run the application as non-root? Waiting for clarification from tarek, but if more work is required, feel free to reopen. ;)

Comment 4

[Tarek Ziadé (:tarek)]

Sorry I should have been clearer. 

Here's how the marteau application should work:

- a master node (client11) ssh into every clientxx.xx VM that's used to load test an app

- the marteau application should run under the marteau user, and ssh as the marteau user on every clientxx box.

- I should be able to su as 'marteau' to setup and run the app under it, *or* work with you to set this app. Although the first option is simpler if I want to update the app etc. I guess.

There's an open question on how we want to set up ssh. I see two options:

- run a ssh-agent and the public key - but that still requires an initial prompt unless the key is password-less ;)

- use the user+password to start the ssh sessions in marteau

Thanks!

Comment 5

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

Okay, so here's what I'm thinking:

1) I'll create an ssh key for marteau that will be distributed to the clientxx machines
2) We work out a sudo rule that will allow you to sudo to marteau on client11
3) You will then be able to sudo to marteau on client11 and ssh to any of the client boxes as marteau from client11

Sound acceptable?

Comment 6

[Tarek Ziadé (:tarek)]

Sounds perfect as long as the marteau user can ssh on every clientxx box without me being logged in on the box. e.g.: the application will ssh for each tests without a user session open, but as a background process.

Comment 7

[Chris Kolosiwsky [:ckolos] (ckolos has left the building)]

completed and tested by tarek. Closing.