debfranca
/
ansible-roles
forked from ISTI-ansible-roles/ansible-roles
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
ansible-roles/library/roles/d4s_user_services_perms/README.md

26 lines
1.1 KiB
Markdown
Raw Normal View History

library/roles/d4s_user_services_perms: Now it's possible to create additional users on smartgears nodes too. d4science-ghn-cluster/group_vars/geoserver_prod_spatial/geoserver_prod_spatial.yml: Give Emmanuel Blondel read/write permissions on the spatialite data.
2017-07-03 16:51:41 +02:00
Several different scenarios are covered.
ibrary/roles/d4s_user_services_perms: Move here the tasks that allow the d4science user to start/stop the tomcat service. d4science-ghn-cluster: new generic playbook to configure a machine that will run the transact webapp.
2015-05-30 19:58:55 +02:00
library/roles/d4s_user_services_perms: Add a series of task that configure a generic service to be managed by an unprivileged user.
2016-09-26 18:17:45 +02:00
1. One smartgears tomcat instance, installed inside the user's home
2. One or more tomcat instances, each instance installed inside its
user's home
3. One service, not tomcat based, installed inside the user's home
4. One service, installed inside the user's home, not managed by other
ansible playbooks (only the user is created)
library/roles/d4s_user_services_perms: Now it's possible to create additional users on smartgears nodes too. d4science-ghn-cluster/group_vars/geoserver_prod_spatial/geoserver_prod_spatial.yml: Give Emmanuel Blondel read/write permissions on the spatialite data.
2017-07-03 16:51:41 +02:00
5. ACLs are used if more than one user must be able to read/write some
common directories or files. This works both with the gcore and the
smartgears cases
library/roles/d4s_user_services_perms: Add a series of task that configure a generic service to be managed by an unprivileged user.
2016-09-26 18:17:45 +02:00
Important note: the variable 'http_port(s)' needs to be defined earlier in the calling playbook.
library/roles/d4s_user_services_perms: Install a README file inside the gcube home directory. Set up acls so that the gcube user can read/write the tomcat options files.
2015-07-24 12:00:37 +02:00
What the role does:
library/roles/d4s_user_services_perms: Add a series of task that configure a generic service to be managed by an unprivileged user.
2016-09-26 18:17:45 +02:00
- Installs the sudoers config that permits the user to restart the
service
- Installs the script that allows the user to start and stop the
library/roles/d4s_user_services_perms: Install a README file inside the gcube home directory. Set up acls so that the gcube user can read/write the tomcat options files.
2015-07-24 12:00:37 +02:00
service without using the full path
library/roles/d4s_user_services_perms: Add a series of task that configure a generic service to be managed by an unprivileged user.
2016-09-26 18:17:45 +02:00
- Installs the README file that explains where the options files are
library/roles/d4s_user_services_perms: Install a README file inside the gcube home directory. Set up acls so that the gcube user can read/write the tomcat options files.
2015-07-24 12:00:37 +02:00
placed and how start/stop the service
library/roles/d4s_user_services_perms: Add a series of task that configure a generic service to be managed by an unprivileged user.
2016-09-26 18:17:45 +02:00
- The default open files limits are increased
library/roles/d4s_user_services_perms: Now it's possible to create additional users on smartgears nodes too. d4science-ghn-cluster/group_vars/geoserver_prod_spatial/geoserver_prod_spatial.yml: Give Emmanuel Blondel read/write permissions on the spatialite data.
2017-07-03 16:51:41 +02:00
- Creates additional users if needed, and adds ACLS to allow them
access shared directories