Cumin and LDAP
by Vladimir Motoska
Hi all,
some time ago we briefly talked to Matthew Farrellee about LDAP authentication.
We created a simple patch to Cumin 0.1.4794 which enables LDAP authentication.
The configuration is easy just add "auth" line to config file. Auth parameter
has the following format
[backend]=[url]
i.e.:
auth:ldap=ldap://ldap.domain.local/ou=People,dc=domain,dc=local??sub?(&(|(accessTo=cluster.domain.local)(accessTo=domain.local)(trustmodel=fullaccess))(accountActive=TRUE)(uid=%%s))
To enable a user to login with ldap credentials you need to create the user in
cumin db by entering
#cumin-admin add-user [database] USER [PASSWORD]
database can be internal or external ( internal is the default auth mechanism )
For the future it would be maybe better to enable a http proxy authentication
like apache... This would enable easy integration with SSO infrastructure or
various backends. However we would appreciate your feedback in this matter
since you have more clear vision of further Cumin development.
Best Regards
11 years, 3 months
Job manipulation
by Lukas Slebodnik
Hi all,
In our company, we mainly use Cumin to job monitoring, but Cumin has also
possibility to manage jobs (hold, release, remove). We have installed Cumin
version 0.1.4916. This version communicate with condor through python-qmf.
If I try to remove(release, hold) job, Cumin will report error message:
"Remove: Failed (Forbidden)". This is a reason why we decided to comment out
this features from Cumin, so our users can't see it.
Last week I tried the latest version of Cumin from svn (rev. 5117). But job
management also do not work. Is it in qpid or condor configuration problem?
I noticed, that latest version of Cumin can communicate with Condor using
aviary project. I installed latest condor-aviary (from Condor 7.6.4 ).
I configured Cumin to use aviary and then suddenly job management work very
well. But after some testing I noticed that, I was able to remove any user jobs,
although I was only ordinary user (without admin role). I also tried to use
example aviary python scripts and result was the same. I removed any user jobs.
Is it also a configuration issue like with qmf?
What is a purpose of admin role in cumin? Because I did not noticed any
differences.
Regards,
Lukas
11 years, 4 months