5579744656
Acted on Greg's comments Patch 1: Deleted duplicated docs and corrected references to fix build failure Patch 2: Acted on Greg's and Ron's comments. Patch 3: Acted on Greg's comment. Patch 4: Acted on Mary's comments. Patch 5: Solved merge conflict. Patch 6: Worked on Mary's comments. Patch 7: Fixed build conflict. Patch 8: Worked on Mary's comments. https://review.opendev.org/c/starlingx/docs/+/792461 Signed-off-by: egoncalv <elisamaraaoki.goncalves@windriver.com> Change-Id: I647711ac35f45bc9c79cc490269831770e98e2f4
1.7 KiB
Linux User Accounts
A brief description of the system accounts available in a system.
- Sysadmin Local Linux Account
-
This is a local, per-host, sudo-enabled account created automatically when a new host is provisioned. It is used by the primary system administrator for , as it has extended privileges.
See
The sysadmin Account <the-sysadmin-account>for more details. - Local Linux User Accounts
-
Local Linux User Accounts should NOT be created since they are used for internal system purposes.
- Local LDAP Linux User Accounts
-
These are local LDAP accounts that are centrally managed across all hosts in the cluster. These accounts are intended to provide additional admin level user accounts (in addition to sysadmin) that can SSH to the nodes of the .
See
Local LDAP Linux User Accounts <local-ldap-linux-user-accounts>for more details.Note
For security reasons, it is recommended that ONLY admin level users be allowed to to the nodes of the . Non-admin level users should strictly use remote or remote web GUIs.
For more information, refer to the following:
the-sysadmin-account local-ldap-linux-user-accounts create-ldap-linux-accounts remote-access-for-linux-accounts password-recovery-for-linux-user-accounts estabilish-credentials-for-linux-user-accounts establish-keystone-credentials-from-a-linux-account starlingx-openstack-kubernetes-from-stsadmin-account-login kubernetes-cli-from-local-ldap-linux-account-login