lahirujayathilake opened a new issue, #537:
URL: https://github.com/apache/airavata-custos/issues/537

   Accounts created by the identity provisioner currently cannot be used, for 
three separate reasons:
   
   - The cluster login name does not match the intended username, so the 
account cannot be tied to its allocation or usage.
   - Accounts created through the API lack the attributes SSH sign-in needs, so 
users cannot log in.
   - A previously deleted account can be reused, attaching new access to a dead 
record.
   
   **Heads-up:** a registry that assigns its own login identifiers must have 
that policy disabled so it does not compete with the provisioner's value. This 
is a registry configuration step, not code.
   
   ### Acceptance
   - A newly provisioned user's login name matches the intended username and 
resolves on the cluster.
   - The user can sign in over SSH.
   - Re-provisioning a previously deleted account creates a fresh one and never 
reuses the old record.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to