cyverse-de/sharkbait

Name: sharkbait

Owner: CyVerse Discovery Environment

Description: null

Created: 2016-08-29 20:50:04.0

Updated: 2016-08-29 22:18:29.0

Pushed: 2018-02-20 03:52:20.0

Homepage: null

Size: 102

Language: Clojure

GitHub Committers

User	Most Recent Commit	# Commits

Other Committers

User	Email	Most Recent Commit	# Commits

README

sharkbait

A Clojure utility used to perform tasks in grouper that cannot be performed via the Grouper web services. The DE uses this to create its permission definitions, among other things.

Usage

Running sharkbait via an executable JAR file:

va -jar /path/to/sharkbait-standalone.jar

Running sharkbait via a Docker container:

cker run --rm -it -v /etc/grouper:/etc/grouper discoenv/sharkbait

Options

, --help                                 Show help.
, --host HOST                localhost   The database hostname.
, --port PORT                5432        The database port number.
, --database DATABASE        de          The database name.
, --user USER                de          The database username.
, --version                              Show the sharkbait version.
, --environment ENVIRONMENT  dev         The name of the DE environment.
, --grouper-user USER        de_grouper  The username that the DE uses to authenticate to Grouper

Prerequisites

This utility expects the Grouper configuration files to be present in /etc/grouper on the local host before it can be executed. It is generally best to run this utility on the Grouper host itself. This utility also expects an account with a username matching the value of the --grouper-user option to exist in the LDAP directory that is used as Grouper's subject source.

Purpose

The purpose of this utility is to initialize Grouper for use with the Discovery Environment. At this time, sharkbait performs the following tasks:

• adds several initial folders
• creates a group containing all DE users
• configures Grouper so that it loads groups from LDAP.

Folders:

• iplant:de:<environment-name>
• iplant:de:<environment-name>:users
• iplant:ldap

Groups:

• iplant:de:<environment-name>:users:de-users
• iplant:ldap:ldap-group-loader

Group Loader:

• The group loader is defined by adding several attributes to the ldap-group-loader group.

This utility is designed to be idempotent so that it can be run multiple times on the same Grouper deployment without doing any damage or encountering an error.

License

http://www.cyverse.org/sites/default/files/iPLANT-LICENSE.txt