Code Monkey home page Code Monkey logo

Comments (6)

wleese avatar wleese commented on July 21, 2024 1

Oh, and if you disable_auth: False, you might also run into an issue where if you're running iris through http, cookies won't be set correctly when logging in and you'll be redirected to the login page (after you just logged in). Either run iris through https or change the code. Can't remember where. Grep for cookie and set the secure value to false.

from iris.

dwang159 avatar dwang159 commented on July 21, 2024 1

I'll give a plug for https://github.com/jrgp/iris-admin and https://github.com/dwang159/oncall-admin for user management in Iris/Oncall as well, if you don't want to deal with setting up LDAP. wleese's steps for setting up LDAP users for Oncall and Iris looks good to me. We're a little short staffed on writing docs for setup, but I'll try to get something going. Really appreciate the patience you guys have had with setting it all up; thanks for being the guinea pigs.

from iris.

dwang159 avatar dwang159 commented on July 21, 2024

API keys are created automatically when an application is created. You can make an application by logging in as an admin user and clicking the "Create application" button in the "Applications" tab. This should take you to a page where the API key is visible.

from iris.

kjetilmjos avatar kjetilmjos commented on July 21, 2024

Thanks that worked! How is the user management for Iris done?

from iris.

wleese avatar wleese commented on July 21, 2024
server:                                                                                                                                                    
    host: 0.0.0.0                                                                                                                                            
    port: 16649                                                                                                                                              
    disable_auth: True

With this config you should be able to login with any user.

If disable_auth: False, then you can configure oncall to manage users. Here's an example of LDAP config for oncall:

  user_sync:                                                                                                                                                 
    module: 'oncall.user_sync.ldap_sync'                                                                                                                     
  ldap_sync:                                                                                                                                                 
    url: 'ldaps://my-ldap-server'                                                                                                                    
    base: 'dc=company,dc=net'                                                                                                                                 
    user: 'cn=binduser,ou=services,dc=company,dc=net'                                                                                                             
    password: 'xxxxx'                                                                                                                         
    cert_path: '/etc/ldap_cert.pem'                                                                                                                          
    query: '(uid=*)'                                                                                                                                    
    attrs:                                                                                                                                                   
      username: 'uid'                                                                                                                                        
      full_name: 'cn'                                                                                                                                        
      mail: 'mail'                                                                                                                                           
      mobile: 'mobile'                                                                                                                                       
    image_url: 'https://image.example.com/api/%s/picture'

Then you can run something like:

/home/oncall/env/bin/oncall-user-sync /home/oncall/config/config.yaml
/home/iris/env/bin/iris-sync-targets /home/iris/config/config.yaml

Which will import the users from ldap into iris. Haven't tried doing anything with users local to iris yet.

  • Disclaimer: I'm probably missing half of what's going on. Still figuring this out myself.

from iris.

kjetilmjos avatar kjetilmjos commented on July 21, 2024

Thanks for the info. Disable_auth could probably be one of the issues, will do a clean install and try it

from iris.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.