forked from Deuxfleurs/infrastructure
26 lines
778 B
Markdown
26 lines
778 B
Markdown
## 1. Create a LDAP user and assign a password for your service
|
|
|
|
Go to guichet.deuxfleurs.fr
|
|
|
|
1. Everything takes place in `ou=services,ou=users,dc=deuxfleurs,dc=fr`
|
|
2. Create a new user, like `johny`
|
|
3. Generate a random password with `openssl rand -base64 32`
|
|
4. Hash it with `slappasswd`
|
|
5. Add a `userpassword` entry with the hash
|
|
|
|
This step can also be done using the automated tool `secretmgr.py` in the app folder.
|
|
|
|
## 2. Connect to postgres with the admin users
|
|
|
|
```bash
|
|
# 1. Launch ssh tunnel given in the README
|
|
# 2. Make sure you have postregsql client installed locally
|
|
psql -h localhost -U postgres -W postgres
|
|
```
|
|
|
|
## 3. Create the binded users with LDAP in postgres + the database
|
|
|
|
```sql
|
|
CREATE USER johny;
|
|
CREATE DATABASE amazingapp OWNER johny;
|
|
```
|