Map user

[basvandervlies]

This is POC so we can run in a mixed environment where we can map our logins to SRAM username. For example the user bas is known in our CUA environment and has a home directory, uid, gid, ...

This is user is not known in the SRAM environment. But I want to use pam-weblogin for authentication. Then we create
a mapping file:

bas:  <username_in_sram>

So pam-weblogin will use <username_in_sram> for authentication when we ssh:

• ssh bas@<login_node>

and if there is no mapping then given username is used in this example jaap

• ssh jaap@

[baszoetekouw]

Hi Bas,
Thanks for the PR! I think this is pretty useful functionality.
I need to take a somewhat deeper look at the parsing logic of the user mapping file though. It's not obvious to me how it works exactly. I hope to find an hour or two to look at it in more detail next week.

[basvandervlies]

Thanks the code for parsing is from mariadb pam plugin. Another thing what that poped-up. Is that in our environment and maybe others we prefix the login/username with eg: sram- or <cba account>-. So maybe add a prefix option The prefix is then removed before sending it to sram.

[baszoetekouw]

That's a pretty nice idea actually. Would would still need user mapping like in this PR if we would have support for prefixes?

[basvandervlies]

Just back from holidays. Prefixes is just another option that solves another issue. The user mapping is still nice to have so we can use the current logins on the system.

[baszoetekouw]

Hi Bas,
Sorry for being quiet on this PR for a while. I would still like to merge it, but before I do that, I would like to add unit tests to pam_weblogin, so that we can actually test this functionality easily.
I'll try to get around to that soonish.

Gr,
Bas.