[KIXS Vol.000 インフラLTの祭典]にてLTしたSTNSについての資料です。
QZBNB(.01&1"#0JOD,*947PMΠϯϑϥ-5ͷࡇయग़ձͬͯͰ͑Δ45/4ͱ-JOVYͷೝূج൫
View Slide
IUUQTUFOTOBQPODPNγχΞɾΤϯδχΞࢁԼ!QZBNBϗεςΟϯάࣄۀ෦ϜʔϜʔυϝΠϯνʔϜ
-JOVYೝূج൫1.
-JOVYೝূج൫44)ϩάΠϯϢʔβʔ໊ άϧʔϓ໊ʁύεϫʔυʁެ։伴ʁ
-JOVYೝূج൫w FUDQBTTXE FUDHSPVQ FUDTIBEPX BVUIPSJ[[email protected]w -%"1w .Z42-
-JOVYೝূج൫wFUDQBTTXE FUDHSPVQ FUDTIBEPX BVUIPSJ[[email protected]ˠVTFSBEE HSPVQBEEw-%"1ˠ匠͕ඞཁw.Z42-ˠϢʔβʔཧʹͰ͔͗͢Δ
-JOVYೝূج൫ͷঊ ౦ͷঊೆͷঊͷঊࣾͰαʔϏε͝ͱʹཚཱ͞Εͨ-%"1ΛঊͷྗΛ૯݁ूͨ͠ಉظεΫϦϓτͰ-%"1ิܭըΛߦத-%"1ΞτϦϏϡʔτ͕Ճ͘͢͠൚༻ੑ͕ߴ͍ͷͰɺӡ༻͔ΒᷓΕɺཚཱ͞Εͯ͠·͍͕ͪ
ͲΕ͠ΜͲ͍͚ͲΒͳ͖Ό͍͚ͳ͍
ଏͬΆ͍ͳ
IUUQTUOTKQ
45/4w (PMBOHw 5PNMܗࣜͷઃఆϑΝΠϧw +40/ΠϯλʔϑΣʔεͷαʔόɾΫϥΠΞϯτw 8SBQQFSΛࣗ༝ʹมߋͰ͖Δ ϓϥΨϒϧ
45/4
ίϯηϓτ໊લղܾɺެ։伴औಘɺΞΧϯτೝূͷΈΛఏڙ͢Δɻଟ͘ΛΒͣɺγϯϓϧʹอͭ͜ͱͰཧɺΈ߹ΘͤΛ༰қʹɻhttps://github.com/STNS/STNS
-JOVYϢʔβʔάϧʔϓͷ໊લղܾ% ls -ltr-rw-r--r-- 1 pyama wheel 0 May 8 00:09 hatena_pepabo.txt% ls -ltr-rw-r--r-- 1 1000 1000 0 May 8 00:09 hatena_pepabo.txtid:1000 is pyama
w TVEPFSTw [email protected] "MMPX(SPVQT "MMPX6TFSTw QBNೝূ-JOVYϢʔβʔάϧʔϓͷ໊લղܾ
ΞʔΩςΫνϟSTNShttp(1104)lslibnss-stnslibpam-stnsquery-wrapperkey-wrapper/user/name/pyama{name:pyama,id: 1000,dir:/home/pyama…}αʔόɾΫϥΠΞϯτؒhttpΛར༻ͨ͠JSONܗࣜͷΠϯλʔϑΣʔε
ઃఆϑΝΠϧαʔόQPSUJODMVEFFUDTUOTDPOGE[email protected][email protected][email protected][email protected]JE[email protected]LFZT<TTISTB99999ʜ>JEVTFST<FYBNQMF>QBTTXPSEGEDEBGFBBDBEBCGGCCCDEEDCGB
ઃఆϑΝΠϧΫϥΠΞϯτapi_end_point = ["http://:1104", "http://:1104"]user = "basic_user"password = "basic_password"wrapper_path = "/usr/local/bin/stns-query-wrapper"chain_ssh_wrapper = "/usr/libexec/openssh/ssh-ldap-wrapper"ssl_verify = trueLDAPͱͷڞଘՄೳ
XSBQQFSίϚϯυ$ stns-query-wrapper /user/name/pyama{"metadata": {"api_version": 2,"result": "success","min_id": 2000},"items": {"pyama": {"id": 10301,"password": "","hash_type": "","group_id": 2000,"directory": "","shell": "","gecos": "","keys": ["ssh-rsa xxx"],"link_users": null}}
ಋೖw SQN EFCڞʹCJU CJU൛ͷఏڙ SFQPTUOTKQDVSMGT4-IUUQTSFQPTUOTKQTDSJQUTZVNSFQPTIcTIZVNJOTUBMMTUOTMJCOTTTUOTMJCQBNTUOTIUUQTHJUIVCDPN45/4TUOTDPPLCPPLIUUQTHJUIVCDPN45/4QVQQFUTUOTw $IFG 1VQQFUͷΫοΫϒοΫɺϚχϑΣετΛఏڙ 1VQQFUϚχϑΣετ!IGN͕։ൃͯ͘͠Εͨ
ಋೖΠϯετʔϧʙ44)ެ։伴ೝূ·Ͱඵ
Ϣʔβʔཧ(JUIVC'MPX(JUIVC&OUFSQSJTF͔ΒϢʔβʔσʔλΛ࡞͠ɺ1VMM3FRVFTUࣗಈςετɾਓͷʹΑΔϨϏϡʔσϓϩΠ
ӡ༻Πϝʔδnginxstnsnginxstns/HJOYͰ44-Λऴͭͭ͠ɺ$BQJTUSBOPͳͲͷσϓϩΠπʔϧͰTUOTDPOGΛσϓϩΠ
ӡ༻ΠϝʔδnginxstnsnginxstnsαʔόͷTUOTDPOGΛฤू͠ɺ4$1STZODͰಉظ
45/4ϘΫ͕։ൃऀͩͬͨ͠΄͏͕͍͍w ࡶԽͮ͠Β͍పఈͨ͠γϯϓϧ͞w γϯϓϧ͕ނʹ֦ுੑ͕ߴ͍w ಋೖͷख͕ؒগͳ͍w ຊޠυΩϡϝϯτͷఏڙɺ։ൃऀ͕ຊ࣌ؒʹ͍Δ
45/4ͰϢʔβʔཧΛ࢝ΊΑ͏
5IBOLZPV