org.jclouds.scriptbuilder.statements.login
Class AdminAccess

java.lang.Object
  org.jclouds.scriptbuilder.statements.login.AdminAccess

All Implemented Interfaces:

com.google.common.base.Function<AdminAccess.Configuration,AdminAccess>, Statement

public class AdminAccess
extends Object
implements Statement, com.google.common.base.Function<AdminAccess.Configuration,AdminAccess>

Controls the administrative access to a node. By default, it will perform the following:

• setup a new admin user which folks should use as opposed to the built-in vcloud account
• associate a random password to account
• securely ( use sha 512 on client side and literally rewrite the shadow entry, rather than pass password to OS in a script )
• associate the users' ssh public key with the account for login
• associate it with the os group wheel
• create os group wheel
• add sudoers for nopassword access to root by group wheel
• reset root password securely
• lockdown sshd_config for no root login, nor passwords allowed

Author:

Adrian Cole

Nested Class Summary

static class	AdminAccess.Builder
static interface	AdminAccess.Configuration

Constructor Summary

protected

AdminAccess(String adminUsername, String adminPublicKey, String adminPrivateKey, String adminPassword, String loginPassword, boolean lockSsh, boolean grantSudoToAdminUser, boolean authorizeAdminPublicKey, boolean installAdminPrivateKey, boolean resetLoginPassword, com.google.common.base.Function<String,String> cryptFunction)

Method Summary

AdminAccess	apply(AdminAccess.Configuration configuration)
static AdminAccess.Builder	builder()
static AdminAccess.Builder	builder(com.google.common.base.Function<String,String> cryptFunction)
Iterable<String>	functionDependencies(OsFamily family)
org.jclouds.domain.Credentials	getAdminCredentials()
String	render(OsFamily family)
static AdminAccess	standard()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.google.common.base.Function

equals

Constructor Detail

AdminAccess

protected AdminAccess(@Nullable
                      String adminUsername,
                      @Nullable
                      String adminPublicKey,
                      @Nullable
                      String adminPrivateKey,
                      @Nullable
                      String adminPassword,
                      @Nullable
                      String loginPassword,
                      boolean lockSsh,
                      boolean grantSudoToAdminUser,
                      boolean authorizeAdminPublicKey,
                      boolean installAdminPrivateKey,
                      boolean resetLoginPassword,
                      com.google.common.base.Function<String,String> cryptFunction)

Method Detail

builder

public static AdminAccess.Builder builder()

builder

public static AdminAccess.Builder builder(com.google.common.base.Function<String,String> cryptFunction)

standard

public static AdminAccess standard()

getAdminCredentials

@Nullable
public org.jclouds.domain.Credentials getAdminCredentials()

Returns:

new credentials or null if unchanged or unavailable

functionDependencies

public Iterable<String> functionDependencies(OsFamily family)

Specified by:

functionDependencies in interface Statement

apply

public AdminAccess apply(AdminAccess.Configuration configuration)

Specified by:

apply in interface com.google.common.base.Function<AdminAccess.Configuration,AdminAccess>

render

public String render(OsFamily family)

Specified by:

render in interface Statement