Users

The users page can be accessed via the administer menu:

Administer > Users

The users page forms a part of orcharhino’s user management.

User accounts provide and restrict access to orcharhino user interfaces: the graphical management UI, the API, and the command line based Hammer CLI.

Note

You may also attach an LDAP server as source of authentication to your orcharhino instead of creating users manually.

The users page allows you to create, edit, and delete user accounts:

List of user accounts
  • The Create User button (1) allows you to create a new user account.

  • The table (2) lists all user accounts including their email address and date and time of their last login.

  • The Action menu (3) allows you to delete or impersonate a user. The latter allows you to access the management UI as if you were the selected user yourself. Doing so displays a yellow eye in the top right corner:

    Impersonate symbol

    Clicking on the symbol allows you to change back to your original user account.

Creating a User

Go to Administer > Users and click the Create User button to create a new user. Make sure to view all six tabs as shown below before submitting your input to orcharhino.

User tab
  • The User tab (1) contains the basic user information.

  • The Username (2) has to be unique and is used to login to orcharhino.

  • The First Name and Surname (3) are optional.

  • The Email Address (4) is also optional but required for email notifications.

  • You may add an arbitrary Description (5).

  • The Language drop down menu (6) allows you to set a specific language for the user.

  • The Timezone drop down menu (7) allows you to set a specific timezone for the user.

  • The Authorized by drop down menu (8) refers to either internal as displayed in the screenshot or LDAP to delegate the user authentication to an external LDAP server.

  • Both Password and Verify (9) require a strong user password used to access orcharhino in combination with the username. This is only needed when selecting internal as authentication method.

  • Remember to fill out information on the other tabs as detailed below before clicking the Submit button (10).

Email preferences tab
  • The Email Preferences tab (1) handles all settings regarding email notifications.

  • Settings are available once the user account has been saved to orcharhino (2). More information can be found in the email notifications section below.

Locations tab
  • The Locations tab (1) handles all settings regarding the location context.

  • The list of Locations (2) contains all possible locations a user can be assigned to.

  • The Default on login drop down menu (3) allows you to automatically activate a specific location context.

Organizations tab
  • The Organizations tab (1) handles all settings regarding the organization context.

  • The list of Organizations (2) contains all possible organizations a user can be assigned to.

  • The Default on login drop down menu (3) allows you to automatically activate a specific organization context.

Roles tab
  • The Roles tab (1) is part of the role based access model. Roles are part of orcharhino’s security concept and let you fine-tune access patterns.

  • Checking the Administrator checkbox (2) grants administration access to the newly created user, which includes full access to orcharhino including the ability to create, edit, and delete other users. This also overrides the roles selection below.

  • The list of Roles (3) can be used to assign roles to new users, e.g. manager as shown in the screenshot above.

SSH keys tab
  • The SSH Keys tab (1) handles user specific SSH keys.

  • You may add an SSH key once the user account has been saved to orcharhino (2).

SSH keys tab with list of SSH keys
  • The SSH Keys tab (1) lists your SSH keys and allows you to add SSH keys.

  • The list of SSH keys (2) contains the fingerprint amongst other information.

  • You may Delete (3) an SSH key from the user account. Editing an SSH key is not possible.

  • Clicking the Add SSH Key button (4) allows you to add another SSH key to the user account as shown below:

SSH keys add SSH key
  • The Key field (1) asks for the public part of the SSH key.

  • The Name field (2) allows you to assign a name to the SSH key.

  • Remember to click the Submit button (3) to save your changes to orcharhino.

Editing a User

Editing a user account is essentially the same as creating a user, with the difference that fields will be prefilled with the settings of the user account being edited as well as additional options.

Email Notifications

Users can subscribe to certain events and an assorted set of regular summary reports on the Email Preferences tab in their respective user configuration. Doing so requires privileges to receive emails which can be achieved by assigning the viewer role.

orcharhino must be properly configured to send emails to use this feature. This can be done on the settings page.

Email preferences tab with subscriptions
  • The Email Preferences tab (1) handles all settings regarding email notifications.

  • The Mail Enabled checkbox (2) allows you to enable or disable email notifications for a user. You may verify the correct email settings by clicking the green test button below.

  • Subscribing to Audit summary (3) sends you an email containing audit changes including the user who made the change, the date and time, and a link to further details. This may be filtered by a query following the syntax of the filter bars.

  • Subscribing to Compliance policy summary (4) sends you an email containing a summary of reports for OpenSCAP policies. This is only available if the OpenSCAP plugin is installed.

  • Subscribing to Config error state (5) delivers emails once a host reports a configuration error. This may be restricted to your own hosts.

  • Subscribing to Config summary (6) delivers reports on eventful configuration management incidents.

  • Subscribing to Discovered summary (7) delivers an email containing a summary of newly discovered hosts. This is only available if the host discovery plugin is installed.

  • Subscribing to Host built (8) sends you a notification once a host has finished building.

  • Subscribing to Host errata advisory (9) delivers a summary of available and applicable errata for your hosts.

  • Subscribing to Promote errata (10) allows for notifications about errata after promoting a content view.

  • Subscribing to Sync errata (11) sends you a summary of new errata including a list of content hosts once a repository has been synchronized.

Report summaries can be subscribed to on a daily, weekly, or monthly basis. Event notifications however are sent in real time.

An email may look as follows:

Email notification example

The subject refers to the email notification which is Host built (8) in this example. The message itself solely lists the name and the IP address of the newly created host.