user provisioning

[donsizemore]

Just opening a ticket to track how we think about this and handle this in the contexts of RENCI and Odum. Odum would optimally point our Grouper/LDAP instance at UNC's or possibly Shibbolize for federation.
I blew away my iRODS server and re-ran the playbook, and it looks like DE doesn't attempt to create my test user on first login, so we'll want some sort of iRODS user provisioning doo-flotchy... speaking purely in technical terms.

[donsizemore]

steps to fix my DE login:
iadmin mkuser testuser#mytestzone rodsuser
iadmin moduser testuser#mytestzone password testuserpasswd
(as testuser) imkdir /mytestzone/home/mytestuser/analyses (to suppress catalog access error)

[michael-conway]

add steps to ansible playbook for irods

iadmin mkuser testde8 rodsuser

iadmin moduser testde8 password xxxx

ichmod own irods /xx/home/testde8

imkdir /xx/trash/home/de-rodsadmin/testde8

ichmod own testde8 /xx/trash/home/de-rodsadmin/testde8

ichmod inherit /xx/trash/home/de-rodsadmin/testde8

imkdir /xxxx/home/testde8/analyses

ichmod own testde8 /xx/home/testde8/analyses

ichmod inherit /xx/home/testde8/analyses