Add Users

This section explains how you can add users for system administration.

These are not the database users.

To perform this task, you must be a member of the exaadm group.

Prerequisites

There are no prerequisites.

Procedure

This procedure is carried out using ConfD.

The ConfD examples are written in Bash on a Linux terminal running the Exasol tool confd_client, which is accessed by connecting to EXAClusterOS on the database nodes using Exasol Deployment Tool (c4). You can also interact with ConfD from an external tool using Python and XML-RPC. For more information, see ConfD.

Placeholder values are indicated with UPPERCASE characters. Replace the placeholders with your own values.

  1. Connect to EXAClusterOS (COS) using c4 connect -t<DEPLOYMENT>/cos. For example:

    c4 connect -t1/cos

    If you do not specify a node, you will normally be connected to the first node in the deployment. If the cluster is configured with an access node, the first node is the access node (usually n10). The COS command prompt indicates which node you are currently connected to. 

    [root@n10 ~]#

    For more information about c4 commands, see Exasol Deployment Tool (c4).

  2. When creating a user, you must specify at least one group the user belongs to. Performing certain ConfD Jobs are only available to certain users or roles. Therefore, select a group that is able to perform all the commands you expect from the user. To identify available groups, use the ConfD job group_list: 

    confd_client -c group_list

    • exaadm: The Exasol administrator.

    • exabfsadm: Exasol BucketFS administrator

    • exadbadm: Exasol database administrator

    • exastoradm: Exasol storage administrator

    • exausers: Exasol users

    • root: Reserved for the root user.

  3. To create a user, use the ConfD job user_create. For example: 

    confd_client -c user_create -a '{username: USERNAME, password: NEW_PASSWORD, userid: 1001, group: exaadm, login_enabled: true}'

Verification

Attempt to log in as the new user. If you encounter issues or do not want to log in as the new user, verify the user was created successfully by using the ConfD job user_list:

confd_client -c user_list

The output is similar to the following:

[root@n11 ~]# confd_client -c user_list
admin:
group: exaadm
id: 1001
login_enabled: true
passwd: $6$Ufg6wfviO/Ib2Mie$nXceAIjC4SKNcp6j7PscGoZD7IpviOwrwWPbi6LdY67U53fJesWUBVGz62a.tSONGp7b5Mg68C6ReebmF63B0.

See Also