Changes

/* Load Balancer as a Service (LBaaS) - Account example */
* '''x''': Mandatory in all cases.
== Load Balancer as a Service (LBaaS) - Configuration (currently not used and implemented) ==
The sub tree for the configuration of the Load Balancer as a Service (LBaaS):
<source lang="ldif">
* '''x''': Mandatory in all cases.
=== Load Balancer as a Service (LBaaS) - Configuration - Provisioning daemon (currently not used and implemented) ===
See the [[stoney_core:_OpenLDAP_directory_data_organisation#Services | Services description]] for the naming convention.
* '''x''': Mandatory in all cases.
=== Load Balancer as a Service (LBaaS) - Configuration - Reseller (currently not used and implemented) ===
The sub tree for the reseller specific Load Balancer as a Service (LBaaS) settings:
<source lang="ldif">
=== Load Balancer as a Service (LBaaS) - Account example ===
The following example shows the OpenLDAP directory entry for the Load Balancer as a Service (LBaaS) account with the uid number 4000005: <source lang="ldif">dn: uid=4000005,ou=accounts,ou=lbaas,ou=services,dc=stoney wiki -cloud,dc=orgobjectclass: topobjectclass: accountobjectclass: sstLBaaSobjectclass: sstRelationshipuid: 4000005description: www.example.com (sst-int-001, sst-int-002) # Human readable description: fqdn (backend host 1, backend host 1)sstIsActive: TRUEsstLBaaSFrontendURI: https://www.example.com/ # Uniform Resource Identifier with optional label.sstLBaaSFrontendURI: https://example.com/ # Uniform Resource Identifier with optional label.sstLBaaSFrontendURI: https://api.example.com/ # Uniform Resource Identifier with optional label.sstLBaaSBackendURI: https://sst-int-001.os.stoney-cloud.com/ # Uniform Resource Identifier with optional label of the first backend host.sstLBaaSBackendURI: https://sst-int-002.os.stoney-cloud.com/ # Uniform Resource Identifier with optional label of the second backend host.sstLBaaSHost: haproxy-001.os.stoney-cloud.com # Fully qualified domain name (FQDN) of the first HAProxy server.sstLBaaSHost: haproxy-002.os.stoney-cloud.com # Fully qualified domain name (FQDN) of the second HAProxy server.sstBelongsToResellerUID: 4000000sstBelongsToCustomerUID: 4000001sstBelongsToServiceUID: 4000003 # The service belongs to the first backend host defined in the variabe (sstLBaaSBackendURI: https://sst-int-001.os.stoney-cloud.com/).sstBelongsToServiceUID: 4000004 # The service belongs to the second backend host defined in the variabe (sstLBaaSBackendURI: https://sst-int-002.os.stoney-cloud.com/).</source> The following table describes the different attributes:{| border="1" style="border-collapse: collapse; font-size:80%;" width="100%" class="wikitable sortable"! style="text-align:left; width: 180px" | Attribute! style="text-align:left; width: 220px" | Objectclass! style="width: 80px" | Existance! style="width: 80px" | Mandatory! style="text-align:left;" | Description |-| uid| account| <center>MUST</center>| <center>x</center>| The unique identifier (uid). This attribute is created by the Self-Service interface by reading (and incrementing) the next free uid from <cod>cn=nextfreeuid,ou=administration,dc=stoney-cloud,dc=org</code>. |-| description| account| <center>MAY</center>| <center>x</center>| Human readable description: fqdn (backend host 1, backend host 1). For example: <code>www.example.com (sst-int-001, sst-int-002)</code>. ||-| sstIsActive| sstRelationship| <center>MAY</center>| <center>x</center>| Is the Load Balancer as a Service (LBaaS) account active? Either <code>TRUE</code> (yes) or <code>FALSE</code> (no). Default is <code>TRUE</code> (yes). |-| sstLBaaSFrontendURI| sstLBaaS| <center>MUST</center>| <center>x</center>| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) frontend servers in the form of a Uniform Resource Identifier with optional label. Some examples:* <code>https://www.example.com/</code>* <code>https://example.com/</code>* <code>https://api.example.com/</code> |-| sstLBaaSBackendURI| sstLBaaS| <center>MUST</center>| <center>x</center>| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) backend servers in the form of a Uniform Resource Identifier with optional label. Some examples:* <code>https://sst-int-001.os.stoney-cloud.com/</code>* <code>https://sst-int-002.os.stoney-cloud.com/</code> |-| sstLBaaSHost| sstLBaaS| <center>MUST</center>| <center>x</center>| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) servers in the form of a fully qualified domain name. Some examples:* <code>haproxy-001.os.stoney-cloud.com</code>* <code>haproxy-002.os.stoney-cloud.com</code> |-| sstBelongsToResellerUID| sstRelationship| <center>MUST</center>| <center>x</center>| Stores the reseller UID the leaf belongs to. |-| sstBelongsToCustomerUID| sstRelationship| <center>MUST</center>| <center>x</center>| Stores the customer UID the leaf belongs to. |-| sstBelongsToServiceUID| sstRelationship| <center>MAY</center>| <center>x</center>| Stores the service UID(s) this entry belongs to. The service belongs to the backend host(s) defined in the variable(s) (sstLBaaSBackendURI). This multi-valued attribute can point to multiple services (one or more LBaaS backends). Some examples:* <code>4000003</code>: The service belongs to the first backend host defined in the variabe (sstLBaaSBackendURI: https://sst-int-001.os.stoney-cloud.com/).* <code>4000004</code>: The service belongs to the second backend host defined in the variabe (sstLBaaSBackendURI: https://sst-int-002.os.stoney-cloud.com/). |} Legend:* '''x''': Mandatory in all cases. === Load Balancer as a Service (LBaaS) - Account example (with pam_ldap attributes, currently not used and implemented) ===The following example shows the OpenLDAP directory entry for the Load Balancer as a Service (LBaaS) account with the uid number 3730083:
<source lang="ldif">
shadowWarning: 7
sstIsActive: TRUE
sstLBaaSFrontendURI: https://www.example.com/ # Uniform Resource Identifier with optional label.sstLBaaSFrontendURI: https://example.com/ # Uniform Resource Identifier with optional label.sstLBaaSFrontendURI: https://api.example.com/ # Uniform Resource Identifier with optional label.
sstLBaaSBackendURI: https://sst-int-001.os.stoney-cloud.com/ # Uniform Resource Identifier with optional label.
sstLBaaSBackendURI: https://sst-int-002.os.stoney-cloud.com/ # Uniform Resource Identifier with optional label.
sstLBaaSHost: haproxy-001.os.stoney-cloud.com # Fully qualified domain name (FQDN).sstLBaaSHost: haproxy-002.os.stoney-cloud.com # Fully qualified domain name (FQDN).
sstProvisioningMode: add
sstProvisioningExecutionDate: 0
</source>
This will result in The LDIF above can be queried via the following cli command <code>getent passwd</code> entry:<syntaxhighlight lang='bash'>getent passwd 3730083</syntaxhighlight> This will result in the following output:
<syntaxhighlight lang='text'>
# .------------------------------------------------------------------------------- login name# | .----------------------------------------------------------------------- encrypted password indicator# | | .--------------------------------------------------------------------- numerical user ID# | | | .------------------------------------------------------------- numerical group ID# | | | | .----------------------------------------------------- gecos field (the typical format is a comma-delimited list)# | | | | | .---------------------- user home directory# | | | | | | .-------- user command interpreter# | | | | | | |# | | | | | | |
3730083:x:3730083:3730083:Example Ltd. (www.example.com):/home/3730083:/bin/false
</syntaxhighlight>
<code>iconv("UTF-8", "ASCII//TRANSLIT", "Tüpfelhyänenöhrchen")</code><br />
Please be aware, that some characters don't get converted properly ... For example: Ø and £. The characters $ and € work.
 
This appears in the 'getent passwd' output. Company name and the main fully qualified domain name (FQDN). For example: <code>Example Ltd. (www.example.com)</code>.
|-
| <center>MUST</center>
| <center>x</center>
| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) frontend servers in the form of a Uniform Resource Identifier with optional label. Some examples:* <code>https://www.example.com/</code>* <code>https://example.com/</code>* <code>https://api.example.com/</code>
|-
| <center>MUST</center>
| <center>x</center>
| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) backend servers in the form of a Uniform Resource Identifier with optional label. Some examples:* <code>https://sst-int-001.os.stoney-cloud.com/</code>* <code>https://sst-int-002.os.stoney-cloud.com/</code>
|-
| <center>MUST</center>
| <center>x</center>
| This multi-valued attribute stores one or more Load Balancer as a Service (LBaaS) servers in the form of a fully qualified domain name. Some examples:* <code>haproxy-001.os.stoney-cloud.com</code>* <code>haproxy-002.os.stoney-cloud.com</code>
|-
* '''x''': Mandatory in all cases.
=== Load Balancer as a Service (LBaaS) - Group example (with pam_ldap attributes, currently not used and implemented) ===The following example shows the OpenLDAP directory entry for the Load Balancer as a Service (LBaaS) group with the uid number 3730083: 
<source lang="ldif">
dn: cn=3730083,ou=groups,ou=lbaas,ou=services,dc=stoney-cloud,dc=org
cn: 3730083
gidNumber: 3730083
sstIsActive: TRUE
sstBelongsToResellerUID: 4000000
sstBelongsToCustomerUID: 4000001
| <center>x</center>
| The numerical group ID of the Load Balancer as a Service (LBaaS) group.
 
|-
| sstIsActive
| sstRelationship
| <center>MAY</center>
| <center>x</center>
| Is the Load Balancer as a Service (LBaaS) group active? Either <code>TRUE</code> (yes) or <code>FALSE</code> (no). Default is <code>TRUE</code> (yes).
|-
SLB, editor, reviewer
3,368
edits