1.2 KiB
Service User/Account
A service user is used for running a software daemon or backend with an own identity. Especially if it needs to communicate with central infrastrucure or needs to share data with other systems (NFS storage), then it is useful if it is defined in the ActiveDirectory (AD). The service user can then also be part of AD groups to allow access required data.
The usus is that the login name of service user starts with svcusr-, followed by the naming identifier.
It can be ordered with a free text request in Service Now.
Automatic Kerberos
The gssproxy service provides transparend authentication for accessing Kerberos protected NFS or CIFS shares.
The guide Permanent Kerberos with gssproxy and Password Keytab shows how to get there.
Create Systemd Session at Boot (Systemd Linger)
If that user needs a full Systemd session, i.e. a own systemd --user instance already started at boot, you can configure it in Hiera:
systemd::linger_users:
- svcusr-lx_test