Search code examples
fiwarekeystoneidentity-managementidentitymanager

FIWARE - Keyrock new user without access

We want to add users at our local instance of keyrock. Now, we only have the default idm user. When we create a new user, a confirmation email should be sent, but this is not happening. In this case, the new user is not validated and therefore he/she can not access the service.

What is supposed to do for using new users?

Solution

  • Assuming that you are using the GUI of KeyRock and that you are in a production environment, you must set up a SMTP server to send it (as it is stated in the KeyRock Documentation). In case you haven't done so, let me give you some hints on how to set set up a mail server using POSTFIX and connect the front-end of KeyRock to it. Further information can be found in the Django documentation.

    1. Install and configure POSTFIX. In Ubuntu, you should run:

      sudo apt-get install postfix

    2. Edit the local_settings.py file (the one inside horizon/openstack_dashboard/local/) to configure the new email backend:

      EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'

      This will get the settings from the default SMTP server in your host (it should be POSTFIX after installing it).

      In case you are not running POSTFIX in the same host or want to use a different configuration, make use of the following settings:

      # Configure these for your outgoing email host
EMAIL_HOST = 'smtp.my-company.com'
EMAIL_PORT = 25
EMAIL_HOST_USER = 'djangomail'
EMAIL_HOST_PASSWORD = 'top-secret!'
EMAIL_URL = 'your-webstie-domain.com'
DEFAULT_FROM_EMAIL = 'your-no-reply-address'
EMAIL_SUBJECT_PREFIX = '[Prefix for emails subject]'

    In case you are in a development environment, Django outputs emails to the console, so you may find the link to activate the user's account right in your Horizon console.

    Hope this helps! Feel free to write back otherwise.

    Kind regards from the KeyRock Team!

    EDIT: the newer versions of Keyrock IdM do not list the activation link in the logs. Here it is: host_address:3000/activate?activation_key=your_activation_key&email=your_email. Change your_activation_key and your_email with your data.