opencloud/docs/ocis/storage/users.md

title, date, weight, geekdocRepo, geekdocEditPath, geekdocFilePath

title	date	weight	geekdocRepo	geekdocEditPath	geekdocFilePath
Users	2020-01-16T00:00:00+00:00	17	https://github.com/owncloud/ocis	edit/master/docs/ocis/storage	users.md

TODO add this to the storage overview? or is this a different part? That should be started as a separate service ? And documented elsewhere, e.g. in the accounts?

User and Group provisioning

In oc10 users are identified by a username, which cannot change, because it is used as a foreign key in several tables. For oCIS we are internally identifying users by a UUID, while using the username in the WebDAV and OCS APIs for backwards compatability. To distinguish this in the URLs we are using <username> instead of <userid>. You may have encountered <user_layout>, which refers to a template that can be configured to build several path segments by filling in user properties, e.g. the first character of the username ({{substr 0 1 .Username}}/{{.Username}}), the identity provider ({{.Id.Idp}}/{{.Username}}) or the email ({{.Mail}})

{{< hint warning >}} Make no mistake, the OCS Provisioning API uses userid while it actually is the username, because it is what you use to login. {{< /hint >}}

We are currently working on adding user management through the CS3 API to handle user and group provisioning (and deprovisioning).

Demo driver

This is a simple user driver for testing. It contains three users:

einstein:relativity
marie:radioactivity
richard:superfluidity

In order to use the demo driver you need to export the relevant environment variable:

export STORAGE_USERS_DRIVER=demo

JSON driver

In order to switch from the ldap driver to JSON based users you need to export the relevant environment variables:

export STORAGE_USERS_DRIVER=json
export STORAGE_USERS_JSON=/path/to/users.json

For the format of the users.json have a look at the reva examples

LDAP driver

This is the default user driver.

If the following defaults don't match your environment then change them accordingly:

export STORAGE_LDAP_HOSTNAME=localhost
export STORAGE_LDAP_PORT=9126
export STORAGE_LDAP_BASE_DN='dc=ocis,dc=test'
export STORAGE_LDAP_USER_FILTER='(&(objectclass=posixAccount)(cn=%s))'
export STORAGE_LDAP_GROUP_FILTER='(&(objectclass=posixGroup)(cn=%s))'
export STORAGE_LDAP_BIND_DN='cn=reva,ou=sysusers,dc=ocis,dc=test'
export STORAGE_LDAP_BIND_PASSWORD=reva
export STORAGE_LDAP_USER_SCHEMA_UID=uid
export STORAGE_LDAP_USER_SCHEMA_MAIL=mail
export STORAGE_LDAP_USER_SCHEMA_DISPLAYNAME=sn
export STORAGE_LDAP_USER_SCHEMA_CN=cn

Then restart the bin/storage users and bin/storage auth-basic services for the changes to take effect.