Can the Topology User name & group be changed from local account after installation?

Products

• Network Observability
• Topology

Issue/Introduction

Can we change the topology services user name and group from a local account (topology:topology, to be used for install), to an LDAP account after installation.

 

Is this supported in Topology? If so, how?

Environment

DX NetOps Topology all currently supported releases

Resolution

Topology Ansible playbooks support custom users during the INITIAL installation. You can configure the user by updating the inventory file with `ansible_user="custom-user"` and `ansible_group="custom-group"`.

 

However, there is no playbook support for modifying user and group configurations AFTER installation.

Additionally, installing Topology with an LDAP user is not currently supported. But, if the OS is handling the password verification for LDAP like it does for any user logging in (ssh etc), and user is in/etc/passwd|group, Ansible should be able to use the LDAP username/group.

 

NOTE: We have not tested this and do not officially support it, so you would need to test this setup in a development environment first to ensure it works.