chef-server-ctl commands to create a User, Organization and associate the user to a specific organisation to access the on-remise Chef Manage web UI

When creating an organization and users in a Chef Server, there is a specific order in which the creation and association of a user to an org should be done. Start by creating the org, then the user, then associate the user to the new org. Keywords: create User, create organization, associate user to org, assign admin permissions to a user

Mar 3, 2023
Knowledge

Title

URL Name

chef-server-ctl-commands-to-create-a-User-Organization-and-associate-the-user-to-a-specific-organisation-to-access-the-Chef-Manage-web-UI

Article Number

000229217

Environment

Chef Server

Question/Problem Description

You won't be able to access the on-premise Chef Manage web Interface without a username and password, but an administrator or someone with root access to the chef server will be able to create a User and Organization for you. Role-based access control (RBAC) is used by the Chef Infra Server to limit access to things including nodes, environments, roles, data bags, cookbooks, and so on. By doing this, it is ensured that the Chef Infra Server will only accept requests from authorised users and/or Chef Infra Clients.

Steps to Reproduce

Clarifying Information

Error Message

Defect Number

Enhancement Number

Cause

Resolution

Summary of commands in order:

This link shows the creation of a Standalone Chef Server, org, and user, step by step, in order as it should be done when installing a new system.
https://docs.chef.io/server/install_server/#standalone

Create a User on Chef server:

chef-server-ctl user-create <username> <your name> <your email address> <'password for the user in quotes'> --filename <location and name of the .pem file>

Below are some examples for the fields mentioned above that you must manually edit before executing the command mentioned above.

<username> : johnmathew
<your name> : John Mathew
<your email address> : johnmathew@gmail.com
<'password for the user in quotes'> : 'Pa$$w0rd'
<location and name of the .pem file> : /root/john.pem

Create an Org and associate the created user to the newly created org in the below command:

chef-server-ctl org-create <org_name> '<Name of your organization>' --association_user <Enter the user name created in the first command> --filename <location for the validator.pem to be saved>

Below are some examples for the fields mentioned above that you must manually edit before executing the command mentioned above.

<org_name> : testorg
'<Name of your organization>' : 'test org, Inc'
<Enter the user name created in the first command> : johnmathew
<location for the validator.pem to be saved> : /root/testorg-validator.pem

Add the user to an organisation:

chef-server-ctl org-user-add <org name created with the second command> <username created with the first command> --admin

Below are some examples for the fields mentioned above that you must manually edit before executing the command mentioned above.

<org name created with the second command> : testorg
<username created with the first command> : johnmathew

You can access the Chef Manage web UI interface by logging in with the previously created username and password.
For more details on chef-server-ctl executable, please refer here https://docs.chef.io/server/ctl_chef_server/

Workaround

Notes

Keyword Phrase

create User, create organization, associate user to org, assign admin permissions to a user

Last Modified Date

7/20/2023 12:05 PM

chef-server-ctl commands to create a User, Organization and associate the user to a specific organisation to access the on-remise Chef Manage web UI

Files(0)

Was this article helpful?

Was this article helpful?

chef-server-ctl commands to create a User, Organization and associate the user to a specific organisation to access the on-remise Chef Manage web UI

Information

Related Articles