lib-sftp creation of ansible managed server

[kayiwa]

We need an SFTP server that allows service connections. These connections allow us to manage jobs using the lib_jobs repo (these were formerly rake tasks on someone's laptop). Use cases are documented here. They include:

• processing HR files for new hire access to library resources
• data dumps from Alma for bibdata

This ticket lists what the lib-sftp servers is expected to do from an automation perspective, when and
where.

Expected paths

All account connections should use the directory /alma, including service accounts and individual accounts.

Service accounts that need to connect to lib-sftp:

• ftp definition on alma
• lib-jobs
• aspace
• bibdata

Individual accounts that need to connect to sftp

• users (netids from Active Directory)
• alma user
• others TBD

[kayiwa]

make AD users have r/w

[kayiwa]

Acceptance Criteria for user ssh/sftp

try to log in to the vm with ssh -v pu.win.princeton.edu\\<netid>@lib-sftp-staging1.princeton.edu

This should fail until you run:

ansible-playbook -v playbooks/lib_sftp.yml -e [email protected]

Make another attempt to log in.

[christinach]

when I run ansible-playbook -v playbooks/lib_sftp.yml -e [email protected] it fails with
fatal: [lib-sftp-staging1.princeton.edu]: UNREACHABLE! => {"changed": false, "msg": "Data could not be sent to remote host \"lib-sftp-staging1.princeton.edu\". Make sure this host can be reached over ssh: no such identity: /Users/cc62/.ssh/id_ed25519: No such file or directory\r\[email protected]: Permission denied (publickey,password).\r\n", "unreachable": true}

sorry about that. I'd forgotten to add all our keys to the pulsys user.

[christinach]

@kayiwa applied an update. I was able to run the playbook successfully and then ssh and login.

[acozine]

This is a separate service from the SFTP server for ProQuest. The ProQuest one lives in the cloud. This one lives on-prem.

[kayiwa]

created an almasftp user service account for auth.

[leefaisonr]

We are experiencing this bug with the Jammy Jellyfish images: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1934997

[acozine]

Related to pulibrary/princeton_ansible#4938