-apiserver:~$ arv api_client_authorization create --api-client-authorization '{"scopes":["GET /arvados/v1/virtual_machines/zzzzz-2x53u-zzzzzzzzzzzzzzz/logins"]}'
+apiserver:~$ arv api_client_authorization create --api-client-authorization '{"scopes":["GET /arvados/v1/virtual_machines/zzzzz-2x53u-zzzzzzzzzzzzzzz/logins"]}'
{
...
"api_token":"zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz",
@@ -63,9 +80,9 @@ As an admin arvados user (such as the system root user), create a token that is
Note the UUID and the API token output by the above commands: you will need them in a minute.
-h2. Install arvados-login-sync
+h2(#arvados-login-sync). Install arvados-login-sync
-Install the arvados-login-sync program.
+Install the arvados-login-sync program from RubyGems.
@@ -78,7 +95,7 @@ Configure cron to run the @arvados-login-sync@ program every 2 minutes.
shellserver:# umask 077; tee /etc/cron.d/arvados-login-sync <<EOF
-ARVADOS_API_HOST="uuid_prefix.your.domain"
+ARVADOS_API_HOST="ClusterID.example.com"
ARVADOS_API_TOKEN="the_token_you_created_above"
ARVADOS_VIRTUAL_MACHINE_UUID="zzzzz-2x53u-zzzzzzzzzzzzzzz"
*/2 * * * * root arvados-login-sync
@@ -86,9 +103,12 @@ EOF
+h2(#confirm-working). Confirm working installation
+
A user should be able to log in to the shell server when the following conditions are satisfied:
-* The user has uploaded an SSH public key: Workbench → Account menu → "SSH keys" item → "Add new SSH key" button.
-* As an admin user, you have given the user permission to log in: Workbench → Admin menu → "Users" item → "Show" button → "Admin" tab → "Setup shell account" button.
-* Two minutes have elapsed since the above conditions were satisfied, and the cron job has had a chance to run.
+# The user has uploaded an SSH public key: Workbench → Account menu → "SSH keys" item → "Add new SSH key" button.
+# As an admin user, you have given the user permission to log in using the Workbench → Admin menu → "Users" item → "Show" button → "Admin" tab → "Setup account" button.
+# The cron job has run.
+See also "how to add a VM login permission link at the command line":../admin/user-management-cli.html