3.2. Managing Users Locally

If no identity provider is available to obtain user information from, an administrator with access to the controller’s console can create users locally on the controller node. Created users appear in the PowerPanel web interface after creation and can be assigned virtual environments.

Note the following:

  • You cannot create LDAP users with vzapi user create.

  • If you switch to LDAP, existing local users will not be available in Virtuozzo PowerPanel anymore. They will, however, remain in the local identity database.

3.2.1. Creating Users Locally

To create a local user, run the command vzapi user create <username> on the controller node. You will also be asked to create the user’s password. For example:

# vzapi user create user1
Password:
Confirm:

Note

If MFA is enabled, replace vzapi <cmd> with vzapi --os-cloud local-credential <cmd>. For more details, see Managing Multi-Factor Authentication.

To make sure that the user has been created, you can run the command openstack --os-cloud local user list. For example:

# openstack --os-cloud local user show user1
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| id                  | 315a8d0ee4d84474bd8c8c0574e9e987 |
| name                | user1                            |
| password_expires_at | None                             |
+---------------------+----------------------------------+

3.2.2. Changing Passwords of Local Users

To change the password of a user created locally, run the command openstack --os-cloud=local user set <username> --password <new_passwd>. For example:

# openstack --os-cloud=local user set user1 --password newpassword

3.2.3. Deleting Local Users

To delete a user created locally, run the command vzapi user delete <username>.

Note

If MFA is enabled, replace vzapi <cmd> with vzapi --os-cloud local-credential <cmd>. For more details, see Managing Multi-Factor Authentication.

For example:

# vzapi user delete user1