SoAI OS host users and SSH keys

The appliance keeps a SoAI WebUI identity separate from a Linux login. Select the Settings button at the right of the header, then Settings and Users. The Users tab is available only to a current administrator with User administration (USER_ADMIN). The host actions in its SoAI OS Users section require SoAI OS administration (HOST_MANAGEMENT_ADMIN). Standard accounts do not have a Users-tab password, rename, or host user control.

Review and synchronize a mapped account

User mapping lists each WebUI user with the corresponding Linux account, its existence, lock state, UID, GID, groups, home directory, and shell. SoAI derives the Linux name from the WebUI user ID as soaiu<id>, so changing a WebUI user name does not rename the Linux account.

  1. Under Sync user, choose the account by WebUI user ID. Each option shows the user name and ID.
  2. Select Execute sync, then confirm the same action.
  3. Read the result and refreshed mapping. A successful sync creates the Linux account if necessary, uses a home directory below /home and the /bin/bash shell, then locks its password.

Synchronization never copies a WebUI password. It reconciles managed group membership from the user's WebUI administrator status and synchronizes managed SSH keys from the WebUI profile when available. SoAI also reconciles the account after WebUI user creation, deletion, password, role, and user-name changes. Deleting a WebUI account locks the mapped Linux account, removes its SoAI-managed SSH keys and privileged managed groups, and leaves the Linux account and home directory in place.

Manage SSH keys

  1. Under SSH keys, choose the account by WebUI user ID.
  2. Enter one or more public keys in Public keys (one per line). The Execute SSH key sync control appears only after the field contains a non-empty key.
  3. Select Execute SSH key sync and confirm it. This creates the mapped account if needed and keeps its password locked.

SoAI manages a marked block in ~/.ssh/authorized_keys and preserves lines outside that block. It sets the SSH directory to mode 700 and the file to mode 600. To remove SoAI-managed keys from the current WebUI, use Lock user and confirm Execute lock. That action locks the account password and removes its managed privileged groups.

Linux SSH login also requires SSH to be enabled. Select the Settings button at the right of the header, then Settings and SSH; that tab requires a current administrator with SoAI OS administration (HOST_MANAGEMENT_ADMIN).

Related documentation