[Galene] Announce: galenectl

[Galene] Announce: galenectl

[Juliusz Chroboczek]

Hi,

I've just merged a management utility for Galene into master.  It's
designed to be easily scriptable but also useful for the command line.


0. Upgrade your Galene instance to current master

(Really do.  In principle, the management interface has been stable for
months, but while developing galenectl I've found and fixed a number of
bugs.)

1. Build galenectl and put it somewhere in your path

    cd galenectl
    go build
    mv galenectl ~/bin/

2. If you haven't done so already, create a server administrator

Type

    galenectl hash-password -type bcrypt

then copy the resulting password into your `data/config.json` file, which
should look like this:

    {
        "writableGroups": true,
        "users": {"jch": {"password": {"type":"bcrypt","key":"..."}, "permissions": "admin"}},
        "publicServer": true
    }

3. Set up your `~/.config/galene/galenectl.json`.  It should look like this:

    {
        "server": "https://galene.example.org:8443/",
        "admin-username": "jch",
        "admin-password": "topsecret"
    }

4. Create a group

    galenectl create-group -group example

5. Create a few users

    galenectl create-user -group example -user jch -permissions op
    galenectl create-user -group example -user bob
    galenectl create-user -group example -wildcard -permissions observe

The first user is a group operator.  The second has default permissions.
The third one is the wildcard user, used for any username other than "jch"
and "bob".

6. Set the user's initial passwords

    galenectl set-password -group example -user jch
    galenectl set-password -group example -user bob
    galenectl set-password -group example -wildcard -type wildcard

We've set ordinary password for users jch and bob (hashed on the client
side, so the server never sees the cleartext password).  As to the
wildcard user, we've set it to have a wildcard password -- any password
will do.

Please test, and let me know if any changes are required.  As to myself,
I'll now implement token management in galenectl, and then setting
individual group parameters.

-- Juliusz