Research Administration Tasks: Difference between revisions

From Research
Jump to navigation Jump to search
Line 25: Line 25:
== Adding Groups ==
== Adding Groups ==
Adding groups takes the same syntax as groupadd(8).
Adding groups takes the same syntax as groupadd(8).
* As root on hood: {{Commandline | diradm groupadd}}
* As root on hood: {{Commandline | diradm groupadd $groupname}}


== Adding Projects ==
== Adding Projects ==

Revision as of 23:46, 4 November 2005

Adding Users

  • As root on yamato, run
    /usr/local/sbin/diradm.superadduser '$username' '$email' '$Fullname'
  • Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen).
  • For now, we must:
export DEBUG=1
DEBUG=1 /usr/local/sbin/diradm.superadduser ...
  • The password you are prompted for at the end is for hood
  • Add the newly-created user to our Research Mailing List

Deleting Users

  • As root on yamato run
# DEBUG=1 diradm userdel -r $username
  • As root on hood run
# DEBUG=1 diradm userdel $username

Changing a Users Password

This method does not require the old password.

  • As root on hood:
    ldappass $username

Adding Users to a Group

Adding or removing from a group. Uses the same syntax as gpasswd(8).

  • As root on hood: diradm gpasswd (-a|-d) $username $group For example:
    diradm gpasswd -a mdeepwel pond

Adding Groups

Adding groups takes the same syntax as groupadd(8).

  • As root on hood:
    diradm groupadd $groupname

Adding Projects

  • As root on hood:
    diradm amadd -O $mapbase $key $src
diradm amadd -O home.projects meditation 209.87.56.240:/export/projects/0/m/meditation
  • '-O' means the default mount options for automount.
  • As root on yamato:
  • Make the $src directory. mkdir -p $src
  • Set ownership. chgrp -R $group $src
  • Set permissions. chmod 2771 $src
  • If web content is being served: mkdir -p $src/htdocs ; chmod 2775 $src/htdocs

Adding CVS Repositories

Replace ${foobar} with the name of the repository.

  • On hood, run:
    • diradm amadd -O auto.cvs ${foobar} 209.87.56.240:/export/cvs/${foobar}
  • On yamato, run (assuming there's a previously created group called ${foobar}:
    • cvs -d /export/cvs/${foobar} init
    • chmod -R 2770 /export/cvs/${foobar}
    • chgrp -R foobar /export/cvs/${foobar}
    • The chgrp command can instead be a chown command for a single user repository; group name and cvs repository name don't have to match, either.
  • To access CVS repo, use CVS_RSH="ssh" with URL being :ext:${user}@cvs.iat.sfu.ca:/var/cvsroot/${foobar}
  • Users must be in group cvs in addition to ${foobar} to access the repository!

Adding SVN Repositories

Replace ${foobar} with the name of the repository.

  • On hood, run:
    • diradm amadd -O auto.svn ${foobar} 209.87.56.240:/export/svn/${foobar}
  • On yamato, run (assuming there's a previously created group called ${foobar}:
    • mkdir /export/svn/${foobar}
  • On nelson, run:
    • svnadmin create /var/svnroot/${foobar} --fs-type fsfs
  • On yamato:
    • chmod -R 2770 /export/svn/${foobar}
    • chgrp -R foobar /export/svn/${foobar}

General User Management

  • diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
  • Gentoo update procedures (eg, how to update without ever messing up a machine).
    • TODO
  • Welcoming new users; email template or typical wording you've used
    • This is in the diradm.superadduser script, as it fills out the template.
To: $FULLNAME <$EMAIL>
Subject: Research account created - $NEWUSER

Hello $FULLNAME,

Your research account has been created.
Username: $NEWUSER
Password: $NEWPASS

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca

And include a good description of the entire problem and a suitable subject
line.

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.
  • quotas
    • TODO