Research Administration Tasks - Revision history

Gordp: /* Working with LDAP */

2017-12-13T19:29:06Z

Working with LDAP

@@ Line 385: / Line 385: @@
 == Flexlm License Server Administration ==
 == Working with LDAP ==
 === Modifying an LDAP entry ===
@@ Line 399: / Line 420: @@
 Then run this command:
 * As root on '''hood''':
- # ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
+  <font color=red>hostname</font> <font color=blue>/ #</font> '''ldapmodify -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W'''
 * You will be prompted for our LDAP password
 === Deleting an LDAP entry ===
@@ Line 418: / Line 434: @@
 Then run this command:
 * As root on '''hood''':
- # ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W
+  <font color=red>hostname</font> <font color=blue>/ #</font> '''ldapdelete -x -f $file.ldif -D cn=Manager,dc=iat,dc=sfu,dc=ca -W'''
 * You will be prompted for our LDAP password

Lars: /* General User Management */

2016-02-15T19:49:19Z

General User Management

← Older revision		Revision as of 19:49, 15 February 2016
Line 240:		Line 240:
	Username: $NEWUSER		Username: $NEWUSER
	Password: $NEWPASS		Password: $NEWPASS

			Please note that this username and password pair is only valid for the SFU Surrey
			Research Network, and is NOT tied into the main SFU authentication systems.

	Please visit https://research.iat.sfu.ca/network/changepassword.php to change		Please visit https://research.iat.sfu.ca/network/changepassword.php to change
Line 252:		Line 255:
	https://research.iat.sfu.ca/wiki/		https://research.iat.sfu.ca/wiki/

	~~Please note~~ that ~~this username and password pair~~ is ~~only valid for the SFU Surrey~~		Our wiki also has information about how to connect to SIAT printers:
	~~Research Network, and is NOT tied into the main SFU authentication systems~~.		https://research.iat.sfu.ca/wiki/index.php?title=Printers

			and the software that is available to researchers:
			https://research.iat.sfu.ca/wiki/index.php?title=Research_Workstations_-_default_software_loads


	Here are some cool ideas about the benefits of this SIAT Research account:		Here are some cool ideas about the benefits of this SIAT Research account:

Gordp: /* General User Management */

2016-02-15T18:46:53Z

General User Management

← Older revision		Revision as of 18:46, 15 February 2016
Line 278:		Line 278:


	If YOU have any ideas for services or features which ~~you~~ may be useful,		If YOU have any ideas for services or features which may be useful,
	please don't hesitate to let us know what you're thinking! We can all		please don't hesitate to let us know what you're thinking! We can all
	benefit from your ideas!		benefit from your ideas!

Gordp: /* General User Management */

2016-02-15T18:44:36Z

General User Management

← Older revision		Revision as of 18:44, 15 February 2016
Line 231:		Line 231:
	** This is in the diradm.superadduser script, as it fills out the template.		** This is in the diradm.superadduser script, as it fills out the template.
	<pre>		<pre>
	To: $~~fullname~~ <$~~email~~>		From: help@siat.sfu.ca
	Subject: Research account created - $~~newuser~~		To: $FULLNAME <$EMAIL>
			Subject: Research account created - $NEWUSER

	Hello $~~fullname~~		Hello $FULLNAME,

	Your ~~research~~ account has been created.		Your SIAT Research account has been created:
	Username: $~~newuser~~		Username: $NEWUSER
	Password: $~~newpass~~		Password: $NEWPASS

	Please visit ~~http~~://research.iat.sfu.ca/network/changepassword.php to change		Please visit https://research.iat.sfu.ca/network/changepassword.php to change
	your password when you receive this email.		your password when you receive this email.

	For support with the research network, please email:		For support with the research network, please email:
	help@~~research.iat~~.sfu.ca		help@siat.sfu.ca
	Please include a good description of the entire problem and a suitable subject		Please include a good description of the entire problem and a suitable subject
	line.		line.

	~~For more~~ information about SIAT Research~~, visit~~ our Research Wiki ~~found at~~:		More information about SIAT Research can be found on our Research Wiki:
	~~http~~://research.iat.sfu.ca/wiki/		https://research.iat.sfu.ca/wiki/

	Please note that this username/password pair is only valid for the SFU Surrey		Please note that this username and password pair is only valid for the SFU Surrey
	Research Network, and is NOT tied into the main SFU authentication systems.		Research Network, and is NOT tied into the main SFU authentication systems.

			Here are some cool ideas about the benefits of this SIAT Research account:

			- you can log onto a SIAT Research workstation with your new account,
			and automatially have your U:\ drive connected, on any workstation
			you log onto! This U:\ home-directory is held on a SIAT Research
			fileserver, and gets backed-up nightly.

			- you can access your data, on our SIAT Research file-servers, from
			just about anywhere:
			https://research.iat.sfu.ca/wiki/index.php?title=Accessing_Your_Data

			- we have a cloud service, which can let you access your data across
			many different devices and locations; here is Owncloud:
			https://research.iat.sfu.ca/wiki/index.php?title=Cloud-based_File_Storage
			https://owncloud.iat.sfu.ca

			- there are SVN and CVS servers available, for check-in/check-out and
			version control

			- we can create shared "project" folders, which allows for collaboration
			and sharing among several people


			If YOU have any ideas for services or features which you may be useful,
			please don't hesitate to let us know what you're thinking! We can all
			benefit from your ideas!

			Welcome! Have fun!
	</pre>		</pre>

Lars: /* Adding and Removing Computers to/from the Domain */

2015-10-07T19:28:26Z

Adding and Removing Computers to/from the Domain

← Older revision		Revision as of 19:28, 7 October 2015
Line 222:		Line 222:
	* To remove an LDAP entry, use '''smbhostdel''':		* To remove an LDAP entry, use '''smbhostdel''':
	<font color=red>hood</font> <font color=blue>~ #</font> '''diradm smbhostdel sr-#####'''		<font color=red>hood</font> <font color=blue>~ #</font> '''diradm smbhostdel sr-#####'''
			* If you don't add the computer's name to ldap and its MAC to Men and Mice, the machine will not be able to connect to the Research domain. This problem can also be verified by going into the command line and typing '''ipconfig /all'''. If the domain name doesn't show as '''iat.sfu.ca''', then it is very likely that one or both of those two steps were skipped.
	* We add machine to the Domain to facilitate Windows' operations; Unix/Linux/Mac don't care about machine entries. You may want to verify machine-names (either present, or absent) - to check what Samba thinks about all accounts (user-accounts and machine-accounts):		* We add machine to the Domain to facilitate Windows' operations; Unix/Linux/Mac don't care about machine entries. You may want to verify machine-names (either present, or absent) - to check what Samba thinks about all accounts (user-accounts and machine-accounts):
	<font color=red>hood</font> <font color=blue>~ #</font> '''pdbedit -L''' ''(note: machine-accounts end in '''$''')''		<font color=red>hood</font> <font color=blue>~ #</font> '''pdbedit -L''' ''(note: machine-accounts end in '''$''')''

Gordp: /* Deleting Users */

2015-08-20T17:19:52Z

Deleting Users

← Older revision		Revision as of 17:19, 20 August 2015
Line 36:		Line 36:
	* As root on '''hood''':		* As root on '''hood''':
	# DEBUG=1 diradm userdel $username		# DEBUG=1 diradm userdel $username
	* Keeping the user on our [~~http~~://~~bismarck~~.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.		* Keeping the user on our [https://ponyexpress.iat.sfu.ca/mailman/admin/research/ Research Mailing List] is probably a good idea.
	* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!		* If you delete a user, you MUST disallow diradm from ever using that UIDNumber again. To do so, go to each machine with diradm and edit the diradm.conf file so that UIDNUMBERMIN to equal the same number as the highest UIDNumber currently being used. (At least one higher than the user you deleted) This is important!
	* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.		* Comment out the user from /etc/amanda/spitfire/disklist, only if they will never need the data.

Gordp: /* Adding Users */

2015-08-20T17:19:05Z

Adding Users

← Older revision		Revision as of 17:19, 20 August 2015
Line 25:		Line 25:
	* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.		* Further note that $username is the new user's username (which will not be tied in with their regular SFU username), $email is their preferred email address and $fullname is their first and last name.
	* An email will be sent to their email address		* An email will be sent to their email address
	* Add the newly-created user to our [~~http~~://~~bismarck~~.iat.sfu.ca/mailman/admin/research/ Research Mailing List].		* Add the newly-created user to our [https://ponyexpress.iat.sfu.ca/mailman/admin/research/ Research Mailing List].
	* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''		* '''Add the new user to '/etc/amanda/spitfire/disklist'. This is to enable backups of the user's home directory '''

Gordp: /* Adding Users to a Group */

2013-11-04T18:34:45Z

Adding Users to a Group

← Older revision		Revision as of 18:34, 4 November 2013
Line 50:		Line 50:
	# diradm gpasswd (-a\|-d) $username $group		# diradm gpasswd (-a\|-d) $username $group
	# diradm gpasswd -a mdeepwel pond		# diradm gpasswd -a mdeepwel pond

			In addition, many users are added to a group in order to maintain and evolve related web-content. In this case, we add a symlink in the user-home-directory, which points to the project/htdocs folder. On any LDAP-enabled machine where logins are permitted (ie not hood), first make the symlink, then change the ownership (from root):
			# cd /home/users/$user
			# ln -s /home/projects/$project
			# chown -h $user:$project /home/users/$user/$project

	== Adding Groups ==		== Adding Groups ==

Lars at 13:25, 7 December 2012

2012-12-07T13:25:57Z

← Older revision		Revision as of 13:25, 7 December 2012
Line 1:		Line 1:
			== Finding Users ==
			<br>
			If you want to know if a user exists in the Research database, run the following command on any of the Linux servers (eg: sr-hood):<br>
			* getent passwd \|grep '''search-string'''
			<br>
			Where '''search-string''' is part of, or the entire, user name that you're searching for.<br>
			''Note: Not all entries have the user's full name (ie: first and last), so you may have to search for just part of the user's name.''


	== Adding Users ==		== Adding Users ==
	<br>		<br>

Gordp: /* Adding and Removing Computers to/from the Domain */

2012-05-24T18:45:47Z

Adding and Removing Computers to/from the Domain

← Older revision		Revision as of 18:45, 24 May 2012
Line 208:		Line 208:
	* To remove an LDAP entry, use '''smbhostdel''':		* To remove an LDAP entry, use '''smbhostdel''':
	<font color=red>hood</font> <font color=blue>~ #</font> '''diradm smbhostdel sr-#####'''		<font color=red>hood</font> <font color=blue>~ #</font> '''diradm smbhostdel sr-#####'''
	* To check what Samba thinks about all accounts (user-accounts and machine-accounts):		* We add machine to the Domain to facilitate Windows' operations; Unix/Linux/Mac don't care about machine entries. You may want to verify machine-names (either present, or absent) - to check what Samba thinks about all accounts (user-accounts and machine-accounts):
	<font color=red>hood</font> <font color=blue>~ #</font> '''pdbedit -L'''		<font color=red>hood</font> <font color=blue>~ #</font> '''pdbedit -L''' ''(note: machine-accounts end in '''$''')''

	== General User Management ==		== General User Management ==