Research Administration Tasks

Adding Users

• As root on yamato, run
  /usr/local/sbin/diradm.superadduser '$username' '$email' '$Fullname'
• Note that a file named '$username' is created in your current directory with the template filled out for mailing (the same file is displayed onscreen).
• For now, we must:

export DEBUG=1
DEBUG=1 /usr/local/sbin/diradm.superadduser ...

• The password you are prompted for at the end is for hood
• Add the newly-created user to our Research Mailing List

Deleting Users

• As root on yamato run

# DEBUG=1 diradm userdel -r $username

• As root on hood run

# DEBUG=1 diradm userdel $username

Changing a Users Password

This method does not require the old password.

• As root on hood:
  ldappass $username

Adding Users to a Group

Adding or removing from a group. Uses the same syntax as gpasswd(8).

• As root on hood: diradm gpasswd (-a|-d) USERNAME GROUP For example:
  diradm gpasswd -a mdeepwel pond

Adding Groups

Adding groups takes the same syntax as groupadd(8).

• As root on hood:
  diradm groupadd

Adding Projects

• As root on hood:
  diradm amadd -O $mapbase $key $src
• '-O' means the default mount options for automount.
• As root on yamato: create the $src directory now, and give it the approriate permissions. chgrp -R it, and chmod 2771 it.
• Make the directory. mkdir -p $src
• Set ownership. chgrp -R $group $src
• Set permissions. chmod 2771 $src
• If web content is being served: mkdir -p $src/htdocs ; chmod 2775 $src/htdocs

Adding CVS Repositories

Replace ${foobar} with the name of the repository.

• On hood, run:
  • diradm amadd -O auto.cvs ${foobar} 209.87.56.240:/export/cvs/${foobar}
• On yamato, run (assuming there's a previously created group called ${foobar}:
  • cvs -d /export/cvs/${foobar} init
  • chmod -R 2770 /export/cvs/${foobar}
  • chgrp -R foobar /export/cvs/${foobar}
  • The chgrp command can instead be a chown command for a single user repository; group name and cvs repository name don't have to match, either.
• To access CVS repo, use CVS_RSH="ssh" with URL being :ext:${user}@cvs.iat.sfu.ca:/var/cvsroot/${foobar}
• Users must be in group cvs in addition to ${foobar} to access the repository!

Adding SVN Repositories

Replace ${foobar} with the name of the repository.

• On hood, run:
  • diradm amadd -O auto.svn ${foobar} 209.87.56.240:/export/svn/${foobar}
• On yamato, run (assuming there's a previously created group called ${foobar}:
  • mkdir /export/svn/${foobar}
• On nelson, run:
  • svnadmin create /var/svnroot/${foobar} --fs-type fsfs
• On yamato:
  • chmod -R 2770 /export/svn/${foobar}
  • chgrp -R foobar /export/svn/${foobar}

• Repo URL is svn+ssh://${user}@cvs.iat.sfu.ca/var/svnroot/${foobar}
• Users must be in the cvs group in addition to ${foobar} group to access the repository!

General User Management

• diradm offers almost all regular POSIX commands, sometimes with a few extra frills. The only commands NOT completely implemented are gpasswd and passwd.
• Gentoo update procedures (eg, how to update without ever messing up a machine).
  • TODO
• Welcoming new users; email template or typical wording you've used
  • This is in the diradm.superadduser script, as it fills out the template.

To: $FULLNAME <$EMAIL>
Subject: Research account created - $NEWUSER

Hello $FULLNAME,

Your research account has been created.
Username: $NEWUSER
Password: $NEWPASS

Please visit http://research.iat.sfu.ca/network/changepassword.php to change
your password when you receive this email.

For support with the research network, please email:
help@research.iat.sfu.ca

And include a good description of the entire problem and a suitable subject
line.

Please note that this username/password pair is only valid for the SFU Surrey
Research Network, and is NOT tied into the main SFU authentication systems.

• quotas
  • TODO