Changes

Jump to: navigation, search

Authentication

944 bytes added, 01:48, 28 September 2013
Added maintenance instructions for officers
Then you can just <code>kinit user@VTLUUG.ORG</code> and you should be able to <code>ssh user@acidburn.vtluug.org</code> without a password. You can also login to any machine on our cluster or most of the machines on wood. Note that IPv6 is currently required for getting Kerberos tickets.
 
==Account maintenance instructions==
These instructions are for people in the "officers" group; normal members aren't able to mess with accounts.
===New account creation===
On acidburn:
* <code>sudo kinit your_user@VTLUUG.ORG</code>
* <code>ldapsearch | grep uidNumber | sort </code> (find the lowest unused uidNumber in the 1000-range and use that)
* <code>sudo /home/mutantmonkey/vtluug-scripts/ldap/adduser.py</code>
 
On blade:
<code>
* sudo kadmin.local
** addprinc username@VTLUUG.ORG
</code>
 
===Viewing user information===
This could be useful for debugging:
* <code>kinit</code>
* <code>ldapsearch uid=username</code>
* <code>kadmin.local</code> (only on blade)
** <code>getprinc username</code>
 
===Changing user shell===
On acidburn or blade:
* <code>kinit</code>
* <code>ldapmodify <<EOF </code> and input this:
dn: uid=username,ou=People,dc=vtluug,dc=org
changetype: modify
replace: loginShell
loginShell: /usr/bin/zsh
-
EOF
Anonymous user

Navigation menu