Adding Users

To add a user to the T2B cluster

The script is in the SVN repo for scripts, under local/add-users (see ManageAllAdminScriptsWithSVN for info on how to connect).

The script uses your local eclipse workspace to do all the work. It does exactly what you would do in eclipse, plus a few more steps: - update the local trunk - makes the appropriate changes to the files - compiles with ant - commits the changes - sends runcheck command to qclig - adds the users to tesla, then enables quotas (cms: 500G, solid: 10G, non-cms: 50G) - adds info to freeipa

You might need to change the variable eclipse_workspace if it is not ="workspace/centralised-begrid-v9" [it needs to point to the directory where the build.xml file is ] . You also need svn to work on command line [and add the line ssl-client-cert-file = ~/mycert.p12 in .subversion/servers]

How to use it:

Adds a user to the quattor config files.

  -i  : interactive mode. Will ask all the required questions.
  -cms/-non-cms/-solid : at least one is mandatory. Will add the user in the corresponding files/groups
  -fname "FIRSTNAME" : first name of the new user.
  -lname "LASTNAME"  : last name of the new user.
  -email "EMAIL"  : email of the new user.
  -login "LOGIN" : CERN login. 
  -key "ssh-rsa KEY" : the content of id_rsa.pub
  [-DN "DN"] : optionnal. The complete DN of the person.
  -h/-help : Will print this guide.'

example:

add-user-t2b -cms -fname "John" -lname "Smith" -email "John.Smith@iihe.t2b" -login "jsmith" -key "ssh-rsa 42424242424242424242424242 jsmith@mylaptop"

DEPRECATED:

To add a user to mX machines

• point them to http://mon.iihe.ac.be/trac/t2b/wiki/Certificates_and_VOs#CMS

• log in to cream02.

./make_local_cms_users.py --voms=/cms/becms --out=dcache > new_user.txt; ./make_local_cms_users.py --voms=/cms/becms --out=quattor >> new_user.txt

• The user should now appear in the list

• use the output to change the appropriate files in eclipse

   trunc/cfg/sites/iihe-production/config/cms

• Somehow get his public key and paste it into the files.
  
  

• log into ccq3 / cd /opt/CB5/svncheck/ / ./runcheck

• Warning: there is a bug somewhere not creating the directory in /localgrid.
  • Log into jefke.wn
  • Execute the following commands

mkdir /storage/localgrid/USER
chown USER /storage/localgrid/USER
chgrp localusers /storage/localgrid/USER

done.