Service Desk Knowledgebase: User Accounts and Groups: Difference between revisions

Revision as of 18:55, 16 February 2015

This is the User Accounts and Groups content page of the CL Wiki Service Desk Knowledgebase. Its purpose is to provide information to the Service Desk team on how to handle problems and requests about this CL service. If you are involved with the provision of this CL service please feel free to add to the knowledge about that it.

If CL staff need to tell the Service Desk team about problems with this service please email
sys-admin-aside@cl.cam.ac.uk.

Return to the Service Desk Knowledgebase SERVICE PORTFOLIO

Key Service Description & URLs

An Introduction to the Computing Facilities at the Computer Laboratory
Computer Laboratory News (Twitter use @UC_CL_SysAdm)

CL Customer Documentation

???

CL SysInfo Documentation

http://www.wiki.cl.cam.ac.uk/clwiki/SysInfo/HelpDesk/Users - User management tasks

People

Lookup CL Staff & Students

There's also:

Underpinning Services

??? - Any supporting or underpinning services

Customer-base for this Service

All students and staff of the Computer Laboratory

Costs

Free to all current students and staff of the Computer Laboratory

SLA

N/A

Service Desk Call Handling Procedure

RT tickets can be escalated to a Sys-Admin expert by having the Queue to Sys-Admin with the Owner set to Nobody the Status to New. Tell the requestor:
I am passing this request over to a Sys-Admin expert who, I'm sure, will be in contact shortly.

Accounts

CL Account creations are carried out via the SCG website, they normally are added automatically via the arrivals process.

Note that Reception can do UIS account requests.

Part 1: Outstanding accounts to create for people arriving

Sent into RT from <gt19@cl.cam.ac.uk>

If this is the first time you have carried out this procedure, then first set the printer to lime and click Save in the configuration settings.

Copy CRSid and go to https://dbwebserver.ad.cl.cam.ac.uk/scg/UserAdmin/UserAdministration.aspx and use Find User: CRSid [Lookup].
If no matching record click [Add New User], paste CRSid & click [Validate] to pull in details
Check name entered
Visitors: Account for new user who should be on office list by review date and click [Create Account]
Update RT ticket with comment "Account creation started."
The process then updates the AD, email forwarding, LDAP entries and ends with another email coming in to RT in about 30 minutes (see Part 2)

Part 2: Create home directories for new users

Sent into RT from <gt19@cl.cam.ac.uk>

[NOTE: See http://www.wiki.cl.cam.ac.uk/clwiki/SysInfo/HelpDesk/Users/Adduser and the actual contents of the individual email]

1. When a new RT ticket comes in from the above Create Account process it should be merged with the associated Outstanding accounts to create for people arriving RT ticket for the user.

2. Make sure Pageant.EXE is running and has your private key - by double clicking on CL.ppk or similar.

3. Use PuTTY and go to the CL's ssh-remote-0.cl.cam.ac.uk

4. Make the PuTTY window longer.

5. Type kinit & press [Enter]

6. Enter your CL Password for CRSid@AD.CL.CAM.AC.UK & press [Enter]

7. Type ssh -K toton & press [Enter] to go to the privileged machine toton

8. Give your CL [sudo] password for CRSid: & press [Enter]

9. At the toton:~$ prompt use the actual commands included in the Outstanding accounts to create for people arriving RT ticket email which look similar to:

 sudo ssh elmer wcc -s CRSid

10. Check that the string cifsuser is NOT shown in something like this:

 (NT - UNIX) account name(s):  (CL.CAM.AC.UK\vv274 - vv274)
       ***************
       UNIX uid = 3472
       user is a member of group vv274 (3472)
       user is a member of group vv274 (3472)
 
       NT membership
               CL.CAM.AC.UK\vv274
               CL.CAM.AC.UK\Domain Users
               BUILTIN\Users
       User is also a member of Everyone, Network Users,
       Authenticated Users
       ***************

(if cifsuser is shown then wait...)

11. Then use the two commands from the email that look like:

 cd /usr/groups/admin/users
 ./makehomedir CRSid UID $PARTITION

to make their home directory.

12. Then copy and paster the two commands:
cd /usr/groups/admin/netapp/conf-elmer
co -l quotas
and [Enter] and you should see

 RCS/quotas,v  -->  quotas
 revision 1.2182 (locked)
 done

which is fine.

13. Edit the quotas file to add a default entry, checking that the number for the partition user@/vol/vol1/homes-$PARTITION matches with the ./makehomedir CRSID UID $PARTITION used in step 9 above. To do that use vi quotas and [Enter] to edit the file and:

/string and [Enter] (to search for a initials of a CRSid slightly before the actual CRSid - which won't be there yet)
Ctrl+F to scroll Forward to user@/vol/vol1/homes-$PARTITION area for CRSid (as it's not there yet)
Down-arrow to start of line above where it should be.
Use Shift+A to enter --INSERT-- mode
Insert the line

 user@/vol/vol1/homes-$PARTITION    50G      1M

[Esc] out of --INSERT-- mode
:wq and [Enter] to write the file and quit vi

GENERAL NOTES on vi

/string and [Enter] (search for the string)
: for command prompt
:wq and [Enter] is write & quit
:q! and [Enter] is quit without writing (if you mess up!)
:help and [Enter] for help
Arrow-keys scroll around text
Ctrl+F to page-Forward through text
Ctrl+B to page-Back through text
Shift+A to go into -- INSERT -- mode at end of line
a to go into -- INSERT -- mode at the cursor
Shift+R to enter -- REPLACE -- or "Overtype" mode
[Esc] escape out of -- INSERT -- & -- REPLACE -- mode
u undo last change
dd deletion (if pressed twice the object is the current line)

14. rcsdiff quotas and [Enter] to check what changes have actually been made

15. ci -u quotas and [Enter] to check-in and add a comment of the RT ticket number e.g. RT #94171 then [Enter] and exit with .[Enter]

16. Then copy & paste the two commands:
cd /usr/groups/admin/netapp
make maintain

and press [Enter] - It takes couple of minutes and you will then see things like:

 elmer: quota resize vol9 done
 elmer: quota resize vol10 done

17. Then copy & paste the two commands:
cd /global/src/etc/amd.conf
make inst
and press [Enter] then give your CL [sudo] password for CRSid: & press [Enter] if requested. You will see:

 localhost: updating host localhost
 localhost: maps: updating
 localhost: updating of localhost finished
 -r--r--r--. 1 root root 206 Feb 17  2004 /anfs/master/dist/all/etc/amd.conf/maps

18. Use exit and [Enter] to close down PuTTY

19. In RT put in a comment Print out of password now required (process to be sorted by Graham by printing to "lime" in Reception)

Quota Increases

1. Approval: "Bigdisk" quotas can be increased on request up to 250Gb. Home quotas up to 100Gb. Anything else needs to be escalated as above for approval.

2. Make sure Pageant.EXE is running and has your private key - by double clicking on CL.ppk or similar.

3. Use PuTTY and go to the CL's ssh-remote-0.cl.cam.ac.uk

4. Make the PuTTY window longer.

5. Type kinit & press [Enter]

6. Enter your CL Password for CRSid@AD.CL.CAM.AC.UK & press [Enter]

7. Type ssh -K toton & press [Enter] to go to the privileged machine toton

8. Give your CL [sudo] password for CRSid: & press [Enter]

9. At the toton:~$ prompt copy and paste the two commands:
cd /usr/groups/admin/netapp/conf-elmer
co -l quotas
and [Enter] and you should see

 RCS/quotas,v  -->  quotas
 revision 1.2182 (locked)
 done

which is fine.

10. Edit the quotas file to update the existing entry using vi quotas and [Enter] and:

/CRSid and [Enter] (to search for a CRSid) with user@/vol/vol5/scr-1 area for Bigdisk quotas or user@/vol/vol1/homes-$PARTITION area for Home quotas (the number for $PARTITION will vary)
Arrow-key to be directly over the top of the quota numbers you want to change.
Use Shift+R to enter -- REPLACE -- or "Overtype" mode
Edit the quota figures on the end of the line like

 vrw10 user@/vol/vol5/scr-1 100G  1000K

or

 vrw10 user@/vol/vol1/homes-$PARTITION 50G  500K

[Esc] out of -- REPLACE -- mode
:wq and [Enter] to write the file and quit vi

GENERAL NOTES on vi

/string and [Enter] (search for the string)
: for command prompt
:wq and [Enter] is write & quit
:q! and [Enter] is quit without writing (if you mess up!)
:help and [Enter] for help
Arrow-keys scroll around text
Ctrl+F to page-Forward through text
Ctrl+B to page-Back through text
Shift+A to go into -- INSERT -- mode at end of line
a to go into -- INSERT -- mode at the cursor
Shift+R to enter -- REPLACE -- or "Overtype" mode
[Esc] escape out of -- INSERT -- & -- REPLACE -- mode
u undo last change
dd deletion (if pressed twice the object is the current line)

11. rcsdiff quotas and [Enter] to check what changes have actually been made

12. ci -u quotas and [Enter] to check-in and add a comment of the RT ticket number e.g. RT #94171 then [Enter] and exit with .[Enter]

13. Then copy & paste the two commands:
cd /usr/groups/admin/netapp
make maintain

and press [Enter] - It takes couple of minutes and you will then see things like:

 elmer: quota resize vol9 done
 elmer: quota resize vol10 done

Contacts

Primary

gt19@cl.cam.ac.uk (Goes to Graham Titmus)
Tel: 34620

Other

Chris Hadley

Availability

Monday:
Tuesday:
Wednesday:
Thursday:
Friday:
Saturday: Closed
Sunday: Closed

Additional CL Staff Resources

Hints, Tips & Know Issues

Notes on the Staff List

Vince Woodley (28/01/15)

Some Staff List Positions

blank = no longer have Computer Laboratory status
ACS = Advanced Computer Science (MPhil)
Intern = Working in lab as a summer student.
RA = Research Assistant
RARS = Research Assistant registered for a degree
SRA = Senior Research Associate

Categorising Keywords

User Accounts Groups creation recreation locked out quota conference snapshots

@@ Line 47: / Line 47: @@
 ===Accounts===
-CL Account requests go to https://dbwebserver.
+CL Account creations are carried out via [https://dbwebserver.ad.cl.cam.ac.uk/SCG the SCG website], they normally are added automatically via the arrivals process.
 Note that Reception can do '''UIS account requests'''.