diff options
| author | Vito Graffagnino <vito@graffagnino.xyz> | 2020-09-08 18:10:49 +0100 |
|---|---|---|
| committer | Vito Graffagnino <vito@graffagnino.xyz> | 2020-09-08 18:10:49 +0100 |
| commit | 3b0142cedcde39e4c2097ecd916a870a3ced5ec6 (patch) | |
| tree | 2116c49a845dfc0945778f2aa3e2118d72be428b /vimwiki/User Creation .md | |
| parent | 8cc927e930d5b6aafe3e9862a61e81705479a1b4 (diff) | |
Added the relevent parts of the .config directory. Alss add ssh config
Diffstat (limited to 'vimwiki/User Creation .md')
| -rw-r--r-- | vimwiki/User Creation .md | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/vimwiki/User Creation .md b/vimwiki/User Creation .md new file mode 100644 index 0000000..9bc39ae --- /dev/null +++ b/vimwiki/User Creation .md @@ -0,0 +1,29 @@ +To create a user on the cluster do `sudo /root/ldifs/addldapuser.py` +This will end by prompting you for the LDAP password, which is the same as the normal root password. + +__When creating a user:__ + + Make sure you have a record of the user’s having accepted the terms of use – this is a GDPR requirement + + Check that you know the username that the user wants. By default this should be the LCS username, + but we allow others; obviously external users have to choose one. Please try to avoid mixed case, + non-alphanumeric characters, or names longer than about 10 characters. + + Check that you know what group the user should be in. + addldapuser.py gives a list of possible groups; we need to get this right to make sure people have + access to restricted resources. Currently useful primary groups for Herts users are: + + `1003` (CAR), + `1004` (CACP, formerly CAIR), 1005 (Computer Science), + `1006` (old Health and Human area, covering Life Sciences), + `1007` (PAM not otherwise covered), + `1008` (Engineering). + + Please never use the default group (`1000`). + + *EITHER* meet the user in person to set the password, + + *OR* set the initial user password to a random, secure string, not a word or the user’s name + (I normally use `XX99xxXX` where `X`, `x` and `9` are different upper case, lower case and numeric characters) + and send the password by a separate e-mail (we don’t want a record of It in the helpdesk system). + |
