Sysadmin/Add shell account - Revision history

SAMdroid: remote-useradd should no longer be run as root

2015-06-24T07:32:05Z

remote-useradd should no longer be run as root

← Older revision		Revision as of 03:32, 24 June 2015
Line 34:		Line 34:

	ssh -A sunjammer		ssh -A sunjammer

	* Become root with <tt>sudo -i</tt>. This will preserve your <tt>$SSH_AUTH_SOCK</tt>

	* Run this shell script to create a user and copy the credentials from sunjammer:		* Run this shell script to create a user and copy the credentials from sunjammer:

2015-06-24T01:08:08Z

Adding accounts on other machines

← Older revision		Revision as of 21:08, 23 June 2015
Line 29:		Line 29:
	== Adding accounts on other machines ==		== Adding accounts on other machines ==

	Please '''do not create accounts directly with useradd~~/userdel~~'''. Instead, copy the existing credentials from sunjammer:		Please '''do not create accounts directly with useradd!''' Instead, copy the existing credentials from sunjammer:

	* Log into sunjammer, forwarding your ssh keys with the ssh-agent:		* Log into sunjammer, forwarding your ssh keys with the ssh-agent:
Line 44:		Line 44:

	Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <tt>libvirtd</tt> and <tt>docker</tt>.		Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <tt>libvirtd</tt> and <tt>docker</tt>.


	== See also ==		== See also ==

2015-06-24T01:07:05Z

← Older revision		Revision as of 21:07, 23 June 2015
Line 43:		Line 43:
	Needless to say, remote-useradd requires your ssh key to be already installed in the remote server.		Needless to say, remote-useradd requires your ssh key to be already installed in the remote server.

	Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <~~code~~>libvirtd</tt> and <~~code~~>docker</tt>.		Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <tt>libvirtd</tt> and <tt>docker</tt>.

2015-06-24T01:06:20Z

← Older revision		Revision as of 21:06, 23 June 2015
Line 29:		Line 29:
	== Adding accounts on other machines ==		== Adding accounts on other machines ==

	Please '''do not create accounts directly with useradd/userdel'''. Instead:		Please '''do not create accounts directly with useradd/userdel'''. Instead, copy the existing credentials from sunjammer:

	* Log into sunjammer, forwarding your ssh agent:		* Log into sunjammer, forwarding your ssh keys with the ssh-agent:

	ssh -A sunjammer		ssh -A sunjammer

	* Become root:		* Become root with <tt>sudo -i</tt>. This will preserve your <tt>$SSH_AUTH_SOCK</tt>

	sudo -i

	* Run this shell script to create a user and copy the credentials from sunjammer:		* Run this shell script to create a user and copy the credentials from sunjammer:

	remote-useradd <remotehost> <user> <groups...>		remote-useradd <remotehost> <user> <groups...>

			Needless to say, remote-useradd requires your ssh key to be already installed in the remote server.

	Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <code>libvirtd</tt> and <code>docker</tt>.		Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <code>libvirtd</tt> and <code>docker</tt>.


	== See also ==		== See also ==

2015-06-24T01:01:22Z

← Older revision		Revision as of 21:01, 23 June 2015
Line 31:		Line 31:
	Please '''do not create accounts directly with useradd/userdel'''. Instead:		Please '''do not create accounts directly with useradd/userdel'''. Instead:

	* Log into sunjammer forwarding your ssh agent (ssh -A)		* Log into sunjammer, forwarding your ssh agent:
	* Become root ~~with `~~sudo -i`
			ssh -A sunjammer

			* Become root:

			sudo -i

	* Run this shell script to create a user and copy the credentials from sunjammer:		* Run this shell script to create a user and copy the credentials from sunjammer:

	remote-useradd <remotehost> <user> <groups...>		remote-useradd <remotehost> <user> <groups...>

	Typically, you'll want to add users to groups `sudo`, `adm`, `libvirtd` and `docker`.		Typically, you'll want to add users to groups <tt>sudo</tt>, <tt>adm</tt>, <code>libvirtd</tt> and <code>docker</tt>.

	== See also ==		== See also ==

2015-06-24T00:59:36Z

@@ Line 1: / Line 1: @@
 '''Users looking for a Sugar Labs account should go to [[Service/Account]].'''
 == Guidelines ==
@@ Line 28: / Line 26: @@
 The email is also copied to ~user/welcome, in case they loose the
 original message.
 == See also ==

2012-10-29T20:44:41Z

Added note about accents

← Older revision		Revision as of 16:44, 29 October 2012
Line 19:		Line 19:
	system-useradd <username> <first_name> <last_name> <email>		system-useradd <username> <first_name> <last_name> <email>

	'''NOTE: You have to become root with 'sudo -i'. Prefixing the command with sudo won't work because it doesn't switch $HOME to /root, which is necessary to make the ldap commands source <code>/root/.ldaprc</code>.'''		* Note that accents in the first_name or last_name would break the script.
			* '''NOTE: You have to become root with 'sudo -i'. Prefixing the command with sudo won't work because it doesn't switch $HOME to /root, which is necessary to make the ldap commands source <code>/root/.ldaprc</code>.'''

	At some point the script will prompt you to paste the user's ssh key.		At some point the script will prompt you to paste the user's ssh key.

2012-06-15T23:09:40Z

← Older revision		Revision as of 19:09, 15 June 2012
Line 32:		Line 32:
	* [[Service/Account]] -- Account information for users		* [[Service/Account]] -- Account information for users
	* [[Service/shell]] -- ssh access to shell.sugarlabs.org		* [[Service/shell]] -- ssh access to shell.sugarlabs.org
			* [[Machine/sunjammer]] -- shell account server

2012-02-03T23:47:03Z

← Older revision		Revision as of 19:47, 3 February 2012
Line 31:		Line 31:
	* [[Sysadmin/User_management]] -- all other operations on user accounts		* [[Sysadmin/User_management]] -- all other operations on user accounts
	* [[Service/Account]] -- Account information for users		* [[Service/Account]] -- Account information for users
	* [[Service/shell]]		* [[Service/shell]] -- ssh access to shell.sugarlabs.org

2012-02-03T23:46:39Z

← Older revision		Revision as of 19:46, 3 February 2012
Line 1:		Line 1:
	Users ~~normally follow the~~ [[~~Sysadmin~~/~~Shell account request~~]].		'''Users looking for a Sugar Labs account should go to [[Service/Account]].'''

	The account requests arrive to a support queue on our RT system ([[Machine/rt]]).		The account requests arrive to a support queue on our RT system ([[Machine/rt]]).