Sysadmin/User management: Difference between revisions

No edit summary
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
== Sunjammer (aka shell.sugarlabs.org) ==
To carry on these procedures, you need root access on [[Machine/sunjammer]].
To carry on these procedures, you need root access on [[Machine/sunjammer]].


== Adding a new user on [[Machine/sunjammer]] (aka shell.sugarlabs.org) ==
'''NOTE: You have to become root with 'sudo -i' before using the following commands. Prefixing the command with sudo won't work because it doesn't switch $HOME to /root, which is necessary to make the ldap commands source <code>/root/.ldaprc</code>.'''
 
=== Account creation ===


See [[Sysadmin/Add shell account]].
See [[Sysadmin/Add shell account]].


== Editing users and groups ==
=== Editing users and groups ===


* Run "ldapvi"
* Run "ldapvi"
Line 11: Line 15:
* Type "y" to accept changes.
* Type "y" to accept changes.


== Passwords ==
=== Passwords ===


The users are supposed to update their password by going to
The users are supposed to update their password by going to
Line 24: Line 28:




== Removing shell accounts ==
=== Removing shell accounts ===


Use:
Use:
Line 30: Line 34:
  system-userdel <user>
  system-userdel <user>


== Groups ==
=== Manipulating groups ===


To add groups:
To add groups:
Line 39: Line 43:




== Password reset ==
=== Password reset ===


If the users have forgotten their password, you can hack the password
When users have forgotten their password, you can hack the password
information manually with ldapvi. Alternatively, go to the password
information manually with <code>ldapvi</code>. Alternatively, go to the
web form and type sunjammer's root password in place of the user's
[https://ldap.sugarlabs.org/passwd password web form] and type sunjammer's
old password.
root password where of the user's old password would normally go.
 
If the user knows how to use GPG, send them the new password encrypted.
''In any case, ask them to change their password immediately.'''


If the user knows how to use GPG, send them the new password
encrypted. In any case, ask them to change it immediately.


== Accounts on other hosts ==
== Accounts on other hosts ==
Line 73: Line 78:
== See also ==
== See also ==
* [[Sysadmin/Add_shell_account]] -- how to add shell accounts on sunjammer
* [[Sysadmin/Add_shell_account]] -- how to add shell accounts on sunjammer
* [[Service/Account]] -- Account request procedure (for users)
* [[Service/shell]] -- Shell account rules and details (for users)
[[Category:Sysadmin|Sysadmin procedures]]