Create new user: Difference between revisions

From DISI
Jump to navigation Jump to search
No edit summary
(updates instructions)
Line 26: Line 26:


==== Create User's Home Directory ====
==== Create User's Home Directory ====
Log in as root on mem
Log in as root on **mem**
  $ sh /nfs/home/[create-visitor.sh/create-member.sh] <user_name>
  $ sh /export/home/[create-visitor.sh/create-member.sh] <user_name>


=== Generate ssh for login ===
=== Generate ssh for login ===
Line 35: Line 35:


==== Add user's public key to Portal ====
==== Add user's public key to Portal ====
  $ ssh s_khtang@portal.ucsf.bkslab.org
  $ ssh portal3 (from a different cluster bit like epyc)
  $ sudo -i
  $ sudo -i
  $ cd /opt/keys/user
  $ cd /opt/keys/users
  $ vim <username>
  $ vim <username>
  Copy the .rsa_key.pub content into the file
  Copy the .rsa_key.pub content into the file
Line 43: Line 43:
==== Add user into Portal ====
==== Add user into Portal ====
On LDAP Admin
On LDAP Admin
  Choose ''' dc=bkslab,dc=org (17)''' > '''Group''' > '''Portal'''
  Choose ''' dc=bkslab,dc=org (17)''' > '''Groups''' > '''Portal'''
  Enter <username> in Add Value
  Enter <username> in Add Value



Revision as of 21:03, 23 June 2026

Identify a UID

Check if a uid that is not taken by any other users. Start from 150**

On CentOS 6
$ getent passwd | grep 150**
On CentOS 7
$ id 150**

Create users and superuser on the LDAP GUI:

Make sure you turn on Switchy Omega

https://ds.ucsf.bkslab.org/ldapadmin/cmd.php

If you are seeing this error message

You cannot visit ds.ucsf.bkslab.org right now because the website uses HSTS. Network errors and attacks are usually temporary, so this page will probably work later.

You will need to delete 'bkslab.org' domain from your 'Domain security policies' in Chrome

chrome://net-internals/#hsts

To create a visitor:

Click OU=Visitors
Click Create new entry here
Select Generic: User Account
Fill in appropriate sections
-home dir should be /nfs/home/<username>
-password should be encrypted with sha512
-group should be visitors
Keep the uid LDAP suggested and edit in the one you picked later.

Create User's Home Directory

Log in as root on **mem**

$ sh /export/home/[create-visitor.sh/create-member.sh] <user_name>

Generate ssh for login

Create ssh key

In the user's home directory's personal computer:

$ ssh keygen

Add user's public key to Portal

$ ssh portal3 (from a different cluster bit like epyc)
$ sudo -i
$ cd /opt/keys/users
$ vim <username>
Copy the .rsa_key.pub content into the file

Add user into Portal

On LDAP Admin

Choose  dc=bkslab,dc=org (17) > Groups > Portal
Enter <username> in Add Value

Add user into SLURM

sudo sacctmgr create user name=<username> account=bks

Add s_ user in alpha

Since Alpha was created before ldap admin system, new user must be created individually on this machine.

Add the s_ user in

vim /etc/passwd 
vim /etc/group 

Change password

passwd s_<user>