Glasgow Add New Local User

From GridPP Wiki
Jump to: navigation, search

Once a local user (N.B. local in this sense can mean any user from a ScotGrid partner site) has been granted access on the cluster (important: they must have agreed to the AUP), they need to send their DN and be identified with a local group (for their torque queue).

1) log into svr031 and cd to/usr/local/ypf/private/users/

Then:

  1. Append their DN, Next available username (format glaNNN), [optional physics UID - not yet implemented],VO name[,optional secondary VOs] to master-mapfile
  2. make
    1. This will rebuild the passwd, group, shadow and grid-mapfile-local files - but it does not yet install them. Check for sanity and investigate all errors!:
    2. Run make diff to print the differences between current live and new files
  3. make install
    1. This will first take a backup of the current files in to /usr/local/ypf/private/users/backup, then it copies in the new files.
    2. In the most pathological of cases the rollout across the cluster will take an hour


If the ./genaccts.pl script throws a warning 

WARNING - cannot find GID for group GROUPNAME - Check group.base

then you'll have to add the new group into the group.base file. For most users this will be the group of their corresponding VO, however, there are a few purely local groups which can be used for globus job submission. These start "gl" plus an abbreviation corresponding to their research area, e.g. "glee" = "Glasgow Electrical Engineering".

It will take cfengine 60 minutes (worst case scenario) to roll these changes out across the cluster.

Note that this will give the user access via gsissh to the local account. If they submit a job using edg-job-submit and a vanilla proxy they will also map to this account and group in the batch system. If they use a VOMS proxy then they will get mapped to a different VO pool account. VOMS is preferred in the long run, but if a user needs write access to their file area then they should submit the job using a vanilla proxy.

N.B. If you are starting a new group then you will need to setup a torque queue and maui fairshare: Glasgow Cluster Adding Queues.

Durham users get durXXX accounts, but otherwise everything is as above. The naming is completely arbitrary, of course, but an institute code seems sensible.

Mailing List

Subscribe the user to the GUScotGrid Users mailing list.

Retrieved from "https://www.gridpp.ac.uk/w/index.php?title=Glasgow_Add_New_Local_User&oldid=1630"