TJ CSL
Search…
Account Provisioning
Even though we have integrated authentication for accounts, user provisioning still needs to occur in every system independently.

Unix accounts

We have a script called create_user.sh that provisions all necessary accounts. It takes the username. first name. and last name as the arguments.
It:
  • Generates an LDIF
  • Export the LDIF
  • Adds the LDIF to openldap1
  • Creates an AFS home directory
  • and resets the Kerberos principal password to the default

Manual Provisioning

Use of the manual steps is not recommended.

Creating AFS User

First, you need to create an AFS user account. Make sure you are authenticated with your /admin principal.
1
pts createuser <username>
Copied!
The command should give an output similar to:
1
User <username> has id 12345678
Copied!
If the user already has an AFS user account, run the following command in order to obtain an ID.
1
pts examine <username>
Copied!

Creating LDAP User

Next, you need to add the account to LDAP. First, generate an LDIF file using the guide at NSS LDAP Templates. Run the command below after you have created an LDIF file.
1
ldapadd -h openldap1 -Y GSSAPI -f <ldif file>
Copied!
Below is an example LDIF file. Make sure you replace first name, last name, uidNumber, and graduation year!
1
dn: uid=2017ewang,ou=2017,ou=students,ou=people,dc=csl,dc=tjhsst,dc=edu
2
cn: Eric Wang
3
description: 2017
4
displayName: Wang, Eric
5
givenName: Eric
6
uid: 2017ewang
7
sn: Wang
8
objectClass: inetOrgPerson
9
objectClass: top
10
objectClass: organizationalPerson
11
objectClass: person
12
objectClass: posixAccount
13
uidNumber: 00000000
14
gecos: Eric Wang
15
gidNumber: 2017
16
homeDirectory: /afs/csl.tjhsst.edu/students/2017/2017ewang
17
loginShell: /bin/bash
Copied!

Adding AFS Volume

1
cd /afs/csl.tjhsst.edu/.students/.20XX/
2
vos create -server openafs3 -partition vicepa -name 20XX.<username> -maxquota 1048576
3
vos backup 20XX.<username>
4
fs mkmount <username> 20XX.<username>
5
fs mkmount <username>/yesterday 20XX.<username>.<backup>
6
fs sa <username> <username> rlidwka
7
vos release students.20XX
Copied!
Last modified 2yr ago