Changes between Version 9 and Version 10 of Installation/LoggingIn


Ignore:
Timestamp:
Mar 6, 2013 6:34:16 PM (11 years ago)
Author:
jhickey
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Installation/LoggingIn

    v9 v10  
    3737}}}
    3838
    39 == Managing additional users ==
     39== Enabling full administrative access ==
    4040
    41 === Giving users "Red Dot" ===
    42 
    43 Red Dot allows a user to enter administrative mode on the web interface.  Once this field is set, the user will have a green dot next to the "Contact Us" item near the top middle of every page.  Clicking this dot will toggle it to red causing administrative features on the web interface to be exposed.
     41By default, the first testbed user does not have access to boss.  The script '''tbadmin''' will give this user (or any other), full administrative access to the testbed.
    4442
    4543{{{
    46 echo 'update users set admin=1 where uid="<username>"' | mysql tbdb
     44[deterbuild@boss ~/testbed/account]$ sudo /usr/testbed/sbin/tbadmin jhickey
     45Giving jhickey Red Dot on the web interface
     46Setting local password and shell
     47chpass: user information updated
     48Adding /usr/testbed/sbin to shell rc files
     49Adding user jhickey to group wheel in the database
     50User jhickey is already in group wheel, skipping ...
     51Updating groups for jhickey on control nodes
     52Processing user jhickey: emulab-ops testbed
     53Adding extra groups to list: tbadmin wheel
     54Updating user jhickey record on local node.
     55Updating user jhickey record on users.mini-isi.deterlab.net.
     56Group Update Completed!
     57[deterbuild@boss ~/testbed/account]$
    4758}}}
    48 
    49 === Shell on Boss ===
    50 
    51 Testbed users are by default not allowed to log into boss.  They have no password set and their shell is set to a dummy shell. 
    52 
    53 This command will grab the password hash for the user out of the database and set a real shell. 
    54 
    55 {{{
    56 echo 'select usr_pswd from users where uid="<username>"' | mysql -N tbdb | pw user mod <username> -H 0 -s /usr/local/bin/bash
    57 }}}
    58 
    59 By default, users do not have /usr/testbed/sbin in their path.  Add this in depending on your shell.
    60 
    61 === Working with UNIX groups (mostly for sudo) ===
    62 
    63 By default, sudo comes configured to allow anyone in the group '''wheel''' to sudo.
    64 
    65 It is important that adding users to new UNIX groups be done through the testbed software, since /etc/group is regularly overwritten when new users are added to the testbed.  So to add a user to wheel, we need to run:
    66 
    67 {{{
    68 withadminprivs unixgroups -a <username> wheel
    69 }}}
    70 
    71 Make sure /usr/testbed/sbin is '''in your path.'''