== Logging in ==

The testbed setup process creates a default user called '''elabman''' with the same password as root on boss at the time of install (the password hash is copied and stored in the database).

== Creating the First Project ==

When you login as '''elabman''' you will automatically be presented with a "Create First Project" form.  At the top of the page after "Contact US" you should see a green dot.  Click this dot to enter into administrative mode.  It should now be red and an administration menu item will appear.

You can now fill out the form to create the first project and user.  The project will be automatically approved and created upon submission.  You may now logout and login as the user you created for the first project.

== Setup Mailing Lists on users ==

A lot of errors are only set out as email.  It is important to properly setup the email lists on users:

{{{
root@users:/etc/mail/lists # ls -lart
total 28
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-www
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-testsuite
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-stated
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-ops
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-logs
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-audit
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-approval
drwxr-xr-x  3 root  wheel     512 Jan 11 18:38 ..
-rw-r-----  1 root  mailnull   90 Jan 11 21:27 emulab-widearea-users
-rw-r-----  1 root  mailnull  233 Jan 14 15:09 emulab-allusers
-rw-r-----  1 root  mailnull  149 Jan 14 15:09 emulab-project-leaders
-rw-r-----  1 root  mailnull  155 Jan 14 15:09 emulab-ops-users
-rw-r-----  1 root  mailnull   81 Jan 14 15:09 testbed-users
drwxr-x---  2 root  mailnull  512 Jan 14 15:09 .
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-www
root@users:/etc/mail/lists # echo 'user'@deterlab.net' >> testbed-ops
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-logs
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-audit
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-approval
}}}

== Managing additional users ==

=== Giving users "Red Dot" ===

Red Dot allows a user to enter administrative mode on the web interface.  Once this field is set, the user will have a green dot next to the "Contact Us" item near the top middle of every page.  Clicking this dot will toggle it to red causing administrative features on the web interface to be exposed.

{{{
echo 'update users set admin=1 where uid="<username>"' | mysql tbdb
}}}

=== Shell on Boss ===

Testbed users are by default not allowed to log into boss.  They have no password set and their shell is set to a dummy shell.  

This command will grab the password hash for the user out of the database and set a real shell.  

{{{
echo 'select usr_pswd from users where uid="<username>"' | mysql -N tbdb | pw user mod <username> -H 0 -s /usr/local/bin/bash
}}}

By default, users do not have /usr/testbed/sbin in their path.  Add this in depending on your shell.

=== Working with UNIX groups (mostly for sudo) ===

By default, sudo comes configured to allow anyone in the group '''wheel''' to sudo.

It is important that adding users to new UNIX groups be done through the testbed software, since /etc/group is regularly overwritten when new users are added to the testbed.  So to add a user to wheel, we need to run:

{{{
withadminprivs unixgroups -a <username> wheel
}}}

Make sure /usr/testbed/sbin is '''in your path.'''