Version 8 (modified by jhickey, 12 years ago) (diff)

--

Logging in

The testbed setup process creates a default user called elabman with the same password as deterbiuld on boss (unless you have set a root password on boss which will take precedence for historical reasons) at the time of install (the password hash is copied and stored in the database).

Creating the First Project

When you login as elabman you will automatically be presented with a "Create First Project" form. At the top of the page after "Contact US" you should see a green dot. Click this dot to enter into administrative mode. It should now be red and an administration menu item will appear.

You can now fill out the form to create the first project and user. The project will be automatically approved and created upon submission. You may now logout and login as the user you created for the first project.

Setup Mailing Lists on users

A lot of errors are only set out as email. It is important to properly setup the email lists on users:

root@users:/etc/mail/lists # ls -lart
total 28
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-www
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-testsuite
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-stated
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-ops
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-logs
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-audit
-rw-r--r--  1 root  mailnull    0 Jan 11 18:38 testbed-approval
drwxr-xr-x  3 root  wheel     512 Jan 11 18:38 ..
-rw-r-----  1 root  mailnull   90 Jan 11 21:27 emulab-widearea-users
-rw-r-----  1 root  mailnull  233 Jan 14 15:09 emulab-allusers
-rw-r-----  1 root  mailnull  149 Jan 14 15:09 emulab-project-leaders
-rw-r-----  1 root  mailnull  155 Jan 14 15:09 emulab-ops-users
-rw-r-----  1 root  mailnull   81 Jan 14 15:09 testbed-users
drwxr-x---  2 root  mailnull  512 Jan 14 15:09 .
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-www
root@users:/etc/mail/lists # echo 'user'@deterlab.net' >> testbed-ops
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-logs
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-audit
root@users:/etc/mail/lists # echo 'user@deterlab.net' >> testbed-approval

Managing additional users

Giving users "Red Dot"

Red Dot allows a user to enter administrative mode on the web interface. Once this field is set, the user will have a green dot next to the "Contact Us" item near the top middle of every page. Clicking this dot will toggle it to red causing administrative features on the web interface to be exposed.

echo 'update users set admin=1 where uid="<username>"' | mysql tbdb

Shell on Boss

Testbed users are by default not allowed to log into boss. They have no password set and their shell is set to a dummy shell.

This command will grab the password hash for the user out of the database and set a real shell.

echo 'select usr_pswd from users where uid="<username>"' | mysql -N tbdb | pw user mod <username> -H 0 -s /usr/local/bin/bash

By default, users do not have /usr/testbed/sbin in their path. Add this in depending on your shell.

Working with UNIX groups (mostly for sudo)

By default, sudo comes configured to allow anyone in the group wheel to sudo.

It is important that adding users to new UNIX groups be done through the testbed software, since /etc/group is regularly overwritten when new users are added to the testbed. So to add a user to wheel, we need to run:

withadminprivs unixgroups -a <username> wheel

Make sure /usr/testbed/sbin is in your path.