User and Group Management

User and group information is currently managed manually. In the future, this information will be imported from UW Groups, enabling Brain participants to manage their own group memberships. As for authentication, users are authenticated with their NetID Password via Kerberos, or SSH key (if configured).

Users

Adding a User Account

User creation uses the standard Linux useradd utility. It's preconfigured to create the home directory in the appropriate location.

useradd jtyocum

Removing a User Account

User deletion uses the standard Linux userdel utility. Before deleting the account, verify the user doesn't have any jobs or processes running on the cluster.

userdel jtyocum

Sync User Database to Nodes

Rocks nodes use a local user database for UID / GID lookups. This database must be synced after making changes to accounts.

rocks sync users

Groups

Create a Group

Rocks uses the standard Linux groupadd command to create groups.

groupadd awesome

If the group is being used to control access to a Grid Engine queue, create an associated ACL.

qconf -au @awesome awesome

Delete a Group

Rocks uses the standard Linux groupdel command to delete groups.

groupdel uncool

If the group was being used to control access to a Grid Engine queue, delete the associated ACL.

qconf -dul uncool

Adding a User to a Group

There are a couple ways to add a user to a group on Rocks. If you wish to add them to a single group, you can use gpasswd:

gpasswd -a jtyocum awesome

However, if you want to add them to several groups at once, use usermod:

usermod -a -G group1,group2,group3 jtyocum

Removing a User from a Group

Users can be removed from a group using the standard gpasswd utility:

gpasswd -d jtyocum awesome

Sync Group Memberships to Nodes

Rocks stores group memberships locally, and must be synced across the cluster nodes after changes are made.

rocks sync users