Differences

This shows you the differences between two versions of the page.

--- wikiadmin [2022/02/16 00:53] – Add su to root step before creating account KubilayKocak
+++ wikiadmin [2022/03/30 22:55] (current) – Tweak up Adding a User Section, Add Removing Users section KubilayKocak
@@ Line 19: / Line 19: @@
   * su to root with your Kerberos password. If you don't have one, ask ClusterAdmin
-===== Securely Add A User =====
+===== Adding Users =====
-While every developer can add new developers directly to (e.g.) DevelopersGroup, MarkLinimon was told to do things differently due to security concerns.
+  * Login to wiki host and ''%%su -l%%'' to root.
+  * Create user account: ''%%su -m www -c "/usr/local/bin/moin --config-dir=/home/www/wiki account create --name <UserName> --email <email>" %%''
+  * Set the **account_verification** variable to empty in **/home/www/wiki/data/user/%%<%%filename_id_returned_from_the_above_command>**
+  * Ask user to reset password using the <%%UserName%%> above.
+  * Add <%%UserName%%> to ContributorsGroup, or DevelopersGroup (for @%%FreeBSD%%.org accounts)
+    * If <%%UserName%%> is not a %%WikiName%% (i.e. it is all lowercase), edit the xyzGroup entry to make it a link to a prospective homepage.
-  * Login to wiki host and ''%%su -l%%'' to root
+This way, you make sure that whoever is claiming the account actually has that email.  Otherwise, if you merely add a entry in the ACL list, any random person can immediately log in as that account and start making changes.
-  * Create the account: ''%%su -m www -c "/usr/local/bin/moin --config-dir=/home/www/wiki account create --name <UserName> --email <email>" %%''
-  * Set the **account_verification** variable to empty in **/home/www/wiki/data/user/%%<%%filename_id_returned_from_the_above>**
-  * Ask the user to reset the password for the <%%UserName%%> created above.
-  * Add the <%%UserName%%> to ContributorsGroup, or DevelopersGroup for @%%FreeBSD%%.org accounts
-    * If the <%%UserName%%> is not a %%WikiName%% (i.e. it is all lowercase), edit the xyzGroup entry to make it a link to a prospective homepage.
-This way, you make sure that whoever is claiming the account actually has that email.  Otherwise, if you merely add a entry in the ACL list, any random person can immediatelly log in as that account and start making changes.
+===== Removing Users =====
-:!: MarkLinimon could use help generalizing his shell script to perform the first two tasks.
+We do not delete user accounts, as history and referential integrity are affected. We disable/deactivate instead.
+  * Login to wiki host and ''%%su -l%%'' to root.
+  * Move the user account data file (%%<%%filename_id>) from ''%%data/users%%'' to ''%%data/users/obsolete%%''
 ===== Configuration Changes =====