-
Notifications
You must be signed in to change notification settings - Fork 3
DUNE Physicsgroup Disk how to add someone to a group
Once a new physics group has been created, these are the steps needed to add someone to the group. Namely add someone to the extra unix group, add them to the compute resource with that unix group, and give them the extra FQAN. Then once Ferry has done its thing, make a directory for them.
curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "groupname=dunebeam" --data-urlencode "grouptype=UnixGroup" https://ferry.fnal.gov:8445/addUserToGroup
curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "resourcename=dune" --data-urlencode "groupname=dunebeam" https://ferry.fnal.gov:8445/setUserAccessToComputeResource
curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "fqan=/dune/Role=Beam/Capability=NULL" --data-urlencode "unitname=dune" https://ferry.fnal.gov:8445/setUserExperimentFQAN
Only people who have privilege to log into dune-admin@dunegpvm01 can do this
ssh dune-admin@dunegpvm01 ifadmin-connect cd /pnfs/dune/persistent/physicsgroups/dunebeam mkdir pweather chown pweather:dunebeam pweather
Then all further files under pweather:dunebeam will also be owned by pweather:dunebeam