Skip to content

DUNE Physicsgroup Disk how to add someone to a group

Steven Timm edited this page Oct 17, 2022 · 2 revisions

Once a new physics group has been created, these are the steps needed to add someone to the group. Namely add someone to the extra unix group, add them to the compute resource with that unix group, and give them the extra FQAN. Then once Ferry has done its thing, make a directory for them.

Adding the user to the group

curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "groupname=dunebeam" --data-urlencode "grouptype=UnixGroup" https://ferry.fnal.gov:8445/addUserToGroup

Setting the user access to the compute resource with that group

curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "resourcename=dune" --data-urlencode "groupname=dunebeam" https://ferry.fnal.gov:8445/setUserAccessToComputeResource

Adding that FQAN to the user

curl -sk --cert /tmp/x509up_u2904 --key /tmp/x509up_u2904 --capath /etc/grid-security/certificates --get --data-urlencode "username=pweather" --data-urlencode "fqan=/dune/Role=Beam/Capability=NULL" --data-urlencode "unitname=dune" https://ferry.fnal.gov:8445/setUserExperimentFQAN

making the directory

Only people who have privilege to log into dune-admin@dunegpvm01 can do this

ssh dune-admin@dunegpvm01 ifadmin-connect cd /pnfs/dune/persistent/physicsgroups/dunebeam mkdir pweather chown pweather:dunebeam pweather

Then all further files under pweather:dunebeam will also be owned by pweather:dunebeam