Warning: Undefined array key "DOKU_PREFS" in /usr/share/dokuwiki/inc/common.php on line 2082
cluster:157 [DokuWiki]

DokuWiki

User Tools

Site Tools

Trace:
cluster:157

Warning: Undefined array key -1 in /usr/share/dokuwiki/inc/html.php on line 1458

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision 		Previous revision
cluster:157 [2017/04/06 14:35]
hmeij07 		cluster:157 [2017/04/06 15:31]
hmeij07
Line 38: Line 38:
     * useradd -u 15001 -g 15001 weshmeij     * useradd -u 15001 -g 15001 weshmeij
     * echo `date | md5sum | awk '{print $1}'` | passwd weshmeij --stdin     * echo `date | md5sum | awk '{print $1}'` | passwd weshmeij --stdin
-    * su - weshmeij -c "ssh-keygen -b 2048 -t rsa -f /home/weshmeij/.ssh/weshmeij -q -N '''' " # 4 single ticks+    * su - weshmeij -c "ssh-keygen -b 2048 -t rsa -f /home/weshmeij/.ssh/weshmeij -q -N '''' " # 4 single quotes before closing double quote
     * mv /home/weshmeij/.ssh/weshmeij.pub /etc/ssh/authorized_keys/weshmeij     * mv /home/weshmeij/.ssh/weshmeij.pub /etc/ssh/authorized_keys/weshmeij
     * chown root:root /etc/ssh/authorized_keys/weshmeij     * chown root:root /etc/ssh/authorized_keys/weshmeij
Line 44: Line 44:
     * CollegeA user hmeij saves private key to $HOME/.ssh/weshmeij.priv; alters permissions chmod go-rwx      * CollegeA user hmeij saves private key to $HOME/.ssh/weshmeij.priv; alters permissions chmod go-rwx 
     * script finishes; rm -f /home/weshmeij/.ssh/weshmeij     * script finishes; rm -f /home/weshmeij/.ssh/weshmeij
 +    * that night college[A|B|C] root retrieves all lines in the range 15001-30000
 +      * makes home dirs if they do not exist (parse lines build useradd, or via pam.d/sshd?)
 +      * download public keys, updates in /etc/ssh/authorized_keys (rsync with --delete)
 +      * replaces local passwd/shadow/group with retrieved lines
 +  * user hmeij@wes: ssh weshmeij@openhpc.lafayette.edu -i /home/hmeij/.ssh/weshmeij.priv
  
-Hmm, this requires that at CollegeA user hmeij can switch to weshmeij credentials before connecting to CollegeB (echo "$unm $localhost=/bin/su - $pre$unm" >> /etc/sudoers"). Not pretty.+That would work. Nobody knows the passwords for these guest accounts.
  
-Ahh, since  
  
 **Kerberos & AD** **Kerberos & AD**
cluster/157.txt ยท Last modified: 2017/04/06 15:31 by hmeij07

Page Tools

Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
CC Attribution-Share Alike 4.0 International Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki