Difference between revisions of "BXadmin:Accounts"

From CCGB
Jump to: navigation, search
Line 7: Line 7:
 
* last name
 
* last name
 
* (optional) penn state access account id (abc123)
 
* (optional) penn state access account id (abc123)
* (optional) requsted username (if blank, will used access account name, or last name if above is blank)
+
* (optional) requsted username (if blank, will use access account name, or last name if above is blank)
 
* status
 
* status
** one of: Faculty, Grad Student, Postdoc, Undergraduate, Staff, Visitor, Other
+
** Faculty, Grad Student, Postdoc, Undergraduate, Staff, Visitor, Other
 
* name/username/email of sponsoring faculty or staff member (departmentNumber)
 
* name/username/email of sponsoring faculty or staff member (departmentNumber)
** provide list of 'groups' to choose from?
+
** provide list of 'groups' to choose from, with 'other' as option
 
* Alternate contact email address
 
* Alternate contact email address
 
** stored in a new bxAlternateEmail attribute in LDAP
 
** stored in a new bxAlternateEmail attribute in LDAP
Line 22: Line 22:
 
User should be made aware of AD-20, AD-23, ADG-1, ADG-2 and agree to comply with these policies.  
 
User should be made aware of AD-20, AD-23, ADG-1, ADG-2 and agree to comply with these policies.  
 
Should include text along the lines of https://www2.ems.psu.edu/computer_support/?q=system/files/UserAcknowledgementForm.pdf and https://www2.ems.psu.edu/computer_support/?q=node/236
 
Should include text along the lines of https://www2.ems.psu.edu/computer_support/?q=system/files/UserAcknowledgementForm.pdf and https://www2.ems.psu.edu/computer_support/?q=node/236
 +
 +
Approval from the sponsor or an individual from the specified lab allowed to authorize new accounts must approve the account before it is created.
  
 
= account entries in ldap =
 
= account entries in ldap =

Revision as of 12:11, 11 March 2010

request form

url will be https://admin.bx.psu.edu/requests/account.php

Information required:

  • first name
  • last name
  • (optional) penn state access account id (abc123)
  • (optional) requsted username (if blank, will use access account name, or last name if above is blank)
  • status
    • Faculty, Grad Student, Postdoc, Undergraduate, Staff, Visitor, Other
  • name/username/email of sponsoring faculty or staff member (departmentNumber)
    • provide list of 'groups' to choose from, with 'other' as option
  • Alternate contact email address
    • stored in a new bxAlternateEmail attribute in LDAP
    • used to email new user information
    • mailRoutingAddress will be set to this initially
  • (optional) office address, or building/floor (roomNumber)
  • (optional) phone number
  • (optional) preferred shell

User should be made aware of AD-20, AD-23, ADG-1, ADG-2 and agree to comply with these policies. Should include text along the lines of https://www2.ems.psu.edu/computer_support/?q=system/files/UserAcknowledgementForm.pdf and https://www2.ems.psu.edu/computer_support/?q=node/236

Approval from the sponsor or an individual from the specified lab allowed to authorize new accounts must approve the account before it is created.

account entries in ldap

dn: uid=$uid,ou=people,dc=bx,dc=psu,dc=edu
objectClass: bxAccount
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: inetLocalMailRecipient
uid: $uid
uidNumber: $uidnumber
gidNumber: $gidnumber
loginShell: $shell
homeDirectory: $homedir_base/$uid
cn: $first $last
sn: $last
givenName: $first
displayname: $first $last
mail: $uid@bx.psu.edu
departmentNumber: $affiliation
gecos: $first $last,$office,$phone,,($affiliation)
roomNumber: $office
altHomeDirectory: /home/$uid
bxAlternateEmail: $alternateEmail
mailLocalAddress: $uid@bx.psu.edu
mailRoutingAddress: $alternateEmail