LDAP

• Jira cross-reference: http://jira.usatlasfacility.org/browse/UCHI-8 , http://jira.usatlasfacility.org/browse/UCHI-124 , http://jira.usatlasfacility.org/browse/UCHI-134

Setup

See LdapUc3Sub

Differences from seeder cluster

The nodes uc3-sub.uchicago.edu and uc3-data.uchicago.edu are logically separated from uc3-mgt and the rest of the seeder cluster. Users will only be able to log in directly to uc3-sub and uc3-data, and will not have an account on uc3-mgt.

Mount points

During migration, LDAP users have their home directory mounted at /homeauto, admin accounts are currently mounted on /home. This will change once user migration is complete.

[lincolnb@uc3-sub homeauto]$ ls -lha
total 36K
drwxr-xr-x  9 root     root     4.0K Oct  3 16:52 .
drwxr-xr-x  4 root     root     4.0K Sep  4 19:33 ..
drwx------ 11 dgc      root     4.0K Sep 28 17:25 dgc
drwxr-x---  3 kazutaka kazutaka 4.0K Oct  3 16:55 kazutaka
drwxr-xr-x  7 kenaird  uc3      4.0K Oct  1 11:04 kenaird
drwxr-xr-x  2 root     root     4.0K Sep 12 17:14 kenaird2
drwxr-xr-x  3 lincolnb uc3      4.0K Oct  3 12:46 lincolnb
drwxr-x---  2 mmb      mmb      4.0K Sep 28 15:44 mmb
drwxr-x---  2 ssthapa  ssthapa  4.0K Sep  5 00:41 ssthapa

Misc notes

Groups are matched to username via David Champion's nsswitch.conf module. This will make the group appear as something other than a string of numbers. e.g. :

drwxr-x---  3 kazutaka kazutaka 4.0K Oct  3 16:55 kazutaka

as opposed to

drwxr-x---  3 kazutaka 40243044 4.0K Oct  3 16:55 kazutaka

-- LincolnBryant - 04 Oct 2012