This is an old revision of the document!
Table of Contents
Group accounts are necessary when a number of users need access to the same set of files, for example, a society webpage. All of the users who wish to edit these files MUST be tardis account holders.
Two things need set up, the group (or role) account, and the the unix group. Both will have the same name.
Creating the group account
Creating the group
Adding users to the group
Using ldapvi:
ldapvi -D 'cn=admin,dc=tardis,dc=ed,dc=ac,dc=uk' '(cn=GROUPNAME)'
(substituting the relevant group name for GROUPNAME)
Add memberUid entries for each user, see existing groups for example.
Allowing sudo access
Allows all users in the given group the ability to sudo a login for the role account
Creating group webspace
same as user webspace, with obvious changes
Adding a vhost
There are two ways to add vhosts. One for fussy people and one for lazy people.
The lazy option is to simply add the appropriate CNAME for www in DNS. Then requests aimed at http://www.foo.tardis.ed.ac.uk/ are proxied to http://www.tardis.ed.ac.uk/~foo/
Fussy people (with scripts that care that the user's seeing the same url the script thinks they're seeing) need the above done, as well as:
- An entry in davros:/etc/apache/vhosts/foo . Have a poke around at others in there to look for one that's close to what you want, the etv one looks fairly minimal. Oh, and remember to use rcs!
- Directories and things in /tardis/www/vhosts/foo/ . Use the same structure here as for single users.