RucioSysAdminSettingUpNewUser

Setting up a new user for Bastion use

Once you have the public SSH key of the users Key Pair:

• Setup a new user on the Bastion for the new user using first initial and surname
• Create a directory within their home dir .ssh
• Populate the .ssh folder with the users ssh key as id_rsa and place the ssh key within a file called authorized_keys
• Add the username to /etc/ssh/sshd_config under USERS and GROUPS:

chattr -i /etc/ssh/sshd_config
vi /etc/ssh/sshd_config
chattr +i /etc/ssh/sshd_config
systemctl restart sshd

The User should now be able ssh into the Bastion Server

Setting up a new user for Rucio

Once you have the Grid Certificate DN from the User:

• Log into the Rucio Bastion as root
• Use the following commands:

rucio-admin account add --type user --email <users email> <username>
rucio-admin identity add --account <username> --type X509 --id <DN> --email <users email>