Introduction

The account for an observation project is created in advance by the operator, with the utility ncsPam (more details below). ncsPam stands for "New Control System, Project Accounts Management"

The name of a project account is usually composed of three digits, followed by a minus sign, plus other two digits that refer to the year (100-09). However, the utility to create projects accounts accepts any name composed by letters and/or numbers and/or minus signs.

These accounts have their home directory under the /vis disk, using this same home from every linux computer at iram.es, either at the telescope or at Granada offices.

After a project finishes its observation time, the operator "saves" its directory, making one copy for the observer, and another one to be kept at the telescope (in some cases this one has to be done by the computer group to tape). Later, at some point at next beginning of month, the system backup make another copy of vis disk to tape. Only after this 3-steps sequence (observation finished + save done + full system backup) the project account and its directory will be deleted by computer group people, with the exception of projects accounts included in the list of projects that must not be deleted.

How to create new project accounts

At mrt-lx1 server, the utility ncsPam has to be run as root. It offers a menu, where the operator can select several operations on projects accounts. To create a new project account:

  1. Enter 1 (main tasks),
  2. and then 1 (add projects accounts).

It will ask you to type the password twice, and the name of the owner of the account (as Full Name). The rest of the question can be answered with ENTER, except the last one: "Is the information correct? [y/N]"; press "y" here.

It will create:

  1. the "account definition",
  2. the home directory at the vis disk, and
  3. the observation queue.

The instructions in Observation Queues can be followed in case of problems with the observation queue.

The normal output of the ncsPam command is the following:

mrt-lx1:~# ncsPam 

        PAM - Projects Accounts Management -


        PAM - Projects Accounts Management -

        select  item

        1       main tasks
        2       info tasks
        3       other
        q       quit PAM

. enter your selection: 1

        PAM v 3 - menu 1 - main tasks -

        select  item

        1       add projects accounts
        q       quit menu 1

        alternative answers to questions are given in [] with the
        default answer being the first alternative given.

. enter your selection: 1
.. please enter project (ex: 100-05, do not use underscore! )
   or ENTER to end: 999-99
... creating account 999-99

gra-lx1.iram.es: Master's version not newer
make: Entering directory `/var/yp'
make[1]: Entering directory `/var/yp/lx'
make[1]: `ypservers' is up to date.
make[1]: Leaving directory `/var/yp/lx'
make[1]: Entering directory `/var/yp/lx'
Updating netid.byname...
gra-lx1.iram.es: Master's version not newer
make[1]: Leaving directory `/var/yp/lx'
make: Leaving directory `/var/yp'
make: Entering directory `/var/yp'
make[1]: Entering directory `/var/yp/lx'
make[1]: `ypservers' is up to date.
make[1]: Leaving directory `/var/yp/lx'
make[1]: Entering directory `/var/yp/lx'
Updating passwd.byname...
Updating passwd.byuid...
Updating netid.byname...
make[1]: Leaving directory `/var/yp/lx'
make: Leaving directory `/var/yp'
Enter new UNIX password: ENTER HERE THE PASSWORD FOR PROJECTS ACCOUNTS
Retype new UNIX password: RETYPE THE SAME 
passwd: password updated successfully
Changing the user information for 999-99
Enter the new value, or press ENTER for the default
        Full Name []: ENTER HERE THE OWNER OF THE PROJECT ACCOUNT
        Room Number []: PRESS ENTER
        Work Phone []: PRESS ENTER
        Home Phone []: PRESS ENTER
        Other []: PRESS ENTER
Is the information correct? [y/N] ENTER HERE Y
gra-lx1.iram.es: Master's version not newer
gra-lx1.iram.es: Master's version not newer
RCS/passwd,v  <--  passwd
new revision: 1.97; previous revision: 1.96
done
RCS/shadow,v  <--  shadow
new revision: 1.16; previous revision: 1.15
done
RCS/group,v  <--  group
new revision: 1.96; previous revision: 1.95
done

....creating directories on Linux server

... /mrt-lx1/vis/999-99 created
... Generating ssh key:
What manual page do you want?
What manual page do you want?
... Creating Observacion Queue: 
... Done



Please note: if the project 999-99 must be kept on disk
             after the observations (because it will come back
             in the future or because of any other reason),
             then do not forget to include it in the list of
             the projects THAT MUST NOT BE DELETED, using the
             option 3a of the menu 2 (info tasks)


.. please enter new project or ENTER to end: ENTER NEW PROJECT OR PRESS ENTER TO FINISH

.. leaving option 1 ...

..Do you want to update the WWW report? [y/no]: 
What manual page do you want?
... done

        PAM v 3 - menu 1 - main tasks -

        select  item

        1       add projects accounts
        q       quit menu 1

        alternative answers to questions are given in [] with the
        default answer being the first alternative given.

. enter your selection: q

        PAM - Projects Accounts Management -

        select  item

        1       main tasks
        2       info tasks
        3       other
        q       quit PAM

. enter your selection: q
.. bye
mrt-lx1:~#

How to get info about project accounts

General information

  1. Run ncsPam (as user root at mrt-lx1 computer)
  2. Enter 2 (info tasks)
  3. Select 1 for a list of existing project accounts, 2 for a list of the vis subdirectories.

List of projects that must not be deleted

We keep a list of projects that do not follow the usual process of being deleted after the "observation finished + save done + full system backup" sequence. The operator or computer group people can edit this list to include or exclude projects accounts.

  1. Run ncsPam (as user root at mrt-lx1 computer)
  2. Enter 2 (info tasks)
  3. Select 3 to see the list of DO-NOT-DELETE projects
  4. The option 3a start an editor to allow modifications of the DO-NOT-DELETE projects list

Web page report of projects accounts

At http://www.iram.es/IRAMES/groups/computer/org/projectsLog.html we maintain an up-to-date report of current projects accounts, in addition of which have been recently created, recently deleted, and those that must not be deleted. It is updated when creating or deleting accounts from ncsPam. It can also be updated manually as follows:

  1. Run ncsPam (as user root at mrt-lx1 computer)
  2. Enter 2 (info tasks)
  3. Select option 4 (update WWW report)

How to get info about a concrete project account

At mrt-lx1:/var/log/PAM, several files exist, that contain information about project accounts, and something like a history of a project can be retrieved by executing (as user root at mrt-lx1):

grep <project> /var/log/PAM/*

Let's explain what contains some of these (log) files at /var/log/PAM:

vis_new.log

a list of project accounts with the date of creation

vis_del.log

a list of project accounts with the date of deletion

usedUIDs.log

a list of project accounts with their UID

OBS.log

the log of saves to be kept at the telescope

bigProjectsToTape.log

the log of saves to be kept at the telescope, written to tape

vis_nodel.log

the list of projects that must not be deleted

So, depending on what we get from the "grep" command, we can know details about what has happened to an account. Some examples follow.

The account 444-08 never existed:

mrt-lx1:~# grep 444-08 /var/log/PAM/*
mrt-lx1:~# 

The account t12-07 was created on 24-Jul-2007, with owner C.THUM, it must not be deleted with resp R.Aladro, and was never saved nor deleted:

mrt-lx1:~# grep t12-07 /var/log/PAM/*
/var/log/PAM/projectsLog.html:t12-07     x    3702  3702    C.THUM,,,             /mrt-lx1/vis/t12-07      /bin/bash
/var/log/PAM/projectsLog.html:t12-07   resp. R.Aladro      aladro@iram.es
/var/log/PAM/usedUIDs.log:t12-07 3702
/var/log/PAM/vis_new.log:24-Jul-2007  :  t12-07 3702 3702 C.THUM,,, /mrt-lx1/vis/t12-07 /bin/bash
/var/log/PAM/vis_nodel.log:t12-07   resp. R.Aladro      aladro@iram.es
mrt-lx1:~# 

The account d14-08 was created on 31-Dec-2008 with owner Puget, was saved on 13-01-2009 by mr and was deleted on 12-Feb-2009:

mrt-lx1:~# grep d14-08 /var/log/PAM/*
/var/log/PAM/OBS.log:      d14-08 saved on 13-01-2009 by mr
/var/log/PAM/projectsLog.html:12-Feb-2009  :  d14-08 $1$8 3934 3934 Puget,,, /mrt-lx1/vis/d14-08 /bin/bash
/var/log/PAM/usedUIDs.log:d14-08 3934
/var/log/PAM/vis_del.log:12-Feb-2009  :  d14-08 $1$8 3934 3934 Puget,,, /mrt-lx1/vis/d14-08 /bin/bash
/var/log/PAM/vis_new.log:31-Dec-2008  :  d14-08 3934 3934 Puget,,, /mrt-lx1/vis/d14-08 /bin/bash
mrt-lx1:~# 

The account 061-08 was first created on 25-Jul-2008. The operator could make a mistake, as the password appears in the owner field. Then the account was deleted and was created again on the same date (25-Jul-2008). The project was saved on 05-08-2008 by rmm to a tape. Later, the account was deleted on 22-Aug-2008. And later, the account was created once more on 30-Sep-2008. It still exists.

mrt-lx1:~# grep 061-08 /var/log/PAM/*
/var/log/PAM/bigProjectsToTape.log:061-08 saved on 05-08-2008 to tape BigProjects002
/var/log/PAM/OBS.log:      061-08 saved on 05-08-2008 by rmm
/var/log/PAM/projectsLog.html:061-08     x    3853  3853    thum,,,               /mrt-lx1/vis/061-08      /bin/bash
/var/log/PAM/usedUIDs.log:061-08 3853
/var/log/PAM/vis_del.log:25-Jul-2008  :  061-08 $1$k 3853 3853 loja1305,,, /mrt-lx1/vis/061-08 /bin/bash
/var/log/PAM/vis_del.log:22-Aug-2008  :  061-08 $1$Q 3853 3853 Thum,,, /mrt-lx1/vis/061-08 /bin/bash
/var/log/PAM/vis_new.log:25-Jul-2008  :  061-08 3853 3853 loja1305,,, /mrt-lx1/vis/061-08 /bin/bash
/var/log/PAM/vis_new.log:25-Jul-2008  :  061-08 3853 3853 Thum,,, /mrt-lx1/vis/061-08 /bin/bash
/var/log/PAM/vis_new.log:30-Sep-2008  :  061-08 3853 3853 thum,,, /mrt-lx1/vis/061-08 /bin/bash
mrt-lx1:~# 

About deleting a project account

Usually projects accounts are deleted by computer group people after the "observation finished + save done + full system backup" sequence. But sometimes the operator makes a mistake when creating an account and he needs to delete it before try to create it again. For that purpose:

  1. Run ncsPam (as user root at mrt-lx1 computer)
  2. Enter 3 (other)
  3. Select option 1 and enter project to delete the directory
  4. Select option 2 and enter project to delete the account

How it works. Management

At mrt-lx1:

At mrt-lx3: /usr/local/ncsPam/addDirectory.sh


This page is https://mrt-lx1.iram.es/mainWiki/CreateProjects. It is maintained by WB.

Categories: CategoryNcs

CreateProjects (last edited 2011-05-30 17:31:58 by WalterBrunswig)