A new user joins CompFlu…

As of 2023-10, all BSc/HiWi and higher get an E-mail account. It is the duty of the supervisor to request it via ITS self-service („Zugangskonto für externe Mitarbeiter beantragen“). Once the mail address (FZJ account) has been created, the name part (the j.doe in j.doe@fz-juelich.de) is needed for the next steps.

QluMan:

• Components → LDAP → Import users → From AD
• Filter for j.doe → select the new user → Import selected.
• This creates /home-er and /data-er without confirmation or feedback. This does not create /{home,data}-nbg separately (on dam, create them as directories or symlinks to the places in Erlangen)
• → Write files (to sync login data)
• Tests
  • Presence of /home-er/j.doe
  • Ability to login as j.doe@login.sun.hi-ern.de

To tell Slurm that j.doe shall be able to use the compute cluster, the Slurm accounts have to be synced with the LDAP groups.

QluMan:

• Components → Slurm → Manage → Accounting → Manage Accounts
• Sync LDAP users

Important for people to interact with LB3D and other software projects hosted on our GitLab server.

Login to GitLab itself is automatically synchronised to the AD group, but to access projects in the compflu group, you have to add the user to that group.

GitLab group role maintainer or higher:

• https://git.iek.fz-juelich.de/compflu
• Members →
  • GitLab member or Email address → Search for j.doe
  • Choose a role permission → Developer
  • → Invite

It is possible to invite non-FZJ people this way. In this case, please leave a comment who this person is, so that we don't lose track of it.

You can also invite people just to specific projects (rather than the whole group).

Works without interaction. Delays on the order of days have been reported between creation of the FZJ account and the ACLs to accept the user to be part of the @user group.