From 68fb1ec39c4b640193c111a932ad79396e01f49c Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sun, 25 Oct 2009 16:47:32 +0100
Subject: [PATCH] Add info on how to add guest users

---
 input/howto/add-guest.creole | 43 ++++++++++++++++++++++++++++++++++++
 input/index.mdwn             |  1 +
 2 files changed, 44 insertions(+)
 create mode 100644 input/howto/add-guest.creole

diff --git a/input/howto/add-guest.creole b/input/howto/add-guest.creole
new file mode 100644
index 0000000..24d4731
--- /dev/null
+++ b/input/howto/add-guest.creole
@@ -0,0 +1,43 @@
+== Add a guest account to ud-ldap ==
+
+=== add to guest keyring ===
+
+at home:
+
+{{{
+cd projects/debian/d-a/guest-keyring
+}}}
+
+or whereever you keep the checkout.  Then
+{{{
+git pull &&
+echo -n "New user's key fingerprint: " &&
+read fingerprint &&
+./add-key "`echo $fingerprint | tr -d ' '`" &&
+git add debian-guest/add-"`echo $fingerprint | tr -d ' ' | cut -b 25-`" &&
+git add debian-guest/index debian-guest/index.gpg &&
+git ci &&
+git push
+}}}
+
+=== add to ldap ===
+
+Once that is done, to to db-master (aka draghi) and add the account:
+
+{{{
+ud-useradd -n
+}}}
+
+* enter fingerprint, account name, [fml] name and forwarding address.
+* do _not_ subscribe to -private (enter a <space> character)
+* keep uid number
+* use 60000 as gid number
+
+Then set an expire date for the user:
+{{{
+echo -n "userid of new user: " &&
+read uid &&
+ldapvi --encoding=ASCII -ZZ --ldap-conf -h db.debian.org -D uid=$USER,ou=users,dc=debian,dc=org "uid=$uid"
+}}}
+
+and set {{{shadowExpire}}} to today + 60 days (   {{{echo $(( `date +%s` / 3600 / 24 + 60 ))}}}   ).
diff --git a/input/index.mdwn b/input/index.mdwn
index 4aea1db..b8bc743 100644
--- a/input/index.mdwn
+++ b/input/index.mdwn
@@ -35,6 +35,7 @@ VCS repositories for ud-ldap and all our other stuff can be found at
 * [[howto/export-iscsi]]: How to export new iscsi LUNs
 * [[howto/install-kvm]]: How to setup a new kvm domain without going through d-i etc.
 * [[howto/postgres]]: Random postgres stuff
+* [[howto/add-guest]]: How to add guests to ud-ldap
 
 ## ports
 
-- 
2.20.1