minor clean up; add how to lock account

[mirror/dsa-wiki.git] / input / howto / lock-account.creole

diff --git a/input/howto/lock-account.creole b/input/howto/lock-account.creole
new file mode 100644 (file)
index 0000000..3556440
--- /dev/null
+++ b/input/howto/lock-account.creole
@@ -0,0 +1,28 @@
+== how to lock an account in ud-ldap ==
+
+=== Introduction ===
+
+Per Section 3 of the [[http://www.debian.org/doc/manuals/developers-reference/|Debian Developer's Reference]]
+relating to [[http://www.debian.org/doc/manuals/developers-reference/developer-duties.html|Debian Developer's Duties]],
+a user is required to submit an RT ticket when retiring from Debian.
+
+Initially, the RT ticket will be assigned to a Debian Keyring Maintainer (DKM).
+The DKM will remove the user's GPG key from Debian's Keyring.
+
+Subsequently, the RT ticket will be assigned to a Debian System Administrator
+(DSA) so that Debian's LDAP may be updated.
+
+This HOWTO documents DSA's actions relating to such tickets.
+
+=== Procedure ===
+
+Step 1: On the LDAP master (draghi.debian.org), execute ud-lock, specifying
+the RT ticket number and the username.
+
+{{{
+       you@home~$ ssh you@draghi.debian.org
+       you@draghi~$ ud-lock -r <rt#> <username>
+}}}
+
+Step 2: Resolve the RT ticket.
+