This document describes the use of the existing tools for maintaining the ~sam/.k5login file on various Fermilab nodes of importance. Important notes:
The master k5login file (and the list of 'subscribed' accounts) is maintained in the CD CVS repository, package name "sam_account_files".
The following table summarizes the available commands and what they do.
Command: | Overview: |
---|---|
$ samadmin display k5login | Echo the contents of the current k5login file to stdout. No changes are made to the CVS repository |
$ samadmin modify k5login \
--add=p1,p2,p3... \ --remove=pa,pb,pc... |
Add/remove the specified principals, commit the changes to the CVS repository, and copy the new k5login file to all subscribed accounts. |
$ samadmin display subscribed k5login accounts | Echo the list of accounts 'subscribed' to receive updates to the k5login file. |
$ samadmin modify subscribed k5login accounts \
--add=n1,n2,n3... \ --remove=na,nb,nc... |
Subscribe/unsubscribe the specified accounts so that they will/will not receive updates to the k5login file |
$ samadmin push k5login | Make no modifications, but push the current k5login file to all subscribed accounts. |
For additional information, see the sam admin documentation.