• This is the standard ISDA System User setup. It includes the standard users db, www, logs, and repos. db is for databases, www is for web servers/services, repos is for repository services (such as Alfresco or svn) even if they have a web front end (since almost all of them can be accessed through multiple protocols), and the logs user is a general user for accessing logs and configuration files. It is used by giving group ownership to the logs group to any file that should be accessible/editable to the logs user. 
    cd /home
groupadd -r logs
useradd -g logs -d /home/logs -m -r -s /bin/bash logs
groupadd -r www
useradd -g www -G logs -d /home/www -m -r -s /bin/bash www
groupadd -r repos
useradd -g repos -G logs  -d /home/repos -m -r -s /bin/bash repos
groupadd -r db
useradd -g db -G logs -d /home/db -m -r -s /bin/bash db
      • Set the www user directory structure and copy the config files into place. 
        mkdir /home/www/weblib
mkdir /home/www/etc
chown -R www:www /home/www/etc
      • Make certain that the library files are put into their correct locations. 
        scp -r root@trogdor.mit.edu:/opt/software-repository-tmp/System-configs/www-user/weblib /home/www/weblib/
      • The logs user is intended to allow developers access to log and configuration files without granting root access. Change the group ownership of any file that developers will need non-root access to to be owned by the logs user, and chmod those files to be group readable.
  • No labels