IS Procedures for New Employees

This is a list of things to do before a new employee arrives in our department.

1. Find out where the new employee will be housed and check the network connectivity.
2. create a vunetid; this requires the employee's full name, dob, and ssn.
   • Never can remember - add staff to "School of Medicine" or "Vanderbilt University Medical Center"?
3. Create the user on the biostat server; add the user to the users group
   • Write down the user's UID and GID (/etc/passwd)

     useradd -m -G users [username]

4. (optional) Create the user on the win4lin server; add the user to the users group
   • Change the user's UID and GID to match the biostat server
   • Set the user's password
   • Add Win4Lin to the user's home area
     1. cd /home/VUNETID
     2. tar -xzvf  /usr/win4lin-templates/analyst.tar.gz (or admin)
     3. chown -R VUNETID.VUNETID ../VUNETID
5. Create the user on the biostat3 server (for backup services)
   • using the UID and GID noted above, create a user account

     sudo addgroup --gid nnnn vunetid
     sudo adduser --uid nnnn --gid nnnn vunetid

   • edit /etc/passwd and change "/bin/bash" to be "/bin/false" for the user just created
   • Make the user's backup directory: /home?/backup/VUNETID
6. install software and configure a computer
7. Create the user on the workstation (nnnn is uid and gid from above)
   • sudo addgroup --gid nnnn vunetid
   • sudo adduser --uid nnnn --gid nnnn vunetid
   • possible alternative

     useradd -m -s bash -G cdrom,audio,video,plugdev,lpadmin,admin -u [UID] [username] && passwd [username]

8. Add the user to the cdrom, audio, video, plugdev, lpadmin, admin groups

This is a list of things to do once the user arrives.

1. BiostatUserOrientation (overview of the commands and tools needed within our Linux environment)
2. Activate the user's VUnetID and create an epassword
3. Request an email account
4. Add the user's email to the biostatistic's LDAP
5. Update web site phone list (see restricted web)
6. Add email address to appropriate majordomo mailing lists
   • Add to biostat-exempt
7. Grant the user access to dbconnect
8. Add wiki username to the BiostatUsersGroup
9. If faculty, add user to BiostatFacultyGroup

This is a list of things to do after the user's workstation has been configured.

• On all servers
  • Copy the ssh key information
    1. mkdir /home/VUNETID/.ssh
    2. cd /home/VUNETID/.ssh
    3. scp VUNETID@IPADDRESS:.ssh/id_dsa .
    4. scp VUNETID@IPADDRESS:.ssh/authorized_keys2 .
    5. chown -R VUNETID.VUNETID /home/VUNETID/.ssh
    6. chmod -R go-rwx /home/VUNETID/.ssh
  • Change the user's password
    1. On user's workstation, grep VUNETID /etc/shadow; copy this line
    2. On server, add that line into /etc/shadow