How to (Extra) Ban Someone

From CSCWiki
Jump to navigation Jump to search

This is a (hopefully comprehensive) guide on ensuring their existing account (based on their WATIAM) is put out of action for good, and immediately. This guide is mainly intended for Syscom as it requires root or admin access to many CSC services.

Step 1: Remove Membership

Through CEO's TUI (`ceo`) and LDAP (guide from Raymond):

  • Remove All Membership Terms: look for `memberTerm` in `ldapvi`
  • Reset their password (**and don't tell them!**)

Step 2: Screw Up Their Account

  • Change their Login Shell (through LDAP) to something like `/sbin/nologin` or `/bin/false`

NOTE: CEO will not allow this change, so LDAP is best (and likely only way)

Step 3: Deauth Them Everywhere

Step 4: Remove all Their Resources