View source for How to (Extra) Ban Someone

Ahem, so in recent times, we had to ''disable/ban'' a CSC user's account for their repeated attempts to circumvent their ban in MathSoc/CSC (FR, totally no pun intended)...

This is a (hopefully comprehensive) '''guide on ensuring their existing account (based on their WATIAM) is put out of action for good, and immediately'''. This guide is mainly intended for ''Syscom'' as it requires root or admin access to many CSC services.

=== Step 1: Remove Membership ===
Through CEO's TUI (`ceo`) and LDAP ([[Ceo#raymo's guide on how to fix things after screwing up|guide from Raymond]]):

* '''<u>Remove All Membership Terms</u>''': look for `memberTerm` in `ldapvi`
* '''<u>Reset their password</u>''' (**and don't tell them!**)

=== Step 2: Screw Up Their Account ===

* '''<u>Change their Login Shell</u>''' (through LDAP) to something like `/sbin/nologin` or `/bin/false`

'''NOTE''': CEO will not allow this change, so LDAP is best (and likely only way)

=== Step 3: Deauth Them Everywhere ===

* '''<u>Suspend Kerberos</u>''': https://wiki.csclub.uwaterloo.ca/Kerberos#Suspending_an_Account
* '''<u>Remove their SSH keys</u>''':
** Go to a Syscom-only machine that could edit the `/users` directory ('''be extremely careful''')
** Navigate to the banned users directory, and remove their ssh keys (`.ssh/authorized_keys`)

=== Step 4: Remove all Their Resources ===

* '''<u>Remove their CSC Cloud VMs</u>''': https://wiki.csclub.uwaterloo.ca/CloudStack#Administration
* (optional) Kill all processes they are running in General Use
* (optional) Delete their home directory (eg. `/users/f3hadi` 🥲)