Requesting Netgroup access
- Email request@umd.edu requesting for campus SSH jumpbox access and include the following information:
- Directory ID
- Primary department you will be access resources in.
- Department administrators can also send in a request to be granted delegated access to their associated campus jumpbox netgroup, but additional verification and approval may be required when granting this privilege.
- This creates a ServiceNow incident for the Unix Services team.
- The Unix Services will add your username to the department's netgroup.
If your department has delegated netgroup access to a verified administrator, contact them directly. Otherwise, follow the above process.
Authentication and access control
- Use your UMD Directory credentials to access the jumpbox.
- Access to jumpbox hosts is restricted; you must be explicitly granted permission.
Netgroup membership
- You must be added to the appropriate netgroup to access specific servers.
- Each department has its own netgroup; access is managed at this level.
Top
Managing Netgroup access with the ng utility
NOTE: For delegated administrators only
Requirements
- Use a system where the ng tool is available (e.g., glue.umd.edu).
- You must have the appropriate ng permissions (modify, crdel, delegate).
View Netgroup membership
- ng info --group Campusjump-[dept]
- Example: ng info --group Campusjump-physics
Add users to a Netgroup
- ng add --user [directory-id] --group Campusjump-[dept]
- Example: ng add --user alice --group Campusjump-physics
Remove users from a Netgroup
- ng remove --user [directory-id] --group Campusjump-[dept]
- Example: ng remove --user alice --group Campusjump-physics
Check Netgroup membership
- ng info --group Campusjump-[dept]
Netgroup notes
- Netgroup propagation may take up to 10 minutes.
- Users must SSH with their UMD Directory credentials.
- Access to netgroups is managed at the department level.
- If a user cannot log in, verify their netgroup membership with the ng info command mentioned above.
Top