Account management
The User Portal gives you access to information concerning your resources usage, as well as an archive of the notifications concerning your activity at CC-IN2P3.
The Identity Management Portal allows you to check and manage information concerning your account profile at CC-IN2P3.
Attention
After a profile update requiring validation by a collaboration contact (for example, a membership request or a date extension), no other changes will be possible until the contact answers.
Modify your profile
From the Identity Management Portal you will be able to perform the following actions:
modify your profile information: First and Last Name, nationality, and reference email address,
change or reset your password,
change your primary group,
request membership to scientific collaborations.
Important
A notification will be sent periodically to your reference email address inviting you to revalidate your profile. If you take no action, the account will be suspended pending deletion. Hence the importance of keeping this information up to date.
Collaboration membership
Throughout your account’s entire period of activity, you may request a membership to one or more collaborations. Your activity will be managed under the responsibility of the relevant collaboration contacts.
You may select your main group, or default group, from your groups via the Identity Management Portal interface or by using the CLI commands.
Activity extension
The use of CC-IN2P3 resources depends on the validity of your account and your collaboration memberships. You will be periodically asked to confirm this validity, thereby extending your access to these resources.
Starting 90 days before your collaboration membership expiration date, you will receive notifications inviting you to confirm your interest in the collaboration’s activity.
Important
Without any action on your behalf, your account will be removed from the collaboration after the expiration date. However, you may submit a new membership request at a later time.
To extend your collaboration membership, please follow the steps below:
click on the link provided on the banner in your Identity Management Portal profile,
submit your extension request filling in the justification addressed to your collaboration contacts.
Note
Until one of your contacts takes action, you will not be able to make any further changes to your profile.
Starting 90 days before your account expiration date, you will receive notifications inviting you to confirm your profile information.
Important
Without any action on your behalf, your account will be deactivated and deemed eligible for destruction after the expiration date.
However, during a grace period of 3 months after the expiration date, you will still be able to trigger the unauthenticated revalidation process.
To extend your account activity, please follow the steps below:
click on the link provided on the banner in your Identity Management Portal profile,
follow the procedure to verify your reference email address and click on the link you will receive by email,
verify that the information associated with your account (if necessary, update it) and confirm that you have read the Terms of use for resources.
Note
If your account is member of an administrative collaboration, its extension will only become effective once your collaboration contact has approved it.
In this case, until one of your contacts takes action, you will not be able to make any further changes to your profile.
Changing your research structure
If, during your career, you change affiliation, you will need to update your profile information regarding your research structure (RS). There are two possible scenarios, depending solely on your new affiliation:
Your new RS is associated with an administrative collaboration
The new collaboration contact must submit a request to user support.
Your new RS is not associated with an administrative collaboration
You can submit the request to user support yourself.
Attention
A change of laboratory or research structure may involve a change to your reference email address. If this is the case, please be sure to include this information in your request.
Delete an account
If the account is member of an administrative collaboration, their collaboration contact must submit the deletion request to user support.
If, on the other hand, the account is not member of an administrative collaboration, the user can submit the request themselves to user support.
CLI commands
You may find below some suggestions to check and manage your account information through a command-line interface (CLI) from an interactive server.
Modify your password
This command may be an alternative to the Identity Management Portal functionality for any user. It nevertheless represents the only way to change or update the password for a production account:
% kpasswd
Change shell
To change your shell when connected to the interactive servers:
% changesh -h Usage: changesh --help | -h changesh <shell> Where <shell> could be bash, csh, ksh, tcsh or zsh.
Unix group
These commands may be an alternative to the Identity Management Portal functionalities.
To know your primary group:
% id -gnWithout the option
–gn, the command will list all the groups your account is associated with.
To change your primary group with a group you are already associated with:
% newgroup --help Usage: newgroup --help | -h newgroup --query | -q newgroup [ --temp | -t ] [ --login | -l ] <groupname>
--tempallows to temporarily change the group and only in the active session where the command is executed. At logout the group change is cancelled.
--loginallows to load the chosen group login environment. This modification is permanent up to the next change.
Attention
The newgroup command may fail if your Kerberos ticket has expired. Please refer to the corresponding paragraph for instructions on how to reset it.