To follow up on the cross-domain username portion of this. Reserving usernames across domains is actually purposeful and intended. Because so many users float between all the different domains (MCS -> CI, CI -> KBase, MCS -> JLSE), it actually makes a lot of sense to reserve those names in the other domains.

I think you and me should also sit down in the next month and map out what it would take to get LCRC fully migrated to Userbase2. I think that would simplify and streamline things a lot.


From: John Valdes <valdes@anl.gov>
Date: Thursday, February 13, 2014 at 5:48 PM
To: Ti Leggett <leggett@mcs.anl.gov>
Cc: "core-admins@ci.uchicago.edu" <core-admins@ci.uchicago.edu>, "core-admins@mcs.anl.gov" <core-admins@mcs.anl.gov>
Subject: userbase2 cross domain account name uniqueness

Hi Ti,

I'm trying to create an account in the LCRC domain in userbase2 for
Xiaoliang Zhong, an ANL Postdoc in MSD.  His ANL username is "zhongx"
which isn't used in LCRC (or MCS), so I'd like to use that as his LCRC
account name (that's the name he chose in his account request).
However, that account name is in use in the CI domain by ID Xiang
Zhong (aka Sally Zhong) who appears to be a different person, and so
userbase2 (via sovereign) isn't allowing me to use zhongx as Xiaoliang
Zhong's account name in the LCRC domain.  Is it possible to remove the
requirement that account names be unique across domains in userbase2?
Or at least between CI and ANL domains (the latter being MCS, LCRC and
Kbase), as having unique account names within ANL would be desirable I
think (when approving accounts for LCRC, I try to use the person's ANL
username or MCS account name if they have one of the latter).  Or will
allowing non-unique account names between CI and ANL cause problems?

Alternately, in this specific case, it looks like Xiang Zhong in CI
is an old account (from 2012) and was denied every resource she
requested (except Zimbra Mail), so if that account isn't active in CI,
maybe we could rename it and/or purge it from userbase2 and free up
zhongx as an account name?

Otherwise, I'll assign a different account name to Xiaoliang Zhong for
his LCRC account.

John