On Tue, Apr 13, 2010 at 2:45 PM, Leigh Stoller
<stoller@flux.utah.edu> wrote:
Joining Project: You cannot join project 'test' due to security
restrictions! If you were told to join this project specifically,
email either the project leader
are not admins be in the same projects as users who are admins. The
idea is that there are enough things that project members can do that
having a non-admin in a project with admins might make it possible for
the non-admin to escalate his privileges and gain admin access.
We have this enabled because we have 1000s of users we do not know,
and this is just safer. Some sites elect to turn this off because
their user base is more tightly controlled. If you want to turn this
off, add this lines to your defs file:
ISOLATEADMINS=0
Then reconfig, rebuild, reinstall ... note though that there is a bug
fix to this code, that was pushed to emulab-stable yesterday. Its been
in emulab-devel for a few weeks.
If you want to keep this security feature turned on, what you would do
(and what we do) is create an alternate account for yourself that does
not have admin privs, which you can use in projects that are likely to
have students and other non-admin users. Log in as your alter ego and
create the new project.
Lbs