HP-UX/Tru64 UNIX System Administration Interoperability phần 10 pot

User and Group Account Administration Group Accounts Chapter 15 325 Group Accounts Group accounts offer a means of sharing system resources among certain users and restricting them from others. It is possible, even necessary, for some users to be assigned to more than one group. This section describes the commands and utilities, and the tasks involved for adding, modifying, and removing group accounts on each operating system. The group account nobody differs between both operating systems. Under HP-UX, this account cannot own any files; under Tru64 UNIX, the nobody user account can own files. Group Identifiers It is important to note that there are discrepancies between the operating systems in the assignment of group identifiers (GIDs) to group accounts. Commands and Utilities The User and Group Accounts portion of the HP-UX SAM utility and the Tru64 UNIX SysMan Account Management utility both offer a graphical user interface for adding, modifying, and deleting group accounts. Also, both operating systems offer the groupadd, groupmod, and groupdel commands. Table 15-3 Default Group Identifiers Group ID HP-UX Tru64 UNIX Group ID HP-UX Tru64 UNIX 0 root system 15 not assigned users 1 other daemon 16 not assigned sysadmin 2bin uucp 17not assigned tape 3 sys mem, kmem 18 not assigned tcb 4adm bin 19not assigned adm 5 daemon sec 20 users operator 6 mail mail 7 lp terminal, tty 101 smbnull not assigned 8 not assigned news 102 cd write not assigned 9 not assigned opr 10 tty not assigned 11 nuucp auth 60001 not assigned nobodyV 12 not assigned lp, lpr 65534 not assigned nobody 13 not assigned backup 14 not assigned cron -2 nogroup not assigned 21 not assigned ris User and Group Account Administration Group Accounts Chapter 15 326 SAM The HP-UX System Administration Manager provides a graphical user interface that enables you to add, modify, and delete group accounts. This is the preferred method of performing these tasks. The following illustrates the SAM Group Accounts dialog box. This chapter provides step-by-step information on how to manage group accounts using this utility. User and Group Account Administration Group Accounts Chapter 15 327 SysMan Account Manager The Tru64 UNIX SysMan interface also provides a utility that enables you to add, modify, and delete group accounts. This is the preferred method under Tru64 UNIX. The following illustrates the Manage Local Users window of the SysMan Account Manager utility. This chapter provides step-by-step information on how to manage local group accounts using this utility. The groupadd command This command creates a group on the system by adding the appropriate entry to the /etc/group file. Both operating systems have the same options, but Tru64 UNIX also features the following options: Tru64 UNIX -P creates a PC group only. -x extended_option allows you to enter any number of extended options. See the appropriate groupadd reference page for more information. User and Group Account Administration Group Accounts Chapter 15 328 The groupmod command This command modifies an existing group account on the system by changing the appropriate entry in the /etc/group file. Both operating systems have the same options, but Tru64 UNIX also features the following options: Tru64 UNIX -D displays and sets the default values used by the account management utilities. -P modifies a PC group, which was created with the groupadd command. -x extended_option allows you to enter any number of extended options. See the appropriate groupmod reference page for more information. The groupdel command This command deletes a group account from the system. There are no options in the HP-UX version of this command, but Tru64 UNIX also features the following options: Tru64 UNIX -P removes a PC group only. -x extended_option allows you to enter any number of extended options. See the appropriate groudel reference page for more information. Creating a Group Account The following sections describe how to add a group account using the HP-UX System Administration Manager and the Tru64 UNIX Account Management under SysMan. Creating a Group Account using HP-UX SAM Follow this procedure to create, or add, a group account: 1. Log in as root or use the su command to switch user to superuser. 2. Invoke SAM. 3. Select the Accounts for Users and Groups icon. The Accounts for Users and Groups window opens. 4. Select the Groups icon. The Groups dialog box opens. User and Group Account Administration Group Accounts Chapter 15 329 5. Select Actions->Add The Add a New Group dialog box opens. 6. Enter the Group Name. 7. The Group ID field displays the next available GID. To change it, first verify that the GID you want to assign does not belong to any other group on the system, then enter the new GID. 8. Optionally select users from the Users to Include in Group list. 9. Select OK. The dialog box closes and a confirmation dialog box announces that the group is being added to the system. The Groups dialog box is updated to list the new group account. User and Group Account Administration Group Accounts Chapter 15 330 Creating a Group Account using Tru64 UNIX SysMan Account Management Follow this procedure to create, or add, a local group account: 1. Log in as root or use the su command to switch user to superuser. 2. Invoke the SysMan Account Management utility in any of the following ways: • Enter the command sysman to open the SysMan Main Window, select Accounts, select Manage Local Groups • Enter the command sysman accounts, select Manage Local Groups • Enter command sysman groups The Manage Local Groups dialog box opens. 3. Select Add to display the Add a Group dialog box. 4. Enter the group name in the Group name: field. 5. Either enter the group identifier (GID) in the Group ID field or leave it blank, which causes Account Management to use the next available GID. Ensure that the GID you enter does not already exist. 6. Select a user from the list shown and select Apply to assign that user to the group. Repeat this step for each group member. User and Group Account Administration Group Accounts Chapter 15 331 Group members are highlighted in the list. Select the user again and select Apply to remove a user from the group. 7. Select OK. Modifying a Group Account The following sections describe how to modify a group account using the HP-UX System Administration Manager and the Tru64 UNIX Account Management under SysMan. Such modifications are assigning new group members and removing others. Modifying a Group Account using HP-UX SAM Follow this procedure to modify a group account: 1. Log in as root or use the su command to switch user to superuser. 2. Invoke SAM. 3. Select the Accounts for Users and Groups icon. The Accounts for Users and Groups window opens. User and Group Account Administration Group Accounts Chapter 15 332 4. Select the Groups icon. The Groups dialog box opens. 5. Select the group from the list shown. User and Group Account Administration Group Accounts Chapter 15 333 6. Select Actions->Modify The Modify an Existing Group dialog box opens. 7. Optionally change the Group Name by entering the new name in the corresponding field. 8. Optionally change the Group ID by entering its value in the corresponding field. CAUTION Exercise care when changing the Group ID. Ensure that the new Group ID is not already used by another group. User and Group Account Administration Group Accounts Chapter 15 334 9. Optionally assign users to the group by selecting their login names from the Users Not in Group list and selecting <-Add Alternatively remove users from the group assignment by selecting their login names from the Users in Group and select -Remove->. 10. Select OK. The dialog box closes and a confirmation dialog box announces that the group is being updated. The Groups dialog box is updated accordingly. Modifying a Group Account using Tru64 UNIX SysMan Account Management Follow this procedure to modify the parameters of a local group account: 1. Log in as root or use the su command to change user to super-user. 2. Invoke the SysMan Account Management utility in any of the following ways: • Enter the command sysman to open the SysMan Main Window, select Accounts, select Manage Local Groups • Enter the command sysman accounts, select Manage Local Groups • Enter command sysman groups [...]... sysconfig command 78, 102 sysconfigdb command 102 sysdef command 102 SysMan Menu 32, 38, 42, 187 defined 42 SysMan Station 32, 42, 43, 187 defined 43 system activity, monitoring 180 System Administration Manager 38 357 S (continued) system boot authentication 241 System Information utility 181, 290 system management products 51 system reference manual console 297 system shutdown 295, 303 system startup 295... 179 Network File System 106 Network Information Service 106 Network Information Service Plus 106 Network Interface Card 108 , 119 Network Lock Manager 106 network mask 122 network security 247 Network Setup Wizard 119 Network Status Monitor 106 networked printer, adding 208 networks file 132, 155 newfs command 267, 272, 289 newfs_hfs command 267, 289 newfs_vxfs command 272, 289 NFS 106 , 264, 266 configuration... Supplemental References UNIX References UNIX References The following are references for the UNIX operating system and utilities without specifics toward either HP-UX or Tru64 UNIX DNS and BIND by Paul Albitz and Cricket Liu, published by O'Reilly and Associates, Inc 350 Appendix B Recommended Supplemental References HP-UX Documentation HP-UX Documentation Marty Poniatowski, HP-UX 11i System Administration. .. resolution 106 setup 122 hostname command 171 hosts equivalency file 108 set up 128 hosts file 106 , 108 , 126, 155 set up 112 hpux secondary system loader 296 hwmgr command 48, 92 I identification and authentication 241 ifconfig command 171 Ignite-UX 27, 55, 252, 258 init 298, 302 initial system loader 296 insf command 92 Insight Manager 32, 51 Interactive backup using SAM 56 Internet Protocol Address 107 ... resolution 138 DNS server configuration 141 doconfig command 102 documentation 35 Domain Name System 107 dsfmgr command 92 du command 279 dump command 57, 268 dump space calculating 67 dumpfs command 268 dupatch command 256, 258 duplex mode 110 dxarchiver utility 272 dxsysinfo utility 181, 290 Dynamic Host Configuration Protocol 107 dynamic routing 107 , 125 E edquota command 287 emacs 25 353 E (continued)... | help Appendix A 347 File System Hierarchies Tru64 UNIX Files | sessions | tmp | Trash | Desktop | tcb | bin | files | lib | .ssh2 | .cdsa | .sysman | TT_DB | .lsmsa | .netscape | nsmail | net | tmp_mnt 348 Appendix A B Recommended Supplemental References This appendix provides additional references for the system administrator on HP-UX, Tru64 UNIX, and the UNIX operating system and utilities in general... Address 107 resolution 107 Internet Protocol Security 247 Interprocess Communication Facility 179 ioscan command 47, 93 iostat command 182, 233 IP address 111, 113, 122 static 107 IPC status monitoring 179 ipcs command 182 I (continued) IPsec 247 ISL 296, 299 IT Resource Center 255 J JFS 265, 270 K kcmodule command 101 kconfig command 101 kctune command 77, 101 kcweb utility 102 kdbx command 76 Kerberos... close the Manage Local Groups dialog box 338 Chapter 15 A File System Hierarchies This appendix illustrates the different file system hierachies used by both the HP-UX and Tru64 UNIX operating systems Appendix A 339 File System Hierarchies HP-UX Files HP-UX Files The following illustrates the hierarchy of files in an HP-UX 11i v2 operating system / | | lost+found | etc | lvmconf | rc.config.d | opt... Martin Moore, Gregory Yates, Tru64 UNIX System Administrator’s Guide Boston, Massachussets: Digital Press, 2002 System Administration Hewlett-Packard Company Available online at http://h30097.www3.hp.com/docs/pub_page/doc_list.html Network Administration: Connections Hewlett-Packard Company Available online at http://h30097.www3.hp.com/docs/pub_page/doc_list.html Network Administrations: Services Hewlett-Packard... modifying to add a device 91 kernel file location 98 Kernel Tuner utility 76, 103 key points 25 kill command 233 killall command 233 kopt command 102 L LAN card configuration 109 lanadmin command 173 lanscan command 173 LDAP 107 libcrash library 77 License Unit Requirement Table 257 Lightweight Directory Access Protocol 107 linkloop command 173 LMF 257 lmf utility 258 LOFS 264, 266 login controls 243 . box. Appendix A 339 A File System Hierarchies This appendix illustrates the different file system hierachies used by both the HP-UX and Tru64 UNIX operating systems. File System Hierarchies HP-UX. |__cdrom |__qarun |__.sw File System Hierarchies Tru64 UNIX Files Appendix A 344 Tru64 UNIX Files The following illustrates the hierarchy of files in a Tru64 UNIX operating system. / |__. |__.tags . following sections describe how to delete a group account from the system using the HP-UX System Administration Manager and the Tru64 UNIX Account Management under SysMan. Deleting a Group Account