Technical data

Managing User Accounts
7.9 Setting Up Special Accounts
/PROXY causes SYSMAN to check that device is in the NODE::USERNAME
format, which can be up to 63 characters in length.
/LOG causes SYSMAN to display a message that the device and user have
been added to the ALF database.
To protect automatic login accounts, set the AUTOLOGIN flag in the account’s
UAF record. This flag makes the account available only by autologin, batch, and
network proxy.
Examples
The following example shows how to invoke SYSMAN and assign terminal TTA0
to the INVENTORY25 account:
$ RUN SYS$SYSTEM:SYSMAN
SYSMAN> ALF ADD TTA0 INVENTORY25
When you create ALF records for proxy accounts, the device parameter can be as
long as 63 characters. For example:
SYSMAN> ALF ADD VMS:.ZKO.VMSORG.SYSMAN.CLIENT1::SYSTEM FOOBAR
In this command, VMS:.ZKO.VMSORG.SYSMAN.CLIENT1::SYSTEM is the
value of the device parameter.
For more information about autologin accounts and the SYSMAN ALF commands,
see the OpenVMS System Management Utilities Reference Manual and the
OpenVMS Guide to System Security.
7.9.2 Setting Up a Project Account with ACL Identifiers
This section describes how to set up a project account that uses access control
lists (ACLs) to control access to files shared by members of a project group.
See the OpenVMS Guide to System Security for complete details on setting up
accounts with ACLs.
How to Perform This Task
You must first add an identifier to the rights database for the project account.
Use the AUTHORIZE command ADD/IDENTIFIER to add identifiers to the
rights database and then associate users as holders of existing ACL identifiers
with the AUTHORIZE command GRANT/IDENTIFIER. All users who hold the
project’s identifier can use the disk space of the project account.
You can set up the project account so that disk space is charged to the project,
rather than to individual users, by assigning the resource attribute to the project
identifier.
Example
The following example summarizes the steps for setting up a project account:
1. Set up individual user accounts for each member sharing the project account
(as described in Section 7.5 and Section 7.6 on adding a user account).
2. Create the project identifier with the resource attribute and grant it to
those users who will have access to the project account. In the example that
follows, the project identifier KITE_FLYING is given the resource attribute.
This identifier is then granted to users GEORGE and LINDORF.
Managing User Accounts 7–35