Computer Drive User Manual

Chapter 13. User Accounts and Accounting
13.1. Managing HPSS Users
After the HPSS system is up and running, the administrator must create the necessary accounts for the
HPSS users. For a new HPSS user, a Kerberos, LDAP, or UNIX ID (depending on authentication type
configured) and an FTP ID must exist before the user can access HPSS via FTP. In addition, if the HPSS
user needs to use SSM, an SSM ID must also be created before the user can use SSM. The SSM ID
should be created only for the HPSS administrators and operators.
The HPSS User Management Utility (hpssuser) provided with HPSS can be used by the administrator to
add, delete, and list the HPSS user IDs. The utility must run as root to acquire the necessary authority to
create new KRB, LDAP, UNIX, FTP, and SSM IDs. Refer to the hpssuser man page for more
information on how to invoke the hpssuser utility.
13.1.1. Adding HPSS Users
The hpssuser utility can be used by the administrator to add a UNIX User ID, a KRB User ID, an LDAP
User ID, an FTP User ID, and an SSM User ID to the HPSS if these IDs do not already exist. The
hpssuser utility can be invoked to simultaneously add multiple types of User IDs for a user, or to add an
individual user type. Refer to the hpssuser man page for more information.
Ensure that the Core Server is up and running before adding the FTP User ID. The hpssuser
utility will not be able to create the user’s home directory if the Core Server is not available.
13.1.1.1. Add All User ID Types
The utility can be used to simultaneously add all relevant User ID types for a user. When invoked with
the '-all' option, the hpssuser utility will consult the system authentication and authorization configuration
and add user types which are consistent with the configuration. For example, if the system is configured
to use Kerberos authentication and LDAP authorization, a KRB User ID and an LDAP User ID will be
added in addition to the UNIX User ID, FTP User ID and SSM User ID types.
Invoke the hpssuser utility as follows to add the required User ID for an HPSS user:
hpssuser -add <user> -all
When invoked, the hpssuser utility will prompt the user for any required data. The following is an
example of adding all User ID types on a system configured to use Kerberos authentication and LDAP
authorization. The -nohome option indicates that no FTP home directory will be created.
# hpssuser -add user1 -all -nohome
User ID#: 300
Primary group name: hpss
Enter password for user1: ******
Re-enter password to verify: ******
Full name: Test User
Login shell: /bin/ksh
Unix (local/system) home directory: /home/user1
[ adding unix user ]
HPSS Management Guide November 2009
Release 7.3 (Revision 1.0) 325