Chapter 7 Managing Users With User Manager and Group Manager

This chapter describes how to manage user accounts using two applications within the Solstice AdminSuite software:

• Group Manager, a graphical user interface for managing group information

• User Manager, a graphical user interface used to manage user account information

This is a list of the step-by-step instructions in this chapter.

• "How to Start Group Manager"

• "How to Add a Group"

• "How to Start User Manager"

• "How to Set Up User Account Defaults"

• "How to Add a New User Account"

• "How to Copy an Existing User Account"

• "How to Modify a Group"

• "How to Delete a Group"

• "How to Modify a User Account"

• "How to Delete a User Account"

Command-Line Equivalents of Group Manager

Table 7-1 lists the commands that provide the same functionality as Group Manager and can be used without running an X Window System. Many of the Group Manager procedures in this chapter provide corresponding examples using the command-line equivalents.

Files Modified by Group Manager

Table 7-2 lists the files Group Manager modifies depending on what name service you selected.

Command-Line Equivalents of User Manager

Table 7-3 lists the commands that provide the same functionality as User Manager and can be used without running OpenWindows or Motif CDE. Many of the User Manager procedures in this chapter provide corresponding examples using the command-line equivalents.

Files Modified by User Manager

Table 7-4 describes the system files that are modified by User Manager.

Setting Up User Accounts

How to Start Group Manager

1. Verify that the prerequisites described in Chapter 1, Introduction, are met.

2. Start the Solstice Launcher.

   $ solstice &

   The Solstice Launcher is displayed.

3. Click on the Group Manager icon.

   

   The Load window is displayed.

4. Select the name service used in your network.

5. Check that the domain or host name is correct.

   If not, type the name of the domain or host you need to access.

6. Click on OK.

   The Group Manager main window is displayed.

Example of the Group Manager Main Window

How to Add a Group

1. Start Group Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start Group Manager" for more information.

2. Choose Add from the Edit menu on the Group Manager main window.

   The Add window is displayed. If you need information to complete a field, click on the Help button to see field definitions for this window.

3. Type the name of the new group in the Group Name text box.

4. Type the group ID for the new group in the Group ID text box.

   The group ID should be unique.

5. (Optional) Type user names in the Members List text box.

   The list of users will be added to the group. User names must be separated by commas.

6. (Optional) Select the Password button to set the group password.

   Enter the group password and then verify the password in the fields provided in the Password dialog box.

7. Click on OK.

   The list of groups displayed in the Group Manager main window is updated to include the new group.

Example of a Completed Add Window

The following example adds a group named users that has a group ID of 100.

Example of a Command-Line Equivalent for Adding a Group

The following example is the equivalent of using Group Manager to add a group named users that has a group ID of 100.

D

# admgroupadd -g 100 -x pass=abc users

How to Start User Manager

1. Verify that the prerequisites described in Chapter 1, Introduction, are met.

2. Start the Solstice Launcher.

   $ solstice &

   The Solstice Launcher is displayed.

3. Click on the User Manager icon from the Solstice Launcher.

   

   The Load window is displayed.

4. Select the name service used in your network.

5. Check that the domain or host name is correct.

   If not, type the name of the domain or host you need to access.

6. Click on OK.

   The User Manager main window is displayed.

Example of the User Manager Main Window

How to Set Up User Account Defaults

1. Start User Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start User Manager" for more information.

2. Choose Set Defaults from the Edit menu.

   The Set Add Defaults window is displayed.

3. Fill in the Set Add Defaults window.

   The defaults you select will be the initial defaults values in the Add window. If you need information to complete a field, click on the Help button to see field definitions for this window.

   You can set the following defaults:

   • Primary and Secondary Groups

   • Login Shell

   • Password Policy

   • Creating a Home Directory

   • Home Directory Server

   • Skeleton Path (Path to User Initialization Files)

   • Using AutoFS (AutoHome Setup)

   • Permissions in Home Directory

   • Mail Server

4. Click on OK.

Command-Line Equivalent for Setting Up User Account Defaults

You can use the admuseradd command with the -D option to set up user account defaults from the command line.

How to Add a New User Account

1. Start User Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start User Manager".

2. Choose Add from the Edit menu.

   The Add window is displayed.

3. Fill in the Add window.

   If you need information to complete a field, click on the Help button to see field definitions for this window.

4. Click on OK.

   The list of user accounts displayed in the User Manager main window is updated to include the new user account.

Example of a Completed Add Window

Example of the Script Selection Window

The following screen shows an example of the Script Selection window; in order for scripts to be run from this window, the scripts must be located in the /opt/SUNWadmd/Scripts directory.

Example of a Command-Line Equivalent for Adding a User

The following command is the equivalent to adding a user with User Manager.

# admuseradd -u 101 -g users -c "Kryten Series 4000" -s /bin/csh -k /etc/skel -x
preadd=preaddscript -x postadd=postaddscript -x pw=NORM \
 
-x pwwarn=1 -d /export/home/kryten -m -x autohome=Y -x serv=jupiter kryten

In this command,

How to Copy an Existing User Account

1. Start User Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start User Manager".

2. Select a user account entry to copy from the main window.

3. Choose Copy from the Edit menu.

   The Copy window is displayed with the following fields copied from the selected user account:

   • Primary Group

   • Secondary Groups

   • Comment

   • Login Shell

   • Path

   • Server

   • Skeleton Path

4. Fill in the fields in the Copy window.

   If you need information to complete a field, click on the Help button to see field definitions for this window.

5. Click on OK.

   The list of user accounts displayed in the User Manager main window is updated to include the new user account.

   ---

   Note -

   There is no command line equivalent for copying an existing user account.

   ---

Maintaining User Accounts

How to Modify a Group

1. Start Group Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start Group Manager" for more information.

2. Select the group entry to modify from the Group Manager main window.

3. Choose Modify from the Edit menu.

   The Modify window is displayed containing the selected group entry.

4. Either modify the group's name or the users in the group.

   User names must be separated by commas. If you need information to complete a field, click on the Help button to see field definitions for this window.

5. Modify the group's password by selecting the Password button.

   Enter the group password and then verify it in the fields provided in the Password dialog box.

6. Click on OK.

   The group information displayed in the main window is updated.

Example of a Completed Modify Window

Example of a Command-Line Equivalent for Modifying a Group

The following command is the equivalent to modifying the member list in a group with Group Manager.

# admgroupmod -g 10 -x members=r2d2,holly,kryten -x passwd=abc
groupname

In this command,

How to Delete a Group

1. Start Group Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start Group Manager" for more information.

2. Select the group entry you want to delete from the Group Manager main window.

3. Choose Delete from the Edit menu.

   A window is displayed asking you to confirm the deletion.

4. Click on OK.

   The group entry is deleted from the Group Manager main window.

Command-Line Equivalent for Deleting a Group

You can also use the admgroupdel command to delete a group.

How to Modify a User Account

1. Start User Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start User Manager" for more information.

2. Select the user account entry to modify from the User Manager main window.

3. Choose Modify from the Edit menu.

   The Modify window is displayed containing the selected user account entry.

4. Modify the user account.

   If you need information to complete a field, click on the Help button to see field definitions for this window.

5. Click on OK.

Verification

Double-click on the modified user account entry in the User Manager main window to verify that the modifications were made. Click on Cancel to close the window without making any modifications.

Example of a Completed Modify Window

The following example sets the user lacey to be a member of the lp secondary group.

Example of the Script Selection Window

Example of a Command-Line Equivalent for Modifying a User Account

The following command is the equivalent to modifying a user account with User Manager. In this case, the command sets the user rimmer to be a member of the lp secondary group.

# admusermod -G lp rimmer

How to Delete a User Account

1. Start User Manager from the Solstice Launcher and select the name service, if not done already.

   See "How to Start User Manager" for more information.

2. Select the user account entry to remove from the main window.

3. Choose Delete from the Edit menu.

   The Delete window is displayed to confirm the removal of the user account.

4. (Optional) Click on the check box to enable scripts and then click on the ellipsis button to select the script to be enabled from the Script Selection dialog box.

   The script can be enabled to run before or after the user account is deleted.

   ---

   Note -

   In order to run the user supplied scripts, the scripts must be located in the /opt/SUNWadmd/Scripts directory.

   ---

5. (Optional) Click on the check box to delete the user's home directory and its contents.

6. (Optional) Click on the check box to delete the user's mailbox and its contents.

7. Click on OK when you are ready to delete the user account.

   The user account entry is deleted from the User Manager main window.

Example of the Delete Window

Example of a Command-Line Equivalent for Deleting a User Account

The following command is the equivalent of deleting a user account with User Manager.

# admuserdel -r -x serv=lorna -x predel=predelscript -x
postdel=postdelscript test1

In this command,

The scripts are user created scripts that are located in the /opt/SUNWadmd/Scripts directory.