C H A P T E R 5 - Managing User Accounts

C H A P T E R 5

Managing User Accounts

This chapter describes how to manage user accounts using the CLI and the WebGUI. It includes the following sections:

Section 5.1, User Accounts Overview

Section 5.2, Managing User Accounts Using the CLI

Section 5.3, Managing User Accounts Using the WebGUI

5.1 User Accounts Overview

The ILOM supports up to nine user accounts. The root account is set by default and cannot be removed. Therefore, you can configure eight additional accounts.

Each user account consists of a user name, a password, and a role.

Caution - The ILOM includes a user account called sunservice, which shares the ILOM root password. Normally, it is used exclusively by Sun Service personnel; however, it can also be used to perform recovery procedures documented in the product notes. Incorrect use of this account can corrupt the service processor image or operations.

The roles include:

Administrator - Enables access to all ILOM features, functions, and commands.

Operator - Enables limited access to ILOM features, functions, and commands. In general, operators cannot change configuration settings.

Operators cannot:

See or change LDAP settings

See or change RADIUS settings

Add or remove users

Change network settings (view only)

Change Network Time Protocol (NTP) settings (view only)

Change SNMP settings (view only)

Change HTTP settings (view only)

5.2 Managing User Accounts Using the CLI

This section describes how to add, modify, and delete user accounts using the CLI.

5.2.1 Adding a User Account

Type the following command to add a local user account:

create /SP/users/username password=password role=administrator|operator

Only accounts with administrator privileges are allowed to add, modify, or delete user accounts. However, operators can modify their own password.

5.2.2 Deleting a User Account

Type the following command to delete a local user account:

delete /SP/users/username

5.2.3 Displaying User Accounts

Type the following command to display information about all local user accounts:

show /SP/users

5.2.4 Configuring User Accounts

Use the set command to change passwords and roles for configured user accounts.

5.2.4.1 Syntax

set target [propertyname=value]

5.2.4.2 Targets, Properties, and Values

The following targets, properties, and values are valid for local user accounts.

TABLE 5-1 Valid Targets, Properties, and Values for Local User Accounts
Target	Property	Value	Default
`/SP/users/username`	`permissions` `password`	administrator\|operator string	operator

Examples

When changing the role for user1 from administrator to operator type:

-> set /SP/users/user1 role=operator

To change the password for user1, type:

-> set /SP/users/user1 password

Changing password for user /SP/users/user1/password...

Enter new password:********

Enter new password again:********

New password was successfully set for user /SP/users/user1

Note - You must have administrator privileges to change user properties.

5.3 Managing User Accounts Using the WebGUI

This section describes how to add, modify, and delete user accounts using the WebGUI.

5.3.1 Adding User Roles and Setting Privileges

1. Log in to the ILOM as administrator.

Only accounts with administrator privileges are allowed to add, modify, or delete user accounts. However, operators can modify their own password.

If a new user is given administrator privileges, those privileges are also automatically granted for the command-line interface (CLI) and Intelligent Platform Management Interface (IPMI) to the ILOM.

2. Select User Management => User Accounts.

The User Accounts page appears.

Note - The ILOM supports a maximum of nine user accounts. If all nine user account slots are configured, you must delete an existing user account before you can add a new user account. See Section 5.3.3, Deleting User Accounts.

FIGURE 5-1 User Accounts Page

Graphic showing session login using an SSH CLI interface.

3. Click Add.

The Add User dialog box appears.

FIGURE 5-2 Add User Dialog Box

Graphic showing session login using an SSH CLI interface.

4. Complete the following information:

a. Type a user name in the User Name field.

The user name must be at least 4 characters and no more than 16 characters. User names are case sensitive and must start with an alphabetical character. You can use alphabetical characters, numerals, hyphens, and underscores. Do not include spaces in user names.

b. Type a password in the Password field.

The password must be at least 8 characters and no more than 16 characters. The password is case sensitive. Use alphabetical, numeric, and special characters for better security. You can use any character except a colon. Do not include spaces in passwords.

c. Retype the password in the Confirm Password field.

d. Select Administrator or Operator from the Role drop-down menu.

e. When you are done entering the new user's information, click Add.

The User Accounts page is redisplayed. The new user account and associated information is listed on the User Accounts page.

5.3.2 Modifying User Accounts

This section describes how to modify an ILOM user account. Modifying a user account can change the user's password, and their network and serial privileges.

Note - Normally, only accounts with administrator privileges are allowed to add, modify, or delete user accounts. However, operators can modify their own password.

If a new user is given administrator privileges, those privileges are also automatically granted to the user for the command-line interface (CLI) and Intelligent Platform Management Interface (IPMI) to the ILOM.

1. Log in to the ILOM as administrator.

2. Select User Management => User Accounts.

The User Accounts page appears.

FIGURE 5-3 User Accounts Page

Graphic showing session login using an SSH CLI interface.

3. Select a radio button to select a user account to modify.

4. Click Edit.

The Edit User dialog box appears.

FIGURE 5-4 Edit User Dialog Box

Graphic showing the Edit User dialog box.

5. Modify the password if needed.

a. Select the Change check box if you want to change the user password. If you do not want to change the password, deselect the check box.

b. Type a new password in the Password field.

c. Retype the password in the Confirm Password field to confirm the password.

6. Select a role from the Role drop-down menu.

7. After you have modified the account information, click Save for your changes to take effect, or click Close to return to the previous settings.

The User Accounts page is redisplayed.

5.3.3 Deleting User Accounts

This section describes how to delete a user account.

1. Log in to the ILOM as administrator.

2. Select User Management => User Accounts.

The User Accounts page appears.

FIGURE 5-5 User Accounts Page

Graphic showing session login using an SSH CLI interface.

3. Select the radio button next to the user account you want to delete.

You cannot delete the root account.

4. Click Delete.

The user accounts page appears with the user deleted.