Default User Attributes

The task of entering new users is greatly simplified by setting up default user attributes so that only those attributes unique to a specific user need be added. There are three mechanisms for setting up defaults:

• policy.conf(4) database--lets you specify authorizations, rights profiles, password generation, account locking, label display, and unattended workstation controls.

• label_encodings(4) database--lets you specify default values for user clearances and minimum SLs and public alternative names for ADMIN_HIGH and ADMIN_LOW.

• user templates--let you specify all user properties not covered by the policy.conf(4) and the label_encodings(4) databases except properties specific to a user such as user name and ID.

The tools for creating new users are the Add User With Wizard... and Add User From Template... menu options. The wizard approach offers simplicity but with these tradeoffs:

• The login shell defaults to Bourne.

• It does not set a skeleton path for initialization files.

• Secondary groups are not set.

The user template approach offers a larger set of user properties, but requires you to set up one or more templates of default user attributes ahead of time. Both methods should be used in conjunction with the policy.conf(4) and the label_encodings(4) databases. The User Properties dialog box lets you make modifications after the initial user information has been entered.