Before Setting Up User Accounts

If you are using a name service, you must have the following set up before creating accounts:

• The home directory server must be mounted on the name service master.

• The mail server must be mounted on the name service master.

• The tsol_smc.tbx and tsol_name-service.tbx toolboxes must be edited with the name service master's name and address on the name service master. The install team set this up in "Edit SMC Toolbox Definition for the Name Service" in Trusted Solaris Installation and Configuration.

The following information is useful to have when you set up users in the SMC Users tool.

• A list of the available rights profiles.

  The "Rights Profile Descriptions" in Trusted Solaris Administration Overview lists the rights profiles that are delivered with the Trusted Solaris release. If additional rights profiles have been created at your site, see your own internal documentation for a description. See "To List All Rights" for how to list the rights profiles on your system and in your name service. The smprofile(1M) man page also provides examples.

• A list of the available roles.

  See "To List All Roles" for how to list the roles in your name service. The smrole(1M) command with the list option lists all the roles. If your site has added or modified roles, see your internal documentation for a description of the site's roles.

• A list with the name of each person who needs an account, along with the responsibilities, roles, clearances and minimum labels assigned to each. You also need to determine who is going to be able to assume administrative roles.