2.3.5.2 Administer the Node Administration Users

Exascale contains one node administration account for every node (storage server or compute node) that runs Exascale software services. Each node administration account inherits its user identifier (ID) from the server hostname and each account contains the privileges required to run the Exascale software services on the node. Do not directly use or modify these accounts.

During system deployment, the node administration user wallet is created on every node, and every wallet contains a system-generated private key. On a storage server, the wallet is located at /opt/oracle/cell/cellsrv/deploy/config/eswallet. On a compute node, the wallet is located at /opt/oracle/dbserver/dbms/deploy/config/eswallet.

By default, each node is configured with appropriate operating system privileges to limit wallet access.

Additionally, Oracle recommends that you extract the private key from each wallet and store it in a secure off-site key store. By doing this, you have a backup of the private key, which you can use if you need to rebuild the wallet. You can extract the private key from a wallet by using the ESCLI lswallet command.