[ < ] [ > ]   [ << ] [ Up ] [ >> ]         [Top] [Contents] [Index] [ ? ]

9.7.4 User managment

If you don't want to use authentification feature, you have nothing to do : the `admin' account will automaticaly be used by communication utilities.

If you want to use user authentification feature, you just have to follow this steps :

Change administrator password  
Create users  
Change user privileges  

Change administrator password

First, we will change the `admin' password for `ze88x' :

 
$ dio87d -d
$ dio87c -- password "ze88x"

If we try to send another command, an authentification error occures :

 
$ dio87c help
Incorrect password.

In fact, communication utilities use by default an empty string as password. We must specify the new password with the `-p' option :

 
$ dio87c -p "ze88x" -- help
Available functions are :
cc      ck     cl     exit ...
[...]
rtswad  shutdown      ta ...

A more efficient way is to define DG87_PASSWORD environment variable :

 
$ export DG87_USER="admin"
$ export DG87_PASSWORD="ze88x"

$ dio87c help
Available functions are :
cc      ck     cl     exit ...
[...]
rtswad  shutdown      ta ...
$

Create users

To create or delete users, you must have the `admin' privilege for the `user' commands family. The `admin' account has this privilege.

For example, we will create an account named `john' :

 
$ dio87c ua john
$ dio87c uc
3
$ dio87c ul
admin
diogene
john
$

ua is used to create the new account. uc is used to print the number of users and ul prints the user list.

The password of a new account is an empty string. The administrator uses password command to initialize the password of the new account. To verify that the change is done, he use `-u' and `-p' option to send a command with John's account :

 
$ dio87c -- password john "yy8a"  
$
$ dio87c -u john -p "yy8a" -- help
Available functions are :
exit   help   memory   password   user   version   check 	
$

Change user privileges

By default, a new user has only the `consult' privilege for the generic commands family. ui is used to print user privileges :

 
$ dio87c ui john 
User Name:      john
generic:        consult
communication:  none
user:           none
engine:         none
target:         none
referential:    none
job:            none
day:            none
$

We will change John's privilege to be an administrator for `user' and `communication' commands families. The usp command is used to set user privileges :

 
$ dio87c usp john admin user communication
$
$ dio87c ui john
User Name:      john
generic:        consult
communication:  admin
user:           admin
engine:         none
target:         none
referential:    none
job:            none
day:            none
$

We can see the list of commands John can now access with an help command :

 
$ dio87c -u john -p "yy8a" -- help
Available functions are :
cc   ck  cl   exit   help   mc  memory   mk   ml 	
password   ua   uc   ui   uk   ul  usp   user   version 
check 	
$

If John tries to call a command which is not in this list, he will get an error :

 
$ dio87c -u john -p "yy8a" -- shutdown
Permission denied
$

Now, we will create an new account for William, who will be responsible for referentials. He should have the `admin' privilege for the `referential' commands family :

 
$ dio87c -- ua william
$ dio87c -- usp william admin referential
$ dio87c -u "william" -p "" -- help
Available functions are :
exit   help   memory  password   user  version  check  ra   rc 	
rd     ri     rk      rl    rs   rja   rjc      rjda    rjdc 	
rjdk   rjdl   rji     rjk   rjl  rjsa  rjsd     rjsoec  rjsp 	
rjst   rjswad rra     rrc   rrk  rrl   rrsr     rrsy    rroa 	
rroc   rrok   rrol    rrom  rta  rtc   rtca     rtcc    rtck 	
rtcl   rtda   rtdc    rtdk  rtdl rti   rtk      rtl     rtsr 	
rtsy   rtoa   rtoc    rtok  rtol rtom  rtsd     rtsoec  rtst 	
rtswot rtswad 	

William can't access to targets and queues informations because he has the `none' privilege for the `target' family. But he needs to consult this information for task creation (to link task with queue). We will change his privileges to give him the `consult' privilege for the `target' family :

 
$ dio87c -- usp william consult target
$
$ dio87c -u "william" -p "" -- help
Available functions are :
exit  help   memory  password  user  version  check  qc  qi 
ql    qrtl   qrtc    ra      rc    rd     ri      rk    rl 	
rs    rja    rjc     rjda    rjdc  rjdk   rjdl    rji   rjk 	
rjl   rjsa   rjsd    rjsoec  rjsp  rjst   rjswad  rra   rrc 	
rrk   rrl    rrsr    rrsy    rroa  rroc   rrok    rrol  rrom 	
rta   rtc    rtca    rtcc    rtck  rtcl   rtda    rtdc  rtdk 	
rtdl  rti    rtk     rtl     rtsr  rtsy   rtoa 	  rtoc  rtok 	
rtol  rtom   rtsd    rtsoec  rtst  rtswot rtswad  tc    ti 	
tl 	
$

He can now consult targets and queues informations with commands like tl, ti, ql and qi.


[ < ] [ > ]   [ << ] [ Up ] [ >> ]         [Top] [Contents] [Index] [ ? ]

This document was generated by dom on September, 11 2005 using texi2html