Adding users to the Veritas Enterprise Administrator

You may want to add users to the VEA authorization Database (AZDB) to allow access to the interface to users other than root. You also have the option to give database administrators root privileges.

Having root privileges means that you can access the operations for volume, disk, and file system objects in the system. Use the commands in the table to add users.

Web GUI users must have a user account on the VEA authorization Database (AZDB) as well as a user profile on the Web server to access the Web GUI version of the Veritas Enterprise Services.

-a

Adds a user or group to the registry.

user -n user_name

Specifies the user to be added.

group -n group_name

Specifies the group to be added.

-A

Grants the user root access, making all SF DB2, Veritas File System, and Veritas Volume Manager objects accessible. If the -A is not specified, the user or group will not be able to perform any Veritas Volume Manager or Veritas File System functions, and will not be able to access Storage Foundation for DB2.

Allows the user access to the GUI if the user's primary group is different than the group owner.

-h fully_qualified_host_name

Specifies a fully qualified host name on which you want to add a user. For a stand alone installation, the command is run on the local host and the host name is optional. For a centrally managed server installation, you must be logged in as root and specify the host name.

-d domain_name

Specifies the domain to which the user belongs. By default the domain is the host name specified with -h.

-t domain_type

Specifies the type of domain to which the user belongs. Valid values are nis, nisplus, Idap, unixpwd, and gssapi. By default the domain type is assumed to be a UNIX login.

To add users other than root to the Veritas Enterprise Administrator AZDB

  1. If you installed packages manually, make sure that the GUI package was installed.

    OS

    Command

    AIX

    lslpp -L VRTSd2gui

    Linux

    rpm -qi VRTSd2gui -common

    Solaris

    pkginfo -l VRTSd2gui

  2. Check if VxSVC is online. Bring it online if it is offline.

    # /opt/VRTSob/bin/vxsvcctrl status
    # /opt/VRTSob/bin/vxsvcctrl start
  3. To give rootprivileges within the GUI to the database administrator, use the vxdb2edusrcommand:

    # /opt/VRTS/bin/vxdb2edusr -a user [-A] [-f] -n user_name 
    [-h fully_qualified_host_name -d domain_name -t domain_type]

    See the table for command usage details. For example:

    To add a database administrator with the name "db2inst1" as a user with rootprivileges, enter:

    # /opt/VRTS/bin/vxdb2edusr -a user -A -f -n db2inst1

    To add a UNIX login with the name "db2inst1" into a stand alone installation:

    # /opt/VRTS/bin/vxdb2edusr -a user -n db2inst1 -h test.example.com

    To add an NIS user with the name "db2inst1" in example.com domain with a centrally managed server installation of VEA:

    # /opt/VRTS/bin/vxdb2edusr -a user -n db2inst1 -h test.example.com
    test.example.com
  4. To add a user without root privileges, use the vxdb2edusr command:

    # /opt/VRTS/bin/vxdb2edusr -a user -n user_name
    

    See the table for command usage details. For example:

    To add "db2inst1" as a user, enter the following:

    # /opt/VRTS/bin/vxdb2edusr -a user -n db2inst1
  5. To add a group to the AZDB, use the vxdb2edusr command:

    # /opt/VRTS/bin/vxdb2edusr -a group [-A] [-f] -n group_name 
    [-h fully_qualified_host_name -d domain_name -t domain_type]

    See the table for command usage details. For example:

    To add group "dba" to the AZDB on the local host:

    # /opt/VRTS/bin/vxdb2edusr -a group -A -f -n dba

    To add UNIX group "dba" to the AZDB on the local host:

    # /opt/VRTS/bin/vxdb2edusr -a group -A -f -n dba -h test.example.com

    To add NIS group "dba" to the centrally managed server installation of VEA:

    # /opt/VRTS/bin/vxdb2edusr -a group -A -f -n dba -h test.example.com -d example.com -t nis

To add a user profile to the Web server

  1. Create the user name and password on the Veritas Enterprise Administrator AZDB.

    See “To add users other than root to the Veritas Enterprise Administrator AZDB”.

  2. Use your browser to connect to the Web server at https://host:8443/VEAWeb/Login.

    See Opening and closing the Veritas Storage Foundation for DB2 GUI.

  3. Select the Create Profile option.

  4. Enter the user name and password. Confirm the password.

  5. Click Create Profile.