Removing users from the Veritas Enterprise Administrator
Prev Using Veritas Enterprise Administrator Service Next

Removing users from the Veritas Enterprise Administrator

You may need to restrict access to the VEA authorization database (AZDB). You can remove users or user groups from the AZDB if they have been previously added. Use the commands in the table to remove users.

-r

Removes a user or group to the registry.

user -n user_name

Specifies the user to be added.

group -n group_name

Specifies the group to be added.

-A

Grants the user root access, making all SF DB2, Veritas File System, and Veritas Volume Manager objects accessible. If the -A is not specified, the user or group will not be able to perform any Veritas Volume Manager or Veritas File System functions, and will not be able to access Storage Foundation for DB2.

Allows the user access to the GUI if the user's primary group is different than the group owner.

-h fully_qualified_host_name

Specifies a fully qualified host name on which you want to add a user. For a stand alone installation, the command is run on the local host and the host name is optional. For a centrally managed server installation, you must be logged in as root and specify the host name.

-d domain_name

Specifies the domain to which the user belongs. By default the domain is the host name specified with -h.

-t domain_type

Specifies the type of domain to which the user belongs. Valid values are nis, nisplus, Idap, unixpwd, and gssapi. By default the domain type is assumed to be a UNIX login.

You cannot remove root from the VEA Service console registry.

To remove users other than root from the Veritas Enterprise Administrator AZDB

  1. Make sure that the optional GUI package was installed.

    OS

    Command

    AIX

    lslpp -L VRTSd2gui

    Linux

    rpm -qi VRTSd2gui -common

    Solaris

    pkginfo -l VRTSd2gui

  2. Check if VxSVC is online. Bring it online if it is offline.

  3. To remove a user, use the vxdb2edusrcommand as follows.

    # /opt/VRTS/bin/vxdb2edusr -r user -n user_name
[-h fully_qualified_host_namee -d domain_name -t domain_type]

    See the table for command usage details. For example:

    To remove the user "db2inst1" from the local host, enter the following:

    # /opt/VRTS/bin/vxdb2edusr -r user -n db2inst1

    To remove a UNIX login "db2inst1" from the local host, enter:

    # /opt/VRTS/bin/vxdb2edusr -r user -n db2inst1 -h test.example.com

    To remove a NIS login "db2inst1" in domain example.com from the centrally managed server install of VEA enter:

    # /opt/VRTS/bin/vxdb2edusr -r user -n db2inst1 -h test.example.com -d example.com -t nis

  4. To remove a group use the command.

    # /opt/VRTS/bin/vxdb2edusr -r group -n group_name

    See the table for command usage details. For example:

    To remove the group "dba" from the local host, enter:

    # /opt/VRTS/bin/vxdb2edusr -r group -n dba

    To remove UNIX group "dba" from the local host,:

    # /opt/VRTS/bin/vxdb2edusr -r group -A -f -n dba -h test.example.com

    To remove NIS group "dba" from the centrally managed server installation of VEA:

    # /opt/VRTS/bin/vxdb2edusr -r group -A -f -n dba -h test.example.com -d example.com -t nis
Prev Up Next
Adding users to the Veritas Enterprise Administrator Home Starting the Veritas Enterprise Administrator Service