Creating new VCS accounts if you used native operating system accounts


Creating new VCS accounts if you used native operating system accounts
Prev	Appendix D. Changes to bundled agents in VCS 6.0.1	Next

VCS has deprecated the AllowNativeCliUsers attribute. To use native OS accounts with VCS, use the halogin command. After you run the halogin command, VCS encrypts and stores your VCS credentials in your home directory for a specific time period. After you run the halogin command, you need not authenticate yourself every time you run a VCS command. In secure clusters, the command also sets up a trust relationship and retrieves a certificate from an authentication broker.

See the Veritas Cluster Server Administrator's Guide for information on assigning user privileges to OS user groups for clusters running in secure mode and clusters not running in secure mode.

Perform the following procedure if you used the AllowNativeCliUsers attribute. Ensure that each native user running VCS commands has a home directory on the system from which the user runs VCS commands.

To set up VCS authentication for clusters running in secure mode

Set the configuration (main.cf) mode to read/write.
```
# haconf -makerw
```
Assign proper privileges to the OS users or user groups. Each operating system user must perform steps 3 and 4.
If the user executes VCS commands from a remote host, set the following environment variables:
- VCS_HOST: Name of the VCS node on which you run commands. You may specify the virtual IP address associated with the cluster.
- VCS_DOMAIN: Name of the VxSS domain to which the user belongs.
- VCS_DOMAINTYPE: Type of VxSS domain: unixpwd, ldap, nt, nis, nisplus, or vx.
Run the halogin command:
```
$ halogin vcsusername password
```

To set up VCS authentication for clusters not running in secure mode

Set the configuration (main.cf) mode to read/write.
```
# haconf -makerw
```
Create VCS user accounts for all users and assign privileges to these users.
Each VCS user must run the halogin command:
```
$ halogin vcsusername
			password
```

Prev	Up	Next
Manually removing deprecated resource types and modifying attributes	Home	Appendix E. Configuration files