HAUSER(1M)

NAME

hauser - add, modify, delete, or display VCS users

SYNOPSIS

hauser -add username [-priv Administrator | Operator [-group group(s)]]

hauser -addpriv username Administrator | Operator | Guest [-group group(s)]

hauser -delpriv username Administrator | Operator | Guest [-group group(s)]

hauser -addpriv groupname AdministratorGroup | OperatorGroup [-group group(s)]

hauser -delpriv groupname AdministratorGroup | OperatorGroup [-group group(s)]

hauser -addpriv groupname GuestGroup

hauser -delpriv groupname GuestGroup

hauser -update username

hauser -delete username

hauser -display [username]

hauser -list

hauser -help

AVAILABILITY

VRTSvcs

DESCRIPTION

The hauser command adds users to the VCS configuration. After being added, users can monitor and administer VCS from the GUI. Before users can be added, the configuration must first be set to read-write mode. After changes have been made to a user account, the configuration should be reset to read-only mode.

In secure clusters where Veritas Product Authentication Service is configured (SecureClus=1), operating system users can be assigned to an operating system level user group and that group can be assigned VCS privileges. For example the operating system group, osgroup1, can be assigned AdministratorGroup privileges for all service groups or a specified set of service groups.

You may choose to assign guest privileges to specific user groups with the permission to run read-only high availability commands in the cluster. If you want to assign guest privileges to an operating system level user group, note that the guest privileges apply to all the services groups in the cluster. You cannot assign guest privileges to specific service groups.

You may choose to assign VCS privileges to individual users or the operating system usergroup to which the user belongs.

OPTIONS

-add username [-priv Administrator | Operator [-group group(s)]]
  Add a user to the VCS configuration. The user can be added with privileges. For example, \(oqhauser -add tom -priv Administrator -group grp1\(cq would add "tom" as the Group Administrator for group grp1.

If you configured the cluster to use Veritas Product Authentication Service for security, then you can also add a user with Guest privilege to the VCS configuration as follows:

-add username [-priv Administrator | Operator | Guest [-group group(s)]]

-addpriv username Administrator | Operator | Guest [-group group(s)]
  Adds privileges to the user username. For example, \(oqhauser -addpriv tom Administrator -group grp1 grp2\(cq would make "tom" the Group Administrator for groups grp1 and grp2. \(oqhauser -addpriv harry Operator\(cq would make "harry" the Cluster Operator.
-delpriv username Administrator | Operator | Guest [-group group(s)]
  Deletes the specified privileges of the user username. For example, \(oqhauser -delpriv tom Administrator -group grp1\(cq would remove "tom" from the Group Administrator of group grp1.
-addpriv groupname AdministratorGroup | OperatorGroup [-group group(s)]
  Adds specified privileges (Group Administrator or Group Operator) to the group of operating system users, groupname.

For example, \(oqhauser -addpriv orausers AdministratorGroup -group grp1\(cq adds the specified privileges (Group Administrator or Group Operator) to the group of operating system users, groupname.

-delpriv groupname AdministratorGroup | OperatorGroup [-group group(s)]
  Deletes the specified privileges (Group Administrator or Group Operator) from the group of operating system users, groupname.

For example, \(oqhauser -delpriv orausers AdministratorGroup -group grp1\(cq removes the Group Administrator privileges for group grp1 from all users in the operating system group orausers.

hauser -addpriv groupname GuestGroup
  Add guest privileges to operating system level group.

For example, hauser -addpriv groupname OperatorGroup | AdministratorGroup [-group Grp1]

hauser -delpriv groupname GuestGroup
  Delete guest privileges to the operating system level group.

For example, hauser -delpriv groupname OperatorGroup [-group Grp1]

-update username
  Prompt a change of password for the existing user. Not applicable if cluster is secure (SecureClus=1).
-delete username
  Delete a user from the list of registered users.
-display [username]
  Displays a list of users and its privileges in a formatted output. If a user username is specified, it displays the privileges for that user.
-list Displays a list of all users on the cluster.

NOTES

In non-secure clusters, the password is encrypted before being written to the configuration file. The user names and passwords are unrelated to existing user names and passwords on any of the host systems.

In secure clusters, note that the passwords are not stored in the VCS configuration file. For more information, refer to the Cluster Server Administrator’s Guide.

SEE ALSO

haconf(1M)

COPYRIGHTS

Copyright (c) 2016 Veritas.

All rights reserved.


VCS 7.1 HAUSER(1M)