HP 3000 Manuals HP 3000 Manuals
System Manager Tasks
This section describes the system manager's account structure
responsibilities, including:
* Creating and maintaining accounts
* Establishing system-level UDCS
A system operator or system supervisor can also perform some of the
system manager tasks described in this chapter. Because the system
manager is ultimately responsible for a system's account structure and
security, all system administrator tasks are grouped in this single
chapter. Tasks that do not require system manager (SM) capability are
noted.
Creating and Maintaining Accounts
As a system manager, you are responsible for creating, modifying, and
removing accounts, groups, and users.
Creating New Accounts With the NEWACCT Command. You create new accounts
with the NEWACCT command. Every new account must have an account name
and a manager name. Additionally, you can give the account a password,
disk storage limit, CPU time limit, connect time limit, capabilities,
file security provisions, subqueue priority, local attributes, and a
volume set or class.
NEWACCT Syntax
NEWACCT acctname,mgrname
[;PASS=[password]][;FILES=[filespace]][;CPU=[cpu]]
[;CONNECT=[connect]][;CAP=[capabilitylist]]
[;ACCESS=[fileaccess]][;MAXPRI=[subqueuename]]
[;LOCATTR=[localattribute]][;ONVS=volumesetname]
Table 2-5 shows the parameters of the NEWACCT command and the default
values that apply if you do not use a parameter.
Table 2-5. NEWACCT Parameters
--------------------------------------------------------------------------------------------
| | |
| Parameter | Description |
| | |
--------------------------------------------------------------------------------------------
| | |
| acctname | The account name. |
| | |
--------------------------------------------------------------------------------------------
| | |
| mgrname | The account manager name. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;PASS=[password] | The account password. Default: none |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;FILES= [filespace] | The disk storage limit, in sectors, for the |
| | permanent files of the account. Default: |
| | unlimited |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CPU=[cpu] | The CPU time limit, in seconds, for the account. |
| | Default: unlimited |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CONNECT= [connect] | The connect time limit, in minutes, for the |
| | account. Default: unlimited |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CAP=[capabilitylist] | Lists the capabilities permitted to the account. |
| | Separate capabilities in your capabilitylist with |
| | commas. Default: AM, AL, GL, SF, ND, IA, BA |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;ACCESS= [fileaccess] | Lists the file access restrictions for the account. |
| | Default: R,L,A,W,X:AC |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;MAXPRI=[subqueuename] | Names the highest priority subqueue the account can |
| | use. Default: CS |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;LOCATTR=[localattribute] | Assigns a local attribute to the account. Default: |
| | none |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;ONVS=volumesetname | Specifies a particular volume set on which the |
| | account is to be built. Default: system volume |
| | set |
| | |
--------------------------------------------------------------------------------------------
For example, to create a new account named TECHNLGY with an account
manager named MGR, an account password of "secret", and default values
for the other parameters enter:
NEWACCT TECHNLGY,MGR;PASS=SECRET
To create an account named BOOK on the system volume set, with the
account manager named AUTHOR, and give it account manager, account
librarian, and system manager capability, enter
NEWACCT, BOOK,AUTHOR;CAP=IA,BA,AM,AL,SM
The account manager is responsible for creating the other groups and
users within the account. As system manager, however, you are also
capable of creating groups and users; refer to "Account Manager Tasks"
for instructions.
Figure 2-5 contains a sample New Account Checklist. It helps you to plan
a new account before you create it. You can file the checklists, and
then have a quick record of each account's attributes.
![[]](../../pic3k/M010198/L270163c50.gif)
Figure 2-5. New Account Checklist
Modifying Accounts With the ALTACCT Command. You can modify, any of the
attributes of an account with the ALTACCT command. Enter the command,
the account name, and any of the account parameters you intend to modify.
ALTACCT Syntax
ALTACCT acctname
[;PASS=[password]] [;FILES=[filespace]]
[;CPU=[cpu] ] [;CONNECT=[connect]]
[;CAP=[capabilitylist]][;ACCESS=[(fileaccess)]]
[;MAXPRI=[subqueuename]][;LOCATTR=[localattribute]]
[;ONVS=volumesetname]
Table 2-6 describes ALTACCT parameters.
Table 2-6. ALTACCT Parameters
--------------------------------------------------------------------------------------------
| | |
| Parameter | Description |
| | |
--------------------------------------------------------------------------------------------
| | |
| acctname | The account name. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;PASS=[password] | The account password. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;FILES=[filespace] | The disk storage limit, in sectors, for the |
| | account. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CPU=[cpu ] | The CPU-time limit, in seconds, for the account. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CONNECT=[connect ] | The connect-time limit, in minutes, for the |
| | account. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;CAP=[ capabilitylist ] | Lists the capabilities permitted to the account. |
| | Separate capabilities in your capabilitylist with |
| | commas. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;ACCESS=[fileaccess ] | Lists the file access restrictions for the account. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;MAXPRI=[subqueuename ] | Names the highest priority subqueue the account can |
| | use. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;LOCATTR=[localattribute ] | Assigns a local attribute to the account. |
| | |
--------------------------------------------------------------------------------------------
| | |
| ;ONVS=volumesetname | Specifies the particular volume set in which the |
| | account will be altered. Default: System volume |
| | set |
| | |
--------------------------------------------------------------------------------------------
For example, the following command changes the PERSONEL account's
password to RESUME:
ALTACCT PERSONEL;PASS=RESUME
Removing Accounts With the PURGEACCT Command. Use the PURGEACCT command
to remove an account from the system. PURGEACCT removes the account, its
users, and its groups from your system or from a particular volume set.
It is a good practice to store the files in an account to backup media
before the account is purged. Refer to MPE XL Commands Reference Manual
(32650-90003) for more information. If the files are stored, a backup
copy of the account is available should it ever be necessary to restore
it to the system.
Table 2-7. PURGEACCT Parameters
---------------------------------------------------------------------------------------------
| | |
| Parameter | Description |
| | |
---------------------------------------------------------------------------------------------
| | |
| acctname | The account name. |
| | |
---------------------------------------------------------------------------------------------
| | |
| ;ONVS= volumesetname | Removes the account from the specified volume set |
| | directory. Specify a volume set in the form: |
| | |
| | MPEXL_ SYSTEM_VOLUME_SET |
| | |
| | where MPEXL is a defined volume set. |
| | |
| | The volume set you specify must be mounted. |
| | |
---------------------------------------------------------------------------------------------
To purge an account from the system, enter the PURGEACCT command and the
account name. For example, to purge the OLDACCT account, enter:
PURGEAGCT OLDACCT
To purge an account from a particular volume set, include the volume set
name within your PURGEACCT command. For example:
PURGEACCT OLDACCT;ONVS=MPEXL_SYSTEM_VOLUME_SET
If the account resides on both system and nonsystem volumes, issue two
commands to purge the account. First purge it from the system volume,
and then from the nonsystem. For example:
PURGEACCT ACCT2
PURGEACCT ACCT2 ;ONVS=MPEXL,SYSTEM_VOLUME_SET