HP 3000 Manuals HP 3000 Manuals
Lesson 3 Managing Users
Introduction
Lesson 3 presents the commands associated with the following user-related
tasks:
* displaying user information
* creating new users
* Altering characteristics of existing users
You have logged on to the system and started an interactive session.
Previously, you used SHOWJOB to look at some of the users on the system.
You will now learn more commands to help you manage and monitor those
users.
The SHOWME command displays the account, group, and user information
associated with your session. You can also display information about
other users on the system or in your account with the LISTUSER command.
You can use the online MPE/iX help facility to learn more about this
command and other related account management commands.
Online help
As you know, an online help facility is a quick and easy way to obtain
information about a command without referring to a reference manual;
however, if you need in-depth information, the actual hard copy manual
should be used, since the online help information is sometimes
abbreviated.
To use online help, enter:
HELP
You should now get a "table of contents" of MPE/iX topics. Enter the
appropriate topic to give you a listing of all of the classes of commands
available, CLASS.
Now enter the correct class to get a listing of all resource management
commands, namely, RESOURCES.
Command Syntax and the LISTUSER Command
You should now see a listing of resource management commands. examine
the commands and find listuser. at the help prompt (>), you can enter
individual command names.
Do so now to get information about LISTUSER.
--------------------------------------------------------------------------------------------
| |
| Q1-9 According to online help, what does the LISTUSER command do? |
| |
| |
--------------------------------------------------------------------------------------------
Have you found a display of the syntax for LISTUSER? According to syntax
convention, the command name and any other required keywords are
displayed in CAPITAL letters. You may enter these words at your terminal
in either uppercase or lowercase. All parameter names are displayed in
lowercase letters. If the parameters are required (no brackets), you
must replace them by actual values.
Optional parameters are shown surrounded by brackets [ ]. You do not
have to specify values for such parameters. If you do not specify an
optional parameter in a command line,
a default value(s) is assigned. When the syntax shows that a comma is
associated with an optional parameter, you must omit that comma, too,
when you omit the parameter. Omitted, optional parameters default to
some specified value (as dictated by the syntax).
![[]](../../pic3k/M012149/FFN143c50.gif)
Figure 1-4. LISTUSER Command
Here is a simple example of command syntax:
LISTUSER [userset][,listfile][;PASS]
Here is an example of the corresponding command:
LISTUSER @.MYACCT
userset Is all of the users (@) in the MYACCT account.
listfile Defaults to the terminal (you see the listing there).
Note that the comma (,) associated with listfile is
omitted because listfile is omitted.
PASS Is not specified, so no passwords are displayed.
Note that the semicolon (;) associated with the
password is omitted because PASS is omitted.
NOTE More than likely, you will want to stop the LISTUSER listing
occasionally to study the resulting terminal display. To do so,
use the STOP key, if your keyboard has one--pressing STOP another
time to let the display continue. Or you may use CTRL S to stop
the display and CTRL Q to resume the display.
To get more information about parameters, their use, and examples
associated with a specific command, simply type PARMS, OPERATION, or
EXAMPLE at the help prompt.
To return to the original syntax display, enter the command again at the
help prompt.
Exercise 1-5: Using LISTUSER.
1. According to the LISTUSER syntax, which parameters are optional?
2. If you leave out these parameters, to what values do they default?
3. Use either of the following LISTUSER commands to list all of the
users in your ACCTx account:
LISTUSER @.ACCTx
or
LISTUSER
a. How many users exist and who are they?
b. What command would you use to list all of the users on the
system? What capability must you have to do this?
4. According to the LISTUSER syntax, what would happen if you allowed
the value of the userset parameter to default and entered the
following command? What would happen if you left out the comma?
LISTUSER,INFO;PASS
Hint: After executing the command, use the PRINT command to print
the contents of INFO.
5. Try to list all of the users on the system. You get this message:
________________________________________________________________________
| |
| EXECUTING THIS COMMAND ON ALL ACCOUNTS REQUIRES SYSTEM MANAGER |
| CAPABILITY |
| (CIERR 724) |
| |
________________________________________________________________________
You cannot look at all of the users because you do not have system
manager capability. You will learn about system manager
capability and other capabilities later in this lesson.
6. How would you modify the LISTUSER command you entered in question
3a so that it would display the passwords associated with the
users in your account? What capabilities do you need to do this?
********** End of Exercise 1-5 **********
User Capabilities
Notice the type of information that is displayed for LISTUSER. Pay
particular attention to the CAP information. The capabilities of the
user are shown by two-letter capability codes.
--------------------------------------------------------------------------------------------
| |
| Q1-10 What are the capability codes? |
| |
| |
| Q1-11 What capabilities must you have to list all users and their capabilities in |
| your account? On the system? |
| |
| |
| Q1-12 If you do not have the capabilities specified in the previous question, what |
| users can you list? |
| |
| |
--------------------------------------------------------------------------------------------
ALTUSER Command
The ALTUSER command changes a user's capabilities or passwords. This
command is useful for increasing security so that other people logging on
to your account must check with you for the current user password.
Users who wish to change their own user password may do so by using the
PASSWORD command. (Refer to module 4, lesson 5, "Changing User
Passwords," in Fundamental Skills).
The basic syntax of this command is
ALTUSER username;CAP=capabilities;PASS=password
If you change the capabilities or password of a user in your
account, the changes do not go into effect until the specified user logs
off and logs on again.
Use the HELP command to answer the following questions about ALTUSER:
--------------------------------------------------------------------------------------------
| |
| Q1-13 Suppose that there is a user called MYUSER in your account, and you wish to |
| change that user's password to MYPASS. Which command would you use? |
| |
| |
| a. How would this affect MYUSER during the current session? After |
| MYUSER logs off and logs on again? |
| |
| |
| b. What capabilities must you have to change a user password for a user |
| in your account? To change a user password for a different user in a |
| different account? |
| |
| |
--------------------------------------------------------------------------------------------
Now change your own password to MYPASSX (X=user number). To do so, enter
this:
ALTUSER USERx;PASS=MYPASSX
Use LISTUSER with the PASS option to verify that the change has occurred.
Then change your password back to your original password. Verify the
current password again:
LISTUSER USERx;PASS
NEWUSER Command
As account manager, besides changing an existing user's password or
capability, you may also create a brand new user in an account. The
NEWUSER command does this. Use the HELP command or the MPE/iX Commands
Reference Manual Volumes 1 and 2 (32650-90003 and 32650-90364) to
determine the syntax for the NEWUSER command.
Notice that the syntax is the same for both ALTUSER and NEWUSER. Also,
the required and optional parameters are the same.
Create a new user, USERxA (where X =your user number), in your account
(ACCTx), with a home group of CLASS. Let its capabilities default. The
password for this user will be UPASSxA.
NEWUSER USERxA.ACCTx;PASS=UPASSxA;HOME=CLASS
--------------------------------------------------------------------------------------------
| |
| Q1-14 What are the capabilities of this new user? |
| |
| |
--------------------------------------------------------------------------------------------
Create another new user in your account, USERxB (where X= your user
number). Give this user the same capabilities as USERxA, plus the
capability to create volumes and do process handling. Let the home group
be PUB. The password for this user will be UPASSxB.
NEWUSER USERxB.ACCTx;PASS=UPASSxB;CAP=ND,SF,CV,PH,BA,IA;HOME=PUB
--------------------------------------------------------------------------------------------
| |
| Q1-15 What error message do you get and why? Has the user been created and given |
| capabilities? |
| |
| |
--------------------------------------------------------------------------------------------
You now have an account with three users, each of whom has slightly
different capabilities:
USERx: AM,IA,BA,SF,ND,PH
USERxA: IA,BA,SF,ND
USERxB: IA,BA,SF,ND,PH
![[]](../../pic3k/M012149/FFN163c50.gif)
Figure 1-5. User Capabilities in One Account
As long as the users' capabilities do not exceed the account capability,
an account may have multiple users who have different capabilities. This
provides a way to implement a security scheme that controls the
capabilities of individual users within the same account. In this way,
people can log on as one user to do more proprietary work (they must know
the user password) or log on as another user to do more general work
(perhaps no user password is necessary).
PURGEUSER Command
You can also remove the users that you create in your account by using
the PURGEUSER command.
At this point, remove USERxB from your account. To do so, enter:
PURGEUSER USERxB
Your account should now have two users associated with it, USERx and
USERxA. In future lessons, please continue to log on as USERx until told
otherwise.
Lesson Summary
1. The online help facility displays information on specific MPE/iX
commands which are also described in the MPE/iX Commands Reference
Manual Volumes 1 and 2 (32650-90003 and 32650-90364). .
2. The basic syntax conventions for MPE/iX commands are
* Keywords are displayed in UPPERCASE letters.
* Parameters are displayed in lowercase letters.
* Optional parameters are displayed in lowercase letters,
enclosed in square brackets [ ].
* When commas (,) or semicolons (;) are associated with
optional parameters, they must be omitted whenever the
parameters are omitted and allowed to default.
* Commas associated with required parameters must be
supplied.
* Required parameters have no brackets around them.
3. The LISTUSER command can display information about all of the
users within your account.
4. The ALTUSER command changes a user's capabilities or password or
(The PASSWORD command allows a user to
5. The PURGEUSER command deletes a specified user from your account.
6. The NEWUSER command creates a new user in your account.