Lesson 2 Managing Account Groups

Table 2-1 ACD Permissions

1. Use the NEWGROUP command to create a group called STOP with default attributes.

2. Use the LISTGROUP command to list the attributes of this group.

   1. What default capabilities have been assigned?

   2. What default file access and user codes have been assigned?

   3. What command would you use to check on this group's password?

   	NOTE: Any mistakes that you may make can be corrected with the ALTGROUP command, which is covered later in this lesson.

3. Create a new group called GO with the following attributes:

   Password: Fast Capabilities: Interactive access (IA), batch access (BA),and process handling (PH) File Access: Default

4. Use the LISTGROUP command to verify the new group and its password.

5. Use the NEWGROUP command to create another group SLOW with the following attributes:

   Password: Down Capabilities: Default File Access: read (R), lock (L), append (A), write (W), execute (X), save (S) for the group librarian (GL) only.

6. Use the LISTGROUP command to check on the new group.

1. Use the ALTGROUP command to do the following:

   1. Change the password on the PROJECT group to PJ.

      (If you have forgotten the password, use the PASS parameter with the LISTGROUP command.)

   2. Change the capabilities on the GO group to default.

   3. Change the file access capabilities on the SLOW group to read, write, append, and execute for any user of the group.

   4. Remove the password for the SLOW group.

2. Check the groups that you created in the previous exercise and modify their attributes for additional practice.

3. Use the LISTGROUP command to check on each of the groups.

1. Use the ALTSEC command to give yourself Read and Write permission for one of the files that you have created.

2. use the ALTSEC command to give another user Read permission for this file.

1. Log on as MANAGER.SYS.

2. Type MKACCT.MPEXL at the system prompt, and press Return.

   :MKACCT Return

   The following MKACCT information appears on your screen:

   ********************************************************************** * MKACCT allows you to create: ACCOUNTS, GROUPS, and USERS. * * * * ACCOUNTS contain GROUPS and USERS. GROUPS contain your files. * * The next screen shows a picture of an account structure. * * * * All USERS in the same ACCOUNT can share files, but each USER * * should have a GROUP where their own files reside. * * * * USER, ACCOUNT and GROUP names are needed to logon to your system, * * for example: * * * * :hello USER.ACCOUNT,GROUP or * * :hello MANAGER.SYS,PUB * * * * Each USER should be assigned a HOME GROUP, so that a group name is * * not needed when the user logs on. For example, the home group for * * MANAGER.SYS is PUB so that the system manager can logon as: * * * * :hello MANAGER.SYS * **********************************************************************

   Press the Return key to continue.

   The next screen shows you a diagram of the account structure: how files belong in groups, and groups belong in an account:

   	NOTE: When you are prompted for Yes/No/Exit, your options are these: Type YES or Y and press Return. This action tells MKACCT to continue with what it is doing. In most instances the YES response will be underlined: YES. Pressing Return is the same as responding with the underlined choice. If YES is underlined, Return is the same as Yes. Type NO or N and press Return. This action tells MKACCT to ahead to the next step, if there is one. Type EXIT or E and press Return. This action tells MKACCT to stop where it is without performing the next step, if there is one. MKACCT will ask you to confirm your intention to quit. Typing EXIT (or E) one more time will exit you out of the command file to the system prompt.

3. After viewing a diagram of an account structure, MKACCT asks if you want to create a new account> If you want to create an account, respond YES.

   Do you want to create a new {{account}} (Yes,No,Exit)?

   Again you are given three options to respond to this prompt.

   • If you type NO, MKACCT will ask you if you want to add groups or users to an existing account. For more information on this topic, see the following task, "Using MKACCT to add groups or users to accounts."

   • If you type EXIT, MKACCT will stop and ask you to confirm your intention of stopping MKACCT.

   • If you type YES, MKACCT will start the process for creating an account.

4. When you are ready to create an account, type YES, or press Return, at this prompt. You must respond to a sequence of prompts requesting a name for the account, a name for the account manager, and a password for the account and account manager. Passwords are optional; however, the lack of passwords diminish the security on your system. The following example displays the sequence of prompts that appear, along with sample user responses.

   Do you want to create a new {{account}} (Yes,No,Exit)?Yes Return Every ACCOUNT must be named and must include a manager (USER). Every account and manager should have a password. Accounts and user without passwords are not secure. If there are any problems, you will be asked to repeat the process. Please enter a name for this ACCOUNT: SALES Return Please enter a password for account SALES: FY91 Return Please enter a manager name for account SALES: YUKI Return Please enter a password for account manager YUKI: KINU2 Return

   After entering a password for the account manager, a screen similar to the following will appear:

   The following account and user will be created: Account name :SALESh Account password :FY91 Manager name :YUKI Manager password :KINU2 Create the ACCOUNT (Yes,No,Exit)?

5. Type YES, or press Return. Doing so will finalize the creation of the account, the account's password, the account manager, and the account manager's password.

6. MKACCT then asks, "Do you want to create a new group in the ACCTNAME account (Yes,No,Exit)?".

   To create a new group, type YES, or press Return, at this prompt.

   The MKACCT process for creating groups is similar to creating accounts. You must provide a group name and password (optional) when prompted.

   Answer YES when the "Create this group (Yes,No,Exit)?" prompt appears to finalize the creation of the group.

   MKACCT will continue to prompt you for new group names until you type NO at the "Do you want to create a new group...?" prompt. You do not need to create a PUB group. MKACCT does this automatically.

7. MKACCT then asks, "Do you want to create a new user in the ACCTNAME account (Yes,No,Exit)?".

   To create a new user, type YES, or press Return, at this prompt.

   The MKACCT process for creating users is similar to creating accounts and groups. You must provide a user name and password (optional). You will be asked if you want to see a list of groups in your new account. Answer accordingly.

   You will be asked to provide a home group for the user. Specifying a home group is optional; however, without a home group, the user must specify a group name each time they log on.

   Answer YES when the "Create this user (Yes,No,Exit)?" prompt appears to finalize the creation of the group.

   MKACCT will continue to prompt you for new user names until you type NO or EXIT at the "Do you want to create a new user...?" prompt.

   If you respond NO, MKACCT returns you to the prompt where you can start the process of creating another new account again.

8. To exit the MKACCT command file, type EXIT at any prompt that ends with the (Yes,No,Exit)? options. A screen similar to the following appears:

   ************************************************************** * MKACCT has kept a record of your work. It produced two * * files in the PUB group that you may want to examine now * * or sometime later. These files contain all of the work * * that you have done by using MKACCT. * * * * * * CMDLOG Contains the MPE/XL commands that were needed at * * each step along the way to create ACCOUNTS, * * GROUPS, USERS and passwords. * * * * ACCTLOG Contains a summary of the account structure that * * you have created, showing ACCOUNTS, their GROUPS, * * their USERS, all passwords, and the HOME GROUP * * to which each user of each account was assigned. * * * * To see these two files enter: * * * * :PRINT cmdlog.pub * * :PRINT acctlog.pub * * * * Since these files contain passwords, it is your * * responsibility as system manager to keep this information * * safe from misuse. * * * ************************************************************** Please press {{RETURN}} to continue

9. After carefully reading this screen, press Return to view the next screen.

   *************************************************************** * * * * * To create more GROUPS, USERS or ACCOUNTS just execute * * MKACCT again. * * * * The following MPE commands may be used to list and * * modify your accounts: * * * * :LISTACCT AccountName :ALTACCT AccountName * * :LISTGROUP GroupName :ALTGROUP GroupName * * :LISTUSER UserName :ALTUSER UserName * * :PURGEACCT AccountName :PURGEGROUP GroupName * * :PURGEUSER UserName * * * * You can get HELP for any of these commands by typing: * * * * :HELP CommandName e.g. :HELP ALTUSER * * * ************************************************************** Please press {{RETURN}} to continue Return

10. To get to the system prompt, press Return.

    The following message will appear on your screen and you will be returned the system prompt.

    End of the MKACCT command file. :_

    You may run MKACCT as often as you like. The ACCTLOG and CMDLOG files will accumulate information and show the date and time of each MKACCT session.

1. Log on as MANAGER.SYS.

2. Type MKACCT at the system prompt and press Return

   :MKACCT Return

3. At the "More information (Yes,No,Exit)?" prompt, type NO.

4. Type YES, or press Return, at the following prompt:

   Do you want to add {{groups}} or {{users}} to an existing ACCOUNT (Yes,No,Exit)? YES Return

5. Provide the name of the account to which you wish to add groups or users at the following prompt:

   Please enter the name of an existing ACCOUNT:

6. When prompted, supply a new group name and password. MKACCT will continue to prompt you for new group names until you type NO at the "Do you want to create a new {{group}} in the ACCTNAME?" prompt.

7. When prompted supply a new user name and password. MKACCT will continue to prompt you for new user names until you type NO or EXIT at the "Do you want to create a new {{user}} in the ACCTNAME?" prompt.

8. When you have finished adding new groups and users to your existing account, type EXIT at any prompt that ends with the (Yes,No,Exit)? options.

• To delete any portion of your account structure, use the PURGEACCT, PURGEGROUP or PURGEUSER commands.

• To modify capabilities or file access for any account, group, or user, use the ALTACCT, ALTGROUP, or ALTUSER commands.

• To change a password, use the PASSWORD command.

Command: PURGEGROUP NEWGROUP VERSION REPORT LISTGROUP LISTGROUP name;PASS ALTGROUP ALTSEC

1. Provides detailed information on each group in the account.

2. Allows you to change the attributes of a group.

3. Lists file space, CPU time, and connect time for all groups in an account.

4. Creates a new group in an account.

5. Lists detailed information on a group including the group's password.

6. Creates or changes ACD protection for files.

7. Checks capability requirements for applications and executable programs.

8. Deletes a group from an account.