Do+Able Products 12347 Uživatelský manuál stáhnout pdf (Strana 53)

Hardware Management Console Best Practices

- 53 -

Appendix I

The HMC does not have any Active Directory or LDAP support for automated

user management. In large environments with many servers, there can be

multiple HMCs (see Planning). It may not be desirable to manually manage user

IDs across all HMCs, especially as users gain and lose access to the environment.

As previously mentioned, the HMC CLI for user management is very useful for

scripting, and hence can be used to address this situation. Using the CLI and

SSH, we can create a script called hmcusers that can be used to add and remove

users from a remote workstation as follows:

hmcusers: -o [ add | delete ] -h <list of hmc hosts>

-l <login> -u <list of user names> -a <hmc

access>

-o The operation to perform, add or delete

users.

-h The list of HMC perform the operation.

-l The login to use on HMC to perform the

operation.

-u The list of user to create.

-a The access on HMC.

To prevent password prompting when using this script remotely, RSA / DSA keys

can be deployed on HMCs to be managed, under a desired hmcsuperadmin ID.

The mkauthkeys on the HMC can be used to do this; please see the section on

Security for more details.

To add three users – deoli, tri, and bob -- with hmcoperator task roles on

HMCs hmc1.austin.ibm.com and 9.53.188.188, using the login admin1, type

hmcusers -o add -h "hmc1.austin.ibm.com 9.53.188.188"

-l admin1 -u "deoli tri bob" -a "hmcoperator"

Note that admin1 would have to have hmcsuperuser authority to run this script.

To delete users salma and steve on two HMCs using login superadmin1 type

hmcusers -o delete -h "hmc2.austin.ibm.com

hmc3.austin.ibm.com" -l superadmin1 -u "salma steve"

Below is the code of such a script:

#!/bin/ksh

usage()

1 2 ... 48 49 50 51 52 53 54 55 56 57

Žádné komentáře

Do+Able Products 12347 Uživatelský manuál Strana 53