
8 Sun StorageTek SAM Archive Configuration and Administration Guide • Version 4, Update 6, 04/07
To assign bobsmith privileges only for staging and restoring file systems (privilege
level com.sun.netstorage.fsmgr.operator.file) and exporting, importing,
and assigning VSNs (privilege level com.sun.netstorage.operator.media),
add the following line to the /etc/user_attr file:
bobsmith::::auths=com.sun.netstorage.fsmgr.operator.file,
com.sun.netstorage.fsmgr.operator.media
Creating an Account for Multiple Users
You can create a generic File System Manager account that can be used by multiple
users, and then add a role with privileges that only some of those users can access.
1. Use the useradd and passwd commands to add the account.
For example, to add a user account called guest for multiple users, type the
following:
# /usr/sbin/useradd guest
# /usr/bin/passwd guest
2. Use the roleadd and passwd commands to add the role.
To create a role called admin with special privileges within the guest account, type
the following:
# /usr/sbin/roleadd admin
# /usr/bin/passwd admin
3. Specify the privilege levels in the /etc/user_attr file.
To assign the admin role privileges to restore and stage file systems, add the
following lines to the /etc/user_attr file:
admin::::auths=com.sun.netstorage.fsmgr.operator.file
guest::::type=normal;roles=admin
In this example, when a user logs in as guest, File System Manager prompts the
user to select either No Role or Admin. If users know the Admin role password, they
can select Admin, enter the Admin password, and have privileges to restore and
stage file systems. All other users must select No Role and have read-only privileges.
Because multiple users with the same privilege level can be logged in to the software
concurrently, there is a risk of one user’s changes overwriting another user’s
previous changes. To prevent this, develop policies about who can make changes
and how to notify others.
Komentáře k této Příručce