HP 3000 Manuals

Setting Up Your Account Structure [ Setting Up and Maintaining Your System The Installation Guide ] MPE/iX 5.0 Documentation


Setting Up and Maintaining Your System The Installation Guide

Setting Up Your Account Structure 

The account structure consists of four elements:  accounts, groups,
files, and users.  You might think of the computer system as a room in
which there are many filing cabinets.  Each filing cabinet is comparable
to a separate account within the computer system.  Groups are comparable
to the drawers in each filing cabinet, while files are the folders of
information organized in each group or file drawer.

It is recommended that you create one account first, add its groups, and
then add its users.  Repeat the process for each account that you need
created.  Directions for testing each segment are provided with the set
up instructions. 

To create accounts 

Accounts are similar to directories on personal computers.  They provide
a structure for organizing files.  The main system account, called SYS,
has already been created.  The SYS account typically contains the
operating system files, utility programs, and other system-related files.
You can create as many other accounts as you need.  You can give accounts
generic names, like PAYROLL for payroll files or ACTREC for accounts
receivable files.  You can also give accounts specific names, like SMITH
for files belonging to an individual.

Use the NEWACCT command to create an account, its manager, and an
optional account password.

   1.  Log on as the system manager.

            :HELLO MANAGER.SYS Return 

   2.  Enter the NEWACCT command with the account name and the name of
       the account manager separated by a comma.  Use the ;PASS=
       parameter to specify an account password, if desired.  Remember to
       precede the password parameter with a semicolon.

       Remember that all names (account names, account manager names, and
       passwords) must fit the requirements set by the operating system:
          *   may contain from one to eight characters
          *   must begin with an alphabetic character
          *   must contain no special characters (like periods, commas,
              dashes, or underbars)

       The following example creates the account PAYROLL with an account
       manager MGR. The optional ;PASS= parameter in the first example
       sets PAY91 as the account password.

            :NEWACCT PAYROLL,MGR;PASS=PAY91 Return 

       or

            :NEWACCT PAYROLL,MGR Return 

       Once the account is created, you cannot enter the NEWACCT command
       again to add or change a parameter.  To change the account name,
       delete the account using the PURGEACCT command, and create the
       account again.  You can modify the account password using the
       ALTACCT command.  (These topics are described later in this
       chapter.)  To change the account manager, refer to Using Your 
       System.

   3.  Verify that the new account is set up by entering the LISTACCT
       command followed by the account name, in this case PAYROLL.

            :LISTACCT PAYROLL Return 

            ****************
            ACCOUNT: PAYROLL

            DISC SPACE: 0(SECTORS)        PASSWORD: **
            CPU TIME  : 0(SECTORS)        LOC ATTR: 00000000
            CONNECT TIME: 0(MINUTES)      SECURITY--READ    : AC
            DISC LIMIT: UNLIMITED                   WRITE   : AC
            CPU LIMIT : UNLIMITED                   APPEND  : AC
            CONNECT LIMIT: UNLIMITED                LOCK    : AC
            MAX PRI  : 150                          EXECUTE : AC
            GRP UFID : $05590002 $2D093E95 $001557B6 $59821C35 $4F10B329
            USER UFID : $05590002 $2D093E95 $0015F3B6 $59821C35 $4F10B360
            CAP: AM,AL,GL,ND,SF,BA,IA

       Your display should be similar to the preceding example.  The
       table of information is a detailed description of account
       characteristics.  Your account name should appear in the upper
       left corner of the display.

   4.  Log on to the account to test it.  Note that the user's name, MGR,
       precedes the account name, PAYROLL, in the HELLO command, and they
       are separated by a period.

            :HELLO MGR.PAYROLL Return 

   5.  Respond to the account password prompt if you used the ;PASS=
       parameter.  For security, the letters typed at the password prompt
       do not appear on the screen.

            ENTER ACCOUNT PASSWORD:

       Note that no user password for the account manager can be
       specified for the account manager in the NEWACCT command.  To
       alter this user and create a user password, enter the ALTUSER
       command with the ;PASS= parameter as described later in this
       chapter.

   6.  Enter the SHOWME command to display your current location and to
       verify that the account has been created.

            :SHOWME Return 

       The first line of the display identifies your session number
       followed by the user, account, and group to which you are logged
       on.

Both the account manager just created and the system manager
(MANAGER.SYS) can create groups and users for this account.  To continue
creating this account's groups and users, you can remain logged on as the
account manager, or enter the HELLO command and log on as MANAGER.SYS.

To create groups 

A group is an optional subdivision of an account.  Groups are similar to
subdirectories on personal computers.  You must create an account before
you create groups for the account.  As with accounts, you can give groups
generic names, like MAY and JUNE for monthly payroll files, or specific
names like JAYOIL, for accounting information about the Jay Oil company.

Every account on the system automatically contains a special group called
PUB. This is the public group for the account.  Any file in the PUB group
is accessible to anyone who is able to log on to the account, unless the
file has been locked.  The PUB group is created automatically for any new
account.

To create more groups, use the NEWGROUP command.

   1.  Log on to the system as either the account manager or the system
       manager.

            :HELLO MGR.PAYROLL Return 

       or

            :HELLO MANAGER.SYS Return 

   2.  Enter NEWGROUP followed by the group name, like CURRENT, and the
       account name, like PAYROLL, separated by a period.  You can also
       enter an optional password, like JUNEPAY, using the ;PASS=
       parameter.

            :NEWGROUP CURRENT.PAYROLL;PASS=JUNEPAY Return 

       or

            :NEWGROUP CURRENT.PAYROLL Return 

       In both examples, the group CURRENT is added to the PAYROLL
       account.  The group password, JUNEPAY, is set in the first
       example.

   3.  Verify that the new group is set up by entering the LISTGROUP
       command and specifying the new group and the account.  For
       example, the group name CURRENT is separated from the account name
       PAYROLL by a period.

            :LISTGROUP CURRENT.PAYROLL Return 

       The resulting display shows the new group in the upper left
       corner.

            *******************
            GROUP: CURRENT.PAYROLL

            DISC SPACE: 0(SECTORS)        PASSWORD: **
            CPU TIME  : 0(SECTORS)        LOC ATTR: 00000000
            CONNECT TIME: 0(MINUTES)      SECURITY--READ    : GU
            DISC LIMIT: UNLIMITED                   WRITE   : GU
            CPU LIMIT : UNLIMITED                   APPEND  : GU
            CONNECT LIMIT: UNLIMITED                LOCK    : GU
            MAX PRI  : 150                          EXECUTE : GU
            PRIV VOL : NO                           SAVE    : GU
            GRP UFID : $05590002 $2D093E95 $0020AFB6 $59822865 $4F1E9DC6
            CAP: BA,IA
            :

   4.  Log on to test your work.  To do so, use the HELLO command
       followed by the account manager's name and the account name
       separated by a period, and add the group name separated from the
       account name by a comma.  Do not leave spaces between the names
       and the punctuation.

            :HELLO MGR.PAYROLL,CURRENT Return 

       This logon tells the system to log the user on as user MGR of the
       PAYROLL account in the group CURRENT.

   5.  Respond to any password prompts that you encounter.  If you have
       defined both an account password and a group password, you are
       prompted for both, as shown below:

            ENTER ACCOUNT PASSWORD:
            ENTER GROUP PASSWORD:

       Enter each password when prompted.  Remember that the account
       password was entered with the NEWACCT or the ALTACCT command, and
       the group password was entered with the NEWGROUP or the ALTGROUP
       command.

   6.  Enter the SHOWME command to display your current location.

            :SHOWME Return 

   7.  Enter the LISTGROUP command, a wildcard character for the groups,
       and the account name to display all the groups that exist for this
       account so far.  In the following example, the list will contain
       all groups in the PAYROLL account, namely PUB and CURRENT.

            :LISTGROUP @.PAYROLL Return 

To add additional groups or users, you can be logged on as the account
manager or the system manager.  To add another account, you need to log
back on as the system manager. 

To create users 

A user is the identification given when logging onto the computer to gain
admittance to an account and its groups.  Users are defined for each
account.  The system manager is the user that has access to every
account, group, and file on the system.  You acted as the system manager
when you configured the system.  An account manager is the user that has
access to every group within the account.  An account manager has to be
determined when an account is created.  Once the account has been
created, other users can be added to the account at any time.  User names
can be generic, like clerk or director.  If you prefer, your user names
can be specific, like John or Mary.

You can use the names or initials of the people using the computer for
user names if you desire.  It may be more practical, however, to use more
descriptive names if several users will be using the same logon or if a
high turnover rate will result in frequent user name changes.  In either
case, remember that user names must fit the requirements set by the
operating system:

   *   may contain from one to eight characters

   *   must begin with an alphabetic character

   *   must contain no special characters (like periods, commas, dashes,
       or underbars).

When you create each user for an account, you can specify a home group
for the user.  The home group is the location that the user will be
logged on to if no group name is supplied in the HELLO command.  Any
group within the user's account can be specified as the user's home
group.

   1.  Enter NEWUSER followed by a user name, like CLERK, and an account
       name, like PAYROLL, separated by a period.  You can also enter a
       password, like CK1234, using the optional ;PASS= parameter.  To
       specify the optional home group for the user, enter the ;HOME=
       parameter followed by a group name, like CURRENT. A home group
       identifies the user's default logon location so that the user does
       not have to enter the group name when logging on.

            :NEWUSER CLERK.PAYROLL;HOME=CURRENT;PASS=CK1234 Return 

       or

            :NEWUSER CLERK.PAYROLL Return 

       In these examples, the user, CLERK, has been created for the
       PAYROLL account.  The first example identifies this user's home
       group as the CURRENT group and specifies a password, CK1234.

   2.  Log on to the system by entering the new user name but without
       entering a group name.  Remember, the user name precedes the
       account name in the HELLO command.

            :HELLO CLERK.PAYROLL Return 

       If you did not specify a home group when the user was created, you
       will receive an error message that no group has been specified.
       Without a home group, the user must specify both the account and
       the group at logon.  You can specify any of the groups that you
       have created for this account or the PUB group.  The group name is
       separated from the account name by a comma.  Note that no spaces
       can occur between the names and the punctuation.

            :HELLO CLERK.PAYROLL,PUB Return 

   3.  Respond to any password prompts.  Note that three passwords might
       be necessary if you have entered passwords for the account, the
       group, and the user.

            ENTER ACCOUNT PASSWORD:
            ENTER GROUP PASSWORD:
            ENTER USER PASSWORD:

   4.  Enter the SHOWME command to verify your location.

            :SHOWME Return 

   5.  Verify that the new user is set up by entering the LISTUSER
       command.

            :LISTUSER CLERK.PAYROLL Return 

       The display identifies the new user, its home group if specified,
       and its capabilities.

            ******************
            USER: MGR.PAYROLL

            HOME GROUP: PUB              PASSWORD: **
            MAX PRI   : 150              LOC ATTR: $00000000
            LOGON CNT : 0
            CAP: AM,AL,GL,ND,SF,BA,IA

To set up a practice account 

You may want to set up a practice account for your users to use when they
log on to the system.

Use the NEWACCT command to establish your practice account.  Remember
that to do this, you must be in an account with SM capability, such as
MANAGER.SYS.

   1.  To create a new account named PRACTICE and a user, USER1, in one
       account, type:

              :NEWACCT PRACTICE,USER1 Return 

       You now have USER1 established as the account manager of the
       PRACTICE account.

   2.  To see and verify the capabilities and attributes of USER1, type:

              :LISTUSER USER1.PRACTICE Return 

   3.  To create any other user in the PRACTICE account, you must include
       a home group.  (The user, USER1, defaults to the PUB group as your
       home group.)  To create a new user, type:

              :NEWUSER username.PRACTICE; HOME=PUB Return 

   4.  To verify the capabilities and attributes for this user, type:

              :LISTUSER username.PRACTICE Return 

To add or change passwords 

When accounts, groups, and users are created, use the ;PASS= parameter to
set passwords.  You can use the ;PASS= parameter with the ALTACCT,
ALTGROUP, and ALTUSER commands to change or add passwords for existing
accounts, groups, and users.

Remember that all passwords must fit the requirements set by the
operating system:

   *   may contain from one to eight characters

   *   must begin with an alphabetic character

   *   must contain no special characters (like periods, commas, dashes,
       or underbars)

The following example adds or changes the password to the PAYROLL
account:

     :ALTACCT PAYROLL;PASS=PAY92 Return 

The following example adds or changes the password to the group CURRENT:

     :ALTGROUP CURRENT.PAYROLL;PASS=JULYPAY Return 

The following example adds or changes the password for the user CLERK:

     :ALTUSER CLERK.PAYROLL;PASS=CK5678 Return 

To create passwords for your system accounts 

The accounts created for HP software should be password protected so that
other users cannot inadvertently log on to these accounts.  It is
recommended that you create passwords using the commands listed below.

   1.  Type your password choice in place of PSWD when entering the
       following commands.  You can use a different password for each
       account, or a single password for all of the accounts.  If any
       account does not exist, continue to the next one.

            :ALTACCT CLL; PASS=PSWD 
            :ALTACCT CONV; PASS=PSWD 
            :ALTACCT HPOFFICE; PASS=PSWD 
            :ALTACCT HPOPTMGT; PASS=PSWD 
            :ALTACCT HPPL85; PASS=PSWD 
            :ALTACCT HPPL89; PASS=PSWD 
            :ALTACCT HPSKTS; PASS=PSWD 
            :ALTACCT HPSPOOL; PASS=PSWD 
            :ALTACCT INDHPE; PASS=PSWD 
            :ALTACCT ITF3000; PASS=PSWD 
            :ALTACCT RJE; PASS=PSWD 
            :ALTACCT SNADS; PASS=PSWD 
            :ALTACCT SUPPORT; PASS=PSWD 
            :ALTACCT SYS; PASS=PSWD 
            :ALTACCT SYSMGR; PASS=PSWD 
            :ALTACCT TELESUP; PASS=PSWD 

       Whenever you log on to any of these accounts from now on, you will
       be prompted for the account password.

   2.  The users created for HP software should be password protected so
       that other users cannot inadvertently log on with these users.  It
       is recommended that you create passwords using the commands listed
       below.  Type your password in place of PSWD when entering the
       following commands:

            :ALTUSER FIELD.HPPL85; PASS=PSWD 
            :ALTUSER MGR.HPOFFICE; PASS=PSWD 
            :ALTUSER MGR.SNADS; PASS=PSWD 
            :ALTUSER MGR.SYSMGR; PASS=PSWD 
            :ALTUSER MGR.TELESUP; PASS=PSWD 

       Whenever you log on as any of these users from now on, you will be
       prompted for the account password and the user password.

   3.  You should also add a user password for the system manager.

            :ALTUSER MANAGER.SYS; PASS=MGRPSWD 

       Remember that you will now be prompted for the account (SYS)
       password and the user (MANAGER) password when you log on as the
       system manager.

To delete an account, group, or user 

You must be logged on as the account manager or system manager to purge
an account, group, or user.  Use the PURGEACCT, PURGEGROUP, or PURGEUSER
commands to delete unwanted accounts, groups, or users.  The command
PURGEGROUP deletes only the group specified.  The command PURGEUSER
deletes only the specified user.  Be careful using the PURGEACCT command.
It deletes the account and all ofthe groups and users associated with it.

     :PURGEUSER CLERK.PAYROLL Return 
     USER CLERK.PAYROLL TO BE PURGED? (YES/NO)YES 

     :PURGEGROUP CURRENT.PAYROLL Return 
     GROUP CURRENT.PAYROLL TO BE PURGED? (YES/NO)YES 

     :PURGEACCT PAYROLL Return 
     ACCOUNT PAYROLL TO BE PURGED? (YES/NO)YES 

The first example deletes the user, CLERK, from the PAYROLL account.  The
second deletes the CURRENT group from the account.  The third example
deletes the entire PAYROLL account, as well as any existing users and
groups.

To create a system recovery tape 

The final task to perform is creating a system recovery tape.  Refer to
Chapter 5, "Creating a System Recovery Tape," for the procedures.



MPE/iX 5.0 Documentation