HP 3000 Manuals

ALTUSER [ HP 3000 Series 9X8LX Computer Systems Commands Reference ] MPE/iX 5.0 Documentation


HP 3000 Series 9X8LX Computer Systems Commands Reference

ALTUSER 

The ALTUSER command changes the parameters currently defined for a user.

Syntax 

ALTUSER username[.acctname] [;PASS=[password]][;CAP=[capabilitylist]]

[;HOME=[homegroupname]] [;UID=[uid]]

Parameters 

username              Specifies the name of the user.  The name must
                      consist of one to eight alphanumeric characters,
                      beginning with an alphabetic character.

acctname              Specifies the account in which the user resides.
                      The name must consist of one to eight alphanumeric
                      characters, beginning with an alphabetic character.
                      You must have system manager (SM) capability to use
                      this parameter from outside the account, or you
                      must have account manager (AM) capability to use
                      this parameter from within the account.

PASS                  Specifies the user password, used for verifying
                      logon access only.  The password must consist of
                      one to eight alphanumeric characters, beginning
                      with an alphabetic character.  The default is that
                      no password is assigned.

                      If you omit the parameter PASS, the existing
                      password, if any, does not change.  If you include
                      PASS but do not provide its value password, the
                      current password is removed.

CAP                   Specifies the list of capabilities permitted for
                      the user.  Each capability is indicated by a two
                      letter mnemonic, separated by commas, as follows:

                           SM  =  System manager
                           AM  =  Account manager
                           AL  =  Account librarian
                           GL  =  Group librarian
                           DI  =  Diagnostician
                           OP  =  System supervisor
                           NA  =  Network administrator
                           NM  =  Node manager
                           SF  =  Save files
                           ND  =  Access to nonshareable I/O devices
                           UV  =  Use volumes
                           CV  =  Create volumes
                           CS  =  Use communication subsystem
                           PS  =  Programmatic sessions
                           LG  =  User logging
                           PH  =  Process handling
                           DS  =  Extra data segments
                           MR  =  Multiple RINs
                           PM  =  Privileged mode
                           IA  =  Interactive access
                           BA  =  Batch access

                      The default is IA, BA, ND, and SF.

                      Note the following points about this parameter:

                         *   Capabilities assigned to the user cannot
                             exceed those assigned to the account.

                         *   Any capabilities removed from the account
                             cannot be assigned to the user.

                         *   The user's capabilities are always verified
                             to be a subset of the account's capabilities
                             at logon.  This prevents a user from having
                             a capability not assigned to the account.

HOME                  Specifies the name of an existing group to be
                      assigned as the user's home group.  The first user
                      established when an account is created, by default,
                      has PUB assigned as the home group.  Subsequent new
                      users, by default, have no home group assigned.  If
                      no home group is assigned, the user must always
                      specify a group when logging on.

Operation Notes 

   *   Usage 

       You can enter this command from a session, a job, a program, or in
       break mode.  Pressing Break does not affect this command.

       You must have account manager (AM) capability to enter this
       command.  You must have system manager (SM) capability to specify
       a user in an account other than your own.

   *   Altering user parameters 

       Basic guidelines for altering user parameters are as follows:

          *   You can enter multiple parameters on a single command line
              by using the semicolon (;) delimiter.

          *   If more than one user within an account is assigned AM
              capability, you can remove the capability from all but one
              user.

          *   When you omit an entire parameter, the corresponding value
              for the group remains unchanged.

          *   When you include a parameter but omit its value as in
              PASS=Return, the default value is assigned.

          *   You cannot remove SM capability from MANAGER.SYS.

          *   You cannot remove your own AM capability.

   *   Activating the changes 

       If you alter one or more parameters, the changes in the directory
       become effective immediately, however, the changes do not affect
       any active users until they log off from their current sessions
       and log back on to the same user name and account.  Since the
       system does not automatically generate a message informing users
       of changes, you should notify users before you make any changes.

Examples 

   *   To change the capability list of the user JONES from IA, BA, SF,
       PH, and DS to include privileged mode (PM) capability, enter:

            :ALTUSER JONES;CAP=IA,BA,SF,PH,DS,PM 

   *   To change the password and capability list of JONES, enter:

            :ALTUSER JONES;PASS=JJ;CAP=IA,BA,SF,PH,DS,PM 

Related Commands 

     ALTACCT
     ALTGROUP
     LISTACCT
     LISTGROUP
     LISTUSER
     NEWACCT
     NEWGROUP
     NEWUSER



MPE/iX 5.0 Documentation