IBM Tivoli Netcool Performance Manager for Wireless V9.1.2
IBM Tivoli Netcool Performance Manager for Wireless V9.1.2 Manage users using the command line tool
IBM Tivoli Netcool® Performance Manager for Wireless 9.1.2—Manage users using the command line tool.
Assumptions
Assumptions You should already know the following before attempting this IEA: Using IBM Tivoli Netcool Performance Manager for Wireless 9.1.2 (TNPMW) software, know how to: Log into the TNPMW server as the user virtuo Locate and run scripts used by administrators
Assumptions. You should already know the following before attempting this IEA: Using IBM Tivoli Netcool Performance Manager for Wireless 9.1.2 (TNPMW) software, know how to: Log into the TNPMW server as the user virtuo; Locate and run scripts used by administrators.
Assumptions
Assumptions If you can not perform the previous tasks, you can learn how to do them by taking an IBM Tivoli Netcool Performance Manager for Wireless 9.1.2 Administration and Configuration course IBM Tivoli Netcool Performance Manager for Wireless 9.1.2 Administration and Configuration
Assumptions. If you can not perform the previous tasks, you can learn how to do them by taking an IBM Tivoli Netcool Performance Manager for Wireless 9.1.2 Administration and Configuration course.
Objectives
Objectives Upon completion of this module, using the command line tool, you should be able to: Add a user account and assign a role using a role file Create a role file Change a user account password (modify) Delete a user account Understand the consequences of deleting a user account
Objectives. Upon completion of this module, using the command line tool, you should be able to: Add a user account and assign a role using a role file; Create a role file; Change a user account password (modify); Delete a user account; Understand the consequences of deleting a user account.
Agenda
Agenda Role file Add option Change a user account password Deleting a user account
Agenda. For this lesson the role file is discussed and you are instructed on how to create a role file to use with the user_admin script's add option. There is an overview of the user_admin script's add option. The Add User Account Syntax is presented and you will see an example of adding a user account using the role file. You will see how to change a user account password using the modify option. You will learn the consequences of deleting a user account and the syntax of the command to delete a user account.
Role file
Role file A role file consists of one ore more roles. The LDAP role name must be used and can be viewed by using the user_admin script -listroles option. If the role contained in the called role file or the role file does not exist, then the user account is added with the Web User Normal role. The four system provided roles are: WebUserBasic WebUserNormal WebUserPower SystemAdministrator Create a role file called rolepower, using the echo command echo WebUserPower > rolepower
Role file. A role file consists of one or more roles. The LDAP role name must be used and can be viewed by using the user_admin script -listroles option. If the role contained in the called role file or the role file does not exist, then the user account is added with the Web User Normal role. The four system provided roles are WebUserBasic, WebUserNormal, WebUserPower, and SystemAdministrator. Usually only one role is assigned to a user account. With the four system provided roles, as you read from Basic to Administrator, each role contains all of the task permissions of the role above it. A Normal user has permissions to do all of the tasks a Basic user can plus more tasks. In the $WMCROOT directory, you might create a role file named rolepower, using the echo command by typing echo WebUserPower > rolepower. You can use a file editor to add more roles to the role file. Each role is required to be on its own line. The role file must be created before it can be used by the user_admin command.
Add operation overview
Add operation overview user_admin, -add operation Adds a user account to the Lightweight Directory Access Protocol (LDAP) directory server and to the TNPMW database. This creates both the inet_user and user entries. Adds the user to the Everybody group in LDAP. Assigns the user to the role specified in the role file and the Web User Normal role. Assigns a user to all datasources in the system.
Add Operation Overview. The user_admin, add operation does several things. It adds a user account to the Lightweight Directory Access Protocol (LDAP) directory server and to the TNPMW database. This creates both the inet_user and user entries. It adds the user created to the Everybody group in LDAP. It assigns the user to the roles specified in the role file and the Web User Normal role. It assigns the user to all datasources in the system.
Add user account syntax
Add user account syntax As the user virtuo, type the following command: user_admin -u
-p -add -f -ln -uid -up -rf [-e ] where: is the administrator’s login ID is the administrator’s login password is the user’s first name is the user’s last name is the user’s login ID is the user’s password is the name of the role file is the user’s email address, an email address is optional
Add User Account Syntax. As the user virtuo, type the following command: user_admin -u -p -add -f -ln -uid -up -rf [-e ] where: is the administrator’s login ID that is used when logging into the Graphical User Interface. is the administrator’s login password. is the user’s first name. is the user’s last name. is the user’s login ID. The user id must be alpha-numeric. is the user’s password. The password should contain at least five characters and a numerical value. is the name of the role file. The role file must exist before running the script or the script will fail. is the user’s email address; an email address is optional.
Example
Example As the administrative user, sysadm who’s password is sapw6, use the following command to create a user jdoe with password jdoe0, that belongs to John Doe, with the role in the role file named rolepower: user_admin -u sysadm -p sapw6 -add -f John -ln Doe -uid jdoe -up jdoe0 -rf rolepower
Example. As the administrative user, sysadm who’s password is sapw6, use the following command to create a user jdoe with password jdoe0, that belongs to John Doe, with the role in the role file named rolepower: user_admin -u sysadm -p sapw6 -add -f John -ln Doe -uid jdoe -up jdoe0 -rf rolepower
Example (continued)
Example (continued) Returns: …INFO Operation Succeeded Verify with the -listusers detail option user_admin -u sysadm -p sapw6 -listusers detail Returns the following: … jdoe John Doe NormalWebUser, PowerWebUser …
When the script completes, it returns…INFO Operation Succeeded. You can verify the user account was added with the -listusers detail option. The script user_admin -u sysadm -p sapw6 -listusers detail, returns the following:…jdoe John Doe NormalWebUser, PowerWebUser…
Change a user account password
Change a user account password Password characteristics As the user virtuo, type the following command: user_admin -u -p -modify -uid -up where: is the administrator’s login ID is the administrator’s login password is the user’s login ID is the user’s new password
To change a user account password, you can use the user admin command's modify option. A user can change their own password using the TNPMW Graphical Interface. You might use this command if a user forgets their password and requests for you to provide them a new password. You can not determine what a user password is; you can only set it to a value. A user's role or group membership can not be changed with this command, use the TNPMW Graphical Interface. The password. As the user virtuo, type the following command: user_admin -u -p -modify -uid -up Where: is the administrator’s login ID that is used when logging into the Graphical User Interface. is the administrator’s login password. is the user’s login ID. is the user’s new password.
Deleting a user account
Deleting a user account Permanent action Deletes all documents associated with the user account from the TNPMW database Deletes the user account from the TNPMW database and the LDAP server
Deleting a user account is a permanent action and it can not be undone. Using the user_admin command to delete a user account has severe consequences and you need to understand what is going to happen before using this command. All items associated with the user account are going to be deleted. This includes the account's report definitions, schedules, and so on. After the user account items are deleted from the TNPMW database, the user account is deleted from both that database and the LDAP server.
Delete user account syntax
Delete user account syntax As the user virtuo, type the following command: user_admin -u -p -delete -uid where: is the administrator’s login ID is the administrator’s login password is the user’s login ID
Delete User Account Syntax. As the user virtuo, type the following command: user_admin -u -p -delete -uid Where: is the administrator’s login ID that is used when logging into the Graphical User Interface. is the administrator’s login password. is the user’s login ID. Remember deleting a user account is a permanent action with consequences.
Summary
Summary You should now be able to use the command-line tool to: Add a user account and assign a role using a role file Create a role file Change a user account password Delete a user account Understand the consequences of deleting a user account
Summary. You should now be able to use the Command Line tool to: Add a user account and assign a role using a role file; Create a role file; Change a user account password; Delete a user account; Understand the consequences of deleting a user account.
Training roadmap for IBM Tivoli Netcool Performance Manager for Wireless
Training roadmap for IBM Tivoli Netcool Performance Manager for Wireless Click this link to the training page: http://www.ibm.com/software/tivoli/education/edu_prd.html Click this link for the section on IBM Tivoli Netcool Performance Manager for Wireless: http://www.ibm.com/software/tivoli/education/edu_prd.html#X916845N81075L22
Training roadmap for IBM Tivoli Netcool Performance Manager for Wireless. Click this link to the training page.Click this link for the section on IBM Tivoli Netcool Performance Manager for Wireless.
Trademarks