4.3 Configuring a BCC Administrator User and Group

During the install, you must specify an existing user to be the BCC Administrator user. This user should have at least Read and Write rights to the All Attribute Rights property on the Cluster object of the cluster.

Perform the following tasks to configure the BCC Administrator user and group.

4.3.1 Creating the BCC Group and Administrative User

For Linux, ensure that the BCC Administrator user is a Linux-enabled user by creating a BCC Group object (bccgroup), adding the BCC Administrator user to the group, then Linux-enabling the group by configuring Linux User Management (LUM) for the group. You also add the Linux nodes (Node objects) of each node in every cluster in the BCC to this BCC group.

IMPORTANT:Having a LUM-enabled BCC group and user and adding the Linux cluster nodes to the BCC group is necessary for inter-cluster communication to function properly.

Prior to installing and configuring Business Continuity Clustering software, you must complete the following tasks:

  1. Create a BCC group and name the group, such as bccgroup.

    IMPORTANT:The name you specify must be in all lowercase.

  2. Create a BCC Administrator user (bccadmin) and add that user to the BCC group (bccgroup) before LUM enabling the group.

  3. Enable the bccgroup for Linux by using Linux User Management.

    Make certain that the you do the following when you LUM-enable bccgroup:

    • Select LUM enable all users in group option.

    • Add all Linux nodes (Node objects) in the cluster to the bccgroup.

    For information about LUM-enabling groups, see Managing User and Group Objects in eDirectory in the OES 2 SP1: Novell Linux User Management Technology Guide.

    LUM-enabling the bccgroup automatically enables all users in that group for Linux.

4.3.2 Assigning Trustee Rights for the BCC Administrator User to the Cluster Objects

Assign trustee rights to the BCC Administrator user for each cluster you plan to add to the business continuity cluster.

  1. Start your Internet browser and enter the URL for iManager.

    The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the IP address or DNS name of the Linux server where you have installed iManager and the Identity Manager preconfigured templates for iManager.

  2. Specify your username and password, specify the tree where you want to log in, then click Login.

  3. In Roles and Tasks, click Rights, then click the Modify Trustees link.

  4. Specify the Cluster object name, or browse and select it, then click OK.

  5. If the BCC Administrator user is not listed as a trustee, click the Add Trustee button, browse and select the User object, then click OK.

  6. Click Assigned Rights for the BCC Administrator user, and then ensure the Read and Write check boxes are selected for the All Attributes Rights property.

  7. Click Done to save your changes.

  8. Repeat Step 3 through Step 7 for the peer clusters in your business continuity cluster.

4.3.3 Adding the BCC Administrator User to the ncsgroup on Each Cluster Node

In order for the BCC Administrator user to gain access to the cluster administration files (/admin/novell/cluster) on other Linux cluster nodes in your BCC, you must add that user to the Novell Cluster Services administration group (such as ncsgroup) on each cluster node.

  1. Log in as root and open the /etc/group file.

  2. Find either of the following lines:

    ncsgroup:!:107:

    or

    ncsgroup:!:107:bccd

    The file should contain one of the above lines, but not both.

  3. Depending on which line you find, edit the line to read as follows:

    ncsgroup:!:107:bccadmin

    or

    ncsgroup:!:107:bccd,bccadmin

  4. Replace bccadmin with the BCC Administrator user you created.

    Notice the group ID number of the ncsgroup. In this example, the number 107 is used. The actual number is the same on each node in a given cluster; it might be different for each cluster.

  5. After saving the /etc/group file, execute the id command from a shell.

    For example, if you named the BCC Administrator user bccadmin, enter id bccadmin.

    The ncsgroup should appear as a secondary group of the BCC Administrator user.