Administering Users and Groups

Users and Groups in eDirectory can be administered through ConsoleOne or iManager.

POSIX attributes of User: authPassword, gidNumber, gecos, homeDirectory, shadowMin, shadowMax, shadowWarning, shadowLastChange, shadowInactive, shadowExpire, and shadowFlag.

POSIX attributes of Group: gidNumber.

For more information, see the following sections:

• Administering POSIX Attributes for a User or Group Using ConsoleOne
• Administering POSIX Attributes for a User Using iManager
• Administering POSIX Attributes for a Group Using iManager

Administering POSIX Attributes for a User or Group Using ConsoleOne

All POSIX attributes of the User or Group can be administered using ConsoleOne.

1. Click the user's container, then create a new user or group.

2. To add a POSIX attribute to the user or group:

   1. Right-click the user or group, then select Extensions of this Object.

   2. Click Add Extension to add the posixAccount for the user or posixGroup for group.

   3. Click OK.

   4. If you add the posixAccount, enter the Name, Common Name, homeDirectory, uniqueID, gidNumber, uidNumber for the user.

      or

      If you add the posixGroup, enter the Name, Common Name, and gidNumber for the group.

   5. Click Close.

3. To modify a POSIX attribute of the user or group:

   1. Right-click the user or group, then select Properties.

   2. Click the Other tab.

   3. Select the attribute to be modified, then click Modify.

   4. Click OK.

If ConsoleOne UNIX snap-in is used to modify the gidNumber of the user, the previous GroupMembership attribute corresponding to the user still exists. This must be deleted manually.

Administering POSIX Attributes for a User Using iManager

All POSIX attributes of the User can be administered using iManager.

To add a POSIX attribute to the user or group:

1. Click the Roles and Tasks button.

2. Click Schema Management > Object Extensions.

3. Specify the object you want to extend, then click OK.

4. Click Add, select posixAccount auxiliary class, then click OK.

Adding a Property Page for a User posixAccount

1. Click Configure, then click Task Configuration.

2. Click Create iManager Task.

3. Select posixAccount from the Available Classes drop-down menu.

4. Select Browser as the target device from the drop-down menu.

5. Select Property Book Page as the plug-in type, then click Next.

6. Select the authPassword, gecos, homeDirectory, loginShell, and uidNumber attributes from the attribute list, then click Next.

   You can rearrange the attribute order using the arrow keys.

7. Select Labels above Controls for Layout from the drop-down menu, then click Next.

   You can preview the task by clicking Click Here to preview the task.

8. Click Next.

9. Enter the Page Name for the attributes.

10. Enter or browse to select the Property Book, then select the ModifyUser.base.Role-Based Service.

11. Select New from Chapter.

12. Click Finish.

Adding a Property Page for a User shadowAccount

1. Select shadowAccount from the Available Classes drop-down menu.

2. Select Browser as the target device from the drop-down menu.

3. Select Property Book Page as the plug-in type, then click Next.

4. Select the shadowExpire, shadowInactive, shadowMax, shadowMin, and shadowWarning attributes from the attribute list, then click Next.

   You can rearrange the attribute order using the arrow keys.

5. Select Labels above Controls for Layout from the drop-down menu, then click Next.

   You can preview the task by clicking Click Here to preview the task.

6. Click Next.

7. Enter the Page Name for the attributes.

8. Enter or browse to select the Property Book, then select the ModifyUser.base.Role-Based Service.

9. Select Existing from Chapter, then select the previously created chapter for posixAccount.

10. Click Finish.

Modifying posixAccount Attribute for a User

1. Click Roles and Tasks, then click User Management.

2. Click Modify User, then select the chapter specified for posixAccount and shadowAccount.

3. Select the appropriate property page to edit the attributes.

Administering POSIX Attributes for a Group Using iManager

1. Click the Roles and Tasks button.

2. Click Schema Management > Object Extensions.

3. Specify the object you want to extend, then click OK.

4. Click Add, select the posixGroup auxiliary class, then click OK.

Adding a Property Page for a Group posixGroup

1. Click Configure, then click Task Configuration.

2. Click Create iManager Task.

3. Select posixGroup from the Available Classes drop-down menu.

4. Select Browser as the target device from the drop-down menu, then click Next.

5. Select the gidNumber attribute from the attribute list, then click Next.

   You can rearrange the attribute order using the arrow keys.

6. Select Labels above Controls for Layout from the drop-down menu, then click Next.

   You can preview the task by clicking Click Here to preview the task.

7. Click Next.

8. Enter the Page Name for the attributes.

9. Enter or browse to select the Property Book.

10. Select the ModifyGroup.base.Role-Based service.

11. Select New from Chapter.

12. Click Finish.

Modifying the posixgroup Attribute for a Group

1. Click Roles and Tasks, then click Group Management.

2. Click Modify Group, then select the chapter specified for posixGroup.

3. Select the appropriate property page to edit the attributes.