mngenvsetup (setup management group)
Format
mngenvsetup [-mng | -ua] {OS-group-name | -d}
Functions
This command enables settings such that the specific users who do not have root permission can execute the commands used in Management Server and commands used by integrated management users that can only be executed by users having root permission. Note that this command is used in UNIX only.
A group of users who can execute commands to be used with Management Server is called Management Server management group. A group of users who can execute commands to be used by the integrated management users is called the integrated user management group.
This command sets up the OS group as Management Server management group and the integrated user management group.
The following table lists the commands setup by this command:
Commands that can be executed with operations other than root permission | Management groups | |
---|---|---|
Management Server management group | Integrated user management group# | |
adminagentctl | Y | -- |
Convpw | -- | Y |
mngautorun | Y | -- |
mngsvr_adapter_setup | Y | -- |
mngsvrctl | Y | -- |
mngunsetup | Y | -- |
ssoexport | -- | Y |
ssogenkey | -- | Y |
ssoimport | -- | Y |
Uachpw | -- | Y |
# For details on the integrated user management group command, see 13. Commands Used with Integrated User Management in the uCosminexus Application Server Security Management Guide.
The specifications of arguments and management group settings are as follows:
If you execute this command when Management Server management group or integrated user management group is already setup, the management groups are overwritten and then the management groups are setup.
Arguments
Input example
mngenvsetup manager
mngenvsetup -mng manager
mngenvsetup -ua manager
mngenvsetup -d
Notes
If you execute this command, SUID bit is added to the commands used with Management Server or the commands used with integrated user management. Therefore, the users who will be granted the access permission must be specified properly.