Job Management Partner 1/Base User's Guide

6.1.6 Using the GUI to set user mapping

To set user mapping through the GUI, in the JP1/Base Environment Settings dialog box, click the User Mapping page. The following figure shows the User Mapping page of the JP1/Base Environment Settings dialog box.

Figure 6-5 JP1/Base Environment Settings dialog box (User Mapping page)

In the User Mapping page, you can associate the JP1 users registered on the authentication server with one or more users registered on the OS of the local host. Before setting user mapping, you need to assign certain Windows user rights to the OS users who set the mapping and those who are mapped. For details, see 6.1.5 Before setting user mapping.

Organization of this subsection

(1) Settings in the Password management area

(2) Settings in the JP1 user area

(3) Settings in the List of OS users to be mapped area

(1) Settings in the Password management area

In Windows, you must enter the OS users to be mapped to JP1 users, and the password information for those OS users, on every host where user mapping is required. This information is registered as password management information in JP1/Base. The Password management area is for registering OS users and their password information as password management information.

If you change the password of the system OS user after registering the password management information, make sure that you also change the password in the registered information.

The procedure for setting password management information is described below.

Notes

When The logon check is not done to Windows, when OS user is set is selected, the OS users can be successfully registered even if the following conditions are met:

• Registration of an OS user not registered in the system (in Windows)
• Registration of an OS user with an incorrect password
• Registration of an OS user, set in the Password management area, who does not have the right Act as a part of the operating system^#
• Registration of an OS user who does not have the right Log on locally

If you do not select The logon check is not done to Windows, when OS user is set, any attempt to register an OS user under the above conditions will fail.

#: The user right required for the Windows versions that are not supported in this manual. For Windows versions supported in this manual, you can successfully register an OS user even if you did not assign this user right.

To set password management information:

1. In the Password management area, click the Set button.
   The Password Manager dialog boxis displayed.
   

   Figure 6-6 Password Manager dialog box

   

2. Enter, change, or delete OS users and their password information.
   Click the New User button to register a new OS user and password. Click the Change Password button if any registered users have changed their passwords. Click the Delete User button to delete the password of a registered OS user.
   As the OS user name to be registered, you can specify not only a user name but also the name of the domain to which the local host belongs or the local host name. In this case, use a backslash (\) as a separator between the domain or local host name and user name (for example, domain\user1 or server\user1). If you specify a domain name or local host name, JP1/Base checks if the specified OS user is a user who belongs to that domain or is a local user. If the specified OS user name is not a user of the domain or is not a local user, you cannot register the user under the OS user name.
   If you do not specify a domain name or local host name, JP1/Base checks whether the specified OS user is a local user. If the entered OS user is not a local user, JP1/Base checks whether it is a user in a domain containing a trusted domain. If the specified OS user name is not a local user or a user of the domain, you cannot register the user under the OS user name.
   To register an OS user name with the Windows domain controller, use the format domain-name\user-name. As the domain controller does not differentiate between a domain user and local user, the user name will be treated as a domain user.
   

   Note

   Take care when selecting The logon check is not done to Windows, when OS user is set in the User Mapping page. When this check box is selected, the OS users can still be registered even if an OS user name or password is incorrect. However, if the mapped JP1 user tries to execute a job or remote command, an insufficient rights error occurs.

3. Click the Exit button.
   The Password Manager dialog box closes, and the User Mapping page of the JP1/Base Environment Settings dialog box appears again.
   

(2) Settings in the JP1 user area

In the JP1 user area, set the OS users, the JP1 users mapped to OS users, and the server host from which the JP1 users issue operating instructions.

To set up this functionality:

1. Click the Add button.
   The JP1 User dialog box appears.
   

   Figure 6-7 JP1 User dialog box

   

   In this dialog box, you must define the JP1 users to be mapped to OS users, and the server hosts from which the JP1 users issue operating instructions such as jobs and remote commands (automated actions). Or enter an asterisk (*) as a server host name to validate operations from any server host.
   

   Specifying a physical host in Server host

   Specify the host name displayed by the hostname command. If you are using domain names with the DNS service, specify the host name in FQDN format.

   Specifying a logical host in Server host

   Specify the logical host name whether or not you are using the DNS service.

   To enable users to log into the system from JP1/AJS - View or to execute JP1/AJS commands from the local host, you must specify the local host name as the server host name. For details see the manual Job Management Partner 1/Automatic Job Management System 2 Planning and Administration Guide, Job Management Partner 1/Automatic Job Management System 3 System Design (Configuration) Guide, Job Management Partner 1/Automatic Job Management System 3 System Design (Work Tasks) Guide, and the Job Management Partner 1/Automatic Job Management System 3 Administration Guide.
   
2. Click the OK button.
   The JP1 User dialog box closes, and the OS User Mapping Details dialog box appears.
   

   Figure 6-8 OS User Mapping Details dialog box

   

3. In the OS User Mapping Details dialog box, associate the entered JP1 user with one or more OS users.
   In this dialog box, set the OS users to be mapped to the JP1 user, and the OS users not mapped to that JP1 user. The OS users listed here are OS users registered in the Password Manager dialog box.
   In Primary OS user, select the name of a default OS user to be mapped when no OS user name is specified at job execution or command execution.
   
4. Click the OK button.
   This completes the mapping of the JP1 user to OS users.
   

(3) Settings in the List of OS users to be mapped area

The list box in the List of OS users to be mapped area lists the OS users who have been mapped. You can use this list to check which OS user is mapped to a specific JP1 user. You can also change the mapping relationships.

To change mapping relationships:

1. In the JP1 user area, select a user name listed in the JP1 user field to redefine the mapping relationships for that JP1 user.
   A list of the OS users mapped to the selected JP1 user appears in the List of OS users to be mapped area.
   
2. Click the Change button.
   The OS User Mapping Details dialog box appears.
   

   Figure 6-9 A list of the OS users mapped to the selected JP1 user

   

3. In the OS User Mapping Details dialog box, move names between OS users to be mapped and OS users not mapped, and set the Primary OS user.
4. Click the OK button.
   This completes the mapping of the JP1 user to OS users.
   

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, Hitachi, Ltd.