8.1.7 Using commands to set user mapping
Before setting user mapping, you need to assign certain Windows user permissions to OS users who are mapped. For details, see 8.1.5 Assigning user permissions to OS users before setting user mapping.
In Windows, you must enter the OS users to be mapped to JP1 users, and the password information for those OS users, on every host where user mapping is required. This information is registered as password management information in JP1/Base.
- Note
-
When the check box The logon check is not done to Windows, when OS user is set is selected in the User Mapping page of the JP1/Base Environment Settings dialog box, the OS users can be successfully registered even if the following conditions are met:
-
Registration of an OS user not registered in the system (in Windows)
-
Registration of an OS user with an incorrect password
-
Registration of an OS user who does not have the right Log on locally
If you do not select The logon check is not done to Windows, when OS user is set, any attempt to register an OS user under the above conditions will fail.
-
JP1/Base provides a number of commands for setting password management information. The following table lists these commands and their purpose.
|
Command name |
Purpose |
See: |
|---|---|---|
|
jbspassmgr |
Displays the Password Manager dialog box. |
(1) |
|
jbsmkpass |
Sets password management information for multiple OS users in one operation from a definition file. |
(2) |
|
jbsumappass |
Adds a specific OS user or changes the password of an OS user registered in the password management information. |
(3) |
|
jbsrmumappass |
Deletes a specific OS user registered in the password management information. |
(4) |
After setting password management information for JP1/Base by using one of the above four commands, register user mapping information.
JP1/Base supports a command that sets user mapping information in the common definition information at one time, as well as commands that register, modify, or delete specific user mapping information. The following table lists these commands and their purpose.
|
Command name |
Purpose |
See: |
|---|---|---|
|
jbsmkumap |
Sets user mapping information in the common definition information at one time from a definition file. |
(5) |
|
jbssetumap |
Adds or modifies user mapping information in the common definition information at one time from a definition file. |
(6) |
|
jbsrmumap |
Deletes specific user mapping information from the common definition information. |
(7) |
- Organization of this subsection
(1) Displaying the Password Manager dialog box
The jbspassmgr command displays the Password Manager dialog box. This dialog box is for registering and managing the OS users registered at each host, and their password information. Enter the same password as the Windows account. For details on how to perform operations in the Password Manager dialog box, see 8.1.6(1) Settings in the Password management area
For details on the jbspassmgr command, see jbspassmgr (Windows only) in 15. Commands.
(2) Setting password management information for OS users in one operation
When you execute the jbsmkpass command, all the password information registered in the common definition information is deleted, and the password management information written in the password definition file is batch-registered in its place. For details on the jbsmkpass command, see jbsmkpass (Windows only) in 15. Commands. To use the jbsmkpass command, you must first enter password management information in a password definition file. You can create the definition file in any location. Do not forget where you created it. For details on the password definition file, see Password definition file (Windows only) in 16. Definition Files.
(3) Registering specific OS users
Using the jbsumappass command, you can register a new OS user in the JP1/Base password management information, or change the password of a registered OS user.
You can use this command in a shell script or other program to change the password information managed by the OS and simultaneously update the password management information managed by JP1/Base.
Execute the command as follows:
jbsumappass -u OS-user-name [-p password]
For details on the jbsumappass command, see jbsumappass (Windows only) in 15. Commands.
(4) Deleting specific OS users
Using the jbsrmumappass command, you can delete a specified OS user from the JP1/Base password management information.
You can use this command in a shell script or other program to delete a user managed by the OS and simultaneously delete that OS user from the password management information managed by JP1/Base.
Execute the command as follows:
jbsrmumappass -u OS-user-name
For details on the jbsrmumappass command, see jbsrmumappass (Windows only) in 15. Commands.
(5) Setting user mapping information in one operation
You can use a command to set user mapping information in one operation from the user mapping definition file (jp1BsUmap.conf). For details on the user mapping definition file, see User mapping definition file in 16. Definition Files.
After editing the user mapping definition file (jp1BsUmap.conf), execute the jbsmkumap command, which deletes all the mapping information registered in the common definition information, and replaces it with the information written in a user mapping definition file (jp1BsUmap.conf). To check the defined mapping relationships, execute the jbsgetumap command.
For details on the jbsmkumap and jbsgetumap commands, see jbsmkumap and jbsgetumap in 15. Commands.
- Note
-
The user mapping definition file (jp1BsUmap.conf) is also used by the GUI. Any information you enter in the GUI will be applied to this file. Conversely, if you edit the user mapping definition file and then execute the jbsmkumap command, the edited information will be reflected in the GUI.
(6) Registering specific user mapping information
You can execute the jbssetumap command to add or modify specific user mapping information. You can either specify user mapping information directly with an option for the jbssetumap command or use a definition file containing user mapping information.
If you specify user-mapping information to register it in the common definition information, execute the following command:
jbssetumap {-u JP1-user-name| -ua}
{-sh server-host-name| -sha}
-o OS-user-name [,OS-user-name]
[-no] If you create a definition file and register user-mapping information in that file, execute the following command:
jbssetumap -f definition-file-name
You can store the definition file in any location. When you store the file, the file format must be the same as the user mapping definition file (jp1BsUmap.conf). For details on the format of the user mapping definition file, see User mapping definition file in 16. Definition Files. For details on the jbssetumap command, see jbssetumap in 15. Commands.
(7) Deleting specific user mapping information
To delete specific user mapping information from the common definition information, use the jbsrmumap command.
Execute the command as follows:
jbsrmumap -u JP1-user-name
For details on the jbsrmumap command, see jbsrmumap in 15. Commands.