mngenvsetup (setup management group)
- Organization of this page
Format
mngenvsetup [-mng | -ua] {OS-group-name | -d}
Functions
This command enables settings such that the specific users who do not have root permission can execute the commands used in Management Server and commands used by integrated management users that can only be executed by users having root permission. Note that this command is used in UNIX only.
A group of users who can execute commands to be used with Management Server is called Management Server management group. A group of users who can execute commands to be used by the integrated management users is called the integrated user management group.
This command sets up the OS group as Management Server management group and the integrated user management group.
The following table lists the commands setup by this command:
|
Commands that can be executed with operations other than root permission |
Management groups |
|
|---|---|---|
|
Management Server management group |
Integrated user management group# |
|
|
adminagentctl |
Y |
-- |
|
Convpw |
-- |
Y |
|
mngautorun |
Y |
-- |
|
mngsvr_adapter_setup |
Y |
-- |
|
mngsvrctl |
Y |
-- |
|
mngunsetup |
Y |
-- |
|
ssoexport |
-- |
Y |
|
ssogenkey |
-- |
Y |
|
ssoimport |
-- |
Y |
|
Uachpw |
-- |
Y |
- Legend:
-
Y: Can be specified
--: Cannot be specified
# For details on the integrated user management group command, see 13. Commands Used in Integrated User Management in the uCosminexus Application Server Security Management Guide.
The specifications of arguments and management group settings are as follows:
-
When -mng is specified, only Management Server management group is setup.
-
When -ua, only the integrated user management group is setup.
-
When the OS group name is specified without specifying -mng or -ua, the specified OS group is setup in both; Management Server management group and integrated user management group.
-
When only -d is specified, the settings for both; Management Server management group and integrated user management group are deleted. Only the user who has root permission can execute the command. Management Server management group and the integrated user management group will return to the OS group that is used when you configure Application Server.
-
When -d and -mng or -ua are specified at the same time, the settings for either Management Server management group or integrated user management group are deleted. Only the user who has root permission can execute the management group commands for which the settings are deleted.
If you execute this command when Management Server management group or integrated user management group is already setup, the management groups are overwritten and then the management groups are setup.
Arguments
- -mng OS-group-name
-
Sets up the OS group as Management Server management group. If the OS group name is omitted USAGE is displayed.
- -ua OS-group-name
-
Sets up the OS group as the integrated user management group. If the OS group name is omitted USAGE is displayed.
- -d
-
The setup for Management Server management group and integrated user management group are deleted, so only the users who have root permissions can execute this command.
Input example
-
Input example 1
When setting up the Management Server management group and integrated user management group in the manager
mngenvsetup manager
-
Input example 2
When setting up the Management Server management group in the manager
mngenvsetup -mng manager
-
Input example 3
When setting up the integrated user management group in the manager
mngenvsetup -ua manager
-
Input example 4
When Management Server management group and integrated user management group return to the root
mngenvsetup -d
Notes
If you execute this command, SUID bit is added to the commands used with Management Server or the commands used with integrated user management. Therefore, the users who will be granted the access permission must be specified properly.