Apple Mac OS X Server manual Creating a Domain Administrator User Account

To create an local administrator user with a specific UID and home folder:

$ sudo /System/Library/ServerSetup/serversetup -createUserWithIDIP fullname

shortname password uid homedirpath

The name, short name, password, and UID must be entered in the order shown. If the full name includes spaces, enter it in quotes.

The command displays a 0 if successful, or a 1 if the full name, short name, or UID is already in use or if the UID you specified is less than 100.

Creating a Domain Administrator User Account

In order to create a domain administrator user account for a networked directory, you need to already have a domain administrator user account.

Before starting, you should already have a nonadministrator user account that you want to give domain administrator privileges to. For instructions on creating nonadministrator user accounts, see “Creating a Nonadministrator User Account” on page 100.

To create a domain administrator user account:

1Start the dscl tool in interactive mode, specifying the computer you are using as the source of directory service data. Use the dscl tool to create a domain administrator user account.

$ dscl localhost

>

In interactive mode, the dscl tool displays the current folder in the directory domain (not the current folder in the file system) and a “>” character as a prompt.

2Once connected to the directory, choose the directory domain. Change the current folder to LDAPv3/ipaddress/Groups.

> cd LDAPv3/ipaddress/Groups

Replace ipaddress with the IP address of your directory server. If using a NetInfo directory domain, enter cd /NetInfo/root/Groups at the prompt.

3Create an administrator user.

>append admin Member adminusername

This command creates an administrator user, but it doesn’t add the GUID (globally unique identifier) of the administrator user to the group account.

4Add the administrator user to the group.

> append admin GroupMembers guid

Replace guid with the globally unique identifier.

5Quit the dscl tool.

>quit

Chapter 8 Working with Users and Groups

99