NOTE: If INITIALGROUP or ALTERNATEGROUP is in a hierarchy, it must be a leaf group (a group with no child groups). You cannot assign users to parent groups. For example, in the configuration below, TWO is a parent group and TWO/b is a leaf group.

#Group records TWO:HIER:60:: TWO/b:3:50::

#User records

 

 

user1::::TWO

#

INVALID

user2::::TWO/b

#

VALID

Consequently, TWO cannot be used in a user record.

User records for nonroot users cannot contain the name of the PRM system group, PRM_SYS. The second, third, and fourth fields of a user record must be null.

Consider the following example user records:

#PRM user records

sysadm::::OTHERS

engineer1::::development,OTHERS

user1::::OTHERS

user2::::sales

+marketing::::mktg

These user records define:

An initial group of OTHERS for root user sysadm. (Recall that all root users have implicit access rights to all groups.)

An initial group of development and alternate group OTHERS for engineer1.

An initial group of OTHERS for user1.

Assuming user2 is in the marketing netgroup, the explicit user record for user2 takes precedence over the marketing netgroup’s user record. Consequently, sales is the user’s initial PRM group.

Adding/modifying a user’s group assignment

To add or modify a user record, follow these steps:

1.Open the desired configuration file in a text editor.

2.Using the syntax shown below:

USER::::INITIALGROUP[,ALTERNATEGROUP[, ...]]

and explained in the section “User record syntax” (page 71):

a.Add or modify a line specifying a netgroup or a user’s login name.

b.Add or modify an initial group.

c.(Optional) Add or modify the alternate groups.

3.Save the file and exit your editor.

4.Load the configuration using one of the following commands:

To initialize, moving user processes to the owners’ initial groups and moving applications to their assigned groups, use the command:

#prmconfig -i [-fconfigfile] {-s -c}

To keep the existing assignments of users, processes, and groups, use the command:

#prmconfig -k [-fconfigfile] {-s -c}

Configuring PRM 73