How to creat new account name like mtch in OXE

[lgxbin]

In the OXE there is no the "mtch" account ,How to creat new account name like mtch in OXE?

thank you very much!

[vad]

Why you need this account? mtcl not enough?

[lgxbin]

the customer want to creat some accounts which just only can do some modify in item "user" while the other item could not be modifid after enter "mgr",

[vad]

I think you can't forbid something in management for user if this user can run mgr.
You can allow manage only user's objects if manager will use management tool like 4740 (4760).

[goldy]

You can add accounts like normal linux machine, but the initscripts remove them on reboot, so you have to make mods to them to stop it. Be careful though, as you could comprimise security & support from Alcatel

[alex]

the customer want to creat some accounts which just only can do some modify in item "user" while the other item could not be modifid after enter "mgr",

You can limit access to different objects in mgr by going to "facilities" line , e.g.

Code: Select all

              
                   Ñ–    Go down hierarchy                  Ñ–
                   Ñ–    Consult/Modify                     Ñ–
                   Ñ–    Consult/Modify Overview of Object  Ñ–
                   Ñ–    Create                             Ñ–
                   Ñ–    Create Overview of Object          Ñ–
                   Ñ–    Modify                             Ñ–
                   Ñ–    Modify Overview of Object          Ñ–
                   Ñ–    Delete                             Ñ–
                   Ñ–    FORCED DELETE                      Ñ–
                   Ñ–    Memory re-initialization           Ñ–
Here it goes!]                 Ñ– -> Facilities                         Ñ–
                   Ñ–                                       Ñ–
                   
                                                                               

then to

Code: Select all

-> Facilities per access level               

and then choose, e.g., access level 3 and in "Set overview " you choose which objects to show.
Why do not you use client login ?It has some limitation on DB access.Actually, mtcl has access level 0 (unlimited) while client has access level 3.
This levels are set in /usr3/manager/admin file .
By the way this file has strange permissions .
You can set access level to mtcl to 10

[vad]

Hi Alex,
can we manage in set overview some object or only consult?
I try to manage some permisions (without effect), I see in /usr3/manager some files was changed. I need shutdown or not?

[alex]

Hi Alex,
can we manage in set overview some object or only consult?
I try to manage some permisions (without effect), I see in /usr3/manager some files was changed. I need shutdown or not?

There is no need for shutdown.You access level is set during login and it is read when you run mgr.
If your are under "mtcl" nothing will change until you change your level in admin file.Even if you use "menuclient" command under mtcl you still have access level =0.You must login as client (level 3) to see access restriction works.
It works the same way you set "object access level" in 47xx.Actually they use the same procedure(I mean mgr and 47xx).

[frank]

Ok. I have the same trouble showing up. My customer wants to create differents users, with all differents functions. Is this a real pain in the ass to try to do it for the command line (because they love to use it) and then should I better do it using the 4760 access..?

thx

[alex]

Ok. I have the same trouble showing up. My customer wants to create differents users, with all differents functions. Is this a real pain in the ass to try to do it for the command line (because they love to use it) and then should I better do it using the 4760 access..?

thx

Hi Frank! Nice to have you back again!

Well , basically, it is just stupid init script which checks "/etc/passwd" file for new accounts and deletes them if it founds such.That's all it does.Personally I see no problem in disabling this script (/etc/init.d/security) from start when you boot an OXE.
Then you can add as many accounts as you want.