Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Added new Admin Logins/passes....

Status
Not open for further replies.

skim6225

MIS
Sep 11, 2012
131
0
16
US
.....via smi, assigned masks and they are not working. First attempt creating ID/pass via smi. Is a reboot needed?

Thanks all....
 
hardware platform? CM software version?

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
8300
G3 Version: V16
16x.03.0.141.0
Platform 28
 
This will add logname "mylogin" and its initial password

From linux bash shell of the active CM server.

cmuseradd super-user -C 18 mylogin
cmpasswd mylogin

To list logins from Linux bash shell:
loginReports -l

CM Command: save translation all
After will filesync login data to standby and survivable servers.


A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
If you use a web browser to administer accounts, look at a good one and make the one you are adding look the same.

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
If you use a web browser to administer accounts, look at a good one and make the one you are adding look the same." - what do you mean? As far as functionality?
 
Administer from Active CM server and remember to save translations from CM when done.

What I mean is that web browser administration of logins does not validate all of the needed data in all of the fields on the form. You can add a login without all of the field data being there or being the correct data.

Login name - skim6225
Primary group - susers
Additional groups (profile) - prof18
Linux shell - /bin/bash

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
Follow-up question - although I can add users via SMI they still need to be added using shell? I would think there's a single point to add admins and then it would populate where needed (hence the reboot expectation). Or is the single point via shell?
 
The "single point" is the active CM main server.
web browser interface - in the background programs executed in Linux bash shell, data stored on server hard disk (CM4 and higher)
Linux bash - cmuseradd, cmusermod, cmuserdel, cmpasswd are commands to maintain login/pw for CM
"Command: save translations all" will cause file synchronization to share information with CM standby, CM ESS, CM LSP servers.

System Platform logins are completely separate from CM and are for each server platform, and do not file sync to other servers.
These are best done with web browser to CDOM Web Console
Local Management User Administration - Administrator and Advanced Administrator logins sync from CDOM across the server's virtual machines. There is not a Linux interface that you would be able to use for these.

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
In the command line "cmuseradd super-user -C 18 mylogin cmpasswd mylogin", I'm going to need to create a station-only programming access level and a read-only level. So my questions:

1. Do I need to create the profiles first or does the command line above create them?
2. Then where do assign the restrictions and allowances for those two new profiles? CM SMI?
3. Is there a limit of admins per profile? The read-only profile will have 21 members (so far!!)
4. Would I sue "-p" if I want to force them to change the current pass?
5. Any licensing needed?
 
user-profiles must exist before adding login with the user-profile
user-profiles restrict or allow admin rights
list, add, change, remove user-profile in CM
cmuseradd, cmusermod, cmuserdel, cmpasswd with no arguments returns help / options

WebProfiles do not have to exist, but if login has no WebProfile to go with user-profile, web access is denied.
WebAccess restricts or allows access to servers
WebAccess list, add, change, remove webProfiles from WebBrowser



A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
add user login lets you assign a password, there is not a default.

A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"

bsh

45 years Bell, AT&T, Lucent, Avaya
Tier 3 for 35 years and counting
[URL unfurl="true"]http://bshtele.com[/url]
 
- and what do I add in "cmuseradd super-user -C 18 mylogin | cmpasswd mylogin" to force a password change in the initial log in to a ID/pass just created? At this point I've added all users and want them to be forced to change their pass.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top