Apple Mac OS X Server Network Card User Manual


 
Chapter 8 Working with Users and Groups 99
To create an local administrator user with a specific UID and home folder:
$ sudo /System/Library/ServerSetup/serversetup -createUserWithIDIP
fullname
shortname
password
uid homedirpath
The name, short name, password, and UID must be entered in the order shown. If the
full name includes spaces, enter it in quotes.
The command displays a 0 if successful, or a 1 if the full name, short name, or UID is
already in use or if the UID you specified is less than 100.
Creating a Domain Administrator User Account
In order to create a domain administrator user account for a networked directory, you
need to already have a domain administrator user account.
Before starting, you should already have a nonadministrator user account that you
want to give domain administrator privileges to. For instructions on creating
nonadministrator user accounts, see “Creating a Nonadministrator User Account” on
page 100.
To create a domain administrator user account:
1 Start the
dscl tool in interactive mode, specifying the computer you are using as the
source of directory service data. Use the dscl tool to create a domain administrator
user account.
$ dscl localhost
>
In interactive mode, the dscl tool displays the current folder in the directory domain
(not the current folder in the file system) and a “>” character as a prompt.
2 Once connected to the directory, choose the directory domain. Change the current
folder to LDAPv3/ipaddress/Groups.
> cd LDAPv3/
ipaddress
/Groups
Replace
ipaddress
with the IP address of your directory server. If using a NetInfo
directory domain, enter cd /NetInfo/root/Groups at the prompt.
3 Create an administrator user.
>append admin Member
adminusername
This command creates an administrator user, but it doesn’t add the GUID (globally
unique identifier) of the administrator user to the group account.
4 Add the administrator user to the group.
> append admin GroupMembers
guid
Replace
guid
with the globally unique identifier.
5 Quit the
dscl tool.
>quit