IBM Hub/Switch Switch User Manual


 
Chapter 3 System Preparation
HPSS Installation Guide September 2002 189
Release 4.5, Revision 2
The hpssadm.config file is a flat ASCII file which lists the users who are authorized to use the
hpssadm utility. The template for this file is config/templates/hpssadm.config.template. The
default name for this file is
/var/hpss/ssm/hpssadm.config
This pathname can be changed in the hpss_env file by setting the HPSS_SSMDS_JAVA_CONFIG
variable as desired. For each user who is to be allowed to use the utility, a line must be added to this
file of the form:
HPSS_SSMDS_AUTH_USER=dce_name
For example:
HPSS_SSMDS_AUTH_USER=joe
HPSS_SSMDS_AUTH_USER=hpss_ssm
3.8.6 Setting up the hpssadm Keytab File
This step is necessary only for use of the hpssadm utility.
Each user of the hpssadm utility must have a private keytab file containing his dce username and
password. Keytab files can be created using rgy_edit. This procedure works for creating a keytab
file. Perform these steps on each machine from which the hpssadm utility will be executed. This
example is for a user named "joe", and creates a keytab file named "keytab.joe" for him:
1. login as either root or hpssadm.
2. dce_login as cell_admin
3. cd to the directory in which you wish to store the keytab file. This must be a directory which
is accessible by the hpssadm user. The directory must be protected so that no one other
than the hpssadm user can delete his keytab file. /var/hpss/ssm is recommended.
4. Make sure the user has a valid dce account and password.
5. Add the user's entry to the keytab file using rgy_edit:
% rgy_edit
rgy_edit> ktadd -f keytab.joe -p joe
You will be prompted for joe's dce password, twice.
6. Sync the entry with the registry:
rgy_edit> ktadd -f keytab.joe -p joe -r
You will be prompted for joe's dce password again, twice.
7. Save the file.
rgy_edit> exit