Chapter 2 79
Command Definitions A-B
ALTUSER
ALTUSER
Changes the attributes currently defined for a user.
Syntax
ALTUSER username[ .acctname]
[ ;PASS=[ password] ] [ ;CAP=[ capabilitylist] ]
[ ; MAXPRI=[ subsueuename] ] [ ;LOCATTR=[ localattribut] ]
[ ;HOME=[ homegroupname] ] [ ;UID=[ uid]
[ ;USERPASS=[ req opt ] [ Expired] ]
The USERPASS parameter is only available if the HP Security Monitor has been installed.
Parameters
username The name assigned to the user within a logon account.
acctname The account in which the user is to reside. System manager (SM)
capability is required to use this parameter.
password The password to be assigned to the user. If password is omitted, any existing
password is removed. If PASS= is omitted, any existing password is
unchanged.
capabilitylist Either 1) a list of capabilities, separated by commas, permitted to this
user, or 2) a list of additions and/or deletions to be applied to the user's
existing set of capabilities. Additions and deletions are specified by a "+" or
"-" immediately followed by the capability to add or delete, separated by
commas.
If "+"/"-" is to be specified in the list, then the list must begin with "+" or
"-". For example, CAP=+MR,-PH is legal, but CAP=MR,-PH is not. It is not
necessary to prefix each capability to be added or deleted with "+" / "-", as
the occurrence of "+" / "-" indicates an action that remains in effect until
the indicator changes. For example, CAP=+MR,PH,-PM,DS is equivalent to
CAP=+MR,+PH,-PM,-DS.
The capabilities allowed to users are restricted by the capabilities assigned
to the user's account. If a capability is absent at the account level, users
within the account are also denied that capability, whether or not it is
explicitly assigned to them.
Each capability is denoted by a two-letter mnemonic as follows:
System Manager = SM
Account Manager = AM
Account Librarian = AL
Group Librarian = GL
Diagnostician = DI
System Supervisor = OP
Network Administrator = NA
Node Manager = NM
