4.5 Enabling User and Group for LUM

Perform the following steps to LUM-enable the CIS user and group:

  1. Delete the local CIS user.

    userdel cisuser 
  2. Verify if the CIS user is deleted.

    cat /etc/passwd | grep "cisuser" 
  3. Delete the local CIS group.

    groupdel cisgroup 
  4. Verify if the CIS group is deleted.

                cat /etc/group | grep "cisgroup" 
              
  5. Create a Linux group object.

                namgroupadd [-a adminFDN] - x group_context -W workstation_name group_name 
              

    Example:

    namgroupadd -a cn=admin,o=microfocus -x o=microfocus cisgroup -W acme-111-129

  6. Create a Linux user object.

                namuseradd [-a adminFDN] -x user_context [-c comment] -g primary_groupFDN [-s shell] login_name
              
    namuseradd -a cn=admin,o=microfocus -x o=microfocus -c cisuser -g cn=cisgroup,o=microfocus -s /sbin/nologin cisuser
  7. Restart Linux User Management (LUM).

                systemctl restart namcd.service
              
  8. Restart Name Service Cache Daemon service.

                systemctl restart nscd.service
              
  9. Run namuserlist utility to list the attributes of Linux user objects.

                namuserlist cisuser
              
  10. Provide rights to the configuration and log folder.

    rights -f /media/nss/CISVOLUME -r rwfcem trustee cisuser.microfocus.oes 
  11. (Conditional) If the CIS configuration is core and is configured in the cluster volume, perform the following steps on the other nodes where you migrate the cluster volume. For verifying the type of CIS configuration, see Section 4.3, Verifying the CIS Configuration.

    1. Delete the local CIS user.

      userdel cisuser 
    2. Verify if the CIS user is deleted.

      cat /etc/passwd | grep "cisuser" 
    3. Delete the local CIS group.

      groupdel cisgroup

    4. Verify if the CIS group is deleted.

      cat /etc/group | grep "cisgroup"

    5. Modify the cisgroup to include the workstation.

      namgroupmod -a $adminFDN -W $workstation_name CN=$group_name,$group_context
    6. Restart Linux User Management (LUM).

      systemctl restart namcd.service

    7. Restart Name Service Cache Daemon service.

      systemctl restart nscd.service