Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Manual

Page: 97 / 302

Creating New Directory Entries
Chapter 5 User and Group Administration 97
3.
If you want to store UNIX-specific user information in the directory, click the
Posix User tab, enable the fields by selecting “Enable Posix user attributes,”
and then enter the following information:
UID Number. Enter the user’s UNIX ID number.
GID Number. Enter the user’s UNIX group ID number.
Home Directory. Enter the path to the user’s home directory. For example,
/u/jdoe
.
Login Shell. (Optional) Enter the path to the user’s login shell. For example,
/usr/local/bin/tcsh
.
Gecos.
(Optional) The value of this user’s
pw_gecos
entry in
/etc/passwd
.
4.
Click OK.
Groups
A group consists of users who share a common attribute or are part of a list. For
example, you might set up a group called Sales consisting of all users whose entries
contain the attribute
ou=Sales
. Netscape Directory Server supports three types of
groups: static, dynamic, and certificate. Each group differs by the way in which
users, or
members, are added to it. The following descriptions explain this.
A static group consists only of users that have been added to it. It is called static
because it doesn’t change unless you add a user to it or delete a user from it. For
example, if you create a static group called Marketing, none of the users who have
the attribute
department=marketing
in their entry are members of the Marketing
group until you explicitly add each one to the group.
One special static group is called the Configuration Administrators group . It is
automatically created and populated when the configuration directory is installed.
Members of the Configuration Administrators group have unrestricted access to
the configuration directory. The group is stored in the configuration directory
under the following DN:
ou=Groups, ou=TopologyManagement, o=NetscapeRoot
Initially, the Configuration Administrator is the only member of the Configuration
Administrators group. If he wants to give additional users his level of
administrative privilege, he can do so by adding them as members of the group.
These users can access the configuration directory in the same way as the
Configuration Administrator. Any member of the Configuration Administrators
group can add additional members.