Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE 12-2010, Implementation Manual

Page: 282 / 296

282 OES 2 SP3: Planning and Implementation Guide
Table I-9 System Group Purposes
I.9 Auditing System Users
It is the nature of the Linux operating system and the POSIX security model that the
root
user has
access to all system information stored on the local server. Due to this fact, some organizations
choose to monitor the activities of privileged users.
System User or Group Name Associated Service Purpose
Iprint (POSIX)
iprintgrp (eDirectory)
iPrint The iPrint daemons use the group ID (gid) of this
group to run.
If iPrint is moved to NSS, the iprintgrp group is
created in eDirectory.
ncsgroup NCS
ncsclient
is a member of this group.
novell_nogroup CIMOM This group is created by CIMOM but is not currently
used.
novlxtier XTier The XTier daemons use the group id (gid) of this
group to run.
Apache (wwwrun) is a group member because it
needs XTier socket access.
When NSS is installed on the Linux server, this group
is removed from the local system and created in
eDirectory. This is required because members of this
group must have access to NSS data, and all NSS
access is controlled through eDirectory.
server_name -W-
SambaUserGroup
Samba (Novell) All users granted Samba access are originally
assigned to this group, which disables SSH access
for them on the server. For more information, see
“The Samba connection:” on page 92 .
shadow QuickFinder Used by QuickFinder and other Web services.
www Apache
Tomcat
QuickFinder
Apache (wwwrun) and tomcat (novlwww) use the
group ID (gid) of this group to run.
QuickFinder requires that all users who manage the
service (including the eDirectory Admin user) belong
to this group.
User
novlxsrvd
is in the group because it needs
access to an Apache domain socket.
When NSS is installed on the Linux server, this group
is removed from the local system and created in
eDirectory. This is required because members of this
group must have access to NSS data, and all NSS
access is controlled through eDirectory.