Symantec Veritas Cluster Server One, Installation Manual

Page: 87 / 210

87 Setting up authentication plug-ins for VCS One
Setting up vx authentication
The user can then authenticate by using one of the following methods:
■ Running
halogin
to set up the user profile
■ Including the
-user
and
-domaintype
options with the commands from
within client-side scripts
■ Setting environment variables within the scripts
If a common password is acceptable, you can use batch scripts to gather the user
IDs and create them with a random password to get the credentials for all of
them. If the user IDs do not require separate passwords, you can automate the
process.
To add a VCS One user to the private domain with the necessary privileges
1 On the active Policy Master system, see if a suitable private domain already
exists. VCSONE_USERS is the default name of the vx private domain in VCS
One. Enter the following:
# /opt/VRTSvcsone/bin/haat showpd -t ab -d domain_name | grep \
" domain_name "
where
domain_name
in
grep “ domain_name ”
is the domain name you
are searching for, such as VCSONE_USERS.
2 On the active Policy Master system, do one of the following:
3 On the active Policy Master system, if the principal for this user already
exists, delete it by entering the following command:
If there is no private domain Create a private domain with a distinct name.
Enter the following:
# /opt/VRTSvcsone/bin/haat createpd
-t \
ab -d domain_name
where
-t
indicates that the private domain type
is
ab
or authentication broker, and
domain_name
is the domain name.
If a private domain already exists Check to see if the principal for this user is
already there. Enter the following command:
# /opt/VRTSvcsone/bin/haat showprpl
-t \
ab -d domain_name -p principal_name
where -
t
indicates that the private domain type is
ab
or authentication broker,
domain_name
is the
domain name, and
principal_name
is the
name of the user who will run the scripts.