Symantec Veritas Cluster Server One, Installation Manual

Page: 96 / 210

96 Setting up authentication plug-ins for VCS One
Setting the default domain and domain type
Setting the default domain and domain type
You must specify a user and domain type with VCS One commands. The
-user
user@domain
option species the fully-qualified user name and the
-domaintype
domaintype
option specifies the relevant domain type.
For the
-domaintype domaintype
option, accepted values for domaintype
are unixpwd, nis, nisplus, ldap, pam, and vx (which is the Symantec Private
Domain). These values are case sensitive.
You may set a default domain and domain type using the DefaultAuthDomain
attribute so that you do not have to enter the domain and domain type each time
you run a command.
To set the default domain and domain type
◆
Enter the following command:
# /opt/VRTSvcsone/bin/haclus -modify DefaultAuthDomain \
domaintype : domainname
Accepted values for the DefaultAuthDomain attribute are in the form
domaintype:domainname
. Examples include ldap:lab1.com (where lab1.com is a
Windows Active Directory domain) and nis:lab2.com (where lab2 is a NIS
domain).
By default, the
unixpwd
and
pam
domain types do not require a domain name.
They assume the authentication broker host name or the VCS One cluster name
based on the UseClusterNameAsDomainName attribute.
After you set the DefaultAuthDomain attribute, VCS One commands use the
specified domain and domain type as the default. After that, you do not have to
specify the domain and domain type with the
-domaintype domaintype
option
when you run a command.
After you set a default domain and domain type, when you run a command with
the
-domaintype domaintype
option, it will override the default.
Note: The domain type
unixpwd
should only be used for users who are local to
the UNIX system. When the domain type
unixpwd
is used, the domain name is
ignored and the local system’s domain name is used instead. For example, if the
user,
user@domain
, is authenticated with the domain type
unixpwd
on a system
named system1, the user’s credential is
user@system1
instead of the actual
domain name.
For more information on modifying attributes, see the Veritas Cluster Server
One User’s Guide .