The mkuser command creates either a local or a remote user to access a SAN Volume Controller cluster.
Syntax
>>- svctask -- -- mkuser -- -- -name -- user_name --------------> >--+- -remote-------------------------+-- ----------------------> '- -usergrp-- -- group_name_or_id -' >--+---------------------------------------+--------------------> '- -password --+----------------------+-' '- cleartext_password -' >--+-------------------------------+--------------------------->< '- -keyfile -- sshkey_filename -'
Parameters
- -name user_name
- (Required) Specifies the unique user name. The user name cannot start or end with a blank. The user name must consist of a string of 1 - 256 ASCII characters, with the exception of the following characters: %:",*' .
- -remote | -usergrp group_name_or_id
- (Required) Specifies whether the user authenticates to the cluster using a remote authentication service or cluster authentication methods. The usergrp parameter specifies the name or ID of the user group with which the local user is to be associated. Either the remote parameter or the usergrp parameter must be set.
- -password cleartext_password
- (Optional) Specifies the password to be associated with the user. The password cannot start or end with a blank. It must consist of a string of 6 - 64 printable ASCII characters. You can optionally specify the password with the password parameter. If you do not specify the password, the system prompts you for it before running the command and does not display the password that you type.
- -keyfile sshkey_filename
- (Optional) Specifies the name of the file that contains the Secure Shell (SSH) public key.
Description
The mkuser command creates a new local or remote user to access a cluster. The command returns the ID of the created user.
You must have the Security Administrator role to create, delete, or change a user.
If you create a local user, you must specify the existing user group that the user belongs to. All local users must have a group. The user group defines roles that provide the user with access to specific operations on the cluster. You must also specify either the keyfile or password parameter, or both.
If you create a remote user, you must specify both the keyfile and password parameters. Remote users have their groups defined by the remote authentication service.
If you use the keyfile parameter, the SSH key file should be placed in the /tmp directory before running this command. When you run the command, the SSH key is copied into cluster state and activated for the user, and the input file is deleted.
An invocation example
svctask mkuser -name jane -usergrp Service -password secret
The resulting output
User, id [1], successfully created