UserListExt - Defines privileged users for the BOS Overseer Service
The UserListExt file lists the names of authenticated users authorized to issue privileged bos(8) commands that operate against the bosserver(8) installed on Auristor servers. The UserListExt file must reside in the /etc/yfs/server directory on every server machine.
In most cases Auristor uses the Auristor Protection Service and the membership of the system:administrators group to determine whether or not an authenticated user is a system administrator.
Some Auristor services such as the Auristor Volume Service,
the Auristor Location Service,
and the Auristor Backup Service do not currently interact with the Auristor Protection Service.
These service instead rely upon the local machine's UserListExt to decide when to consider an authenticated user as a system administrator (or super user.) For these services the UserListext file determines which vos and backup commands can successfully be performed.
Although the UserListExt file is in a human readable format, do not use a text editor to alter it. Instead always use the appropriate commands from the bos command suite:
The bos adduser command to add a user to the file.
The bos listusers command to display the contents of the file.
The bos removeuser command to remove a user from the file.
Although it is possible to list different administrators in the UserListExt files on different server machines, doing so can cause unanticipated authorization failures and is not recommended.
In cells that use the Update Server to distribute the contents of the /etc/yfs/server directory, it is customary to edit only the copy of the file stored on the system control machine. Otherwise, edit the file on each server machine individually.
backup(8), bos(8), bos_adduser(8), bos_listusers(8), bos_removeuser(8), bosserver(8), buserver(8), vlserver(8), volserver(8), vos(1), upclient(8), upserver(8)
IBM Corporation 2000. http://www.ibm.com/ All Rights Reserved.
This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
"AFS" is a registered mark of International Business Machines Corporation, used under license. (USPTO Registration 1598389)
"OpenAFS" is a registered mark of International Business Machines Corporation. (USPTO Registration 4577045)
The "AuriStor" name, log 'S' brand mark, and icon are registered marks of AuriStor, Inc. (USPTO Registrations 4849419, 4849421, and 4928460) (EUIPO Registration 015539653).
"Your File System" is a registered mark of AuriStor, Inc. (USPTO Registrations 4801402 and 4849418).
"YFS" and "AuriStor File System" are trademarks of AuriStor, Inc.