Creating Group Objects - Novell OPEN ENTERPRISE SERVER 2 SP2 - LAB GUIDE 01-19-2010 Manual

4.2 Creating Group Objects

To simplify user management, you should create one or more groups and associate users with those
groups. Groups let you manage multiple users at the same time.
Some actions can only be performed at the group level. For example, enabling users for LUM
requires making them members of a group that is enabled for LUM.
For the exercises in this guide, you will create two groups:
LUMUsers: This group is used to LUM-enable some of the users you have created. Having the
group lets us explore how LUM works and directly experience the SSH security precautions
that are built into OES 2.
AllUsers: This group is for all of the eDirectory user objects, including those that are LUM-
enabled and those that have only traditional Novell services access.
IMPORTANT: Creating a group named users seems logical to many eDirectory administrators.
Unfortunately, all SLES 10 servers already have a system-created local group named users, and
creating a duplicate group in eDirectory causes problems.
For more information, see
and Implementation
To create the required group objects:
1 In iManager > Roles and Tasks, click Groups > Create Group.
2 In the Group Name field, type
The name contains uppercase and lowercase letters simply to illustrate that case is preserved in
object names. Some administrators use mixed case to improve readability.
3 Click the Browse
4 Browse to the USERS container object.
5 Click OK > Modify.
6 Click the Members tab.
7 Click the Browse icon
8 Browse to the USERS group and click the down-arrow
to the group.
9 Select the following User objects:
linux1_lum-edir
linux2_lum-edir
ncp_lum-edir
nss_lum-edir
10 Click OK > Apply > OK.
11 Click Create Group.
12 In the Group Name field, type
13 Click the Object History icon
(FDN).
60 OES 2 SP2: Lab Guide for Linux and Virtualized NetWare
"Avoid POSIX and eDirectory
Guide.
.
LUMUsers
Description: Browse icon
Description: Browse icon
.
AllUsers
and select the USERS object's fully distinguished name
Duplications" in the OES 2 SP1: Planning
icon next to the Context field.
next to the Members field.
Description: Down Arrow icon next