Enabling The Lumusers Group For Linux User Management (Lum); Allowing Ssh Access - Novell OPEN ENTERPRISE SERVER 2 SP2 - LAB GUIDE 01-19-2010 Manual

14 Click OK > Modify.
15 Click the Members tab.
16 Click the Browse icon
17 Shift-click linux1_lum-edir, drag the mouse down to select all the users, then click nw_edir.
All of the users are added to the list.
18 Click OK > Apply > OK.
19 Do not close iManager. Continue with the next section,
Linux User Management
4.3 Enabling the LUMUsers Group for Linux User
Management (LUM)
IMPORTANT: LUM-enabling users is an important part of these lab exercises. However, in a
production environment you should avoid LUM-enabling users until you fully understand the
potential security issues. For more information, see
SP1: Planning and Implementation
If you want eDirectory users to access PAM-enabled services such as login or sshd (SSH), on an
OES 2 server, you must LUM-enable the users.
1 In the Roles and Tasks list, click Linux User Management > Enable Groups for Linux.
2 Click the Browse icon
3 Click LUMUsers > OK.
4 Make sure the Linux-Enable All Users in These Groups option is selected, then click Next
twice.
5 Click the Browse icon
6 Click the up-arrow Description: Up arrow Icon
7 Click the down-arrow
8 Click the UNIX Workstation object for the OES 2 lab server, then click OK.
LUM-enabled access to OES 2 servers is enabled on an individual server basis. If you install
additional OES 2 servers that require LUM access, they must also be added to a LUM-enabled
group.
The LUMUsers group and its users are now recognized by the OES 2 server as local users.
9 Click Next > Finish > OK.
10 Do not close iManager. Continue with the next section,

4.4 Allowing SSH Access

To illustrate how LUM-enabled services work, we will briefly experiment with SSH access for
eDirectory LUM-enabled users. In
page 88, you will see that SSH access is required for a key NetStorage administration feature.
Complete the steps in the following sections:
Section 4.4.1, "Allowing SSH Access Through the Firewall," on page 62
Description: Browse icon
(LUM).
"SSH Services on OES 2
Guide.
Description: Browse icon
Description: Browse icon
.
Description: Down Arrow icon
Section 10.2.4, "SSH and NetStorage Administration," on
next to the Members field.
Enabling the LUMUsers Group for
Linux" in the
next to the Group Name field.
next to the Linux Workstation Name field.
next to SERVERS.
Allowing SSH Access.
eDirectory Linux Access (LUM)
OES 2
61