System Groups; I.8 System Groups - Novell OPEN ENTERPRISE SERVER - PLANNING AND IMPLEMENTATION GUIDE 12-2010 Implementation Manual

System User or
Associated Service
Group Name
dhcpd DHCP
hacluster Heartbeat
iprint iPrint
named DNS
ncsclient NCS
novell_nobody CIMOM
novlxregd XTier
novlxsrvd XTier
wwwrun Apache

I.8 System Groups

These are groups in the local Linux system that provide a group ID (gid) to an OES process.
When NSS is installed, some of these groups are moved to eDirectory and LUM enabled. This is
done to provide access to NSS data and to keep group IDs the same across multiple servers.
Table I-2 lists the system groups that are used by OES services.
Purpose
DHCP accesses local resources through this or an alternatively
specified user.
If the DHCP lease and configuration files are stored on NSS, the
user must be moved to eDirectory and LUM enabled.
is used by default, but any local user can be used.
dhcpd
This user is created by Heartbeat, but it not used by Heartbeat nor
by Novell Cluster Services.
The iPrint daemons run as this user.
If iPrint is moved to NSS, this user is created in eDirectory and the
local user is removed.
This system user lets DNS access local resources.
In case of clusters, DNS data is on NSS volume, and so the user
has to be created in eDirectory as well.
named is used by default, but any local user can be used.
Used by NCS to access the adminfs file system.
This user is created by CIMOM but is not currently used.
The XTier Registry Daemon (novell-xregd) runs as this user.
When NSS is installed on the Linux server, this user is removed
from the local system and created as LUM-enabled user in
eDirectory. This is required because it must have access to NSS
data, and all NSS access is controlled through eDirectory.
The XTier Server Daemon (novell-xsrvd) runs as this user.
When NSS is installed on the Linux server, this user is removed
from the local system and created as LUM-enabled user in
eDirectory. This is required because it must have access to NSS
data, and all NSS access is controlled through eDirectory.
The Apache daemon runs as this user.
When NSS is installed on the Linux server, this user is removed
from the local system and created as LUM-enabled user in
eDirectory. This is required because it must have access to NSS
data, and all NSS access is controlled through eDirectory.
System User and Group Management in OES 2 SP3 281