Table of Contents
Advertisement
Allowing Multiple Administrators
To change the superuser settings for the Administration Server, perform the
following steps:
Access the Administration Server and choose the Preferences tab.
1.
Click the Superuser Access Control link.
2.
Make the desired changes and click OK..
3.
The superuser's user name and password are kept in a file called
server_root/https-admserv/config/admpw
can view this file to obtain the actual name; however, note that the password is
encrypted and unreadable. The file has the format
forget the password, you can edit the
password. You can then go to the Server Manager forms and specify a new
password.
CAUTION
Allowing Multiple Administrators
Multiple administrators can change specific parts of the server through distributed
administration. With distributed administration you have three levels of users:
•
superuser is the user listed in the file
server_root/https-admserv/config/admpw
password) you specified during installation. This user has full access to all
forms in the Administration Server, except the Users & Groups forms, which
depend on the superuser having a valid account in an LDAP server such as
Directory Server.
•
administrators go directly to the Server Manager forms for a specific server,
including the Administration Server. The forms they see depend on the access
control rules set up for them (usually done by the superuser). Administrators
can perform limited administrative tasks and can make changes that affect
other users, such as adding users or changing access control.
52
Netscape Enterprise Server Administrator's Guide • August 2002
Because you can edit the admpw file, it is very important that you keep the
server computer in a secure place and restrict access to its file system:
• On UNIX/Linux systems, consider changing the file ownership so that
it's writable only by root or whatever system user runs the
Administration Server daemon.
• On Windows NT/Windows 2000 systems, restrict the file ownership to
the user account Administration Server uses.
. If you forget the user name, you
username:password
file and simply delete the encrypted
admpw
. This is the user name (and
. If you
Advertisement
Table of Contents
