03-22-2013
Curiosity killed the cat - so I am asking what did you change, what did you set back.
If you want to use RBAC and pconsole you might be able to setup some RBAC for a user.
In any case, you need to let pconsole (if you were planning on using that) create the role for a user (normally pcon_username) for roles needed while using pconsole (or pcons_username - I forget).
The SYSTEM parameter in /etc/security/user should make sure that LDAP is used for login, so username/password is stored in LDAP - while having an additional definition of the USER (will need to run mkuser -R files id=NNN pgid=GGG) to create the user in the local registery.
lsuser username will tell you how AIX sees the user after login.
lsuser -R files username (AIX view local files only)
lsuser -R LDAP username (AIX view using LDAP information only - I think. If it is giving information that is not in AD then it is still going to the files are to fill in blanks (in particular the default: stanzas in /etc/security/*).
10 More Discussions You Might Find Interesting
1. Programming
I want to spawn n child processes but have two different classes..with the foremost one forking/spawning the child process and the latter performing a function w/ the spawned processes.
I can do this in one class with an if statement and the simple
if((pid=fork())==0) //child process
{
... (1 Reply)
Discussion started by: StrengthThaDon
1 Replies
2. Shell Programming and Scripting
Hi,
I need to spawn mutilpe threads , each invoking a different set of shell scripts, in parallel.
What would be the best way to do that.
Any sample script would greatly help. I am a novice at Unix so any help is much appreciated.
Thanks (5 Replies)
Discussion started by: neeto
5 Replies
3. UNIX for Advanced & Expert Users
Hi - I need help. My user crontab is spawning multiple at processes (and multiple mencoder program starts, that exit, then restart, repeatedly), locking up my system.
For example I have this entry in my crontab:
$ sudo crontab -u victoria -e
* * * * * ~/recordings/pvr1
* * * * *... (10 Replies)
Discussion started by: gstuart
10 Replies
4. Shell Programming and Scripting
Hello
I've got a script that creates multiple processes, in ksh, to bcp out 6 tables at a time. In the script, we write messages to the log to show our progress; most of the time, the log messages are nice and neat with one per line, like they should be. But every once in awhile, at random, the... (2 Replies)
Discussion started by: stonemonolith
2 Replies
5. UNIX for Advanced & Expert Users
Hi All,
I need some assistance, if possible...
Our IMAP server has recently (as of 10:30 GMT today) started spawning multiple processes for no reason! This is causing the mail server's load average to increase continually until the whole machine grinds to a halt.
Here is a typical... (0 Replies)
Discussion started by: fishsponge
0 Replies
6. AIX
AIX6.1
in topas 'pconsole" processing utilization showing high (48.1 %) in pgsp column
what is pconsole process, can kill it
Thanks in Advance (0 Replies)
Discussion started by: sunnybee
0 Replies
7. Shell Programming and Scripting
Want to kill multiple processes by name. for the example below, I want to kill all 'proxy-stagerd_copy' processes.
I tried this but didn't work:
>> ps -ef|grep proxy_copy
root 991 986 0 14:45:34 ? 0:04 proxy-stagerd
root 1003 991 0 14:45:49 ? 0:01... (2 Replies)
Discussion started by: catalinawinemxr
2 Replies
8. Shell Programming and Scripting
:)Hi there, I am new to scripting and wanted to see if someone can show me how to grep on multiple processes and send the output to a file in /home/mydir/output.
I am aware of
ps -ef | grep on 1 process
but need help looking up multiple processes, can you use this command
ps -elf | grep |pid1... (4 Replies)
Discussion started by: abbya
4 Replies
9. Shell Programming and Scripting
Hi,
I am having a shell script which has a while loop as shown below.
while
do
sleep 60
done
I am executing this script from Informatica ETL tool command task from where we can execute UNIX commands/scripts. When i do that, i am seeing 2 processes getting started for one script... (2 Replies)
Discussion started by: chekusi
2 Replies
10. Solaris
Hi,
I am having a shell script on Solaris 10 which has a while loop as shown below.
#!/usr/bin/ksh
#
while
do
sleep 60
done
Name of the shell script is coldcentric.sh. I executed script /DATAWAREHOUSE/LOAD/Scripts/coldcentric.sh from a command task in Informatica worklow as... (3 Replies)
Discussion started by: chekusi
3 Replies
LEARN ABOUT OSX
dsconfigldap
dsconfigldap(1) BSD General Commands Manual dsconfigldap(1)
NAME
dsconfigldap -- LDAP server configuration/binding add/remove tool.
SYNOPSIS
dsconfigldap [-fvixsgmeSN] -a servername [-n configname] [-c computerid] [-u username] [-p password] [-l username] [-q password]
dsconfigldap [-fviSN] -r servername [-u username] [-p password] [-l username] [-q password]
options:
-f force authenticated binding/unbinding
-v verbose logging to stdout
-i prompt for passwords as required
-x choose SSL connection
-s enforce secure authentication only
-g enforce packet signing security policy
-m enforce man-in-middle security policy
-e enforce encryption security policy
-S do not update search policies
-N do not prompt about adding certificates
-h display usage statement
-a servername add config of servername
-r servername remove config of servername
-n configname name given to LDAP server config
-c computerid name used if binding to directory
-u username privileged network username
-p password privileged network user password
-l username local admin username
-q password local admin password
DESCRIPTION
dsconfigldap allows addition or removal of LDAP server configurations. Presented below is a discussion of possible parameters. Usage has
three intents: add server config, remove server config, or display help.
Options list and their descriptions:
-f Bindings will be established or dropped in conjunction with the addition or removal of the LDAP server configuration.
-v This enables the logging to stdout of the details of the operations. This can be redirected to a file.
-i You will be prompted for a password to use in conjunction with a specified username.
-s This ensures that no clear text passwords will be sent to the LDAP server during authentication. This will only be enabled if the
server supports non-cleartext methods.
-e This ensures that if the server is capable of supporting encryption methods (i.e., SSL or Kerberos) that encryption will be enforced
at all times via policy.
-m This ensures that man-in-the-middle capabilities will be enforced via Kerberos, if the server supports the capability.
-g This ensures that packet signing capabilities will be enforced via Kerberos, if the server supports the capability.
-x Connection to the LDAP server will only be made over SSL.
-S Will skip updating the search policies.
-N Will assume Yes for installing certificates
-h Display usage statement.
-a servername
This is either the fully qualified domain name or correct IP address of the LDAP server to be added to the DirectoryService LDAPv3
configuration.
-r servername
This is either the fully qualified domain name or correct IP address of the LDAP server to be removed from the DirectoryService
LDAPv3 configuration.
-n configname
This is the UI configuration label that is to be given the LDAP server configuration.
-c computerid
This is the name to be used for directory binding to the LDAP server. If none is given the first substring, before a period, of the
hostname (the defined environment variable "HOST") is used.
-u username
Username of a privileged network user to be used in authenticated directory binding.
-p password
Password for the privileged network user. This is a less secure method of providing a password, as it may be viewed via process
list. For stronger security leave the option off and you will be prompted for a password.
-l username
Username of a local administrator.
-q password
Password for the local administrator. This is a less secure method of providing a password, as it may be viewed via process list.
For stronger security leave the option off and you will be prompted for a password.
EXAMPLES
dsconfigldap -a ldap.company.com
The LDAP server config for the LDAP server myldap.company.com will be added. If authenticated directory binding is required by the LDAP
server, then this call will fail. Otherwise, the following parameters configname, computerid, and local admin name will respectively pick up
these defaults: ip address of the LDAP servername, substring up to first period of fully qualified hostname, and username of the user in the
shell this tool was invoked.
dsconfigldap -r ldap.company.com
The LDAP server config for the LDAP server myldap.company.com will be removed but not unbound since no network user credentials were sup-
plied. The local admin name will be the username of the user in the shell this tool was invoked.
SEE ALSO
opendirectoryd(8), odutil(1)
Mac OS April 24 2010 Mac OS