topic VMS Account in Operating System - OpenVMS

VMS Account

Ian Derringer — Wed, 17 Aug 2005 13:50:42 GMT

Greetings,
I would like to know on how do you modify a 3 characters VMS account to a 7 characters VMS account and have the UIC reflect the changes as well. For an example:
Username: IJD Owner: Ian J. Derringer
Account: 63 UIC: [50,101] ([IJD])
CLI: DCL Tables: DCLTABLES
Default: DISK5:[USER.IJD]
LGICMD: LOGIN

Thank you in advance.

Ian D.

Re: VMS Account

Phillip Thayer — Wed, 17 Aug 2005 13:54:39 GMT

Use the following Authorize Command:

MODIFY/MODIFY_IDENTIFER IJD IJDERRINGER

This will update the identifier as well as the account.

Phil

Re: VMS Account

Hein van den Heuvel — Wed, 17 Aug 2005 14:08:38 GMT

Usernames and Identifiers are PRIMARY KEYS in INDEXED files and as such can not be modified. So you can not use UAF> MODIFY for the username, but need to use UAF> COPY old new. And for the idendifier you need UAF> ADD /IDEN new /VAL=old-id (generating duplicate value messages.

I would use a DCL or perl script to generate a list of those UAF commands with tweaks /like /DEFDIR=[user.new].
I would have that list also include a 'MODI old/DISUSER' and generate a seperate list with 'DELE old' commands to be executed later when all is well.

I would CONVERT/FDL/FAST/STAT after the bulk COPY/ADD and after the DELE at some future time.

hth,
Hein.

Re: VMS Account

Hein van den Heuvel — Wed, 17 Aug 2005 14:13:35 GMT

Ooops, I may have read to quick. I saw the 3 char usernam and though that needed to be modified as well as the account.

MODI/MODI (the default anyway) is a good thing to read up on.

Hein.

Re: VMS Account

Doug Phillips — Wed, 17 Aug 2005 16:32:18 GMT

Ian,

Maybe some confusion here because "Account" in VMS is *not* the same as "Username". The Account for this user is 63. The Identifier IJD has been established for uic [50,101] and there is no group identifier for [50,*] so the alpha uic just shows [IJD].

If you mean you want to change the username to 7 characters and have the identifier changed too, then the MODI/MODI will do that.

If you intend to have more than one person per group, you might want to establish an identifier for group 50, too:

UAF> ADD /IDENT groupname /VALUE=UIC:[50,*]

where groupname is whatever you want to call group 50. It's good to keep all group names unique and different from usernames.

p.s.: Phillip Thayer wasn't a bit confused and should get the 10 points.

Re: VMS Account

Ian Derringer — Wed, 17 Aug 2005 16:32:21 GMT

You guys lost me )-:
This is what I did so far;
1. uaf copy IJD IDERRINGER
2. I need to make the UIC looking like this UIC: [50,101] ([IDERRINGER])
NOT UIC: [50,101] ([IJD])

I done this once before but for the life of me, I'm can't seem to remember the command.

Help!!

Thanks, guys!

Ian

Re: VMS Account

Doug Phillips — Wed, 17 Aug 2005 16:35:08 GMT

No. Delete the new account and use the command Phillip gave you.

Re: VMS Account

Doug Phillips — Wed, 17 Aug 2005 16:38:59 GMT

Sorry, Ian. To not confuse you any more, it's:

REMOVE IDERRINGER

Re: VMS Account

Doug Phillips — Wed, 17 Aug 2005 16:46:19 GMT

Okay, now that you're really confused;-) the MODI/MODI won't do what you want. Instead, use:

RENAME/MODIF IJD IDERRINGER

instead.

Re: VMS Account

Phillip Thayer — Wed, 17 Aug 2005 18:38:23 GMT

Opps. My bad there. It should be:

RENAME/MODIFY_IDENT IJD IJDERRINGER

Sorry about that one.

Phillip

Re: VMS Account

Ian Derringer — Wed, 17 Aug 2005 23:13:11 GMT

Is there a command for copy IJD to IDERRINGER and still keep the original IJD account intact? Can I use this command COPY/MODIFY_IDENT IJD IJDERRINGER??

Thanks,
Ian

Re: VMS Account

David B Sneddon — Wed, 17 Aug 2005 23:29:06 GMT

Ian,

Is the following what you are trying to achieve?

This first bit is just setting up an account...

UAF> copy dsneddon test1/uic=[10,10]
%UAF-I-COPMSG, user record copied
%UAF-W-DEFPWD, copied or renamed records must receive new password
%UAF-I-RDBADDMSGU, identifier TEST1 value [000010,000010] added to rights databa
se

This is what it looks like...

UAF> show test1

Username: TEST1 Owner: David B Sneddon
Account: SYSPROG UIC: [10,10] ([TEST1])

Now we rename it (what you seem to be wanting to do)

UAF> rename test1 test2
%UAF-I-RENMSG, user record renamed
%UAF-W-DEFPWD, copied or renamed records must receive new password
%UAF-I-RDBMDFYMSG, identifier TEST1 modified

And now look at the new one...

UAF> show test2

Username: TEST2 Owner: David B Sneddon
Account: SYSPROG UIC: [10,10] ([TEST2])

Dave

Re: VMS Account

Robert Gezelter — Thu, 18 Aug 2005 00:53:11 GMT

Ian,

Phillip is correct. The best way to do this is the RENAME/MODIFY_IDENTIFIER command within AUTHORIZE.

Watch out for the password change feature. At the end of the HELP text displayed by AUTHORIZE is the admonition:

"When you create a new UAF record with the RENAME command, you must specify a password"

I hope that this clears things up.

- Bob Gezelter, http://www.rlgsc.com

Re: VMS Account

Robert Gezelter — Thu, 18 Aug 2005 07:29:11 GMT

Ian,

If you want to change the username but leave the existing Identifier, the RENAME command with the /MODIFY_IDENTIFIER qualifier omitted or negated would be your choice. Check the HELP text within AUTHORIZE for the whole story.

- Bob Gezelter, http://www.rlgsc.com

Re: VMS Account

Doug Phillips — Thu, 18 Aug 2005 10:44:25 GMT

Ian,

From the UAF> prompt, enter HELP and then enter the command from the list that you want help on and help will tell you if there is additional help available.

There is no COPY/MODIFY.

If you look at COPY /ADD_IDENT you will see that /ADD is the default, meaning you don't need to specify it if that's the action you want.

Now, the username identifier is associated with the uic. If different users share uic numbers, the first one added to the system will own that association (unless you change it).

If you want to create a new user named IDERRINGER that has all of the settings of IJD but with its own identifier, you will need a unique UIC for IDERRINGER (and a new password).

Use:

UAF> show * /brief

to list the users and see the UIC's that are assigned. Pick one that isn't assigned and use it for IDERRINGER.

example assuming uic [50,102] is unused:

COPY IJD IDERRINGER/UIC=[50,102]/PASS=passwd

I think most of us were confused because you said you wanted to modify the account.

Re: VMS Account

Ian Derringer — Thu, 18 Aug 2005 12:04:50 GMT

Yes, you guys are correct. My questions were not very clear. All I want to do is copy from an existing VMS account with 3 characters to a full 7 characters account and still be sharing the same UIC/identifier. I would still like to leave the original account remain intact. Therefore, the user will now be using the 7 characters account instead the 3 characters and their permission still intact.

Thanks everyone for your feedback on this subject.

Ian

Re: VMS Account

Lawrence Czlapinski — Thu, 18 Aug 2005 15:24:43 GMT

Ian: Sounds like you want a new 7 character username which uses the same UIC.
COPY IJD IJDERRI/PASS=password
The user would have access to the same account through the new username. You wish to retain the old username.
NOTE: This is not two accounts.
Lawrence

Re: VMS Account

Doug Phillips — Thu, 18 Aug 2005 16:03:22 GMT

Ian,

If as you said:
>>
I need to make the UIC looking like this UIC: [50,101] ([IDERRINGER])
NOT UIC: [50,101] ([IJD])
<<

then after doing the copy you will need to:

RENAME /IDENT IJD IDERRINGER

because you didn't change the UIC.

Re: VMS Account

Ian Derringer — Thu, 18 Aug 2005 22:01:06 GMT

Great. I will give it a try and let you all know the result.

Thanks everyone!

Ian