Description
This command is used to manage "common users" (users that use one or more Systemwalker products). Common users need to be registered with each product that they will use.
Registering users with products
This command registers common users with the specified products. Common users need to be registered with each product that they will use.
Multiple users can be registered as a batch by specifying an input file.
Deleting users from products
This command deletes common users from the specified products. Common users need to be deleted from each product that they will no longer use.
Multiple users can be deleted as a batch by specifying an input file.
Changing user information
This command changes information for the specified users.
Multiple user information can be changed as a batch by specifying an input file.
Searching for users
This command searches for users according to specified conditions, and displays a list of the search results.
Synopsis
swidmg_user_mng | ADD -product <product name> -id <user ID> [-password <password>] [-ou <organization name>] [-group <group name>] [-f] [-help] |
swidmg_user_mng | ADD-i <input file name> [-f] [-help] |
swidmg_user_mng | DELETE -product <product name> -id <user ID> [-help] |
swidmg_user_mng | DELETE-i <input file name> [-help] |
swidmg_user_mng | MODIFY -id <user ID> [-password <password>] [-ou <organization name>] [-group <group name>] -product <product name> [-help] |
swidmg_user_mng | MODIFY-i <input file name> [-help] |
swidmg_user_mng | SEARCH [-id <user ID>] [-ou <organization name>] [-group <group name>] [-o <output file name>] [-d] [-help] |
swidmg_user_mng | -help |
Options
Specify this option to register a user with a product.
Specifies the name of the Systemwalker product that the user will use, enclosed in double-quotes. Multiple product names can be specified.
The following product names can be used:
For Systemwalker Centric Manager
"CMGR"
For Systemwalker Service Quality Coordinator
"SQC"
Example:
"CMGR,SQC"
Specifies user IDs using between 1 and 32 bytes.
The following characters can be used:
Letters
Numbers
Symbols (_ - .)
Note
If the Systemwalker Single Sign-On function is used and Active Directory is used as the Systemwalker authentication repository, specify user IDs using no more than 20 bytes.
Specifies the password for the user using between 8 and 50 bytes.
The following characters can be used:
Letters
Numbers
Symbols (! $ ' ( ) ~ ` { } _ - ^ .)
Passwords must include at least one letter and at least one number.
If this option is omitted, the behavior will be as follows:
If the user specified by the "-id" option has been registered in the Systemwalker authentication repository:
The user will be registered as an additional user for the product specified by the "-product" option.
If the user specified by the "-id" option has not been registered with the Systemwalker authentication repository:
The command will return an error.
Point
If Active Directory is used as the Systemwalker authentication repository, passwords may be required as described below, depending on the password policy settings for Active Directory.
Passwords must be at least six characters long.
Characters from at least three of the following five categories must be included:
Uppercase letters
Lowercase letters
Numbers
Non-alphabetic characters (! $ # % etc.)
Unicode characters
The password must not contain any more than two characters from the user name.
If the user name is less than three characters long, it is likely that the password will be rejected, so this check is not executed.
When checking the full name of the user, some characters (commas, periods, dashes, hyphens, underscores, spaces, hash symbols, and tabs) are treated as separators that split the name into smaller tokens.
For each token that is three or more characters long, the command checks whether the token is included in the password and, if so, rejects the change to the password.
For example, the name "Erin M. Hagens" is split into three tokens: "Erin", "M" and "Hagens". The second token is ignored, because it is only one character long.
This means that such users cannot change their password to a password that contains "erin" or "hagens" somewhere in the password.
These checks are not case-sensitive.
Specifies the name of the organization that the user belongs to, in DN format and enclosed in double-quotes.
If this option is omitted, the user will be created on the base DN that was specified with the connection destination Systemwalker authentication repository setup command.
Example:
"OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com"
Specifies the name of the group that the user belongs to, enclosed in double-quotes. Multiple group names can be specified.
If this option is omitted, the settings will be entered as follows, depending on the type of Systemwalker authentication repository.
For Active Directory
The "Domain Users" group will be specified.
For Interstage Directory Service
The user will not be specified as belonging to any group.
Example:
"Administrators,Users"
Multiple users can be registered as a batch by specifying a file (user registration information file) where information about the users to be added has been entered. If this option is specified, the other options will be ignored.
Refer to "User Registration Information File" for details on user registration information files.
Point
The execution results of the user management command are output to the standard output. If a CSV file is used to add numerous users, use the redirect function to output the execution results to a file.
Specifying this option makes it possible to register users forcibly. Take care using this option, because if the user already exists the existing user information will be updated.
Displays the usage for the ADD option.
Specify this option to delete users for each product.
Point
If the Systemwalker common user to be deleted uses multiple products, the user will not be deleted from the Systemwalker authentication repository until the user stops using all these products.
Specifies the Systemwalker product name, enclosed in double-quotes. Multiple product names can be specified.
The following product names can be used:
For Systemwalker Centric Manager
"CMGR"
For Systemwalker Service Quality Coordinator
"SQC"
Example:
"CMGR,SQC"
Specifies the ID of the user to be deleted.
Multiple users can be deleted as a batch by specifying a file (user deletion information file) where information about the users to be deleted has been entered. If this option is specified, the other options will be ignored.
Refer to "User Deletion Information File" for details on user deletion information files.
Point
The execution results of the user management command are output to the standard output. If a CSV file is used to delete numerous users, use the redirect function to output the execution results to a file.
Displays the usage for the DELETE option.
Specify this option to change user information in the Systemwalker authentication repository.
Specifies the ID of the user for which user information is to be changed.
Specifies the password for the user. If this option is omitted, the password will not be changed.
Specifies the name of the organization that the user belongs to, in DN format and enclosed in double-quotes.
If this option is omitted, the organization for the user will not be changed.
Example:
"OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com"
Specifies the name of the group that the user belongs to, enclosed in double-quotes. Multiple group names can be specified.
If this option is omitted, the group that the user belongs to will not be changed.
Example:
"Administrators,Users"
Specify one of the products that the specified user uses. The following product names can be used:
For Systemwalker Centric Manager
"CMGR"
For Systemwalker Service Quality Coordinator
"SQC"
Multiple users can be updated as a batch by specifying a file (user change information file) where information about the users to be updated has been entered. If this option is specified, the other options will be ignored.
Refer to "User Change Information File" for details on user change information files.
Point
The execution results of the user management command are output to the standard output. If a CSV file is used to change information for numerous users, use the redirect function to output the execution results to a file.
Displays the usage for the MODIFY option.
Specify this option to search for a user from the Systemwalker authentication repository. This option searches for users registered in the Systemwalker authentication repository according to specified conditions, and displays a list of the search results.
Specifies the user ID to be used as the user search condition.
Specifies an organization name as the user search condition, in DN format.
If this option is omitted, the user will be searched from the base DN that was specified with the connection destination Systemwalker authentication repository setup command.
Example:
"OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com"
Specifies the group name to be used as the user search condition. Multiple group names can be specified.
If this option is omitted, the search will return users that meet the search conditions from any group.
Example:
"Administrators,Users"
Outputs the user search results to a file.
Displays detailed information about the user search results.
Displays the usage for the SEARCH option.
Displays the usage for all the options.
Return Values
Normal termination
Abnormal termination
Command Location
Windows | %F4AM_INSTALL_PATH%\F4AMidmg\client |
UNIX | /opt/FJSVswaic/client |
Privilege Required/Execution Environment
[Windows]
Administrator privileges are required.
[UNIX]
System administrator (superuser) privileges are required.
Cautions
When specifying passwords with the "-password" option of this command, take care to ensure that the password is not seen by other people.
Similarly, set up file access permissions so that other people cannot view the input file specified with the "-i" option.
Usage example 1 (Registering users)
In this example, a user that meets the following conditions is registered.
User ID: user001
Password: user001
Organization ID: OU=System Information Department, OU=Fujitsu Limited, DC=fujitsu, DC=com
Group: Administrators, Users
Product used: CMGR
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" ADD -id user001 -password user001 -ou "OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com"-group "Administrators,Users" -product "CMGR" |
[UNIX]
/opt/FJSVswaic/client\swidmg_user_mng ADD -id user001 -password user001 -ou "OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com" -group "Administrators,Users" -product "CMGR" |
Usage example 2 (Registering users as a batch)
In this example, a CSV file is used to register multiple users as a batch.
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" ADD -i C:\work\addlist.csv |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng ADD -i /work/addlist.csv |
Usage example 3: Deleting users
In this example, a user that meets the following conditions is deleted.
User ID: user001
Product used: CMGR
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" DELETE -id user001 -product CMGR |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng DELETE -id user001 -product CMGR |
Usage example 4: Deleting users as a batch
In this example, a CSV file is used to delete multiple users as a batch.
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" DELETE -i C:\work\deletelist.csv |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng DELETE -i /work/deletelist.csv |
Usage example 5: Changing users
In this example, the user "user001" is added to another group and his password is changed.
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" MODIFY -id user001 -password modpassword -group "Administrators" |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng" MODIFY -id user001 -password modpassword -group "Administrators" |
Usage example 6: Changing users as a batch
In this example, a CSV file is used to change multiple users as a batch.
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" MODIFY -i c:\work\modifylist.csv |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng MODIFY -i /work/modifylist.csv |
Usage example 7: Searching for users
This example shows how to search for users based on the organization that they belong to.
[Windows]
"%F4AM_INSTALL_PATH%\F4AMidmg\client\swidmg_user_mng" SEARCH -ou "OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com" |
[UNIX]
/opt/FJSVswaic/client/swidmg_user_mng SEARCH -ou "OU=System Information Department,OU=Fujitsu Limited,DC=fujitsu,DC=com" |
