HP-UX Virtual Partitions Administrator's Guide (includes A.03.04) (previously titled Installing and Managing HP-UX Virtual Partitions)

vPars Flexible Administrative Capability (vPars A.03.03, A.03.04, vPars A.04.02, A.04.03, A.05.01)
Synopsis
Chapter 11
332
Synopsis
The vPars Flexible Administrative Capability feature restricts the usage of specific vPars commands
such that they can be successfully executed from only designated virtual partitions.
The specific vPars commands that are restricted are those that can alter other virtual partitions, such as
vparmodify or vparreset.
The designated virtual partitions are known as designated-admin virtual partitions and are designated
by being explicitly added to the designated-admin virtual partitions list. Virtual partitions that are not in the
list are considered non-designated-admin virtual partitions. When a superuser executes a command that
affects another partition from within a non-designated-admin virtual partition, the command will fail.
When the flexible administrative capability feature is ON (enabled), a virtual partition can be added to (or
deleted from) the list from either the Monitor prompt without a password or the HP-UX shell prompt by
superusers who know the flexible administrative capability password.
The flexible administrative capability feature can be set to either ON (enabled) or OFF (disabled) but only
from the vPars Monitor prompt (MON>).
Terms and Definitions
target partition
This is the virtual partition that is affected when a vPars command is executed. For
example, in the command:
# vparmodify -p winona2 -a cpu::1 ...
an attempt is made to add a CPU to winona2, so winona2 is the target virtual partition. The
argument of the -p option is the target partition.
local partition
This is the virtual partition from which a vPars command is executed. For example, in the
command:
winona1# vparmodify -p winona2 -a cpu::1
assuming the HP-UX shell prompt contains the hostname, the vparmodify command is
executed from winona1, so winona1 is the local virtual partition. winona2 is the target
partition.
designated-admin virtual partition
This is a virtual partition that is allowed to perform vPars commands that affect other
virtual partitions. For example, assume the flexible administrative capability feature is ON
and the following command is executed:
winona1# vparmodify -p winona2 -a cpu::1
Because this command affects another virtual partition (winona2), the local virtual
partition winona1 must be a designated-admin virtual partition in order for this command
to be successful.