Managing HP Serviceguard for Linux, Eighth Edition, March 2008

Configuring Packages and Their Services
Choosing Package Modules
Chapter 6 227
user_host
The system from which a user specified by user_name can execute
package-administration commands.
Legal values are any_serviceguard_node, or cluster_member_node, or
a specific cluster node. If you specify a specific node it must be the official
hostname (the hostname portion, and only the hostname portion, of the
fully qualified domain name). As with user_name, be careful to spell the
keywords exactly as given.
user_name
Specifies the name of a user who has permission to administer this
package. See also user_host and user_role; these three parameters
together define the access control policy for this package (see
“Controlling Access to the Cluster” on page 180). These parameters must
be defined in this order: user_name, user_host, user_role.
Legal values for user_name are any_user or a maximum of eight login
names from /etc/passwd on user_host.
NOTE Be careful to spell any_user exactly as given; otherwise Serviceguard
will interpret it as a user name.
Note that the only user_role that can be granted in the package
configuration file is package_admin for this particular package; you
grant other roles in the cluster configuration file. See “Setting up
Access-Control Policies” on page 184 for further discussion and
examples.
user_role
Must be package_admin, allowing the user access to the cmrunpkg,
cmhaltpkg, and cmmodpkg commands (and the equivalent functions in
Serviceguard Manager) and to the monitor role for the cluster. See
“Controlling Access to the Cluster” on page 180 for more information.