HP Systems Insight Manager 6.3 Command Line Interface Guide

This guide does not discuss the details of creating and managing tools. For more information, see
the HP Systems Insight Manager 6.3 user guide on the www.hp.com. However, this guide discusses
the highlights of toolboxes.
The “Managing toolboxes” (page 149) section discussed how to create toolboxes used in creating
authorizations. When creating tools, use the following XML entry to place the tool in a specific
toolbox:
<toolbox toolbox-name="My toolbox" />
To include the tool in more than one toolbox, you can enter additional <toolboxâ ¦/> entries.
Do not add tools to the Monitor Tools toolbox that provide root or administrator level functionality.
This toolbox is assigned to the operator and user templates, and these tools run with root or
administrator access on the CMS.
Managing authorizations
The mxauth command enables you to add, remove, or list authorizations in Systems Insight
Manager. For a complete description of mxauth, see mxauth man page. For a complete
description of the XML syntax required to manage authorizations from an XML file, see the
mxauth(4) man page.
Before creating authorizations, the users, system groups (optional), and toolboxes must exist as
described in the Managing users, Managing system groups and Managing toolboxes sections.
After creating the users, tools, and toolboxes, you can create the authorizations.
The commands to create a system authorization are:
# mxauth –a –u username –R toolboxname –n nodename
# mxauth –a –u username –R toolboxname –g groupname
# mxauth –a –f authfile.xml
The first example creates a system authorization that enables username to use the tools in
toolboxname to manage system nodename. The second example creates a group authorization
that enables username to use the tools in toolboxname to manage all the systems in system group
groupname. The third example creates authorizations as defined in the XML file authfile.xml.
The following example shows what an XML file would look like when creating three system
authorizations:
<?xml version="1.0" encoding="UTF-8"?>
<auth-list>
<node-authorization user-name="user1" toolbox-name="webadmin"
node-name="node1.corp.com" />
<node-authorization user-name="user2" toolbox-name="operator"
node-name="node1.corp.com" />
<node-authorization user-name="user3" toolbox-name="dbadmin"
node-name="node2.corp.com" />
</auth-list>
To remove the system authorization, remove the group authorization, and remove authorizations
as specified in the XML file, respectively, replace the –a option with the –r option in the previous
examples.
To view authorizations, use the mxauth –lt command. This command lists all of the authorizations
for system authorizations in the format user:toolboxname:n:nodename, and group
authorizations in the format, user:toolboxname:g:groupname.
The mxauth –lf command displays authorizations in an XML format.
Managing users and authorizations 151