Open System Services Management and Operations Guide (G06.29+, H06.07+)

Managing Security
Open System Services Management and Operations Guide—527191-005
8-8
Components of OSS Security Management
The following OSS environment conventions are equivalent to UNIX user and group
conventions:
•
The super ID login name, with an OSS user ID (scalar view of the NonStop
operating system user ID) of 65535, is the same as the UNIX user name root with
a UNIX UID of 0.
•
The super group, with an OSS group ID (group number from the structured view of
the NonStop operating system user ID) of 255, is the same as the UNIX group
name wheel with a UNIX GID of 0.
•
Using root as an alias of the OSS user ID 65535 (which usually has the login
name SUPER.SUPER) is the same as using root for the UNIX user name of the
super ID.
•
Using wheel as an alias for the OSS group ID 255 (the specially privileged super
group, usually with the group name SUPER) is the same as using wheel for the
UNIX group name of the trusted administrator group.
OSS user and group administration occurs through tools in the Guardian environment,
such as the Safeguard command interpreter (SAFECOM) program, or through third-
party software.
There is only one situation where a site should have more than one user name with the
same user ID: when there are multiple administrators of the same group (for example,
news). Each user name with the same user ID must have its own unique password so
that login can be properly audited.
Components of OSS Security Management
Figure 8-1 on page 8-9 illustrates the major components and interfaces of OSS
security management.