Extending the terminal server configuration

Edit online

On each terminal server, add another user and adapt the user permissions to cover the requirements for the extended scenario.

Procedure

As user root, log in to Linux™ on the terminal server.

Add and set up user bob.

[root]# useradd -s /usr/bin/ts-shell -G ts-shell bob
[root]# passwd bob
...
[root]# chage bob

Grant user permissions by changing the content of /etc/iucvterm/ts-authorization.conf to:

alice = list:lxguest1,lxguest3,lxguest5,lxguest7,lxguest9
bob = regex:lxguest[02468]
bob = regex:^linux[0-9]{2}$

Use your preferred editor to open /etc/iucvterm/ts-shell.conf.

Find the line

ts-systems = /etc/iucvterm/unrestricted.conf

and change it to

ts-systems = /etc/iucvterm/ts-systems.conf

In /etc/iucvterm/ts-systems.conf, list the z/VM® user IDs of all target systems. List each z/VM user ID on a separate line.

[root]# echo lxguest{0..9}|tr ' ' '\n' > /etc/iucvterm/ts-systems.conf
[root]# echo linux0{0..9}|tr ' ' '\n' >> /etc/iucvterm/ts-systems.conf
[root]# echo linux{10..99}|tr ' ' '\n' >> /etc/iucvterm/ts-systems.conf

Ensure that /etc/iucvterm/ts-systems.conf is readable by members of the ts-shell user group.
If not already present as a result of installing s390-tools, set up a directory, /var/log/ts-shell, for the session transcripts.
```
[root]# mkdir /var/log/ts-shell
[root]# chown root:ts-shell /var/log/ts-shell
[root]# chmod 2770  /var/log/ts-shell
```
Configure session transcripts for LXGUEST0 through LXGUEST4 by adding the following lines to /etc/iucvterm/ts-audit-systems.conf:
```
lxguest0
lxguest1
lxguest2
lxguest3
lxguest4
```