Adding, Copying, or Modifying User Profiles
Learn how to add, copy, or modify user profiles.
Users who remotely authenticate through Kerberos or Lightweight
Directory Access Protocol (LDAP) must have their profiles set appropriately.
You must set the user profile of each remotely authenticated Kerberos
or LDAP user to use that type of authentication instead of local authentication.
A user that is set to use Kerberos or LDAP remote authentication always
uses that type of authentication, even when the user logs into the
HMC locally.
Note: The use of Kerberos authentication requires configuration
of a key distribution center (KDC) server by using the KDC
Configuration task. The use of LDAP authentication requires
configuration of an LDAP server by using the LDAP Configuration task.
You do not need to set all users to use Kerberos or LDAP remote authentication.
You can set some user profiles so that the users can use local authentication
only.
From the Adding, Copying, or Modifying User Profiles window, you
can modify the following attributes:
- User ID: Enter the user ID for the user profile you are creating or managing. The user name must start with an alphabetic character and consist of 1 to 32 characters.
- Description: Enter a meaningful description for your own records.
- Password: Enter the password for the user ID.
- Confirm password: Enter the password again for verification.
- Password expires in (days): Specify the number of days a password is valid before it expires. This input field is available when Enforce strict password rules check box is selected.
- Manage resource roles: Displays the managed resource roles that are currently available. Select one or more managed resource roles to define access permissions for this user ID.
- Task roles: Displays the task roles that are currently available. Select one task role for this user ID.
Use the online Help if you need additional information about creating, modifying, copying, or removing a user profile and modifying timeout and inactivity values.