The idsldap user and group

Edit online

During installation of a server, the idsldap user and group are created if they do not exist. If your AIX® or Linux™ environment requires that you have more control over this user and group, you can create them before you install.

The requirements are:
  • The idsldap user must be a member of the idsldap group.
  • The root user must be a member of the idsldap group.
  • The idsldap user must have a home directory.
  • The default shell for the idsldap user must be the Korn shell.
  • The idsldap user can have a password, but is not required to.
  • The idsldap user can be the owner of the director server instance.
If you do not want the installer to automatically create the idsldap user and group, you can use the following commands to create them and set them up correctly:
On AIX systems:
Use the following commands.

To create the idsldap group:

mkgroup idsldap

To create user ID idsldap, which is a member of group idsldap, and set the Korn shell as the default shell:

mkuser pgrp=idsldap home=/home/idsldap shell=/bin/ksh idsldap

To set the password for user idsldap: 

passwd idsldap

To modify the root user ID so that root is a member of the group idsldap: 

/usr/bin/chgrpmem -m + root idsldap
On Linux systems:
Use the following commands.

To create the idsldap group:

groupadd idsldap

To create user ID idsldap, which is a member of group idsldap, and set the Korn shell as the default shell: 

useradd -g idsldap -d /home/idsldap -m -s /bin/ksh idsldap

To set the password for user idsldap:

passwd idsldap

To modify the root user ID so that root is a member of the group idsldap:

usermod -G idsldap,rootgroups root
where rootgroups can be obtained by using the command: groups root

Be sure that all these requirements are met before you install. IBM® Verify Directory Proxy Server does not install correctly if the idsldap user exists but does not meet the requirements.