Extending the terminal server configuration

On each terminal server, add another user and adapt the user permissions to cover the requirements for the extended scenario.

1. As user root, log in to Linux on the terminal server.
2. Add and set up user bob.

   [root]# useradd -s /usr/bin/ts-shell -G ts-shell bob
   [root]# passwd bob
   ...
   [root]# chage bob

3. Grant user permissions by changing the content of /etc/iucvterm/ts-authorization.conf to:

   alice = list:lxguest1,lxguest3,lxguest5,lxguest7,lxguest9
   bob = regex:lxguest[02468]
   bob = regex:^linux[0-9]{2}$

4. Use your preferred editor to open /etc/iucvterm/ts-shell.conf.
5. Find the line

   ts-systems = /etc/iucvterm/unrestricted.conf

   and change it to

   ts-systems = /etc/iucvterm/ts-systems.conf

6. In /etc/iucvterm/ts-systems.conf, list the z/VM® user IDs of all target systems. List each z/VM user ID on a separate line.

   [root]# echo lxguest{0..9}|tr ' ' '\n' > /etc/iucvterm/ts-systems.conf
   [root]# echo linux0{0..9}|tr ' ' '\n' >> /etc/iucvterm/ts-systems.conf
   [root]# echo linux{10..99}|tr ' ' '\n' >> /etc/iucvterm/ts-systems.conf

7. Ensure that /etc/iucvterm/ts-systems.conf is readable by members of the ts-shell user group.
8. If not already present as a result of installing s390-tools, set up a directory, /var/log/ts-shell, for the session transcripts.

   [root]# mkdir /var/log/ts-shell
   [root]# chown root:ts-shell /var/log/ts-shell
   [root]# chmod 2770  /var/log/ts-shell

9. Configure session transcripts for LXGUEST0 through LXGUEST4 by adding the following lines to /etc/iucvterm/ts-audit-systems.conf:

   lxguest0
   lxguest1
   lxguest2
   lxguest3
   lxguest4