Creating a user (CREATE USER command)

Syntax

CREATE USER 'user_name'
 [ ID identifier ]
 FULL NAME 'full_user_name'
 [ PASSWORD 'password' [ ENCRYPTED] ]
 [ PAM { TRUE | FALSE } ];

The user_name is a text string containing a unique user name for the user being added. This name can be up to 64 characters in length. If the user is to be externally authenticated, for example, in a Lightweight Directory Access Protocol (LDAP) repository or by using Pluggable Authentication Modules (PAM), specify the user name that is stored in the external authentication repository.

The identifier is an integer value that uniquely identifies the user. If you do not specify an identifier, one is automatically assigned. The identifier for the root user is 0. The identifier for the nobody user is 65534. Identifiers for other users can be set to any value between 1 and 2147483647.

The full_user_name is a text string containing the full name of the user.

You can specify the user password using the PASSWORD keyword. The default is an empty string. If you add the keyword ENCRYPTED, the password is assumed to be encrypted. No password is required for an externally-authenticated user.

To specify that the user is externally authenticated, set PAM to TRUE. The Sec.ExternalAuthentication ObjectServer property must also be set to either PAM or LDAP, as appropriate for your authentication system. If PAM is set to FALSE or Sec.ExternalAuthentication is set to none, the user cannot be authenticated externally. If you want to store the user name and associated password in the ObjectServer, and to perform ObjectServer authentication, set PAM to FALSE.

Example

create user 'joe' id 1 full name 'Joseph R. User';