Mapping AS/U Users to HP-UX Users

Advanced Server/9000 user accounts are not related to HP-UX user accounts. Use the mapuname command to associate an Advanced Server/9000 user account to an HP-UX user account.The mapuname command does work across domains.

The following are the recommended steps to map AS/U users to HP-UX users:

Run mapuname on the system where the HP-UX user being mapped to resides. The AS/U user may be in the local or in a trusted domain.

If the AS/U and HP-UX user accounts reside on separate Advanced Server/9000 servers, run mapuname on the server with the HP-UX user. Mapuname can map user accounts on:

Usage between domains requires an existing trust relationship. Usage over subnets requires WINS or NetBIOS name cache configuration.

See "Using mapuname Across Subnets and Domains" in the next section of this guide for setting up trusts and extended LAN configurations using mapuname. After using mapuname, for the user mapping to take effect, a user must establish a NEW session on the AS/U server.

	NOTE: A session for a user may remain on the AS/U server for a period of time after the user has disconnected from the server. If the user logs back in while that session exists, they will re-use that session and mapuname mappings will not take effect. Use the net session command on the AS/U server to verify that a session for the user does not exist. Use net session with the /delete option to delete a user session. Use net help session on the AS/U server to get more information.

To automatically map new Advanced Server user accounts to existing HP-UX system accounts set the following registry values:

CreateUnixUser=yes ForceUniqueUserAccount=no

When a new Advanced Server user account is created, if an existing HP-UX system account is found, the new AS/U user will be mapped to the HP-UX user account.

	NOTE: If an existing HP-UX system user is not found at AS/U user creation time, an inactive HP-UX user will be created using the AS/U user account name. This HP-UX user will not have a password, homedir, or shell, and cannot be used as a logon. For this reason, automatic mapping of AS/U user accounts to HP-UX system user accounts (using the CreateUnixUser value) is not recommended. To activate this HP-UX user, modify the user via SAM. You must maintain the same user ID (uid).

Mapping to Non-Existent HP-UX System User Account

If an Advanced Server/9000 user is mapped to a non-existent HP-UX system user account, or if the HP-UX system account for an Advanced Server user is deleted, the Advanced Server user will not have access to any shared resources on the HP-UX system. To ensure that the Advanced Server user can continue to access the system, delete the account mapping or remap the user to another HP-UX system user account.