Remote User Authorization Operations

Remote user authorizations, along with node definitions, make it possible to use Ingres Net to access databases on remote nodes. A remote user authorization associates a specified vnode name with a specified account on the remote node. When the user requests a connection using that vnode name, Ingres Net makes the connection to the DBMS Server on the remote node through that account.

Three operations concern remote user authorizations:

• Adding new remote user authorizations
• Deleting existing authorizations
• Viewing existing authorizations

In addition, change an existing authorization by overwriting the authorization or by deleting it and adding a new authorization.

To perform any of these operations, you must have the following information about the authorization:

• The type of the authorization, private or global
• The vnode name of the remote node
• The name of the account on the remote node
• The password for the account on the remote node

Define Remote User Authorizations

A remote user authorization associates a specified vnode name with a specified account on the node represented by that vnode name.

To define a remote user authorization

Note: You can exit this procedure at any time without making an entry by pressing Esc and Enter.

1. Start netu by entering netu at the operating system prompt.

   The netu menu appears.

2. Select A (Modify Remote User Authorization Entry).

   The following prompt appears:

   Enter operation (add, del, show, exit):

3. Enter add. (Type a instead of add.)

   Netu asks if you want a private or global authorization.

4. Do one of the following:
   • To accept the default (private), press Enter.
   • To select global, enter G.
5. Enter the vnode name of the remote node.
6. Enter the name of the account at the remote node.
7. Enter the password for the remote account.

   The default is an asterisk (*). Use this only if the remote account has no password.

8. Enter the password for the remote account again.

   The utility finishes defining a remote user authorization and displays the following prompt:

   Enter operation (add, del, show, exit):

9. Continue with remote user authorization tasks or choose exit to Enter to the netu menu.

Delete Remote User Authorizations

The netu utility lets you delete one or several authorizations at a time. When you select the delete operation, netu asks for the values that comprise the authorization and deletes any and all authorizations that match those values. To delete a single authorization, all the values must match. If the match is not exact, the authorization is not deleted. To delete multiple authorizations, use the wild card character (*), which matches any value.

If you are unsure of the values for the authorization that you want to delete, use the "show" operation to check the values before you delete them. For instructions on using the show operation, see Retrieve Remote User Authorizations.

To delete more than one authorization in one operation, use an asterisk in response to the prompts asking for the remote user name. The asterisk is a wild card character that matches any value. For example, assume that you want to delete all of your private user authorizations from "napoleon" that are associated with the account having the userid "tommy" on "josephine." To do this, run netu from "napoleon," selecting A and the del operation. Respond to the prompts in this manner:

Enter Private or Global (P): <Enter>
Enter the remote vnode name: *
Enter the remote user name: tommy

When you have completed the procedure, you deleted all of the private user authorizations for the account "tommy." If you have defined other remote user authorizations to "josephine" through a different account, these remain undeleted.

Only a user with Ingres privileges can delete global authorizations.

To delete remote user authorizations

Note: You can exit the procedure at any point by pressing Esc and Enter.

1. Start netu by entering netu at the operating system prompt.

   The netu menu appears.

2. Select A (Modify Remote User Authorization Entry) from the menu.

   The following prompt appears:

   Enter operation (add, del, show, exit):

3. Enter del. (Enter d instead of del.)

   Netu asks if the authorization is a private or global authorization.

4. Do one of the following:
   • If the authorization is private, press Enter.
   • If the authorization is global, enter G.
5. Enter the remote vnode name.
6. Enter the remote user name.

   The utility displays the number of authorizations that it deleted and the following prompt:

   Enter operation (add, del, show, exit):

7. Select del again to delete another authorization, or choose a different operation.

Change Remote User Authorizations

If necessary, change an existing remote user authorization entry by using one of two methods:

• Overwrite the existing, incorrect entry.

  Use this method if the vnode names for both the old incorrect entry and the new correct entry are the same. For instructions on performing this method, see Overwrite an Incorrect Entry.

• Delete the existing, incorrect entry and add the new, correct entry.

  Use this method if you must correct a vnode name. For instructions on performing this method, see Delete Old and Add New Definition.

Overwrite an Incorrect Entry

Use this procedure to modify a remote user authorization when some part of the authorization information, other than the vnode name, has changed. For example, perhaps the passwords to accounts are changed on a regular basis. When this happens, the remote user authorizations must be modified to allow users continued access to remote accounts.

When you use this procedure, netu overwrites the existing authorization whose vnode name matches the vnode name that you specify. Use the values of the new, correct authorization to respond to the prompts.

To modify a remote user authorization

1. Start netu by entering netu at the operating system prompt.

   The netu menu appears.

2. Select A (Modify Remote User Authorization Entry).

   The following prompt appears:

   Enter command (add, del, show, exit):

3. Enter add. (Type a instead of add.)

   Netu asks if the authorization is private or global.

4. Do one of the following:
   • If the authorization is private, press Enter.
   • If the authorization is global, enter G.
5. Enter the remote vnode name.
6. Enter the remote user name.
7. Enter the password.
8. Enter the password a second time.

   Netu replaces the existing authorization with the new one and displays the following prompt:

   Enter operation (add, del, show, exit):

9. Continue with other user authorization operations or Enter to the netu menu by selecting exit.

Delete and Add an Entry

To change the vnode name associated with a remote user authorization

1. Start netu by entering netu at the operating system prompt.

   The netu menu appears.

2. Select A (Modify Remote User Authorization Entry).

   The following prompt appears:

   Enter command (add, del, show, exit):

3. Enter del. (Enter d instead of del.)
4. Answer the prompts that appear using the values of the incorrect authorization.

   When you have answered all the prompts, netu deletes the incorrect authorization and displays the following prompt:

   Enter command (add, del, show, exit):

5. Enter add. (Enter a instead of add.)
6. Answer the prompts that appear using the values of the new, correct authorization.

   The utility adds the new authorization and displays the following prompt:

   Enter command (add, del, show, exit):

7. Choose another operation or Enter to the netu menu by choosing exit.

Retrieve Remote User Authorizations

When you want to see a list of authorizations for a single node or several nodes, use the procedure in this section. It produces a read-only display of authorization information. For example, use this procedure to produce a list of all your private authorizations to a single node or to all nodes. You can also use this procedure to find out if there are any global authorizations to a particular node.

For example, to see any global authorizations, you run the procedure and make the following responses to the following prompts:

Enter Private or Global (P): Global
Enter the remote vnode name: *
Enter the remote user name: *

The utility displays all of the global authorizations that have been defined from the node on which you are working. The display is in a table format. For display examples, see Displayed Remote User Authorization Examples.

If you select Private, the utility displays the appropriate private authorizations that belong to you.

To display remote user authorizations

Note: You can exit the procedure at any point by pressing Esc and Enter.

1. Enter netu at the operating system prompt.

   The main menu appears.

2. Select A.

   The following prompt appears:

   Enter operation (add, del, show, exit):

3. Enter show. (Enter s instead of show.)
4. The utility asks if you want a list of private or global authorizations.

   You must choose one or the other. You cannot enter the wildcard character for this prompt.

   • If you want a list of private authorizations, press Enter.
   • If you want a list of global authorizations, enter G.
5. Enter the remote vnode name.
6. Enter the remote user name.

   The netu utility shows you the authorizations that match the responses you provided. The display appears in table format. You cannot change any of the information while it is in this format.

   After the authorizations are displayed, netu Enters you automatically to the prompt:

   Enter command (add, del, show, exit):

7. Choose another authorization operation or Enter to the netu menu by choosing exit.

Displayed Remote User Authorization Examples

Here is an example of the information that you receive when you view remote user authorizations: