Enabling remote manager capabilities

Before using SCOadmin managers to administer remote systems, you must:

• Create user equivalence between your system and the systems to be managed. Grant this equivalence for each user (root and others) who has subsystem authorization for the SCOadmin managers. Do so by using the User Equivalence Manager on each system.

  ---

  CAUTION: Granting user equivalence compromises the security of your system, in that all persons who may access the root account of the remote machine now have access, as root, to your machine. Grant this equivalence sparingly.

  ---

• Grant subsystem authorization (as described in ``Assigning subsystem authorizations'' in the System Administration Guide) on each machine to those users who will access the SCOadmin managers. Relevant authorizations are:

  Table 1-6 Subsystem authorizations

   -----------------------------------------------------------
                   SCOadmin
   Authorization   Manager              User can:
   -----------------------------------------------------------
   lp              Printer Manager      administer printers
   backup          Backup Manager       perform backups
   auth            Account Manager      administer accounts:
                                        adding users, changing
                                        passwords, and so on
   passwd          Account Manager      change user passwords
   sysadmin        Filesystem Manager   mount filesystems
  

  ---

  CAUTION: The auth subsystem authorization should only be assigned to persons entrusted with account administration. Never assign auth by default because it permits users to make changes to any account, including root.

  ---