Remote client password

Remote connections (PC clients, UNIX remote clients, and IssueWeaver¹) to Razor databases, require a valid user and password. The Razor license manager verifies all user accounts using either the Razor password file or the UNIX login information based on the license manager mode.²

If the Razor password file will be used to validate remote logins, the Razor Administrator is responsible for creating and maintaining it. Password file administration is performed using the Razor command line interface described in "Password functions" on page 158.

Password file entries

An entry in the Razor password file consists of user, password, and user group. Each entry in the password file is for Razor use only and need not have any association with UNIX/PC user accounts, domains, passwords and/or groups.

NOTE: The user that starts the Razor license manager MUST have write privileges for the Razor password file to allow subsequent additions and modifications of the file. If the password file does not exist, it will be created when the first user is added, and it will be owned by the owner of the license manager process.

Remote guest account

If the license manager mode is to use the Razor password file (default mode) and that file has not been created, Razor will allow world access via the login "guest" (no password required). Once the password file has been created, access will only be allowed for valid Razor users.

If the license manager mode uses the local password file either soley or in combination with the Razor password file, users may not login as "guest". Remote access will only be allowed for users in the appropriate password files.

Batch entry of passwords

Razor provides a shell script that reads a file of user entries. The script $RAZOR_HOME/scripts/rz_add_users will read a file of user entries in the following format:

user[ password | * [  user group ] ]

Fields must be tab separated and should not be quoted. An asterisk (*) should be used to specify an empty (null) password.

The script is invoked as follows:

rz_add_users [ <file> [ <user group> ] ]

The first parameter is the file containing the list of user entries in the above format. If not supplied, the user will be prompted for a filename.

The second parameter will be used as the default group for all user entries that do not specify a user group. If not supplied, the user will be prompted for a user group upon the first occurance of a user entry that does not specify a user group. This user group will be used for all subsequent entries where no user group is defined.

Any user entry that does not contain a password will be assigned the empty password.

¹ Rules may be defined for IssueWeaver that do not require a Razor defined user login and password. Refer to the the IssueWeaver Manual for details.
² Refer to "Modes" on page 39.