[scavenger]

hello

i managed to install & configure properly Synchrony Transfert 2.6 (formerly CFT) on a Lnux RedHat.
I properly configured ports & key file, CFT doesstart & so as the copilot (using binary copsmng)

but, I can't find in the help files how to create admin or viewer users to have access to the Web manager (copilot)
I found a passwd & a group file, where a user called "guest" is registered, for which I don't have a password...

how do I create new users & manage their rights ?

thanks

[Benoit]

Hello,

The tool to create Copilot users is xfbadmusr
Just calling xfbadmusr will display the usage.

For example add a new user :
xfbadmusr add -l copilot -p copilot -u AUTO -g AUTO

Regards,
Benoit

[scavenger]

thanks a lot benoit !

[scavenger]

one more question, still :

then i wanna manage the users rights... these commands create groups & users, ok

to manage their rights i found out it's the SECUSER & SECGROUP commands that do that. They donnot exist in the bin folder... only the the SECUTIL or secinit commands are present...

apparently i have to create "security files" ?
can you show me what does these security files sould content ?

Or do i have to install the Synchrony Composer also ?

thanks

[Benoit]

Hello Scavenger,

there are several possiblities, but for sure not with composer :

- The implementation using SECUSE, SECGROUP and the security files is called habilitation. I would forget about it, it's really complex !
However a wide documentation can be found on the support website. keyword: habilitation

- With CFT 2.6.3, it should be possible to manage the right with PassPort AM. Not tested yet, but should be interessting !

- The most conveniant way is to use the .html samples delivered in the wwwroot directory
You have by default three profile defined ADMIN, BUSINESS and OPERATOR.

Take a look in the following files, I think this is pretty intuitive :
runtime/wwwroot/index.html is a default OPERATORprofile
runtime/wwwroot/admin.html is a default ADMINprofile

You can customize these files and then call them over the url http://<host>.<domain>:<port>/<profile>.html

Hope it helps.
Regards, Benoit.