Adding users to and modifying permissions for FST security groups

  1. Set up the FST Security groups on your AIX server by taking the InfoPrint Printing System → Security → Groups → Show Group path. From the Single Select List pop-up dialog, you should see these three groups: acl_admin, admin, and oper.
  2. Once you have verified the existence of these groups and other custom groups, you should make sure that users in the admin group can issue all the InfoPrint pd* commands. From SMIT, take the InfoPrint Printing System→ Security → Access Control → Access Control for Operations → Show Access Control List path.
  3. From the Single Select List pop-up dialog, highlight each command and make sure thatGROUP:admin: r** displays for each command.
    If a particular pd command does not show admin group read authority, use the SMITInfoPrint Printing System → Security → Access Control → Access Control for Operations → Change Access Control List path to specify GROUP:admin in the Users or Groups field of the Change Access Control List panel for that pd command. Note that the admin group requires only read authority for each pd command.

    If you have installed InfoPrint Manager on a "clean" machine, the admin group will have read authority for all pd commands by default.

  4. Once complete, return to the first SMIT panel displayed in step 2.
  5. Take theInfoPrint Printing System ⇒ Security ⇒ Groups ⇒ Add Users to the Group path. Then select acl_admin for the Group field. Enter the name of the Windows administrative user, either local or domain, you normally log in to the InfoPrint Manager for Windows server machine as for the User or Users to Add field. Select Member type as FST User.
    For the remainder of this procedure we will refer to this Windows administrative user as Administrator*.
    Note: The Administrator user must be followed by an asterisk (*) to account for the fully qualified host name. (For example, Administrator@ipwinservermachine.infoprint.com.)

    From the same panel, specify admin for the Name field. Enter the name of the Windows administrative user you normally log in to the InfoPrint Manager for Windows server machine as for the User or Users to Add field. You do not have to do this step for the oper group.

  6. Once complete, click OK to make sure the changes take effect and return to the first SMIT panel displayed in step 2.
Parent topic: Setting up the InfoPrint AIX server for interoperability