Creating system groups and users

RICOH ProcessDirector requires several user groups and IDs on each server in a multiple primary servers environment to operate correctly.

In a multiple primary servers environment, you must create all the required groups and users on each server before you begin installation.

Make sure that the UID and GID values are identical across all servers where a user or group is required. NFS uses numeric IDs for file ownership, so inconsistent values cause permission errors when servers access shared storage. If the default names do not comply with user and group naming rules in your environment, you can choose different names. Create those groups and users according to the descriptions below and enter their names in the installation program when asked.

If you plan to install any Secondary Server features on Linux computers, you must create some groups and users on both the primary computer and secondary computers. The groups and users on the secondary computers must be identical to those on the primary computer.

    Note:
  • All Linux operating system user IDs and group names must be 1-8 characters because of a restriction in DB2. You cannot create a user ID that includes international characters (such as á, É, î, ñ, ô, ß) or double-byte characters. This limitation only applies if you use DB2 as your database.

Required groups

Create these groups on all five servers and any secondary servers in the multiple primary servers environment:

RICOH ProcessDirector group
The group that controls access to the RICOH ProcessDirector data directory. Members of this group can access the /aiw/aiw1 file system. This is the default or primary group for the RICOH ProcessDirector system user.

The default name for the group is aiwgrp1.

Print queue group
The group used for all users and applications that send jobs to printers. On some platforms, this is a system group that is created when the operating system is installed, but not on others. For example, this group is created when you install SLES, but not when you install Red Hat Linux.

The name for this group must be printq. You cannot create a group with a different name and have RICOH ProcessDirector use it. If the installer does not find a group named printq, it creates one.

DB2 database group
The group used to give members DB2 sysadm authority for database operation. This is the default or primary group for the RICOH ProcessDirector instance user and for the Database client user (if needed).

The default name for the group is aiwdbgrp.

If you plan to use a DB2 server installed on a different computer with RICOH ProcessDirector, this group is created while running the script setupRemoteDB2.sh on the computer that DB2 is installed on and also on the computer that RICOH ProcessDirector is installed on.

This group is only required if you use IBM DB2 as the RICOH ProcessDirector database.

DB2 database fenced group
The internal group required by DB2; the default or primary group for the fenced user.

The default name for the group is aiwdbfgp.

If you plan to use a DB2 server installed on a different computer with RICOH ProcessDirector, this group is created during the installation on the computer that DB2 is installed on.

This group is only required if you use IBM DB2 as the RICOH ProcessDirector database.

Required users

Create these users on all five servers and any secondary servers in the multiple primary servers environment:

RICOH ProcessDirector system user
The user ID that RICOH ProcessDirector runs under. This user must have the RICOH ProcessDirector group set as its default or primary group. It must also be a member of the Print queue group and the DB2 database or PostgreSQL database group (if you use the PostgreSQL database installed with RICOH ProcessDirector). You can use the default values for the other user properties.

The default system user ID is aiw1.

DB2 instance user
The user ID that the RICOH ProcessDirector DB2 database instance runs under. This user must have its default or primary group set to the DB2 database group. It must also be a member of the RICOH ProcessDirector group. You can use the default values for the other user properties.

The default DB2 instance user ID is aiwinst.

Create this user on the database server.

DB2 fenced user
A second user ID that DB2 requires when you create an instance. This user must be a member of the DB2 database fenced group. You can use the default values for the other user properties.

The default DB2 fenced user ID is aiwdbfid.

Create this user on the database server.

DB2 database client instance user
The user ID that the DB2 client uses. This user is only required if you install a DB2 server on a different computer and the DB2 client on the same computer as RICOH ProcessDirector. This user must have its primary or default group set to the DB2 database group. You can use the default values for the other user properties.

The default DB2 database client user ID is aiwclnt.

This user is required on both primary servers.

    Note:
  • If you set up passwords with expiration rules for these user IDs, you must administer those IDs as needed. If you do not change the passwords as needed and they expire, RICOH ProcessDirector stops working.

Parent topic: Installing required software