Endpoint Administration Guide for UNIX › Managing Users and Groups › Guidelines for Managing Accessors in Enterprise Stores › Enable or Disable Checking Enterprise Store before Creating XUSER Records on UNIX

Enable or Disable Checking Enterprise Store before Creating XUSER Records on UNIX

Sometimes you may want to create an enterprise user in CA Access Control when the user is not defined in the enterprise user store. On Windows you cannot create an enterprise user in CA Access Control unless the user exists in the Windows user store. On UNIX, the default behavior is the opposite to Windows. However, on UNIX, you can enable or disable this default behavior.

To disable checking (and therefore allow CA Access Control to create XUSER records when there is no enterprise user equivalent), change the value of the configuration setting verify_osuser to 0. To enforce checking, set the value to 1.

Example: Enable Creation of XUSER Records without Checking the Enterprise User Store

The following set of commands stops CA Access Control, enables the creation of XUSER records with no enterprise store equivalents, and restarts CA Access Control:

secons -s
seini -s OS_User.verify_osuser 0
seload