Input file for new users

You import users from information contained in an input file.

Before you create the users, determine what type of authentication the repository uses. If the server authenticates users against the operating system, each user must have an account on the server host.

If the server uses an LDAP directory server for user authentication, the users do not need to have operating system accounts.

If you specify the attributes user_group (the user’s default group), and acl_name (the user’s default permission set), any groups, and permission sets must already exist before you import the users.

If you are creating a user who is authenticated using a password stored in the repository, the password cannot be assigned in the input file. You must assign the password manually.

Each user to be imported starts with the header object_type:dm_user. Follow the header with a list of attribute_name:attribute_value pairs. The attributes user_name, and user_os_name are required. In addition, the default values in Table 17.2 are assigned when the file is imported.

Table 17.2. Default values for new users

Argument

Default

user_login_name

user name

privileges

0 (None)

folder

/user name

group

docu

client_capability

1

Each attribute_name:attribute_value pair must be on a new line. For example:

object_type:dm_user
user_name:Pat Smith
user_group:accounting
acl_domain:smith
acl_name:Global User Default ACL
object_type:dm_user
user_name:John Brown

If the file contains umlauts, accent marks, or other extended characters, store the file as a UTF-8 file, or users whose names contain the extended characters are not imported.

The attributes you can set through the input file are:

user_name
user_os_name
user_os_domain
user_login_name
user_login_domain 
user_password
user_address
user_db_name
user_group_name
user_privileges (set to integer value)
default_folder
user_db_name
description
acl_domain
acl_name
user_source (set to integer value)
home_docbase
user_state (set to integer value)
client_capability (set to integer value)
globally_managed (set to T or F)
alias_set_id (set to an object ID)
workflow_disabled (set to T or F)
user_xprivileges (set to integer value)
failed_auth_attempt (set to integer value)

You can specify as many of the above attributes as you wish, but the attribute_names must match the actual attributes of the type.

The attributes may be included in any order after the first line (object_type:dm_user). The Boolean attributes are specified using T (for true) or F (for false). Use of true, false, 1, or 0 is deprecated.

Any permission sets that you identify by acl_domain, and acl_name must exist before you run the file to import the users. Additionally, the ACLs must represent system permission sets. They cannot represent private permission sets.

Any groups that you identify by user_group_name must exist before you run the file to import the users.

Documentum Server will create the default folder for each user if it does not already exist.