Quick Beginnings

Step 3. Creating or Assigning Groups and User IDs

If you want to use an existing user or group ID, you do not need to create new ones at this time. Instead, you can proceed to the next step.

You must perform the following as root:

1. Create a system administration (SYSADM) group that will be the primary group of the user ID for the instance owner. Any user of the instance owner that belongs to the SYSADM group will have system administrator authority for a given instance.

   Next, create a user ID that will be the instance owner. This user ID will be the name of the instance. Make this user's primary group the SYSADM group created above. In our examples, the instance user ID is db2inst1 and the SYSADM group is dbadmin1.
   

   Dedicate the instance owner user ID to that instance's use only. This allows for easier error recovery if a system error occurs.

2. Use admintool or groupadd to create groups, and admintool or useradd to create users. For example:

      groupadd dbadmin1
      useradd -g dbadmin1 -d /export/home/db2inst1 -m db2inst1
      passwd db2inst1
   

For security reasons, we recommend that you do not use the instance name as the FencedID. However, if you are not planning to use fenced User Defined Functions or Stored Procedures, you can set the FencedID to the instance name instead of creating another user for the FencedID.

Notes:

1. If you are planning to create the Administration Server, you have to repeat Steps 1 and 2 above to create a user name and group name for the Administration Server. However, for security reasons, we recommend that you do not use the DB2 Instance user name as the user name for the Administration Server.

2. If existing users and groups have been identified for these purposes, you do not have to create new ones.

3. In addition to the rules imposed by the operating system for login names and groups, you must also adhere to the rules described in Appendix D. "Naming Rules".

[ DB2 List of Books | Search the DB2 Books ]