Typically, if one is running an apache web server, the user "apache" is created 
and runs the web server.  In this case, they are recommending nobody:nobody.  
Personally, I wouldn't use this suggestion.  I'd create a user/group 
specifically for running the web service.  Then you "know" what that account 
can and cannot do at all times.

I don't recall if this recommendation was made when NMC was first released.  I 
know I'm using defaults myself.  Having said that, I will most likely look into 
changing the situation.

Patti Clark
Sr. Linux System Administrator
DOE/OSTI 

> -----Original Message-----
> From: EMC NetWorker discussion 
> [mailto:NETWORKER AT LISTSERV.TEMPLE DOT EDU] On Behalf Of George Sinclair
> Sent: Thursday, October 15, 2009 6:52 PM
> To: NETWORKER AT LISTSERV.TEMPLE DOT EDU
> Subject: [Networker] User/Group for NMC?
> 
> We're preparing to install the NMC software. This will be 
> installed on 
> the primary backup server. The installation documentation mentions:
> 
> "Specify a User/Group with limited privileges that NMC will 
> use to run 
> the web server. This must be a non-root user. For example, Linux 
> operating systems have a default user/group [nobody/nobody] 
> that can be 
> used."
> 
> Any recommendations or warnings about this?
> 
> Just make up any user/group name combination that doesn't 
> already exist 
> and add to /etc/passwd and group files? What about NIS? Does 
> that matter?
> 
> Thanks.
> 
> -- 
> George Sinclair
> Voice: (301) 713-3284 x210
> - The preceding message is personal and does not reflect any 
> official or 
> unofficial position of the United States Department of Commerce -
> - Any opinions expressed in this message are NOT those of the 
> US Govt. -
> 
> To sign off this list, send email to 
> listserv AT listserv.temple DOT edu and type "signoff networker" in 
> the body of the email. Please write to 
> networker-request AT listserv.temple DOT edu if you have any 
> problems with this list. You can access the archives at 
> http://listserv.temple.edu/archives/networker.html or
> via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
> 

To sign off this list, send email to listserv AT listserv.temple DOT edu and 
type "signoff networker" in the body of the email. Please write to 
networker-request AT listserv.temple DOT edu if you have any problems with this 
list. You can access the archives at 
http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER