Nexus Documentation - Nexus IQ Server 1.16

Our documentation site has moved. For the most current version, please see http://help.sonatype.com

TOC

6.1. User Management

The Sonatype CLM Server requires a username and password before any policies or policy elements can be created, viewed, and edited. When a user is created specific to Sonatype CLM, we consider this user to be part of the Sonatype Realm. This is also considered independent of other connected realms such as LDAP.

While Sonatype does suggest using a security protocol such as LDAP for managing users and permissions, the Sonatype Realm is still available for those who would like a lighter setup, where all users, groups and rights are stored directly in the Sonatype CLM server.. The function of user management in the Sonatype Realm focuses on managing all the elements of a user account. In this section we will cover:

Logging In and Logging Out
Managing the Admin Password / Account
Viewing Notifications
Creating, Editing and Deleting Users
- First and Last Names
- E-mail Addresses
Changing Passwords

6.1.1. Logging in to Sonatype CLM

Any user that wants to access Sonatype CLM will need a username and a password. To perform the functions described throughout this section, you will need to use a user account that has been assigned to the System Administrator role.

Figure 6.1. Login

By default the Sonatype CLM server has a preconfigured Admin account that has been assigned to all Administrator roles. Once you log in with this account for the first time, be sure to change the admin password.

To logout, click on the Log Out link located in the upper right corner.


	The server will timeout after 30 minutes of inactivity.

6.1.2. Viewing Notifications

Notifications provide a way for Sonatype to distribute important information about Sonatype CLM.

Unread notifications are indicated by a count, in blue, displayed over the notification icon . This icon is located in the Sonatype CLM header, next to the display of the logged-in user.

To view notifications, click on the notifications icon. This will open the Notification Panel, allowing you to click on any available notifications.

6.1.3. Changing the Admin Password

Sonatype CLM ships with a default admin account with a username admin and a password admin123. If you do nothing else related to security in Sonatype CLM, be sure to change this password. We’ll cover this in Section 6.1.5, “Editing and Deleting User Information” section below in more details, while we detail the process to change this default password now.

After logging in with the Admin account, click on the button with your username to the left of the System Preferences gear-shaped, icon. For the default administrator the username will show Admin Builtin.
A list of options will be displayed, click Change Password.
Enter the current password (admin123 for the default admin user), the new password, and then confirm the new password.
Click the Change button to save the new password.


	Any user, including an admin, can change their password following the instructions above. However, only an admin can reset a user’s password (discussed later in this chapter) without knowledge of the current password.

6.1.4. Creating a User

To create a new user in the Sonatype realm, follow the instructions below.

Log into the Sonatype CLM Server with a user that has been assigned to the System Administrator role.
Click the System Preferences icon located in the top right of the header.
Choose Users from the drop down menu. The Users administration area will now be displayed.
Click the New User button located at the top of the list of users.
The Add New User form will now be displayed. Enter the following information:
1. First Name
2. Last Name
3. E-mail Address
4. Username
5. Password
6. Password Validation
Click the Save button, to save the new user.

figs/web/user-management-create-user.png

Figure 6.2. Create User

6.1.5. Editing and Deleting User Information

Editing user information is only available to an admin. The information that can be edited includes the first name, last name, email address, and password. To edit an existing user, follow these steps:

Log into the Sonatype CLM Server with a user that has been assigned to the System Administrator role.
Click the System Preferences icon located in the top right of the CLM header.
Choose Users from the drop down menu. The Users administration area will now be displayed.
At least one user - the initial admin account - will be displayed. If you hover your pointer over the user record you will notice that there are three icons on the right.
1. The icon shaped like a pencil will allow you to edit user information (i.e. first name, last name, and e-mail address).
2. The icon shaped like a bag with an arrow back is for resetting a user’s password. If you use this option a random, secure password will be generated and displayed in a dialog. Click the icon to the right of the field to copy it to clipboard.
3. The icon shaped like a trashcan will allow you to delete the user after you confirm the deletion in a dialog.
Make any desired changes, and unless you chose to delete the record, click the Save button.


	With regard to changing a user’s password, a user can always change their own password. However, this requires knowledge of the existing password. If you encounter a user that has forgotten their password, you can reset it for them.

Figure 6.3. Edit User

TOC