系统命名服务（NSS）需要配置为使用LDAP来解析诸如用户和组帐号之类的资源。
The system naming service (NSS) needs to be configured to use LDAP to resolve resources such as user and group accounts.
在这个系列的第1部分中您学到，安装和操作DB 2UDBV8.2需要某些用户和组帐号。
In Part 1 of this series, you learned that certain user and group accounts are needed to install and operate DB2 UDB V8.2.
在这个例子中，我们将使用一个容器People保存用户帐号信息，使用另外一个容器Groups保存组帐号信息。
In the examples, you'll use a container, People, for user account information and another container, Groups, for group account information.
用户帐号管理(包括密码策略、命名约定和组定义)都是在这个外部设施上进行的。
User account management, including password policies, naming conventions, and group definitions, are all managed by this external facility.
DB 2udb定义了一个权限级别层次结构，用于将一组预先确定的管理权限授予用户帐号组。
DB2 UDB defines a hierarchy of authority levels to assign a set of pre-determined administrative rights to groups of user accounts.
这意味着任何属于本地administrators组的用户帐号自动继承这些权限。
This means that any user account belonging to the local Administrators group automatically inherits these authorities.
我们使用了一组perl脚本来将用户帐号信息迁移到LDAP目录中。
You used a set of Perl scripts to migrate user account information into the LDAP directory.
principal是一个惟一的实体，比如个人或者组的名字、帐号、社会安全号或者类似的惟一标识。
A principal is a unique entity such as the name of an individual or group, an account number, a social security number, or similar unique identifier.
不能更改自己的用户组。请要求超级用户组的其他成员删除此帐号。
You cannot change your own group memberships. Please ask another member of the Full user group to change this membership for you.
然后禁用或者删除不必要的用户帐号或者组。
如果你需要从特定应用中移除用户的权限，编辑用户登录帐号的安全组，移除或让他的组权限过期。
If you need to remove a user's access to a particular application, edit the security groups for that user's user login and remove or expire one of the permission groups.
如果你需要从特定应用中移除用户的权限，编辑用户登录帐号的安全组，移除或让他的组权限过期。
If you need to remove a user's access to a particular application, edit the security groups for that user's user login and remove or expire one of the permission groups.
应用推荐