RATSUT

Ratsut is a tool used for managing secondary usernames. Any one user can only have one primary username but can have any number of secondary usernames (at least in practice if not in policy). Ratsut is used to associate secondary usernames with an IID and also to dissociate them (by expiring them).

        The two modes of operation are:
                ratsut -a <IID> <username>
        to add <username> to <IID>, and :
                ratsut -r <IID> <username>
        to expire <username> from <IID>.

        Obviously a username can only be in use by one person at a time, but once expired it can be reused by anyone else. Expiration is a restricted call though, and you may not have access to it.

Ratsut is envisioned to be used for two main reasons. First, for staff members who need secondary non privileged usernames for testing, and for special account types which require a large number of usernames associated with one pseudo entity in the PDB. We plan to monitor the usage of this tool to make sure that username hoarding and other abuses do not occur. This tool should only be used by system administrators.