Content-type: text/html Manpage of grpadmin

grpadmin

Section: User Commands (1)
Index Return to Main Contents

NAME

grpadmin - Manage group memberships

SYNOPSIS

grpadmin [-i] [-help] ...group management command...

DESCRIPTION

Grpadmin is the command line interface to the Unix group database. It is used by authenticated users to make authorized changes to group memberships and ownerships. You must have existing Kerberos credentials to use grpadmin.

OPTIONS

Grpadmin my be invoked with the following command-line options:

-i: Read commands from standard input.
-help: Print out a usage message.

COMMANDS

Group management commands may be given either as command-line arguments or typed interactively when the -i switch is used. Several commands accept a list of items; a list is single string with individual components separated by commas. Thus an example of a <user-list> would be "user1,user2,user3".

There are two classes of commands, privileged and unprivileged. Privileged commands can be run only by administrative users. Unprivileged commands may require authorization based on whether the person executing the command is the owner of or member in the group(s) specified.

creategrp <grpname> [-grpid <number>] [-owners <user-list>] [-scope <name>] [-expire mm/dd/yy] [-gmaster <grpname>: Create a new group with the given unique name. A numeric gid will be automatically assigned unless -grpid is given. A list of initial owners may be specified. The default scope of the new group is global. If a -gmaster group is given then the new group will be slaved to the master in terms of owenrship and expiration date. If the group has an expiration date, all references to the group, its ownership and membership will be deleted after that date. (Privileged)
deletegrp <grpname>: Delete a group, along with all its owners and members. (Privileged)
addmember <grpname> -who <user-list>: Add a list of users to a group membership. (Ownership)
delmember <grpname> -who <user-list>: Delete a list of users from a group membership and ownership. (Ownership, self-membership)
addowner <grpname> -who <user-list>: Add a list of users as owners of a group. (Ownership)
delowner <grpname> -who <user-list>: Remove a list of users from group ownership. (Ownership)
deluser <user-name>: Delete a single user from all group membership and ownership. (Privileged)
addlogin <grpname> -who <user-list>: Add a group as logingroup for the specified users. (Membership)
dellogin <grpname> -who <user-list>: Delete a group as a logingroup for the specified users. (Membership)
showgrps <grpname-list>: List the gids and scopes of the given groups.
showmembers <grpname-list>: List the members of the given groups.
showowners <grpname-list>: List the owners of the given groups.
listugrps <user-list>: List the group memberships of the given users.
listowned <user-list>: List the groups owned by the given users.
renamegrp <grpname> -to <newgrpname>: Give an existing group a new name. (Ownership)
setmaster <grpname-list> -to <grpname>: Set the master group for each group in the name list to the given group name. <grpname> can be the empty string or "null" to break a master-slave relationship. (Ownership)
control-D: (Or whatever you are using as the end-of-file (EOF) character). Exit the program.

REGULAR EXPRESSIONS

Grpadmin uses a subset of the POSIX 1003.2 regular expression syntax. Examples:

showgrps .*: Lists all groups.
showgrps ^t.*: List all groups that begin with 't'.
showgrps .*59.*: List all groups that contain the string "59".

Certain metacharacters (e.g. '{',']', '$') are not allowed. Wildcarding is presently allowed only on lookup or list operations due to concerns about the "rm * .c" syndrome.

Helpful hint: If you are going to do more than one operation, use "grpadmin -i" -- it's way more efficient and you don't have to worry about \-escaping metachars to your shell.

Grpadmin produces extensive and self-explanatory error messages.

FILES

Grpadmin and xgrpadmin are installed in the /usr/local/bin directory of research file servers and grad/faculty Linux boxes.

This document was created by man2html, using the manual pages.
Time: 23:05:53 GMT, January 24, 2005