Content-type: text/html Man page of convuser

convuser

Section: Maintenance Commands (8)
Index Return to Main Contents
 

NAME

convuser - convert user profile information between BASE and ENHANCED formats  

SYNOPSIS

/usr/tcb/bin/convuser -a [-c] [-i] [-n] [-u] [-R] [-U uid] [-M] [-T template] [-[qv]] [users]
/usr/tcb/bin/convuser -b [-T template] [-[qv]] [users]
/usr/tcb/bin/convuser -d [-n] [-M] [-[qv]] [users]
/usr/tcb/bin/convuser -H  

FLAGS

-a
Converts from BASE to ENHANCED authentication format. This option is incompatible with the -b and -d options. If none of -a, -b, or -d have been supplied, then -a is implied by any of -c, -i, -n, -u, -R, or -U.
-b
Converts from ENHANCED to BASE authentication format. This option is incompatible with the -a and -d options. The conversion in this case is bring any compatible passwords from the extended profile back to the BASE profile.
-c
Causes the conversion for -a to create new extended profiles only. If the -c option is given, existing extended profiles will remain unchanged.
-d
Removes any extended profiles which do not still have corresponding BASE profiles.
-i
Cause the conversion for -a to invalidate the encrypted password field in the BASE profile if the change to the ENHANCED profile is successful.
-n
Cause the -a and -d conversions to include NIS passwd.byname map entries in the list of BASE profiles for consideration.
-q
Cause non-error output to be suppressed.
-u
Cause the -a conversion to leave the migrated passwords still usable. The default is to pre-expire them.
-v
Cause more verbose reports of progress to be given.
-M
Work on NIS master map files rather than the local profiles. This option works on NIS master hosts only.
-R
Cause newly-created extended profiles to be written only to the /tcb/files directory tree (v4 only).
-T template
Causes the creation of new extended profiles to use user template as the template for the account default values. Causes the conversion for -b to consider only accounts with template as the associated account template.
-U uid
Causes newly-crated extended profiles with UID values less than uid to be written to the /tcb/files directory tree (v4 only).
-H
Cause an extended usage message to be given and no other processing to be performed.
 

DESCRIPTION

The convuser utility is used to provide migration between BASE and ENHANCED security levels, as well as to provide support for the use of existing account-creation scripts. The most common uses are to clean up dangling extended profiles (those without corresponding BASE profiles) after the removal of the base profiles, and to create new extended profiles to correspond to newly added base profiles.  

EXAMPLES

To remove dangling profiles:

# convuser -d
# convuser -Md To finish the addition of new accounts on a system using NIS to supply the extended profile information:

# convuser -iu
# convuser -Miu To finish the addition of new accounts on a system using NIS to supply the extended profile information:

# convuser -iun  

RELATED INFORMATION

Files:
prpasswd(4), authcap(4)

Security delim off


 

Index

NAME
SYNOPSIS
FLAGS
DESCRIPTION
EXAMPLES
RELATED INFORMATION

This document was created by man2html, using the manual pages.
Time: 02:40:41 GMT, October 02, 2010