solaris 9 user command phần 6 docx

separated by ’:’ (colon) characters. The ’$’ (dollar sign) character is treated specially. Directory names that end in ’$’ have the default domain appended to them, and a ’$’ by itself is replaced by the list of directories between the default domain and the global root that are at least two levels deep. The default NIS+ directory search path is ’$’. Refer to the Name Expansion subsection in nis+(1) for more details. See attributes(5) for descriptions of the following attributes: ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWnisu nischmod(1), nischttl(1), nis+(1), nis_local_names(3NSL), attributes(5) NIS+ might not be supported in future releases of the Solaris™ Operating Environment. Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. nisdefaults(1) ATTRIBUTES SEE ALSO NOTES User Commands 1011 niserror – display NIS+ error messages niserror error-num niserror prints the NIS+ error associated with status value error-num on the standard output. It is used by shell scripts to translate NIS+ error numbers that are returned into text messages. EXAMPLE 1 Using niserror The following example prints the error associated with the error number 20: example% niserror 20 Not Found, no such name See attributes(5) for descriptions of the following attributes: ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWnisu nis+(1), nis_error(3NSL), attributes(5) NIS+ might not be supported in future releases of the Solaris™ Operating Environment. Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. niserror(1) NAME SYNOPSIS DESCRIPTION EXAMPLES ATTRIBUTES SEE ALSO NOTES 1012 man pages section 1: User Commands • Last Revised 10 Dec 2001 nisgrpadm – NIS+ group administration command nisgrpadm -a | -r | -t [-s] group principal… nisgrpadm -d | -l [-M] [-s] group nisgrpadm -c [-D defaults] [-M] [-s] group The nisgrpadm utility is used to administer NIS+ groups. This command administers both groups and the groups’ membership lists. nisgrpadm can create, destroy, or list NIS+ groups. nisgrpadm can be used to administer a group’s membership list. It can add or delete principals to the group, or test principals for membership in the group. The names of NIS+ groups are syntactically similar to names of NIS+ objects but they occupy a separate namespace. A group named a.b.c.d. is represented by a NIS+ group object named a.groups_dir.b.c.d.; the functions described here all expect the name of the group, not the name of the corresponding group object. There are three types of group members: ■ An explicit member is just a NIS+ principal-name. For example: wickedwitch.west.oz. ■ An implicit ("domain") member, written *.west.oz., means that all principals in the given domain belong to this member. No other forms of wildcarding are allowed; wickedwitch.*.oz. is invalid, as is wickedwitch.west.*. . Note that principals in subdomains of the given domain are not included. ■ A recursive ("group") member, written @cowards.oz., refers to another group; all principals that belong to that group are considered to belong here. Any member may be made negative by prefixing it with a minus sign (’−’). A group may thus contain explicit, implicit, recursive, negative explicit, negative implicit, and negative recursive members. A principal is considered to belong to a group if it belongs to at least one non-negative group member of the group and belongs to no negative group members. Principal names must be fully qualified, whereas groups can be abbreviated on all operations except create. The following options are supported: -a Adds the list of NIS+ principals specified to group. The principal name should be fully qualified. -c Creates group in the NIS+ namespace. The NIS+ group name should be fully qualified. -d Destroys (removes) group from the namespace. -D defaults When creating objects, this option specifies a different set of defaults to be used during this operation. The defaults string is a series of tokens separated by colons. These tokens represent the nisgrpadm(1) NAME SYNOPSIS DESCRIPTION OPTIONS User Commands 1013 default values to be used for the generic object properties. All of the legal tokens are described below. ttl=time This token sets the default time to live for objects that are created by this command. The value time is specified in the format as defined by the nischttl(1) command. The default value is 12 hours. owner=ownername This token specifies that the NIS+ principal ownername should own the created object. Normally this value is the same as the principal who is executing the command. group=groupname This token specifies that the group groupname should be the group owner for the object that is created. The default value is NULL. access=rights This token specifies the set of access rights that are to be granted for the given object. The value rights is specified in the format as defined by the nischmod(1) command. The default value is −−−−rmcdr−−−r−−−. -l Lists the membership list of the specified group. (See -M option.) -M Master server only. Sends the lookup to the master server of the named data. This guarantees that the most up to date information is seen at the possible expense that the master server may be busy. Note that the -M flag is applicable only with the -l flag. -r Removes the list of principals specified from group. The principal name should be fully qualified. -s Work silently. Results are returned using the exit status of the command. This status can be translated into a text string using the niserror(1) command. -t Displays whether the principals specified are members in group. EXAMPLE 1 Creating a group This example shows how to create a group in the foo.com. domain: example% nisgrpadm -c my_buds.foo.com. nisgrpadm(1) Administering Groups 1014 man pages section 1: User Commands • Last Revised 10 Dec 2001 EXAMPLE 2 How to remove a group This example shows how to remove the group from the current domain. example% nisgrpadm –d freds_group EXAMPLE 3 Adding to the group This example shows how one would add two principals, bob and betty, to the group my_buds.foo.com.: example% nisgrpadm -a my_buds.foo.com. bob.bar.com. betty.foo.com. EXAMPLE 4 How to remove a principal from the group This example shows how to remove betty from freds_group: example% nisgrpadm -r freds_group betty.foo.com. NIS_DEFAULTS This variable contains a defaults string that will override the NIS+ standard defaults. NIS_PATH If this variable is set, and the NIS+ group name is not fully qualified, each directory specified will be searched until the group is found (see nisdefaults(1)). See attributes(5) for descriptions of the following attributes: ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWnisu nis+(1), nischgrp(1), nischmod(1), nischttl(1), nisdefaults(1), niserror(1), nis_groups(3NSL), attributes(5) NIS_SUCCESS On success, this command returns an exit status of 0. NIS_PERMISSION When you do not have the needed access right to change the group, the command returns this error. NIS_NOTFOUND This is returned when the group does not exist. NIS_TRYAGAIN This error is returned when the server for the group’s domain is currently checkpointing or otherwise in a read-only state. The command should be retried at a later date. NIS_MODERROR This error is returned when the group was modified by someone else during the execution of the command. nisgrpadm(1) Administering Members ENVIRONMENT VARIABLES ATTRIBUTES SEE ALSO DIAGNOSTICS User Commands 1015 Reissue the command and optionally recheck the group’s membership list. NIS+ might not be supported in future releases of the Solaris™ Operating Environment. Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. nisgrpadm(1) NOTES 1016 man pages section 1: User Commands • Last Revised 10 Dec 2001 nisln – symbolically link NIS+ objects nisln [-L] [-D defaults] name linkname The nisln command links a NIS+ object named name to a NIS+ name linkname.If name is an indexed name (see nismatch(1)), the link points to entries within a NIS+ table. Clients wishing to look up information in the name service can use the FOLLOW_LINKS flag to force the client library to follow links to the name they point to. Further, all of the NIS+ administration commands accept the -L switch indicating they should follow links (see nis_names(3NSL) for a description of the FOLLOW_LINKS flag). When creating the link, nisln verifies that the linked object exists. Once created, the linked object may be deleted or replaced and the link will not be affected. At that time the link will become invalid and attempts to follow it will return NIS_LINKNAMEERROR to the client. When the path attribute in tables specifies a link rather than another table, the link will be followed if the flag FOLLOW_LINKS was present in the call to nis_list() (see nis_tables(3NSL)) and ignored if the flag is not present. If the flag is present and the link is no longer valid, a warning is sent to the system logger and the link is ignored. The following options are supported: -L When present, this option specifies that this command should follow links. If name is itself a link, then this command will follow it to the linked object that it points to. The new link will point to that linked object rather than to name. -D defaults Specify a different set of defaults to be used for the creation of the link object. The defaults string is a series of tokens separated by colons. These tokens represent the default values to be used for the generic object properties. All of the legal tokens are described below. ttl=time This token sets the default time to live for objects that are created by this command. The value time is specified in the format as defined by the nischttl(1) command. The default is 12 hours. owner=ownername This token specifies that the NIS+ principal ownername should own the created object. The default for this value is the the principal who is executing the command. group=groupname This token specifies that the group groupname should be the group nisln(1) NAME SYNOPSIS DESCRIPTION OPTIONS User Commands 1017 owner for the object that is created. The default is NULL. access=rights This token specifies the set of access rights that are to be granted for the given object. The value rights is specified in the format as defined by the nischmod(1) command. The default value is −−−−rmcdr−−−r−−−. EXAMPLE 1 Creating a link In this example we create a link in the domain foo.com. named hosts that points to the object hosts.bar.com.: example% nisln hosts.bar.com. hosts.foo.com. In this example we make a link example.sun.com. that points to an entry in the hosts table in eng.sun.com: EXAMPLE 2 Making a link that points to an entry in the hosts table example% nisln ’[name=example],hosts.eng.sun.com.’ example.sun.com. NIS_PATH If this variable is set, and the NIS+ name is not fully qualified, each directory specified will be searched until the object is found (see nisdefaults(1)). The following exit values are returned: 0 Successful operation. 1 Operation failed. See attributes(5) for descriptions of the following attributes: ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWnisu nisdefaults(1), nismatch(1), nisrm(1), nistbladm(1), nis_names(3NSL), nis_tables(3NSL), attributes(5) NIS+ might not be supported in future releases of the Solaris™ Operating Environment. Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. nisln(1) EXAMPLES ENVIRONMENT VARIABLES EXIT STATUS ATTRIBUTES SEE ALSO NOTES 1018 man pages section 1: User Commands • Last Revised 10 Dec 2001 nisls – list the contents of a NIS+ directory nisls [-dglLmMR] [name…] For each name that is a NIS+ directory, nisls lists the contents of the directory. For each name that is a NIS+ object other than a directory, nisls simply echos the name. If no name is specified, the first directory in the search path is listed. See nisdefaults(1). The following options are supported: -d Treat NIS+ directories like other NIS+ objects, rather than listing their contents. -g Display group owner instead of owner when listing in long format. -l List in long format. This option displays additional information about the objects such as their type, creation time, owner, and access rights. The access rights are listed in the following order in long mode: nobody, owner, group owner, and world. -L This option specifies that links are to be followed. If name actually points to a link, it is followed to the linked object. -m Display modification time instead of creation time when listing in long format. -M Master only. This specifies that information is to be returned from the master server of the named object. This guarantees that the most up to date information is seen at the possible expense that the master server may be busy. -R List directories recursively. This option will reiterate the list for each subdirectory found in the process of listing each name. NIS_PATH If this variable is set, and the NIS+ name is not fully qualified, each directory specified will be searched until the object is found. See nisdefaults(1). The following exit values are returned: 0 Successful operation. 1 Operation failed. See attributes(5) for descriptions of the following attributes: ATTRIBUTE TYPE ATTRIBUTE VALUE Availability SUNWnisu nisls(1) NAME SYNOPSIS DESCRIPTION OPTIONS ENVIRONMENT VARIABLES EXIT STATUS ATTRIBUTES User Commands 1019 nisdefaults(1), nisgrpadm(1), nismatch(1), nistbladm(1), nis_objects(3NSL), attributes(5) NIS+ might not be supported in future releases of the Solaris™ Operating Environment. Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. nisls(1) SEE ALSO NOTES 1020 man pages section 1: User Commands • Last Revised 10 Dec 2001 [...]... rm(1), attributes(5) man pages section 1: User Commands • Last Revised 10 Dec 2001 nisrm(1) NOTES NIS+ might not be supported in future releases of the Solaris Operating Environment Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment For more information, visit http://www.sun.com/directory/nisplus/transition.html User Commands 1035 nisrmdir(1) NAME SYNOPSIS... privileged-users for the old password and they are not forced to comply with password aging and password construction requirements Any user may use the -d option to display password attributes for his or her own login name The format of the display will be: username status mm/dd/yy min max warn or, if password aging information is not present, username status where username The login ID of the user status... supported in future releases of the Solaris Operating Environment Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment For more information, visit http://www.sun.com/directory/nisplus/transition.html User Commands 1033 nisrm(1) NAME SYNOPSIS DESCRIPTION nisrm – remove NIS+ objects from the namespace nisrm [-if] name… The nisrm command removes NIS+ objects named... more information, visit http://www.sun.com/directory/nisplus/transition.html User Commands 10 29 nispasswd(1) NAME SYNOPSIS nispasswd – change NIS+ password information nispasswd [-ghs] [-D domainname] [username] nispasswd -a nispasswd [-D domainname] [-d [username]] nispasswd [-l] [-f] [-n min] [-x max] [-w warn] [-D domainname] username DESCRIPTION The nispasswd utility changes a password, gecos (finger)... apply when this command updates the serving lists of the affected NIS+ servers For more information, see nisopaccess(1) OPERANDS The following operand is supported: dirname EXAMPLES EXAMPLE 1 An existing NIS+ directory Using the nisrmdir Command To remove a directory bar under the foo.com domain, one would use the command: example% nisrmdir bar.foo.com 10 36 man pages section 1: User Commands • Last... NIS+ might not be supported in future releases of the Solaris Operating Environment Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment For more information, visit http://www.sun.com/directory/nisplus/transition.html User Commands 1037 nistbladm(1) NAME SYNOPSIS nistbladm – NIS+ table administration command nistbladm -a | -A [-D defaults] colname = value…... expiring the password for username -g Changes the gecos (finger) information -h Changes the home directory -l Locks the password entry for username Subsequently, login(1) would disallow logins with this NIS+ password entry -n min Sets minimum field for username The min field contains the minimum number of days between password changes for username If min is greater than max, the user may not change the... Environment Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment For more information, visit http://www.sun.com/directory/nisplus/transition.html man pages section 1: User Commands • Last Revised 10 Dec 2001 nisopaccess(1) NAME SYNOPSIS nisopaccess – NIS+ operation access control administration command nisopaccess [-v] directory operation rights nisopaccess [-v]... Tools to aid the migration from NIS+ to LDAP are available in the Solaris 9 operating environment For more information, visit http://www.sun.com/directory/nisplus/transition.html User Commands 1023 nismkdir(1) NAME SYNOPSIS DESCRIPTION nismkdir – create NIS+ directories nismkdir [-D defaults] [-m hostname] [-s hostname] dirname The nismkdir command creates new NIS+ subdirectories within an existing domain... least six characters Only the first eight characters are significant Each password must differ from the user s login username and any reverse or circular shift of that login username For comparison purposes, an upper case letter and its corresponding lower case letter are equivalent man pages section 1: User Commands • Last Revised 10 Dec 2001 nispasswd(1) I New passwords must differ from the old by at least . available in the Solaris 9 operating environment. For more information, visit http://www.sun.com/directory/nisplus/transition.html. nisgrpadm(1) NOTES 10 16 man pages section 1: User Commands • Last. STATUS ATTRIBUTES SEE ALSO NOTES User Commands 10 29 nispasswd – change NIS+ password information nispasswd [-ghs] [-D domainname][username] nispasswd -a nispasswd [-D domainname] [-d [username]] nispasswd. STATUS ATTRIBUTES User Commands 10 19 nisdefaults(1), nisgrpadm(1), nismatch(1), nistbladm(1), nis_objects(3NSL), attributes(5) NIS+ might not be supported in future releases of the Solaris Operating Environment.