convuser - convert user profile information between BASE
and ENHANCED formats
/usr/tcb/bin/convuser -a [-c] [-i] [-n] [-u] [-R] [-U
uid] [-M] [-T template] [-[qv]] [users]
[/usr/tcb/bin/convuser] -b [-T template] [-[qv]] [users]
[/usr/tcb/bin/convuser] -d [-n] [-M] [-[qv]] [users]
[/usr/tcb/bin/convuser] -H
Converts from BASE to ENHANCED authentication format. This
option is incompatible with the -b and -d options. If none
of -a, -b, or -d have been supplied, then -a is implied by
any of -c, -i, -n, -u, -R, or -U. Converts from ENHANCED
to BASE authentication format. This option is incompatible
with the -a and -d options. The conversion in this case is
bring any compatible passwords from the extended profile
back to the BASE profile. Causes the conversion for -a to
create new extended profiles only. If the -c option is
given, existing extended profiles will remain unchanged.
Removes any extended profiles which do not still have corresponding
BASE profiles. Cause the conversion for -a to
invalidate the encrypted password field in the BASE profile
if the change to the ENHANCED profile is successful.
Cause the -a and -d conversions to include NIS
passwd.byname map entries in the list of BASE profiles for
consideration. Cause non-error output to be suppressed.
Cause the -a conversion to leave the migrated passwords
still usable. The default is to pre-expire them. Cause
more verbose reports of progress to be given. Work on NIS
master map files rather than the local profiles. This
option works on NIS master hosts only. Cause newly-created
extended profiles to be written only to the
/tcb/files directory tree (v4 only). Causes the creation
of new extended profiles to use user template as the template
for the account default values. Causes the conversion
for -b to consider only accounts with template as the
associated account template. Causes newly-crated extended
profiles with UID values less than uid to be written to
the /tcb/files directory tree (v4 only). Cause an
extended usage message to be given and no other processing
to be performed.
The convuser utility is used to provide migration between
BASE and ENHANCED security levels, as well as to provide
support for the use of existing account-creation scripts.
The most common uses are to clean up dangling extended
profiles (those without corresponding BASE profiles) after
the removal of the base profiles, and to create new
extended profiles to correspond to newly added base profiles.
To remove dangling profiles:
# convuser -d # convuser -Md
To finish the addition of new accounts on a system using
NIS to supply the extended profile information:
# convuser -iu # convuser -Miu
To finish the addition of new accounts on a system using
NIS to supply the extended profile information:
# convuser -iun
Files: prpasswd(4), authcap(4)
Security
convuser(8)
[ Back ] | 