NAME

pts_adduser - Adds a user, machine or network to a group

SYNOPSIS

pts adduser -user <user name>+ -group <group name>+ [-cell <cell name>] [-noauth] [-localauth] [-force] [-help] [-auth] [-encrypt [<yes|no>]] [-config <configuration file>]

DESCRIPTION

The pts adduser command adds each user or machine entry named by the -user argument as a member of each group named by the -group argument.

To remove members of a group, use the pts removeuser command. To list the groups to which a user or machine belongs, or the members of a specified group, use the pts membership command.

CAUTIONS

After being added as a group member, a currently authenticated user must reauthenticate (for example, by issuing the aklog command with the -force option) to obtain permissions granted to the group on an access control list (ACL). Group memberships are evaluated the first time an authentication token is used to connect to a File Server.

OPTIONS

-user <user name>+

Specifies the name of each user, machine or network entry to add to each group named by the -group argument. The name of a network entry resembles an IP version 4 address and can use the wildcard notation described on the pts createuser reference page. The user, machine or network entry must have previously been created using pts createuser.

-group <group name>+

Specifies the complete name (including the owner prefix if applicable) of each group to which to add members. The group entry must have previously been created using pts creategroup.

-auth

Use the calling user's tokens to communicate with the Protection Server. For more details, see pts(1).

-cell <cell name>

Names the cell in which to run the command. For more details, see pts(1).

-config <configuration file>

Sets the location of the configuration file to be used. The default file is /etc/yfs/yfs-client.conf. For more details, see pts(1).

-encrypt [<yes|no>]

Enables or disables encryption for any communication with the Protection Server. For more details, see pts(1).

-force

Enables the command to continue executing as far as possible when errors or other problems occur, rather than halting execution at the first error.

-help

Prints the online help for this command. All other valid options are ignored.

-localauth

Constructs a server ticket using a key from the local /etc/yfs/server/KeyFileExt file. Do not combine this flag with the -cell or -noauth options. For more details, see pts(1).

-noauth

Assigns the unprivileged identity anonymous to the issuer. For more details, see pts(1).

EXAMPLES

The following example adds user smith to the group system:administrators.

   % pts adduser -user smith -group system:administrators

The following example adds users jones, terry, and pat to the smith:colleagues group.

   % pts adduser -user jones terry pat -group smith:colleagues

The following example adds the network entries 172.16.0.0, 172.17.0.0 and 172.18.0.0 to the group bin-prot.

   % pts adduser -user 172.16.0.0 172.17.0.0 172.18.0.0 -group bin-prot

PRIVILEGE REQUIRED

The required privilege depends on the setting of the fourth privacy flag for each group entry named by the -group argument (use the pts examine command to display the flags):

SEE ALSO

aklog(1), pts(1), pts_createuser(1), pts_creategroup(1), pts_examine(1), pts_membership(1), pts_removeuser(1), pts_setaccess(1), pts_setfields(1)

COPYRIGHT

IBM Corporation 2000. http://www.ibm.com/ All Rights Reserved.

This documentation is covered by the IBM Public License Version 1.0. It was converted from HTML to POD by software written by Chas Williams and Russ Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.

ACKNOWLEDGEMENTS

"AFS" is a registered mark of International Business Machines Corporation, used under license. (USPTO Registration 1598389)

"OpenAFS" is a registered mark of International Business Machines Corporation. (USPTO Registration 4577045)

The "AuriStor" name, log 'S' brand mark, and icon are registered marks of AuriStor, Inc. (USPTO Registrations 4849419, 4849421, and 4928460) (EUIPO Registration 015539653).

"Your File System" is a registered mark of AuriStor, Inc. (USPTO Registrations 4801402 and 4849418).

"YFS" and "AuriStor File System" are trademarks of AuriStor, Inc.