Specifications

Chapter 8 Managing User and Group Accounts 125
For group accounts, the list of attributes must include:
 RecordName (the group name)
 PrimaryGroupID (the group ID)
 GroupMembership
The following is an example of a record description:
0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 7
RecordName Password UniqueID PrimaryGroupID
RealName NFSHomeDirectory UserShell
The following is an example of a record encoded using the previous description:
anne:Adl47E$:408:20:A. Johnsons, M.D.:/Network/Servers/somemac/Homes/anne:/
bin/csh
The record consists of values, delimited by colons. Use a double-colon (::) to indicate
that a value is missing.
The following is another example, which shows a record description and user records
for users whose passwords are to be validated using the Password Server. The record
description should include a field named dsAttrTypeStandard:AuthMethod, and the
value of this field for each record should be dsAuthMethodStandard:dsAuthClearText:
0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 8
dsAttrTypeStandard:RecordName dsAttrTypeStandard:AuthMethod
dsAttrTypeStandard:Password dsAttrTypeStandard:UniqueID
dsAttrTypeStandard:PrimaryGroupID dsAttrTypeStandard:Comment
dsAttrTypeStandard:RealName dsAttrTypeStandard:UserShell
skater:dsAuthMethodStandard\:dsAuthClearText:pword1:374:11:comment:
Tony Hawk:/bin/csh
mattm:dsAuthMethodStandard\:dsAuthClearText:pword2:453:161::
Matt Mitchell:/bin/tcsh
As these examples illustrate, you can use the prefix dsAttrTypeStandard: when
referring to an attribute, or you can omit the prefix. When you use Workgroup Manager
to export character-delimited files, it uses the prefix in the generated file.
When importing user passwords, you can insert the following in the list of attributes to
set the user’s password type to Open Directory:
dsAttrTypeStandard:AuthMethod
Then, insert the following in the formatted record (in this example, the user ‘s password
is “password”):
dsAuthMethodStandard\:dsAuthClearText:password