gsscred.1m (2010 09)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages

gsscred(1M) gsscred(1M)

NAME

gsscred - add, remove and list gsscred table entries

SYNOPSIS

/usr/sbin/gsscred

[-n user [-o oid ][

-u uid ]] [-c comment ] -m mech -a

/usr/sbin/gsscred

[-n user [-o

oid ]] [-u uid ][-m mech ] -r

/usr/sbin/gsscred

[-n user [-o oid ]] [

-u uid ][-m mech ] -l

DESCRIPTION

The gsscred utility is used to create and maintain a mapping between a security principal name and a

local UNIX uid. The format of the user name is assumed to be

GSS_C_NT_USER_NAME

. You can use

the

-o option to specify the object identiﬁer of the name type. The OID must be speciﬁed in dot-

separated notation, for example: 1.2.3.45464.3.1

The

gsscred table is used on server machines to lookup the uid of incoming clients connected using

RPCSEC_GSS.

When adding users, if no user name is speciﬁed, an entry is created in the table for each user from the

passwd table. If no comment is speciﬁed, the

gsscred utility inserts a comment that speciﬁes the user

name as an ASCII string and the GSS-API security mechanism that applies to it. The security mechan-

ism will be in string representation as deﬁned in the

/etc/gss/mech ﬁle.

The parameters are interpreted the same way by the

gsscred utility to delete users as they are to

create users. At least one of the following options must be speciﬁed: -n,

-u,or-m.Ifnosecurity

mechanism is speciﬁed, then all entries will be deleted for the user identiﬁed by either the uid or user

name. If only the security mechanism is speciﬁed, then all user entries for that security mechanism will

be deleted.

Again, the parameters are interpreted the same way by the

gsscred utility to search for users as they

are to create users. If no options are speciﬁed, then the entire table is returned. If the user name or uid

is speciﬁed, then all entries for that user are returned. If a security mechanism is speciﬁed, then all user

entries for that security mechanism are returned.

Options

-a Add a table entry.

-c comment Insert comment about this table entry.

-l Search table for entry.

-m mech Specify the mechanism for which this name is to be translated.

-n user Specify the optional principal name.

-o oid Specify the OID indicating the name type of the user.

-r Remove the entry from the table.

-u uid Specify the uid for the user if the user is not local.

EXAMPLES

Example 1: Creating a gsscred Table

The following shows how to create a

gsscred table for the Kerberos Security Mechanism(V5).

gsscred obtains user names and uid’s from the passwd table to populate the table.

gsscred -m krb5_mech -a

Example 2: Adding an Entry

The following shows how to add an entry for admin/host1 with a speciﬁed uid of 0 for the Kerberos

Security Mechanism(V5).

gsscred -m krb5_mech -n admin/host1 -u 0 -a

Example 3: Listing All User Mappings

The following lists all user mappings for the Kerberos Security Mechanism(V5).

gsscred -m krb5_mech -l

HP-UX 11i Version 3: September 2010 − 1 − Hewlett-Packard Company 1

Summary of content (2 pages)

PAGE 1
gsscred(1M) gsscred(1M) NAME gsscred - add, remove and list gsscred table entries SYNOPSIS /usr/sbin/gsscred [-n user [-o oid ] [-u uid]] [-c comment ] -m mech -a /usr/sbin/gsscred [-n user [-o oid ]] [-u uid] [-m mech] -r /usr/sbin/gsscred [-n user [-o oid ]] [-u uid] [-m mech] -l DESCRIPTION The gsscred utility is used to create and maintain a mapping between a security principal name and a local UNIX uid. The format of the user name is assumed to be GSS_C_NT_USER_NAME.
PAGE 2
gsscred(1M) gsscred(1M) Example 4: Lising All Mappings for a Specified User The following lists all mappings for all security mechanisms for the user bsimpson. gsscred -n bsimpson -l EXIT STATUS The following exit values are returned: 0 >0 Successful completion. An error occurred. FILES /etc/gss/gsscred_db The gsscred mapping table. /etc/gss/mech Tables of GSS-API based security mechanism installed. SEE ALSO gssd(1M), gsscred_clean(1M).