56 Chapter 7 Working With Users and Groups
In addition, you can include
• UserShell (the default shell)
• NFSHomeDirectory (the path to the user’s home directory on the user’s computer)
• Other user data types, described under “User Attributes” on page 57
For group accounts, the list of attributes must include
• RecordName (the group name)
• PrimaryGroupID (the group ID)
• GroupMembership
Here is an example of a record description:
0x0A 0x5C 0x3A 0x2C DSRecTypeStandard:Users 7
RecordName Password UniqueID PrimaryGroupID
RealName NFSHomeDirectory UserShell
Here is an example of a record encoded using the above description:
jim:Adl47E$:408:20:J. Smith, Jr.,
M.D.:/Network/Servers/somemac/Homes/jim:/bin/csh
The record consists of values, delimited by colons. Use a double colon (::) to indicate a
value is missing.
Here is another example, which shows a record description and user records for users
whose passwords are to be validated using the Password Server. The record description
should include a field named dsAttrTypeStandard:AuthMethod, and the value of this
field for each record should be dsAuthMethodStandard:dsAuthClearText:
0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 8
dsAttrTypeStandard:RecordName dsAttrTypeStandard:AuthMethod
dsAttrTypeStandard:Password dsAttrTypeStandard:UniqueID
dsAttrTypeStandard:PrimaryGroupID dsAttrTypeStandard:Comment
dsAttrTypeStandard:RealName dsAttrTypeStandard:UserShell
skater:dsAuthMethodStandard\:dsAuthClearText:pword1:374:11:comment:
Tony Hawk:/bin/csh
mattm:dsAuthMethodStandard\:dsAuthClearText:pword2:453:161::
Matt Mitchell:/bin/tcsh
As these examples illustrate, you can use the prefix dsAttrTypeStandard: when
referring to an attribute, or you can omit the prefix.
Using the StandardUserRecord Shorthand
When the first record in a character-delimited import file contains
StandardUserRecord, the following record description is assumed:
0x0A 0x5C 0x3A 0x2C DSRecTypeStandard:Users 7
RecordName Password UniqueID PrimaryGroupID
RealName NFSHomeDirectory UserShell
LL2354.book Page 56 Monday, October 20, 2003 9:47 AM
