-
Notifications
You must be signed in to change notification settings - Fork 1
Home
- Conventions used in this manual
- A short introduction into MPLS
- General usage
- Overview of MPLS options
- Search menu
-
Modify menu
- Modifymenu -> User
- Modifymenu -> Group
-
Modifymenu -> Netgroup
- -> Netgroup -> Add new netgroup
- -> Netgroup -> Delete netgroup
- -> Netgroup -> Link entity to netgroup -> User to netgroup
- -> Netgroup -> Link entity to netgroup -> Host to netgroup
- -> Netgroup -> Link entity to netgroup -> Netgroup to netgroup
- -> Netgroup -> Unlink entity to netgroup -> User to netgroup
- -> Netgroup -> Unlink entity to netgroup -> Host to netgroup
- -> Netgroup -> Unlink entity to netgroup -> Netgroup to netgroup
- Login menu
- Help menu
- Exit
- Configuring MPLS for your environment (uidNumber ranges, etc...)
- What is a 'user', 'group' or 'netgroup anyway?
- About & Copyrights
Every item within brackets is user input.
E.g. [fbeek], in this case 'fbeek' is user input (without the brackets!!!).
MPLS is a user account tool for LDAP. It stands-out of other LDAP software because it handles NIS-netgroups and has a transaction undo feature.
MPLS is meant as a unified tool for LDAP manipulations. Unified means that it's build to accommodate the needs of 'users', 'help-desk' and 'system- administrators.' MPLS tries to simplify standard daily tasks but also the somewhat complex tasks. E.g. renaming a user and make sure its (net-)group memberships are preserved. Every transaction made to the LDAP database from MPLS is logged and made undo-able. Thus if you delete a user or some- thing else you can easily undo this. This is part of the philosophy of MPLS.
Another philosophy behind MPLS is: Every helper-program should be callable from MPLS and the CLI. Every helper-program (helpers) has a set of 'command-line arguments' you can set. This is obviously not needed when you call these helpers from within MPLS. Because every helper is a stand- alone unit (like UNIX tools) MPLS is easily expendable.
There is a unified menu-structure which is trivially expandable with new items. The menu-structure as such has nothing to do with MPLS as whole but is rather a convenient method of presenting helpers to a user. See chapter 'Further Development' for more in-depth information.
MPLS is by no means a complete product. It aims at taking away the burden of repetitive account tasks and delegating tasks to appropriate skilled personnel.
MPLS has no security whatsoever. The security of this tool is handled by the mechanisms already in place on the target systems. E.g. You can access this tool via SSH protocol (Just make it the default shell of a 'special user'). SSH is charged with the security not MPLS! Every connection made to the LDAP server is done with the security measures imposed by the LDAP server itself (e.g. SSL/TLS) not MPLS. The philosophy of MPLS is: Make security not the problem of MPLS but that of the systems MPLS interacts with.
Moving around in the program can be done in several ways
-
Hot keys. Hot keys are marked as red letters. Typing such a let- ter will automaticly select the appropriate menu item within the current sub menu.
-
Arrow keys. Arrow keys can be used to navigate through the menu- structure. Note the behavior of the arrow keys change between horizontal and vertical menus. E.g. In a horizontal menu (top- menu) the down-arrow opens an item but in a vertical menu the right-arrow opens a menu-item.
Through out the whole program there is a consistent color usage.
-
Text in the color RED always means an action or a warning. E.g.
Enter username: .... -
Text in the color WHITE is informational in nature. E.g.
Bread-crumbs at the bottom of the screen. -
Blocked text in the color WHITE means your current active menu item. E.g.
Query by (part of) username
Through out the whole program you can easily see where you are in terms of the menu-structure. Every step in the menu-structure will leave a bread-crumb. Thus it leaves a trail. These crumbs are printed in the left-bottom of the screen. If the trail gets to long, the begin is truncated as dots
Every editable item in this program (e.g. enter username:) is validated on proper input. This works mostly but probably not always, be warned! If a user enters an invalid input, the user gets a warning. This warning looks like:
(Wrong input: Use -.+=, a-z A-Z 0-9 only)
This warning is displayed at the bottom of the active screen in the color RED
Most of the time people are 'just browsing around' through the program. If you enter one of the sub-modules (e.g. Add user) you can simply bail out by pressing [esc] or give empty input (e.g. [enter])
MPLS has been designed to work in a standard 'telnet' window.
These windows are typically 80 characters wide and 24 lines long
(80x24). A larger window is not a problem, but MPLS WILL CRASH
if you make the terminal window smaller than 80x24. This has
nothing to do with MPLS but rather the underlying (n)Curses
interface.
MPLS has five top-level menu items: Search, Modify, Login, Help and Exit. The two most important are Search and Modify.
-
Search: In this menu you can query for user, group or NIS-netgroups items. Furthermore, you can query all transactions/modifications on the LDAP database via MPLS.
-
Modify: In this menu you can modify user(s), group(s) and NIS-Netgroups. Furthermore, you can query, view and undo transactions/modifications on the LDAP database via MPLS.
-
Login: From here you can bind to a LDAP server other then the default server. (The Default server is configured in the MPLS environment file; environment.py)
-
Help menu: You can browse through these help-pages.
-
Exit: Every program needs a stop condition. This is the one!
In this menu you can query for user, group or NIS-netgroups items. Furthermore, you can query all transactions/modifications on the LDAP database via MPLS.
In this sub menu you can query for a user or user specific items.
With this helper you can look-up an username if you only know part of its name.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query by (part of) username ββ
ββ ββ
ββ Enter username: re ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > User > By part of username]ββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββdn: uid=aandreye,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=areuneke,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=bbourdre,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=bcarels,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=bharensl,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=birrer,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=ccremers,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=csre,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=csuares,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=cveffere,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=cvissere,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=eparren,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=ereehuis,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=eschreud,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=evreeswi,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=fbigarel,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=ftreurni,ou=People,dc=unix,dc=example,dc=nl ββ
ββdn: uid=fvgemere,ou=People,dc=unix,dc=example,dc=nl ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > User > By part of username]ββββββββββββββββββββββββββββββββββββββββ
With this helper you can lookup all attributes of a single user.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query user Information ββ
ββ ββ
ββ Enter username: robert ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > User > Information]ββββββββββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββdn: uid=robert,ou=People,dc=unix,dc=example,dc=nl ββ
ββemployeeType: Staff ββ
ββcn: Robert ββ
ββobjectClass: inetOrgPerson ββ
ββobjectClass: posixAccount ββ
ββobjectClass: shadowAccount ββ
ββloginShell: /bin/bash ββ
ββuidNumber: 11010 ββ
ββgidNumber: 100 ββ
ββgecos: Robert Nagtegaal ββ
ββsn: Nagtegaal ββ
ββhomeDirectory: /home/robert ββ
ββuid: robert ββ
ββemployeeNumber: 100.11010 ββ
ββ ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > User > Information]ββββββββββββββββββββββββββββββββββββββββββββββββ
Note: employeeNumber is either a concatenation of gidNumber and uidNumber or a student registration number.
With this helper you can lookup all exports for this user known in the LDAP database. Thus all autofs entries.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query Autofs ββ
ββ ββ
ββ Enter username: robert ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > User > Autofs entries]βββββββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query Autofs ββ
ββ ββ
ββ Enter username: robert ββ
ββ ββ
ββ dn: cn=robert,ou=auto.home,ou=Autofs,dc=unix,dc=example,dc=nl ββ
ββ -soft,intr,nosuid nfs-01:/users/beheer:& ββ
ββ ββ
ββ dn: cn=/scratch,ou=auto.direct,ou=Autofs,dc=unix,dc=example,dc=nl ββ
ββ scratch.example.nl:/scratch ββ
ββ ββ
ββ dn: cn=/var/spool/mail,ou=auto.direct,ou=Autofs,dc=unix,dc=example,dc=nl ββ
ββ mail.example.nl:/var/spool/mail ββ
ββ ββ
ββ dn: cn=/appl,ou=auto.direct,ou=Autofs,dc=unix,dc=example,dc=nl ββ
ββ nfs-01.example.nl,nfs-02.example.nl:/appl ββ
ββ ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > User > Autofs entries]βββββββββββββββββββββββββββββββββββββββββββββ
Note: The user 'Robert' has one home-directory and three other exports, /scratch, /var/spool/mail and /appl. The respective exporting servers are: nfs-server01 and nfs-server02.
In this menu you can query group information. You can show all available groups, the groups a user is member of and the users in a certain group.
With this helper you can lookup all groups
Example usage:
Use your arrow keys to scroll through all available groups and use escape to exit this helper.
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββdn: cn=acmmm,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=admin,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=addoc,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=adrap,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=alui,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=sparc,ou=Group,dc=unix,dc=example,dc=nl ββ
ββdn: cn=csbt,ou=Group,dc=unix,dc=example,dc=nl ββ
ββ ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Group > Show all groups]βββββββββββββββββββββββββββββββββββββββββββ
With this helper you can lookup groups assign to a user.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query groups by user ββ
ββ ββ
ββ Enter username: robert ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > Group > By user name]ββββββββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββgidNumber Primairy group DN for user robert ββ
ββ--------- ------------------------------------- ββ
ββ100 dn: cn=staff,ou=Group,dc=unix,dc=example,dc=nl ββ
ββ ββ
ββgidNumber Non-primary groups DNs for user robert ββ
ββ--------- ------------------------------------- ββ
ββ105 dn: cn=ctd,ou=Group,dc=unix,dc=example,dc=nl ββ
ββ11100 dn: cn=admin,ou=Group,dc=unix,dc=example,dc=nl ββ
ββ11186 dn: cn=stud,ou=Group,dc=unix,dc=example,dc=nl ββ
ββ ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Group > By user name]ββββββββββββββββββββββββββββββββββββββββββββββ
Note: In this example the user 'robert' has primary group
'staff' with gidNumber '100' and three secondary groups.
With this helper you can lookup members of a given group.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query group by name ββ
ββ ββ
ββ Enter groupname: csdale ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > Group > By group name]βββββββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββMembers of group csdale (gidNumber: 11158) ββ
ββ------------------------------------- ββ
ββmemberUid: csdale ββ
ββmemberUid: tcocx ββ
ββ ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Group > By group name]βββββββββββββββββββββββββββββββββββββββββββββ
Note: In this example there are two members of the group 'csdale' being 'csdale' itself and 'tcocx'. Furthermore the gidNumber of 'csdale' is 11158.
In this sub menu you can query for netgroup information. Analogue to the 'Search -> Group' menu there is an option to view all netgroups, show user/host membership of a netgroup and child groups of a netgroup.
This helper gives a list of all available netgroups.
Example usage:
Use your arrow keys to scroll through all available groups and use escape to exit this helper.
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββdn: cn=cd000a,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000b,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000c,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000d,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000e,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000f,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000g,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000h,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000i,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000j,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000k,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000l,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000m,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=cd000n,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Netgroup > Show all netgroups]βββββββββββββββββββββββββββββββββββββ
This helper shows the netgroups a user is member of.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query netgroup membership ββ
ββ ββ
ββ Enter username: robert ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > Netgroup > Show Membership]ββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββdn: cn=sh,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=sun,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=stoeidoos,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββdn: cn=pc56a,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββ ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Netgroup > Show Membership]ββββββββββββββββββββββββββββββββββββββββ
Note: In this example the user fbeek is a member of the netgroups 'sun', 'pc156a', 'pc409a', 'users-pc306 and 'users-pc302'. All hosts in sun, pc156a etc..are hosts the user fbeek has access to.
This helper shows all information of a given netgroup.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Query netgroup information ββ
ββ ββ
ββ Enter netgroup: users-pc302 ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Search > Netgroup > Information]ββββββββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββDistinguished name of netgroup users-pc302 ββ
ββ------------------------------------- ββ
ββdn: cn=users-pc302,ou=Netgroup,dc=unix,dc=example,dc=nl ββ
ββ ββ
ββMember nis-groups of nis-group users-pc302 ββ
ββ------------------------------------- ββ
ββ ββ
ββHost triples in netgroup ββ
ββ------------------------------------- ββ
ββ ββ
ββUser triples in netgroup ββ
ββ------------------------------------- ββ
ββ(-,akacar,) (-,aleman,) (-,adrye,) (-,anding,) ββ
ββ(-,aton,) (-,assink,) (-,abcaan,) (-,baggio,) ββ
ββ(-,ahaki,) (-,agia,) (-,abijla,) (-,bom,) ββ
ββ(-,aogert,) (-,aman,) (-,araghi,) (-,acvuog,) ββ
ββ(-,aervel,) (-,achaib,) (-,achine,) (-,aclair,) ββ
ββ(-,acomy,) (-,adarv,) (-,aroot,) (-,ajonge,) ββ
βββ[use arrow keys for scrolling or [ESC] for quit]βββββββββββββββββββββββββββββ
βββ[Search > Netgroup > Information]ββββββββββββββββββββββββββββββββββββββββββββ
Note: In this example there are only user 'triples' in the netgroup 'users-pc302'. If we would lookup netgroup 'pc302a' we can observe that is only has one member nis-group, 'users-pc302'. Using this mechanism users and hosts are bind-ed together.
Every modification from MPLS to a LDAP database is logged in a transaction. Of every transaction made, there is also an undo file created. This means that every transaction should be un-doable.
This helper gives an overview of all write-transactions from MPLS to the LDAP database. Each column in the overview gives specific information about the transaction
TID: Transaction identification number. It's a UNIX date-stamp in
seconds (thus always incrementing!)
Entity: The user, group or netgroup which is modified.
Date: The transaction date (computed from the TID)
Type: The type of modification made. E.g. add-grp (a unix group is added),
multiple-user-add (a bunch of users was created) etc...
Action: There are three types of actions:
done: This is a transaction done somewhere in the past.
undo: For every transaction there exists an undo
file. The undo transaction is not
committed (yet) to the LDAP server but can
be used to undo a past transaction.
reverted: These are the undo transactions which has
been committed. Thus if you commit an undo
transaction it becomes a reverted
transaction.
Example usage:
Use your arrow keys to scroll through all available transactions. Press enter to view the highlighted entry and escape to leave the helper.
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Show transaction ββ
ββ ββ
ββ Transaction Entity Date Type Action ββ
ββ ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ ββ
ββ 1364222906 robert Mon Mar 25 15:48:26 2013 modify_user reverte ββ
ββ 1364222906 robert Mon Mar 25 15:48:26 2013 modify_user done ββ
ββ 1364220092 qwertyngpMon Mar 25 15:01:32 2013 del_netgroup_from_ done ββ
ββ 1364220092 qwertyngpMon Mar 25 15:01:32 2013 del_netgroup_from_ undo ββ
ββ 1364220084 users-silMon Mar 25 15:01:24 2013 del_netgroup_from_ done ββ
ββ 1364220084 users-silMon Mar 25 15:01:24 2013 del_netgroup_from_ undo ββ
ββ 1364220061 stoeidoosMon Mar 25 15:01:01 2013 del_host_from_netg undo ββ
ββ 1364220061 stoeidoosMon Mar 25 15:01:01 2013 del_host_from_netg done ββ
ββ 1364220026 robert-qwMon Mar 25 15:00:26 2013 add_user_to_netgro done ββ
ββ 1364220026 robert-qwMon Mar 25 15:00:26 2013 add_user_to_netgro undo ββ
ββ 1364219969 users-silMon Mar 25 14:59:29 2013 add_netgroup_to_ne undo ββ
ββ 1364219969 users-silMon Mar 25 14:59:29 2013 add_netgroup_to_ne done ββ
ββ ββ
βββ[Usage: [ESC] abort [ENTER] Show transaction]ββββββββββββββββββββββββββββββββ
βββ[Search > Transactions ]βββββββββββββββββββββββββββββββββββββββββββββββββββββ
The modify menu enables you to modify user, group and netgroup properties. Furthermore you can view and UNDO past modifications of the LDAP database done via the MPLS software.
In this submenu you can add or delete a user. Change a users password, modify its attributes. Adding users in a batch process can be done with the 'Add multiple users' helper.
With the 'Add user' helper you can add a new user to the LDAP database. This helper will assign a primary group of choice, a login shell, uidNumber, employeeNumber, gecos, homedirectory, common name and automount export. All these items are free selectable from predefined list (where applicable) or free text fields.
Example usage:
First enter a new (free) username.
NOTE: If the username is not free, a warning will be issued and the helper will abort all actions! (e.g. ERROR: User robert already exists!)
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add user ββ
ββ ββ
ββ Enter new username: masikh ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
After you press enter the following screen will appear:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add user ββ
ββ ββ
ββ*employeeType: Student ββ
ββ uid: masikh ββ
ββ loginShell: /bin/tcsh ββ
ββ*uidNumber: 6929 ββ
ββ*employeeNumber: 500.6929 ββ
ββ*gidNumber: 500 ββ
ββ*gecos: Masikh Masih ββ
ββ*sn: Masih ββ
ββ homeDirectory: /home/masikh ββ
ββ*automountInformation: -soft,intr,nosuid nfs-01:/users/14/student:& ββ
ββ*cn: Masikh ββ
ββ ββ
βββ[Press [ESC] when done, [arrow keys] to select and [enter] to edit.]βββββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
If you change the employeeType, the uidNumber, employeeNumber and gidNumber will change accordingly. (Use arrow keys to select!)
Example:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add user ββ
ββ ββ
ββ*employeeType: ββββββββββββββ ββ
ββ uid: β CS-Account β ββ
ββ loginShell: β CDH β ββ
ββ*uidNumber: β Bijvak β ββ
ββ*employeeNumber: β Student β ββ
ββ*gidNumber: β Gast β ββ
ββ*gecos: β Staff β ββ
ββ*sn: ββββββββββββββ ββ
ββ homeDirectory: /home/masikh ββ
ββ*automountInformation: -soft,intr,nosuid nfs-01:/users/14/student:& ββ
ββ*cn: Masikh ββ
ββ ββ
βββ[Use [arrows] to navigate and [enter] to select.]ββββββββββββββββββββββββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
NOTE: An asterix ' * ' will appear before each changed user attribute.
If you change the automountInformation attribute a list of autofs exports will be presented. Please choose the appropriate export for the new user with you arrow keys and press enter to select.
Example:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Select export for account ββ
ββ ββ
ββ HINT: Older exports (before 2013) are at the bottom! ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ Staff leden -soft,intr,nosuid nfs-01:/users/staff:& ββ
ββ Student 2013 -soft,intr,nosuid nfs-02:/users/13/student:& ββ
ββ Student 2014 -soft,intr,nosuid nfs-02:/users/14/student:& ββ
ββ Student 2015 -soft,intr,nosuid nfs-02:/users/15/student:& ββ
ββ Student 2016 -soft,intr,nosuid nfs-02:/users/16/student:& ββ
ββ Student 2017 -soft,intr,nosuid nfs-02:/users/17/student:& ββ
ββ Bijvak 2013 -soft,intr,nosuid nfs-02:/users/13/bijvak:& ββ
ββ Bijvak 2014 -soft,intr,nosuid nfs-02:/users/14/bijvak:& ββ
ββ Bijvak 2015 -soft,intr,nosuid nfs-02:/users/15/bijvak:& ββ
ββ Bijvak 2016 -soft,intr,nosuid nfs-02:/users/16/bijvak:& ββ
ββ Bijvak 2017 -soft,intr,nosuid nfs-02:/users/17/bijvak:& ββ
ββ IIB 2013 -soft,intr,nosuid nfs-02:/users/13/iib:& ββ
ββ ββ
βββ[Usage: [ESC] quits, [arrows] choose selection, [enter] make selection]ββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
After you have entered all (needed) attributes for a given user, you press escape. If you left any attributes blank (---) a informative warning will be issued E.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add user ββ
ββ ββ
ββ WARNING: Attribute 'gecos' is not set. ββ
ββ WARNING: Attribute 'sn' is not set. ββ
ββ WARNING: Attribute 'automountInformation' is not set. ββ
ββ WARNING: Attribute 'cn' is not set. ββ
ββ ββ
ββ Do you wish to add user 'masikh' [y|n] ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
If you agree with this warning press 'y' or 'Y' to commit this transaction.
The user will now be created. You will receive the new password for the given user and an option to printout an account form.
E.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add user ββ
ββ ββ
ββ User 'masikh' added succesfully! ββ
ββ ββ
ββ Login: masikh ββ
ββ Password: 2~CRVSY|81 ββ
ββ ββ
ββ Account form has been saved as: 1365004233.user-add.masikh.ps ββ
ββ ββ
ββ Do you wish to print 1365004233.user-add.masikh.ps? [y|n] ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
You almost always want to print this account form. If you choose to do so, a list of available CUPS printers will be presented. Select your printer of choice and printout the account-form.
E.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Print account form ββ
ββ ββ
ββ Queue Location ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ hp-119-bw Snellius, kamer 119, PAND 2202 ββ
ββ hp-123-c Snellius, kamer 123, PAND 2202 ββ
ββ hp-144-c Snellius, kamer 144, PAND 2202 ββ
ββ hp-145-c Snellius, kamer 145, PAND 2202 ββ
ββ hp-153-bw Snellius, kamer 153, PAND 2202 ββ
ββ hp-155-bw Snellius, kamer 155, PAND 2202 ββ
ββ hp-156-bw Snellius, kamer 156, PAND 2202 ββ
ββ hp-304-bw Snellius, kamer 302, PAND 2202 ββ
ββ hp-410-bw Snellius, kamer 410, PAND 2202 ββ
ββ hp-57-bw Snellius, kamer 57, PAND 2202 ββ
ββ hp204 Snellius, Kamer 204, PAND 2202 ββ
ββ hp206a Snellius, Kamer 206a, PAND 2202 ββ
ββ ββ
βββ[Usage: [ESC] quits, [arrows] select printer, [enter] use selected printer]ββ
βββ[Modify > User > Add user]βββββββββββββββββββββββββββββββββββββββββββββββββββ
NOTE: If you press enter this screen will be erased and there are NO means to retrieve the password (unless you print the account form by hand!!!)
NOTE: Per default, no netgroups will be assigned to this new user. If you wish, you can assign these memberships separately.
This helper enables you to delete a single user. When a user is deleted an undo-file is created. From this undo-file you can re-create the user, its (net-)group membership and its autofs exports.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Delete user ββ
ββ ββ
ββ Enter username: masikh ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Delete user]ββββββββββββββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'NO such user!'
NOTE: A transaction is added to the transaction list afterward.
With this helper you can reset a user its password.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Change password ββ
ββ ββ
ββ Enter username: masikh ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Change user password]βββββββββββββββββββββββββββββββββββββββ
Result:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Change password ββ
ββ ββ
ββ Enter username: masikh ββ
ββ ββ
ββ Password reset: OK ββ
ββ New Password: nPJEEa\qC- ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Change user password]βββββββββββββββββββββββββββββββββββββββ
With this helper its possible to change EVERY attribute of a given user. Yes even the username itself! (mod(r)dn in LDAP terms)
Thus you can change:
EmployeeType, uid, loginShell, sn, uidNumber, gidNumber, gecos, employeeNumber, homeDirectory, automountInformation and cn.
If you try to rename an username to an existing user, an error will be reported. E.g.
ERROR Moving dn: uid=masikh,ou=People,dc=unix,dc=example,dc=nl REASON:
Already exists
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Modify user attributes ββ
ββ ββ
ββ Enter username: masikh ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Modify user attributes]βββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Modify user attributes ββ
ββ ββ
ββ*employeeType: Student ββ
ββ uid: masikh ββ
ββ*loginShell: /bin/bash ββ
ββ*uidNumber: 6929 ββ
ββ*employeeNumber: 500.6929 ββ
ββ*gidNumber: 500 ββ
ββ*gecos: Masikh Masih ββ
ββ*sn: Masih ββ
ββ homeDirectory: /home/masikh ββ
ββ*automountInformation: -soft,intr,nosuid nfs-server04:/users/14/student:& ββ
ββ*cn: Masikh ββ
ββ ββ
βββ[Press [ESC] when done, [arrow keys] to select and [enter] to edit.]βββββββββ
βββ[Modify > User > Modify user attributes]βββββββββββββββββββββββββββββββββββββ
Change each attribute you wish and press escape when done. MPLS will ask you if you'd like to commit these changes. E.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Modify user attributes ββ
ββ ββ
ββ*employeeType: Student ββ
ββ uid: masikh ββ
ββ*loginShell: /bin/bash ββ
ββ*uidNumber: 6929 ββ
ββ*employeeNumber: 500.6929 ββ
ββ*gidNumber: 500 ββ
ββ*gecos: Masikh Masih ββ
ββ*sn: Masih ββ
ββ homeDirectory: /home/masikh ββ
ββ*automountInformation: -soft,intr,nosuid nfs-server04:/users/14/student:& ββ
ββ*cn: Masikh ββ
ββ ββ
ββ Do you wish to commit the changes? [y|n] ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Modify user attributes]βββββββββββββββββββββββββββββββββββββ
NOTE: An astrix * means a changed attribute.
With this helper you can add users in a batch process. You can cut&paste a list of users from a text file into MPLS and create these users in one blow. The source file follows a strict format:
studentnumber:firstname:initials:preposition:surname
E.g. 1292285:Andrada:A.I.::Bacaoanu
The last line is a single "." at the beginning of the line stating the end of the list of new users.
If an username is already taken, an incrementing number will be added to this username.
E.g. if abacaoan is taken abacaoan1 will be the next username to try.
After you pasted the users, two more questions will be asked. * EmployeeType (this will divine the primary group) * automountInformation (where is the NFS homedir of the new user(s)
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add users ββ
ββ ββ
ββ File format: studentnumber:firstname:initials:preposition:surname ββ
ββ ββ
ββ e.g.: 1046853:Ran:R.::An ββ
ββ 1286781:Emmanuel:E.:A:Appiah ββ
ββ 1292285:Andrada:A.I.::Bacaoanu ββ
ββ . <- End of file marker!!! ββ
ββ ββ
ββ Paste file contents here: 2 lines pasted, 0 lines discarded. ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ βββ
βββ βββ
βββ12345123:Robert:RDA::Nagtegaal βββ
βββ12342132:Dirk:DS::Stoop βββ
βββ. βββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Add multiple users]βββββββββββββββββββββββββββββββββββββββββ
After this two questions about employeeType and automountInformation will be asked:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add users ββ
ββ ββ
ββ*employeeType: Guest ββ
ββ*automountInformation: -soft,intr,nosuid nfs-server02:/users/15/student:& ββ
ββ ββ
βββ[Press [ESC] when done, [arrow keys] to select and [enter] to edit.]βββββββββ
βββ[Modify > User > Add multiple users]βββββββββββββββββββββββββββββββββββββββββ
Press escape when all is filled in correctly. A do you which to commit question will be asked. E.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add users ββ
ββ ββ
ββ*employeeType: Gast ββ
ββ*automountInformation: -soft,intr,nosuid nfs-server06:/users/15/student:& ββ
ββ ββ
ββ Ready to add 2 users, do you wish to continue? [y|n] ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > User > Add multiple users]βββββββββββββββββββββββββββββββββββββββββ
Finally you'll be asked if you wish to print the new account-forms on a CUPS printer of your choice (Highly recommended to answer yes!!!)
Example:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Print account form ββ
ββ ββ
ββ Queue Location ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ISSC_P2202_17 Snellius, kamer 47, PAND 2202 ββ
ββ ISSC_P2202_19 Snellius, kamer 47, PAND 2202 ββ
ββ ISSC_P2202_20 Snellius, kamer 40, PAND 2202 ββ
ββ ISSC_P2202_24 Snellius, kamer 404, PAND 2202 ββ
ββ ISSC_P2202_33 Snellius, kamer 56, PAND 2202 ββ
ββ hp-106-bw Snellius, kamer 106, PAND 2202 ββ
ββ hp-119-bw Snellius, kamer 119, PAND 2202 ββ
ββ hp-123-c Snellius, kamer 123, PAND 2202 ββ
ββ hp-144-c Snellius, kamer 144, PAND 2202 ββ
ββ hp-145-c Snellius, kamer 145, PAND 2202 ββ
ββ hp-153-bw Snellius, kamer 153, PAND 2202 ββ
ββ hp-155-bw Snellius, kamer 155, PAND 2202 ββ
ββ ββ
βββ[Usage: [ESC] quits, [arrows] select printer, [enter] use selected printer]ββ
βββ[Modify > User > Add multiple users]βββββββββββββββββββββββββββββββββββββββββ
In this submenu you can add or delete a group, modify group properties. You can also add or delete a user to/from a group.
With this helper you can add a new group to the LDAP database. A group is either a primairy or secundairy group.
NOTE: If you add a primairy group make sure you reflect these changes in the MPLS environment file also. See chapter 'Configuring MPLS for your environment'
If you try to add an existing group, an error is reported.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add new group ββ
ββ ββ
ββ Enter group: csdale ββ
ββ Is this group a primairy group?: [y/n] ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Group > Add new group]βββββββββββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'Group csdale already exist!'
With this helper you can remove a group from the LDAP database. If you deleted the wrong group the undo feature (transaction logs) will enable you to fully revert that transaction. With fully is ment, re-add the group PLUS its group-members.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Delete group ββ
ββ ββ
ββ Enter group: csdale ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Group > Delete group]ββββββββββββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'No such group'
With this helper you can modify group attributes. These attributes are: cn (the group name), gidNumber and the group password.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Modify group attributes ββ
ββ ββ
ββ Enter group: csdale ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Group > Modify group]ββββββββββββββββββββββββββββββββββββββββββββββ
In a new screen you can change the group attributes: e.g.
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Modifying group csdale ββ
ββ ββ
ββ cn csdale ββ
ββ gidNumber 11158 ββ
ββ userPassword {crypt}* ββ
ββ ββ
βββ[Use [ESC] when done or to quit, [arrow] selects item, [enter] modify item]ββ
βββ[Modify > Group > Modify group]ββββββββββββββββββββββββββββββββββββββββββββββ
If you're content with the modifications, press escape and commit the changes by answering 'y' on the question 'Do you wish to commit changes? [y|[n]]'.
NOTE: This transaction is logged and revertable
With this helper you can add a user to a group.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Link user to group ββ
ββ ββ
ββ Enter username: masikh ββ
ββ Enter group: csdale ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Group > Link user to group]ββββββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'User masikh already in group csdale'
With this helper you can remove a user from a group
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Unlink user from group ββ
ββ ββ
ββ Enter username: masikh ββ
ββ Enter group: csdale ββ
ββ ββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Group > Unlink user from group]ββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'User masikh is not a member of group csdale!'
In this submenu you can add or delete a netgroup. Furthermore you can add or remove an entity from a netgroup. An entity is either a user, host or netgroup itself.
With this helper you can add a new netgroup to the LDAP database.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Add new netgroup ββ
ββ ββ
ββ Enter netgroup: lgm ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Netgroup > Add new netgroup]βββββββββββββββββββββββββββββββββββββββ
Result:
'netgroup lgm created' or 'ERROR: netgroup lgm already exists!'
With this helper you can remove a netgroup from the LDAP database.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Delete netgroup ββ
ββ ββ
ββ Enter netgroup: lgm ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Netgroup > Delete netgroup]ββββββββββββββββββββββββββββββββββββββββ
Result:
'OK' or 'ERROR: netgroup lgm does not exists!'
With this helper you can add a user to a netgroup.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Link user to netgroup ββ
ββ ββ
ββ Enter username: masikh ββ
ββ Enter netgroup: users-sil ββ
ββ ββ
ββ ERROR: user masikh does not exists! ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Netgroup > Link entity to netgroup > User to netgroup]βββββββββββββ
Result:
'OK' or 'ERROR: netgroup users-sil does not exists!' or 'ERROR: user masikh does not exists!'
With this helper you can add a hostname to a netgroup.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Link host to netgroup ββ
ββ ββ
ββ Enter hostname: stoeidoos ββ
ββ Enter netgroup: sil ββ
ββ ββ
ββ OK ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Netgroup > Link entity to netgroup > Host to netgroup]βββββββββββββ
Result:
'OK' or 'ERROR: netgroup sil does not exists!'
With this helper you can add a netgroup to a netgroup (Yes, recursion!) It gives you the possibility to nest netgroups. This reduces the amount of netgroups needed to run you business.
Example usage:
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
β Search Modify Login Help Exit β
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
ββ ββ
ββ Link netgroup to netgroup ββ
ββ ββ
ββ Enter parent netgroup: silver ββ
ββ Enter child netgroup: stoeidoos ββ
ββ ββ
βββ[Press any key to continue]ββββββββββββββββββββββββββββββββββββββββββββββββββ
βββ[Modify > Netgroup > Link entity to netgroup > Netgroup to netgroup]βββββββββ
Result:
'OK' or 'ERROR: netgroup .... does not exist!'
UNIX user:
UNIX is a multiuser system. This means that separate users can work simultaneously on the same hardware. In order to distinct between these users, the concept of a username is devised. A username is a way to identify which files or processes belongs to who.
UNIX group:
When many users exist on a system it becomes hard to see which role each user has. There might be staff members, guests etc.. The group concept is a convenient way to differentiate between types of users. For instance you can make the groups 'staff', 'students' and 'guest' and place users in their respective group. In this way it's much more easy to distinguish between users.
UNIX netgroup:
A netgroup defines a network-wide group of hosts and users. Use a netgroup to restrict access to shared NFS file systems and to restrict remote login and shell access.
Network groups are stored in a network information services, such as LDAP, NIS, or NIS+, NOT in a local file.
Author: | Robert Nagtegaal |
E-mail: | robert@liacs.nl, masikh@gmail.com |
Copyright: | Copyright 2013 Robert Nagtegaal |
Robert Nagtegaal masikh@gmail.com | |
This program is distributed under the terms of the GNU | |
General Public License (or the Lesser GPL) | |
Thanks to: | Maartje Mulder (For putting up with all my absence) |
Kristian Rietveld (Teaching python) | |
Mattias Holm (Advice) | |
Maarten Derickx (Advice) |