194 lines
6.0 KiB
Plaintext
194 lines
6.0 KiB
Plaintext
'\" t
|
|
.\" Title: pwconv
|
|
.\" Author: Marek Micha\(/lkiewicz
|
|
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
|
|
.\" Date: 02.01.2022
|
|
.\" Manual: Befehle zur Systemverwaltung
|
|
.\" Source: shadow-utils 4.11.1
|
|
.\" Language: German
|
|
.\"
|
|
.TH "PWCONV" "8" "02.01.2022" "shadow\-utils 4\&.11\&.1" "Befehle zur Systemverwaltung"
|
|
.\" -----------------------------------------------------------------
|
|
.\" * Define some portability stuff
|
|
.\" -----------------------------------------------------------------
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.\" http://bugs.debian.org/507673
|
|
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.ie \n(.g .ds Aq \(aq
|
|
.el .ds Aq '
|
|
.\" -----------------------------------------------------------------
|
|
.\" * set default formatting
|
|
.\" -----------------------------------------------------------------
|
|
.\" disable hyphenation
|
|
.nh
|
|
.\" disable justification (adjust text to left margin only)
|
|
.ad l
|
|
.\" -----------------------------------------------------------------
|
|
.\" * MAIN CONTENT STARTS HERE *
|
|
.\" -----------------------------------------------------------------
|
|
.SH "NAME"
|
|
pwconv, pwunconv, grpconv, grpunconv \- konvertiert zu oder von Shadow\-Passw\(:ortern und \-gruppen
|
|
.SH "\(:UBERSICHT"
|
|
.HP \w'\fBpwconv\fR\ 'u
|
|
\fBpwconv\fR [\fIOptionen\fR]
|
|
.HP \w'\fBpwunconv\fR\ 'u
|
|
\fBpwunconv\fR [\fIOptionen\fR]
|
|
.HP \w'\fBgrpconv\fR\ 'u
|
|
\fBgrpconv\fR [\fIOptionen\fR]
|
|
.HP \w'\fBgrpunconv\fR\ 'u
|
|
\fBgrpunconv\fR [\fIOptionen\fR]
|
|
.SH "BESCHREIBUNG"
|
|
.PP
|
|
The
|
|
\fBpwconv\fR
|
|
command creates
|
|
\fIshadow\fR
|
|
from
|
|
\fIpasswd\fR
|
|
and an optionally existing
|
|
\fIshadow\fR\&.
|
|
.PP
|
|
The
|
|
\fBpwunconv\fR
|
|
command creates
|
|
\fIpasswd\fR
|
|
from
|
|
\fIpasswd\fR
|
|
and
|
|
\fIshadow\fR
|
|
and then removes
|
|
\fIshadow\fR\&.
|
|
.PP
|
|
The
|
|
\fBgrpconv\fR
|
|
command creates
|
|
\fIgshadow\fR
|
|
from
|
|
\fIgroup\fR
|
|
and an optionally existing
|
|
\fIgshadow\fR\&.
|
|
.PP
|
|
The
|
|
\fBgrpunconv\fR
|
|
command creates
|
|
\fIgroup\fR
|
|
from
|
|
\fIgroup\fR
|
|
and
|
|
\fIgshadow\fR
|
|
and then removes
|
|
\fIgshadow\fR\&.
|
|
.PP
|
|
These four programs all operate on the normal and shadow password and group files:
|
|
/etc/passwd,
|
|
/etc/group,
|
|
/etc/shadow, and
|
|
/etc/gshadow\&.
|
|
.PP
|
|
Each program acquires the necessary locks before conversion\&.
|
|
\fBpwconv\fR
|
|
and
|
|
\fBgrpconv\fR
|
|
are similar\&. First, entries in the shadowed file which don\*(Aqt exist in the main file are removed\&. Then, shadowed entries which don\*(Aqt have `x\*(Aq as the password in the main file are updated\&. Any missing shadowed entries are added\&. Finally, passwords in the main file are replaced with `x\*(Aq\&. These programs can be used for initial conversion as well to update the shadowed file if the main file is edited by hand\&.
|
|
.PP
|
|
\fBpwconv\fR
|
|
will use the values of
|
|
\fIPASS_MIN_DAYS\fR,
|
|
\fIPASS_MAX_DAYS\fR, and
|
|
\fIPASS_WARN_AGE\fR
|
|
from
|
|
/etc/login\&.defs
|
|
when adding new entries to
|
|
/etc/shadow\&.
|
|
.PP
|
|
Likewise
|
|
\fBpwunconv\fR
|
|
and
|
|
\fBgrpunconv\fR
|
|
are similar\&. Passwords in the main file are updated from the shadowed file\&. Entries which exist in the main file but not in the shadowed file are left alone\&. Finally, the shadowed file is removed\&. Some password aging information is lost by
|
|
\fBpwunconv\fR\&. It will convert what it can\&.
|
|
.SH "OPTIONEN"
|
|
.PP
|
|
The options which apply to the
|
|
\fBpwconv\fR,
|
|
\fBpwunconv\fR,
|
|
\fBgrpconv\fR, and
|
|
\fBgrpunconv\fR
|
|
commands are:
|
|
.PP
|
|
\fB\-h\fR, \fB\-\-help\fR
|
|
.RS 4
|
|
zeigt die Hilfe an und beendet das Programm
|
|
.RE
|
|
.PP
|
|
\fB\-R\fR, \fB\-\-root\fR\ \&\fICHROOT_DIR\fR
|
|
.RS 4
|
|
Apply changes in the
|
|
\fICHROOT_DIR\fR
|
|
directory and use the configuration files from the
|
|
\fICHROOT_DIR\fR
|
|
directory\&.
|
|
.RE
|
|
.SH "FEHLER"
|
|
.PP
|
|
Errors in the password or group files (such as invalid or duplicate entries) may cause these programs to loop forever or fail in other strange ways\&. Please run
|
|
\fBpwck\fR
|
|
and
|
|
\fBgrpck\fR
|
|
to correct any such errors before converting to or from shadow passwords or groups\&.
|
|
.SH "KONFIGURATION"
|
|
.PP
|
|
The following configuration variable in
|
|
/etc/login\&.defs
|
|
changes the behavior of
|
|
\fBgrpconv\fR
|
|
and
|
|
\fBgrpunconv\fR:
|
|
.PP
|
|
\fBMAX_MEMBERS_PER_GROUP\fR (number)
|
|
.RS 4
|
|
Maximum members per group entry\&. When the maximum is reached, a new group entry (line) is started in
|
|
/etc/group
|
|
(with the same name, same password, and same GID)\&.
|
|
.sp
|
|
Der Standardwert ist 0, was zur Folge hat, dass die Anzahl der Mitglieder einer Gruppe nicht begrenzt ist\&.
|
|
.sp
|
|
Diese F\(:ahigkeit (der aufgeteilten Gruppe) erm\(:oglicht es, die Zeilenl\(:ange in der Gruppendatei zu begrenzen\&. Damit kann sichergestellt werden, dass die Zeilen f\(:ur NIS\-Gruppen nicht l\(:anger als 1024 Zeichen sind\&.
|
|
.sp
|
|
Falls Sie eine solche Begrenzung ben\(:otigen, k\(:onnen Sie 25 verwenden\&.
|
|
.sp
|
|
Hinweis: Aufgeteilte Gruppen werden m\(:oglicherweise nicht von allen Werkzeugen unterst\(:utzt, selbst nicht aus der Shadow\-Werkzeugsammlung\&. Sie sollten diese Variable nur setzen, falls Sie zwingend darauf angewiesen sind\&.
|
|
.RE
|
|
.PP
|
|
The following configuration variables in
|
|
/etc/login\&.defs
|
|
change the behavior of
|
|
\fBpwconv\fR:
|
|
.PP
|
|
\fBPASS_MAX_DAYS\fR (number)
|
|
.RS 4
|
|
Die maximale Anzahl von Tagen, f\(:ur die ein Passwort verwendet werden darf\&. Wenn das Passwort \(:alter ist, wird ein Wechsel des Passworts erzwungen\&. Falls nicht angegeben, wird \-1 angenommen (was zur Folge hat, dass diese Beschr\(:ankung abgeschaltet ist)\&.
|
|
.RE
|
|
.PP
|
|
\fBPASS_MIN_DAYS\fR (number)
|
|
.RS 4
|
|
The minimum number of days allowed between password changes\&. Any password changes attempted sooner than this will be rejected\&. If not specified, 0 will be assumed (which disables the restriction)\&.
|
|
.RE
|
|
.PP
|
|
\fBPASS_WARN_AGE\fR (number)
|
|
.RS 4
|
|
Die Anzahl von Tagen, an denen der Benutzer vorgewarnt wird, bevor das Passwort verf\(:allt\&. Eine Null bedeutet, dass eine Warnung nur am Tag des Verfalls ausgegeben wird\&. Ein negativer Wert bedeutet, dass keine Vorwarnung erfolgt\&. Falls nicht angegeben, wird keine Vorwarnung ausgegeben\&.
|
|
.RE
|
|
.SH "DATEIEN"
|
|
.PP
|
|
/etc/login\&.defs
|
|
.RS 4
|
|
Konfiguration der Shadow\-Passwort\-Werkzeugsammlung
|
|
.RE
|
|
.SH "SIEHE AUCH"
|
|
.PP
|
|
\fBgrpck\fR(8),
|
|
\fBlogin.defs\fR(5),
|
|
\fBpwck\fR(8)\&.
|