475 lines
14 KiB
Plaintext
475 lines
14 KiB
Plaintext
'\" t
|
|
.\" Title: usermod
|
|
.\" Author: Julianne Frances Haugh
|
|
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
|
|
.\" Date: 01/12/2019
|
|
.\" Manual: Commandes de gestion du syst\(`eme
|
|
.\" Source: shadow-utils 4.8
|
|
.\" Language: French
|
|
.\"
|
|
.TH "USERMOD" "8" "01/12/2019" "shadow\-utils 4\&.8" "Commandes de gestion du syst\(`em"
|
|
.\" -----------------------------------------------------------------
|
|
.\" * Define some portability stuff
|
|
.\" -----------------------------------------------------------------
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.\" http://bugs.debian.org/507673
|
|
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.ie \n(.g .ds Aq \(aq
|
|
.el .ds Aq '
|
|
.\" -----------------------------------------------------------------
|
|
.\" * set default formatting
|
|
.\" -----------------------------------------------------------------
|
|
.\" disable hyphenation
|
|
.nh
|
|
.\" disable justification (adjust text to left margin only)
|
|
.ad l
|
|
.\" -----------------------------------------------------------------
|
|
.\" * MAIN CONTENT STARTS HERE *
|
|
.\" -----------------------------------------------------------------
|
|
.SH "NOM"
|
|
usermod \- Modifier un compte utilisateur
|
|
.SH "SYNOPSIS"
|
|
.HP \w'\fBusermod\fR\ 'u
|
|
\fBusermod\fR [\fIoptions\fR] \fILOGIN\fR
|
|
.SH "DESCRIPTION"
|
|
.PP
|
|
The
|
|
\fBusermod\fR
|
|
command modifies the system account files to reflect the changes that are specified on the command line\&.
|
|
.SH "OPTIONS"
|
|
.PP
|
|
The options which apply to the
|
|
\fBusermod\fR
|
|
command are:
|
|
.PP
|
|
\fB\-a\fR, \fB\-\-append\fR
|
|
.RS 4
|
|
Add the user to the supplementary group(s)\&. Use only with the
|
|
\fB\-G\fR
|
|
option\&.
|
|
.RE
|
|
.PP
|
|
\fB\-b\fR, \fB\-\-badnames\fR
|
|
.RS 4
|
|
Allow names that do not conform to standards\&.
|
|
.RE
|
|
.PP
|
|
\fB\-b\fR, \fB\-\-badnames\fR
|
|
.RS 4
|
|
Allow names that do not conform to standards\&.
|
|
.RE
|
|
.PP
|
|
\fB\-c\fR, \fB\-\-comment\fR\ \&\fICOMMENT\fR
|
|
.RS 4
|
|
The new value of the user\*(Aqs password file comment field\&. It is normally modified using the
|
|
\fBchfn\fR(1)
|
|
utility\&.
|
|
.RE
|
|
.PP
|
|
\fB\-d\fR, \fB\-\-home\fR\ \&\fIHOME_DIR\fR
|
|
.RS 4
|
|
Le nouveau r\('epertoire personnel de l\*(Aqutilisateur\&.
|
|
.sp
|
|
If the
|
|
\fB\-m\fR
|
|
option is given, the contents of the current home directory will be moved to the new home directory, which is created if it does not already exist\&.
|
|
.RE
|
|
.PP
|
|
\fB\-e\fR, \fB\-\-expiredate\fR\ \&\fIEXPIRE_DATE\fR
|
|
.RS 4
|
|
The date on which the user account will be disabled\&. The date is specified in the format
|
|
\fIYYYY\-MM\-DD\fR\&.
|
|
.sp
|
|
An empty
|
|
\fIEXPIRE_DATE\fR
|
|
argument will disable the expiration of the account\&.
|
|
.sp
|
|
This option requires a
|
|
/etc/shadow
|
|
file\&. A
|
|
/etc/shadow
|
|
entry will be created if there were none\&.
|
|
.RE
|
|
.PP
|
|
\fB\-f\fR, \fB\-\-inactive\fR\ \&\fIINACTIVE\fR
|
|
.RS 4
|
|
Nombre de jours suivant la fin de validit\('e d\*(Aqun mot de passe apr\(`es lequel le compte est d\('efinitivement d\('esactiv\('e\&.
|
|
.sp
|
|
Une valeur de 0 d\('esactive le compte d\(`es que le mot de passe a d\('epass\('e sa fin de validit\('e, et une valeur de \-1 d\('esactive cette fonctionnalit\('e\&.
|
|
.sp
|
|
This option requires a
|
|
/etc/shadow
|
|
file\&. A
|
|
/etc/shadow
|
|
entry will be created if there were none\&.
|
|
.RE
|
|
.PP
|
|
\fB\-g\fR, \fB\-\-gid\fR\ \&\fIGROUP\fR
|
|
.RS 4
|
|
Nom du groupe ou identifiant num\('erique du groupe de connexion initial de l\*(Aqutilisateur\&. Le groupe doit exister\&.
|
|
.sp
|
|
Tout fichier du r\('epertoire personnel de l\*(Aqutilisateur appartenant au groupe primaire pr\('ec\('edent de l\*(Aqutilisateur appartiendra \(`a ce nouveau groupe\&.
|
|
.sp
|
|
Le groupe propri\('etaire des fichiers en dehors du r\('epertoire personnel de l\*(Aqutilisateur doit \(^etre modifi\('e manuellement\&.
|
|
.RE
|
|
.PP
|
|
\fB\-G\fR, \fB\-\-groups\fR\ \&\fIGROUP1\fR[\fI,GROUP2,\&.\&.\&.\fR[\fI,GROUPN\fR]]]
|
|
.RS 4
|
|
A list of supplementary groups which the user is also a member of\&. Each group is separated from the next by a comma, with no intervening whitespace\&. The groups are subject to the same restrictions as the group given with the
|
|
\fB\-g\fR
|
|
option\&.
|
|
.sp
|
|
If the user is currently a member of a group which is not listed, the user will be removed from the group\&. This behaviour can be changed via the
|
|
\fB\-a\fR
|
|
option, which appends the user to the current supplementary group list\&.
|
|
.RE
|
|
.PP
|
|
\fB\-l\fR, \fB\-\-login\fR\ \&\fINEW_LOGIN\fR
|
|
.RS 4
|
|
The name of the user will be changed from
|
|
\fILOGIN\fR
|
|
to
|
|
\fINEW_LOGIN\fR\&. Nothing else is changed\&. In particular, the user\*(Aqs home directory or mail spool should probably be renamed manually to reflect the new login name\&.
|
|
.RE
|
|
.PP
|
|
\fB\-L\fR, \fB\-\-lock\fR
|
|
.RS 4
|
|
Lock a user\*(Aqs password\&. This puts a \*(Aq!\*(Aq in front of the encrypted password, effectively disabling the password\&. You can\*(Aqt use this option with
|
|
\fB\-p\fR
|
|
or
|
|
\fB\-U\fR\&.
|
|
.sp
|
|
Note: if you wish to lock the account (not only access with a password), you should also set the
|
|
\fIEXPIRE_DATE\fR
|
|
to
|
|
\fI1\fR\&.
|
|
.RE
|
|
.PP
|
|
\fB\-m\fR, \fB\-\-move\-home\fR
|
|
.RS 4
|
|
D\('eplacer le contenu du r\('epertoire personnel de l\*(Aqutilisateur vers un nouvel emplacement\&.
|
|
.sp
|
|
This option is only valid in combination with the
|
|
\fB\-d\fR
|
|
(or
|
|
\fB\-\-home\fR) option\&.
|
|
.sp
|
|
\fBusermod\fR
|
|
will try to adapt the ownership of the files and to copy the modes, ACL and extended attributes, but manual changes might be needed afterwards\&.
|
|
.RE
|
|
.PP
|
|
\fB\-o\fR, \fB\-\-non\-unique\fR
|
|
.RS 4
|
|
When used with the
|
|
\fB\-u\fR
|
|
option, this option allows to change the user ID to a non\-unique value\&.
|
|
.RE
|
|
.PP
|
|
\fB\-p\fR, \fB\-\-password\fR\ \&\fIPASSWORD\fR
|
|
.RS 4
|
|
The encrypted password, as returned by
|
|
\fBcrypt\fR(3)\&.
|
|
.sp
|
|
\fBNote:\fR
|
|
This option is not recommended because the password (or encrypted password) will be visible by users listing the processes\&.
|
|
.sp
|
|
Il est n\('ecessaire de v\('erifier si le mot de passe respecte la politique de mots de passe du syst\(`eme\&.
|
|
.RE
|
|
.PP
|
|
\fB\-R\fR, \fB\-\-root\fR\ \&\fICHROOT_DIR\fR
|
|
.RS 4
|
|
Apply changes in the
|
|
\fICHROOT_DIR\fR
|
|
directory and use the configuration files from the
|
|
\fICHROOT_DIR\fR
|
|
directory\&.
|
|
.RE
|
|
.PP
|
|
\fB\-P\fR, \fB\-\-prefix\fR\ \&\fIPREFIX_DIR\fR
|
|
.RS 4
|
|
Apply changes in the
|
|
\fIPREFIX_DIR\fR
|
|
directory and use the configuration files from the
|
|
\fIPREFIX_DIR\fR
|
|
directory\&. This option does not chroot and is intended for preparing a cross\-compilation target\&. Some limitations: NIS and LDAP users/groups are not verified\&. PAM authentication is using the host files\&. No SELINUX support\&.
|
|
.RE
|
|
.PP
|
|
\fB\-s\fR, \fB\-\-shell\fR\ \&\fISHELL\fR
|
|
.RS 4
|
|
Nom du nouvel interpr\('eteur de commandes initial (\(Fo\ \&login shell\ \&\(Fc) de l\*(Aqutilisateur\&. Si ce champ est vide, le syst\(`eme s\('electionnera l\*(Aqinterpr\('eteur de commandes initial par d\('efaut\&.
|
|
.RE
|
|
.PP
|
|
\fB\-u\fR, \fB\-\-uid\fR\ \&\fIUID\fR
|
|
.RS 4
|
|
La valeur num\('erique de l\*(Aqidentifiant de l\*(Aqutilisateur\&.
|
|
.sp
|
|
This value must be unique, unless the
|
|
\fB\-o\fR
|
|
option is used\&. The value must be non\-negative\&.
|
|
.sp
|
|
La bo\(^ite aux lettres et tous les fichiers poss\('ed\('es par l\*(Aqutilisateur et qui sont situ\('es dans son r\('epertoire personnel verront leur identifiant d\*(Aqutilisateur automatiquement modifi\('e\&.
|
|
.sp
|
|
Le propri\('etaire des fichiers en dehors du r\('epertoire personnel de l\*(Aqutilisateur doit \(^etre modifi\('e manuellement\&.
|
|
.sp
|
|
No checks will be performed with regard to the
|
|
\fBUID_MIN\fR,
|
|
\fBUID_MAX\fR,
|
|
\fBSYS_UID_MIN\fR, or
|
|
\fBSYS_UID_MAX\fR
|
|
from
|
|
/etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-U\fR, \fB\-\-unlock\fR
|
|
.RS 4
|
|
Unlock a user\*(Aqs password\&. This removes the \*(Aq!\*(Aq in front of the encrypted password\&. You can\*(Aqt use this option with
|
|
\fB\-p\fR
|
|
or
|
|
\fB\-L\fR\&.
|
|
.sp
|
|
Note: if you wish to unlock the account (not only access with a password), you should also set the
|
|
\fIEXPIRE_DATE\fR
|
|
(for example to
|
|
\fI99999\fR, or to the
|
|
\fBEXPIRE\fR
|
|
value from
|
|
/etc/default/useradd)\&.
|
|
.RE
|
|
.PP
|
|
\fB\-v\fR, \fB\-\-add\-subuids\fR\ \&\fIFIRST\fR\-\fILAST\fR
|
|
.RS 4
|
|
Ajoute une plage d\*(AqUIDs subalternes au compte de l\*(Aqutilisateur\&.
|
|
.sp
|
|
Vous pouvez indiquer plusieurs fois cette option, pour ajouter plusieurs plages de comptes utilisateurs\&.
|
|
.sp
|
|
No checks will be performed with regard to
|
|
\fBSUB_UID_MIN\fR,
|
|
\fBSUB_UID_MAX\fR, or
|
|
\fBSUB_UID_COUNT\fR
|
|
from /etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-V\fR, \fB\-\-del\-subuids\fR\ \&\fIFIRST\fR\-\fILAST\fR
|
|
.RS 4
|
|
Supprime une plage d\*(AqUids subalternes du compte de l\*(Aqutilisateur\&.
|
|
.sp
|
|
This option may be specified multiple times to remove multiple ranges to a users account\&. When both
|
|
\fB\-\-del\-subuids\fR
|
|
and
|
|
\fB\-\-add\-subuids\fR
|
|
are specified, the removal of all subordinate uid ranges happens before any subordinate uid range is added\&.
|
|
.sp
|
|
No checks will be performed with regard to
|
|
\fBSUB_UID_MIN\fR,
|
|
\fBSUB_UID_MAX\fR, or
|
|
\fBSUB_UID_COUNT\fR
|
|
from /etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-w\fR, \fB\-\-add\-subgids\fR\ \&\fIFIRST\fR\-\fILAST\fR
|
|
.RS 4
|
|
Ajoute une plage de gids subalternes au compte d\*(Aqun utilisateur\&.
|
|
.sp
|
|
Vous pouvez indiquer plusieurs fois cette option, pour ajouter plusieurs plages de comptes utilisateurs\&.
|
|
.sp
|
|
No checks will be performed with regard to
|
|
\fBSUB_GID_MIN\fR,
|
|
\fBSUB_GID_MAX\fR, or
|
|
\fBSUB_GID_COUNT\fR
|
|
from /etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-W\fR, \fB\-\-del\-subgids\fR\ \&\fIFIRST\fR\-\fILAST\fR
|
|
.RS 4
|
|
Supprime une plage de gids subalternes du compte de l\*(Aqutilisateur\&.
|
|
.sp
|
|
This option may be specified multiple times to remove multiple ranges to a users account\&. When both
|
|
\fB\-\-del\-subgids\fR
|
|
and
|
|
\fB\-\-add\-subgids\fR
|
|
are specified, the removal of all subordinate gid ranges happens before any subordinate gid range is added\&.
|
|
.sp
|
|
No checks will be performed with regard to
|
|
\fBSUB_GID_MIN\fR,
|
|
\fBSUB_GID_MAX\fR, or
|
|
\fBSUB_GID_COUNT\fR
|
|
from /etc/login\&.defs\&.
|
|
.RE
|
|
.PP
|
|
\fB\-Z\fR, \fB\-\-selinux\-user\fR\ \&\fISEUSER\fR
|
|
.RS 4
|
|
Le nouvel utilisateur SELinux utilis\('e pour la connexion de l\*(Aqutilisateur\&.
|
|
.sp
|
|
A blank
|
|
\fISEUSER\fR
|
|
will remove the SELinux user mapping for user
|
|
\fILOGIN\fR
|
|
(if any)\&.
|
|
.RE
|
|
.SH "AVERTISSEMENTS"
|
|
.PP
|
|
You must make certain that the named user is not executing any processes when this command is being executed if the user\*(Aqs numerical user ID, the user\*(Aqs name, or the user\*(Aqs home directory is being changed\&.
|
|
\fBusermod\fR
|
|
checks this on Linux\&. On other platforms it only uses utmp to check if the user is logged in\&.
|
|
.PP
|
|
You must change the owner of any
|
|
\fBcrontab\fR
|
|
files or
|
|
\fBat\fR
|
|
jobs manually\&.
|
|
.PP
|
|
Les modifications qui concernent NIS doivent \(^etre effectu\('ees sur le serveur NIS\&.
|
|
.SH "CONFIGURATION"
|
|
.PP
|
|
The following configuration variables in
|
|
/etc/login\&.defs
|
|
change the behavior of this tool:
|
|
.PP
|
|
\fBLASTLOG_UID_MAX\fR (number)
|
|
.RS 4
|
|
Highest user ID number for which the lastlog entries should be updated\&. As higher user IDs are usually tracked by remote user identity and authentication services there is no need to create a huge sparse lastlog file for them\&.
|
|
.sp
|
|
No
|
|
\fBLASTLOG_UID_MAX\fR
|
|
option present in the configuration means that there is no user ID limit for writing lastlog entries\&.
|
|
.RE
|
|
.PP
|
|
\fBMAIL_DIR\fR (string)
|
|
.RS 4
|
|
R\('epertoire d\*(Aqattente des courriels (\(Fo\ \&mail spool directory\ \&\(Fc)\&. Ce param\(`etre est n\('ecessaire pour manipuler les bo\(^ites \(`a lettres lorsque le compte d\*(Aqun utilisateur est modifi\('e ou supprim\('e\&. S\*(Aqil n\*(Aqest pas sp\('ecifi\('e, une valeur par d\('efaut d\('efinie \(`a la compilation est utilis\('ee\&.
|
|
.RE
|
|
.PP
|
|
\fBMAIL_FILE\fR (string)
|
|
.RS 4
|
|
D\('efinir l\*(Aqemplacement des bo\(^ites aux lettres des utilisateurs relativement \(`a leur r\('epertoire personnel\&.
|
|
.RE
|
|
.PP
|
|
The
|
|
\fBMAIL_DIR\fR
|
|
and
|
|
\fBMAIL_FILE\fR
|
|
variables are used by
|
|
\fBuseradd\fR,
|
|
\fBusermod\fR, and
|
|
\fBuserdel\fR
|
|
to create, move, or delete the user\*(Aqs mail spool\&.
|
|
.PP
|
|
If
|
|
\fBMAIL_CHECK_ENAB\fR
|
|
is set to
|
|
\fIyes\fR, they are also used to define the
|
|
\fBMAIL\fR
|
|
environment variable\&.
|
|
.PP
|
|
\fBMAX_MEMBERS_PER_GROUP\fR (number)
|
|
.RS 4
|
|
Maximum members per group entry\&. When the maximum is reached, a new group entry (line) is started in
|
|
/etc/group
|
|
(with the same name, same password, and same GID)\&.
|
|
.sp
|
|
La valeur par d\('efaut est 0, ce qui signifie qu\*(Aqil n\*(Aqy a pas de limites pour le nombre de membres dans un groupe\&.
|
|
.sp
|
|
Cette fonctionnalit\('e (groupe d\('ecoup\('e) permet de limiter la longueur des lignes dans le fichier de groupes\&. Ceci est utile pour s\*(Aqassurer que les lignes pour les groupes NIS ne sont pas plus grandes que 1024 caract\(`eres\&.
|
|
.sp
|
|
Si vous avez besoin de configurer cette limite, vous pouvez utiliser 25\&.
|
|
.sp
|
|
Remarque\ \&: les groupes d\('ecoup\('es ne sont peut\-\(^etre pas pris en charge par tous les outils (m\(^eme dans la suite d\*(Aqoutils Shadow)\&. Vous ne devriez pas utiliser cette variable, sauf si vous en avez vraiment besoin\&.
|
|
.RE
|
|
.PP
|
|
\fBSUB_GID_MIN\fR (number), \fBSUB_GID_MAX\fR (number), \fBSUB_GID_COUNT\fR (number)
|
|
.RS 4
|
|
If
|
|
/etc/subuid
|
|
exists, the commands
|
|
\fBuseradd\fR
|
|
and
|
|
\fBnewusers\fR
|
|
(unless the user already have subordinate group IDs) allocate
|
|
\fBSUB_GID_COUNT\fR
|
|
unused group IDs from the range
|
|
\fBSUB_GID_MIN\fR
|
|
to
|
|
\fBSUB_GID_MAX\fR
|
|
for each new user\&.
|
|
.sp
|
|
The default values for
|
|
\fBSUB_GID_MIN\fR,
|
|
\fBSUB_GID_MAX\fR,
|
|
\fBSUB_GID_COUNT\fR
|
|
are respectively 100000, 600100000 and 65536\&.
|
|
.RE
|
|
.PP
|
|
\fBSUB_UID_MIN\fR (number), \fBSUB_UID_MAX\fR (number), \fBSUB_UID_COUNT\fR (number)
|
|
.RS 4
|
|
If
|
|
/etc/subuid
|
|
exists, the commands
|
|
\fBuseradd\fR
|
|
and
|
|
\fBnewusers\fR
|
|
(unless the user already have subordinate user IDs) allocate
|
|
\fBSUB_UID_COUNT\fR
|
|
unused user IDs from the range
|
|
\fBSUB_UID_MIN\fR
|
|
to
|
|
\fBSUB_UID_MAX\fR
|
|
for each new user\&.
|
|
.sp
|
|
The default values for
|
|
\fBSUB_UID_MIN\fR,
|
|
\fBSUB_UID_MAX\fR,
|
|
\fBSUB_UID_COUNT\fR
|
|
are respectively 100000, 600100000 and 65536\&.
|
|
.RE
|
|
.SH "FICHIERS"
|
|
.PP
|
|
/etc/group
|
|
.RS 4
|
|
Informations sur les groupes\&.
|
|
.RE
|
|
.PP
|
|
/etc/gshadow
|
|
.RS 4
|
|
Informations s\('ecuris\('ees sur les groupes\&.
|
|
.RE
|
|
.PP
|
|
/etc/login\&.defs
|
|
.RS 4
|
|
Configuration de la suite des mots de passe cach\('es \(Fo\ \&shadow password\ \&\(Fc\&.
|
|
.RE
|
|
.PP
|
|
/etc/passwd
|
|
.RS 4
|
|
Informations sur les comptes des utilisateurs\&.
|
|
.RE
|
|
.PP
|
|
/etc/shadow
|
|
.RS 4
|
|
Informations s\('ecuris\('ees sur les comptes utilisateurs\&.
|
|
.RE
|
|
.PP
|
|
/etc/subgid
|
|
.RS 4
|
|
IDs des groupes subalternes d\*(Aqun utilisateur\&.
|
|
.RE
|
|
.PP
|
|
/etc/subuid
|
|
.RS 4
|
|
IDs de utilisateurs subalternes d\*(Aqun utilisateur\&.
|
|
.RE
|
|
.SH "VOIR AUSSI"
|
|
.PP
|
|
\fBchfn\fR(1),
|
|
\fBchsh\fR(1),
|
|
\fBpasswd\fR(1),
|
|
\fBcrypt\fR(3),
|
|
\fBgpasswd\fR(8),
|
|
\fBgroupadd\fR(8),
|
|
\fBgroupdel\fR(8),
|
|
\fBgroupmod\fR(8),
|
|
\fBlogin.defs\fR(5),
|
|
\fBsubgid\fR(5), \fBsubuid\fR(5),
|
|
\fBuseradd\fR(8),
|
|
\fBuserdel\fR(8)\&.
|