112

4Authenticate as an administrator by entering the following command, replacing adminusername with your administrator user name, and entering your administrator password when prompted:

> auth adminusername

5Create a new group, replacing officegroup with the new group account’s short name and specify the group ID, replacing 600 with the primary group ID.

> create officegroup PrimaryGroupID 600

6Review the settings of your new group by entering the following command, replacing officegroup with the new group account’s short name.

> read officegroup

dscl displays the settings for your new group account, similar to the following output:

apple-generateduid:4B3A5678-E9C1-2EC3-4567-891D234E5678 cn: officegroup

gidNumber: 600

objectClass: posixGroup apple-group extensibleObject top

AppleMetaNodeLocation: /LDAPv3/ipaddress

GeneratedUID:4B3A5678-E9C1-2EC3-4567-891D234E5678

PasswordPlus:********

PrimaryGroupID: 600

RecordName: officegroup

RecordType: dsRecTypeStandard:Groups

7Quit the dscl tool.

>quit

See the dscl man page for more information about using the dscl command-line tool.

Removing a Group Account

You can remove group accounts by using the dscl tool.

To remove a group account:

1Start the dscl tool in interactive mode, specifying the computer you are using as the source of directory service data:

$ dscl localhost

>

2Change the current folder to /LDAPv3/ipaddress/Groups by entering the path at the prompt:

> cd /LDAPv3/ipaddress/Groups

Replace ipaddress with the IP address of your directory server. If using a NetInfo directory domain, enter cd /NetInfo/root/Groups at the prompt.

Chapter 8 Working with Users and Groups

Page 112
Image 112
Apple Mac OS X Server manual Removing a Group Account, You can remove group accounts by using the dscl tool