Siemens V4.0 7.3.3 Editing saved resources and access permissions (accadm)

Tools for special tasks System administrator tools

Product Manual U7613-J-Z815-6-76

Saving / restoring of an ACL database with SIDs makes sense only within the

domain in which they have been created. After a new installation or after a change

of the user/group configuration, the internal representation of the same name has

a different SID.

Saving / restoring beyond domains and beyond installations is possible b y using

option -n.

Restoring an ACL database saved with SIDs of another domain or for users which

have been deleted and created again in the meantime can destroy access permis-

sions.

Errors:

Error messages are written to the screen if errors occur; additional error messages may be

written to the backup files to enable an internal investigation to take place.

7.3.3 Editing saved resources and access permissions (accadm)

The accadm tool is used to edit resources and their access permissions. The following

options are available.

Syntax:

accadm [-?|help] [-d <resource_name> | -r | -G | -E |

-S [<backup file>] | -P | -Pg |

-Fs [<mountpoint>] | -Fe <mountpoint> |

-Fp <mountpoint> | -Fd <mountpoint> ]

-d Deletes (’d’elete) the physical entry in the ACL database for the resource

<resource_name>

-r Removes (’r’emove) access permissions for resources that are no longer available

from the ACL database by invoking acladm -P

-G /var/opt/lanman/etc/accget (acc��g’et) is invoked

-E Enumerates (’e’numerate) the content of /var/opt/lanman/etc/accadm.dat (standard

function, if accadm is invoked without options)

-S Shares are created with the content of <backup file> e.g. /tmp/accadm.dat.old.

If no <backup file> is specified, SHARES are created with the content of

/var/opt/lanman/etc/accadm.dat.