Tools for special tasks

System administrator tools

i

!

Errors:

Saving / restoring of an ACL database with SIDs makes sense only within the domain in which they have been created. After a new installation or after a change of the user/group configuration, the internal representation of the same name has a different SID.

Saving / restoring beyond domains and beyond installations is possible by using option -n.

Restoring an ACL database saved with SIDs of another domain or for users which have been deleted and created again in the meantime can destroy access permis- sions.

Error messages are written to the screen if errors occur; additional error messages may be written to the backup files to enable an internal investigation to take place.

7.3.3 Editing saved resources and access permissions (accadm)

The accadm tool is used to edit resources and their access permissions. The following options are available.

Syntax:

 

 

 

y s:Pu s:

<resource_name> ::\

:X

:k s<backup file>u

 

 

:[ s <mountpoint>u

<mountpoint>

:[

<mountpoint> :[

<mountpoint>

u

-dDeletes (’d’elete) the physical entry in the ACL database for the resource <resource_name>

-rRemoves (’r’emove) access permissions for resources that are no longer available from the ACL database by invoking acladm -P

-G /var/opt/lanman/etc/accget (acc’g’et) is invoked

-EEnumerates (’e’numerate) the content of /var/opt/lanman/etc/accadm.dat (standard function, if accadm is invoked without options)

-SShares are created with the content of <backup file> e.g. /tmp/accadm.dat.old. If no <backup file> is specified, SHARES are created with the content of

/var/opt/lanman/etc/accadm.dat.

Product Manual

U7613-J-Z815-6-76

Page 154
Image 154
Siemens V4.0 Editing saved resources and access permissions accadm, Errors, Resourcename \ Sbackup file u Mountpoint u