1SMBLDAP-USERADD(8) User Contributed Perl Documentation SMBLDAP-USERADD(8)
2
3
4
6 smbldap-useradd - Create a new user
7
9 smbldap-useradd [-abinwPW] [-c comment] [-d home_dir] [-g
10 initial_group] [-m [-k skeleton_dir]] [-o user_ou] [-s shell] [-t time]
11 [-u uid] [-A canchange] [-B mustchange] [-C smbhome] [-D homedrive] [-E
12 scriptpath] [-F profilepath] [-G group[,...]] [-H acctflags] [-M
13 mailaddr[,...]] [-N givenname] [-O mailaddr[,...]] [-S surname] [-T
14 mailaddr[,...]] [-X encoding] [-Z name=value[,...]] login
15
17 Creating New Users The smbldap-useradd command creates a new user
18 account using the values specified on the command line and the default
19 values from the system and from the configuration files (in the
20 /etc/smbldap-tools directory).
21
22 For Samba users, rid is '2*uidNumber+1000', and sambaPrimaryGroupSID is
23 '$SID-2*gidNumber+1001', where $SID is the domain SID. Thus you may
24 want to use:
25
26 $ smbldap-useradd -a -g "Domain Admins" -u 500 Administrator
27
28 to create a domain administrator account (admin rid is 0x1F4 = 500 and
29 grouprid is 0x200 = 512).
30
31 Without any option, the account created will be a Unix (Posix) account.
32 The following options may be used to add information:
33
34 -a
35 The user will have a Samba account (and Unix).
36
37 -A
38 Can change password? 0 if no, 1 if yes.
39
40 -b
41 The user is an AIX account.
42
43 -B
44 Must change password? 0 if no, 1 if yes.
45
46 -c "comment"
47 The new user's comment field (gecos). This option is for gecos only!
48 To set as user's full name use the -N and -S options.
49
50 -C sambaHomePath
51 SMB home share, like '\\\\PDC-SRV\\homes'.
52
53 -d home_dir
54 The new user will be created using home_dir for the user's login
55 directory. The default is to append the login name to userHomePrefix
56 (defined in the configuration file) and use that as the login directory
57 name.
58
59 -D sambaHomeDrive
60 Letter associated with home share, like 'H:'.
61
62 -E sambaLogonScript
63 Relative to the [netlogon] share (DOS script to execute on login,
64 like 'foo.bat'.
65
66 -F sambaProfilePath
67 Profile directory, like '\\\\PDC-SRV\\profiles\\foo'.
68
69 -g initial_group
70 The group name or number of the user's initial login group. The
71 group name must exist. A group number must refer to an already existing
72 group. The default group number is defined in the configuration file
73 (defaultUserGid="513").
74
75 -G group,[...]
76 A list of supplementary groups that the user is also a member of.
77 Each group is separated from the next by a comma, with no intervening
78 whitespace. The groups are subject to the same restrictions as the
79 group given with the -g option. The default is for the user to belong
80 only to the initial group.
81
82 -H sambaAcctFlags
83 Spaces and trailing bracket are ignored (samba account control bits
84 like '[NDHTUMWSLKI]').
85
86 -i
87 Creates an interdomain trust account (machine Workstation). A
88 password will be asked for the trust account.
89
90 -k skeletonDir
91 When creating the user's home directory, copy files and directories
92 from skeletonDir rather than /etc/skel. The -k option is only valid in
93 conjunction with the -m option. The default is not to create the
94 directory and not to copy any files.
95
96 -m
97 The user's home directory will be created if it does not exist. The
98 files contained in skeletonDir will be copied to the home directory if
99 the -k option is used, otherwise the files contained in /etc/skel will
100 be used instead. Any directories contained in skeletonDir or /etc/skel
101 will be created in the user's home directory as well.
102
103 -M mail
104 E-mail addresses (multiple addresses are separated by commas).
105
106 -n
107 Do not print banner message.
108
109 -N givenname
110 Family name. Defaults to username.
111
112 -o node
113 The user's account will be created in the specified organizational
114 unit. It is relative to the user suffix dn ($usersdn) defined in the
115 configuration file. Ex: 'ou=admin,ou=all'
116
117 -O localMailAddress
118 localMailAddresses (multiple addresses are separated by commas).
119
120 -P
121 Ends by invoking smbldap-passwd.
122
123 -s shell
124 The name of the user's login shell. The default is to leave this
125 field blank, which causes the system to select the default login shell.
126
127 -S surname
128 Defaults to username.
129
130 -t time
131 Wait <time> seconds before exiting script when adding computer's
132 account. This is useful when Master/PDC and Slaves/BDCs are connected
133 through the Internet (replication is not real time).
134
135 -T mailToAddress
136 Forward address (multiple addresses are separated by commas).
137
138 -u uid
139 The numerical value of the user's ID. This value must be unique,
140 unless the -o option is used. The value must be non-negative. The
141 default is to use the smallest ID value greater than 1000 and greater
142 than every other user.
143
144 -w/-W
145 Creates an account for a Samba machine (Workstation), so that it can
146 join a sambaDomainName. Normally -w is used for adding machines through
147 Samba but -W can be used for manual addition of samba attributes.
148
149 -X encoding
150 Specify input encoding for givenname and surname (default UTF-8).
151
152 -Z name=value
153 Specify custom LDAP attributes, using comma-separated name=value
154 pairs.
155
157 useradd(1)
158
159
160
161perl v5.12.3 2011-03-07 SMBLDAP-USERADD(8)