convuser(8)convuser(8)NAMEconvuser - convert user profile information between BASE and ENHANCED
formats
SYNOPSIS
/usr/tcb/bin/convuser -a [-c] [-i] [-n] [-u] [-R] [-U uid] [-M] [-T
template] [-[qv]] [users]
[/usr/tcb/bin/convuser] -b [-T template] [-[qv]] [users]
[/usr/tcb/bin/convuser] -d [-n] [-M] [-[qv]] [users]
[/usr/tcb/bin/convuser] -H
OPTIONS
Converts from BASE to ENHANCED authentication format. This option is
incompatible with the -b and -d options. If none of -a, -b, or -d have
been supplied, then -a is implied by any of -c, -i, -n, -u, -R, or -U.
Converts from ENHANCED to BASE authentication format. This option is
incompatible with the -a and -d options. The conversion in this case is
bring any compatible passwords from the extended profile back to the
BASE profile. Causes the conversion for -a to create new extended pro‐
files only. If the -c option is given, existing extended profiles will
remain unchanged. Removes any extended profiles which do not still
have corresponding BASE profiles. Cause the conversion for -a to
invalidate the encrypted password field in the BASE profile if the
change to the ENHANCED profile is successful. Cause the -a and -d con‐
versions to include NIS passwd.byname map entries in the list of BASE
profiles for consideration. Cause non-error output to be suppressed.
Cause the -a conversion to leave the migrated passwords still usable.
The default is to pre-expire them. Cause more verbose reports of
progress to be given. Work on NIS master map files rather than the
local profiles. This option works on NIS master hosts only. Cause
newly-created extended profiles to be written only to the /tcb/files
directory tree (v4 only). Causes the creation of new extended profiles
to use user template as the template for the account default values.
Causes the conversion for -b to consider only accounts with template as
the associated account template. Causes newly-crated extended profiles
with UID values less than uid to be written to the /tcb/files directory
tree (v4 only). Cause an extended usage message to be given and no
other processing to be performed.
DESCRIPTION
The convuser utility is used to provide migration between BASE and
ENHANCED security levels, as well as to provide support for the use of
existing account-creation scripts. The most common uses are to clean
up dangling extended profiles (those without corresponding BASE pro‐
files) after the removal of the base profiles, and to create new
extended profiles to correspond to newly added base profiles.
EXAMPLES
To remove dangling profiles:
# convuser-d # convuser-Md
To finish the addition of new accounts on a system using NIS to supply
the extended profile information:
# convuser-iu # convuser-Miu
To finish the addition of new accounts on a system using NIS to supply
the extended profile information:
# convuser-iun
SEE ALSO
Files: prpasswd(4), authcap(4)
Security
convuser(8)
