• No results found

isi auth file create

Creates a file provider.

Syntax

isi auth file create <name>

[--password-file <path>]

[--group-file <path>]

[--authentication {yes | no}]

[--cache-entry-expiry <duration>]

[--create-home-directory {yes | no}]

[--enabled {true | false}]

[--enumerate-groups {yes | no}]

[--enumerate-users {yes | no}]

[--findable-groups <string>]

[--findable-users <string>]

[--group-domain <string>]

[--home-directory-template <path>]

[--listable-groups <string>]

[--listable-users <string>]

[--login-shell <path>]

[--modifiable-groups <string>]

[--modifiable-users <string>]

[--netgroup-file <path>]

[--normalize-groups {yes | no}]

[--normalize-users {yes | no}]

[--ntlm-support {all | v2only | none}]

[--provider-domain <string>]

[--restrict-findable {yes | no}]

[--restrict-listable {yes | no}]

[--restrict-modifiable {yes | no}]

[--unfindable-groups <string>]

[--unfindable-users <string>]

[--unlistable-groups <string>]

[--unlistable-users <string>]

[--unmodifiable-groups <string>]

[--unmodifiable-users <string>]

[--user-domain <string>]

[--verbose]

Options

<name>

Sets the file provider name.

--password-file <path>

Specifies the path to a passwd.db replacement file.

--group-file <path>

Specifies the path to a group replacement file.

--authentication {enable | disable}

isi auth file create 49

Enables or disables the use of the provider for authentication as well as identity. The default value is enable.

--cache-entry-expiry <duration>

Specifies the length of time after which the cache entry will expire, in the format

<integer>[{Y | M | W | D | H | m | s}]. To turn off cache expiration, set this value to off.

--create-home-directory {yes | no}

Specifies whether to create a home directory the first time a user logs in, if a home directory does not already exist for the user.

--enabled {true | false}

Enables or disables the provider.

--enumerate-groups {yes | no}

Specifies whether to allow the provider to enumerate groups.

--enumerate-users {yes | no}

Specifies whether to allow the provider to enumerate users.

--findable-groups <string>

Specifies a group that can be found in the provider if --restrict-findable is enabled.

Repeat this option to specify multiple list items. If populated, any groups that are not included in this list cannot be resolved.

--findable-users <string>

Specifies a user that can be found in the provider if --restrict-findable is enabled.

Repeat this option to specify multiple list items. If populated, any users that are not included in this list cannot be resolved.

--group-domain <string>

Specifies the domain that the provider will use to qualify groups. The default group domain is FILE_GROUPS.

--home-directory-template <path>

Specifies the path to use as a template for naming home directories. The path must begin with /ifs and may contain variables, such as %U, that are expanded to generate the home directory path for the user.

--listable-groups <string>

Specifies a group that can be listed if --restrict-listable is enabled. Repeat this option to specify multiple list items. If populated, any groups that are not included in this list cannot be listed.

--listable-users <string>

Specifies a user that can be listed if --restrict-listable is enabled. Repeat this option to specify multiple list items. If populated, any users that are not included in this list cannot be listed.

--login-shell <path>

Specifies the path to the user's login shell. This setting applies only to users who access the file system through SSH.

--modifiable-groups <string>

Specifies a group that can be modified if --restrict-modifiable is enabled. Repeat this option to specify multiple list items. If populated, any groups that are not included in this list cannot be modified.

--modifiable-users <string>

Specifies a user that can be modified if --restrict-modifiable is enabled. Repeat this option to specify multiple list items. If populated, any users that are not included in this list cannot be modified.

--netgroup-file <path>

Specifies the path to a netgroup replacement file.

--normalize-groups {yes | no}

Normalizes group names to lowercase before lookup.

--normalize-users {yes | no}

Normalizes user names to lowercase before lookup.

--ntlm-support {all | v2only | none}

For users with NTLM-compatible credentials, specifies which NTLM versions to support. Valid values are all, v2only, and none. NTLMv2 provides additional security over NTLM and is recommended if all server

--provider-domain <string>

Specifies the domain that the provider will use to qualify user and group names.

--restrict-findable {yes | no}

Specifies whether to check the provider for filtered lists of findable and unfindable users and groups.

--restrict-listable {yes | no}

Specifies whether to check the provider for filtered lists of listable and unlistable users and groups.

--restrict-modifiable {yes | no}

Specifies whether to check the provider for filtered lists of modifiable and unmodifiable users and groups.

--unfindable-groups <string>

If --restrict-findable is enabled and the findable groups list is empty, specifies a group that cannot be resolved by the provider. Repeat this option to specify multiple list items.

--unfindable-users <string>

If --restrict-findable is enabled and the findable users list is empty, specifies a user that cannot be resolved by the provider. Repeat this option to specify multiple list items.

--unlistable-groups <string>

If --restrict-listable is enabled and the listable groups list is empty, specifies a group that cannot be listed by the provider. Repeat this option to specify multiple list items.

--unlistable-users <string>

If --restrict-listable is enabled and the listable users list is empty, specifies a user that cannot be listed by the provider. Repeat this option to specify multiple list items.

--unmodifiable-groups <string>

If --restrict-modifiable is enabled and the modifiable groups list is empty, specifies a group that cannot be modified. Repeat this option to specify multiple list items.

--unmodifiable-users <string>

If --restrict-modifiable is enabled and the modifiable users list is empty, specifies a user that cannot be modified. Repeat this option to specify multiple list items.

--user-domain <string>

isi auth file create 51

Specifies the domain that the provider will use to qualify users. The default user domain is FILE_USERS.

{--verbose | -v}

Displays the results of running the command.