| 1 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>pdbedit</title><link rel="stylesheet" href="../samba.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.75.2"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="refentry" title="pdbedit"><a name="pdbedit.8"></a><div class="titlepage"></div><div class="refnamediv"><h2>Name</h2><p>pdbedit — manage the SAM database (Database of Samba Users)</p></div><div class="refsynopsisdiv" title="Synopsis"><h2>Synopsis</h2><div class="cmdsynopsis"><p><code class="literal">pdbedit</code> [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-t, --password-from-stdin] [-m] [-r] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value] [-c account-control] [-y]</p></div></div><div class="refsect1" title="DESCRIPTION"><a name="id2489574"></a><h2>DESCRIPTION</h2><p>This tool is part of the <a class="citerefentry" href="samba.7.html"><span class="citerefentry"><span class="refentrytitle">samba</span>(7)</span></a> suite.</p><p>The pdbedit program is used to manage the users accounts
|
|---|
| 2 | stored in the sam database and can only be run by root.</p><p>The pdbedit tool uses the passdb modular interface and is
|
|---|
| 3 | independent from the kind of users database used (currently there
|
|---|
| 4 | are smbpasswd, ldap, nis+ and tdb based and more can be added
|
|---|
| 5 | without changing the tool).</p><p>There are five main ways to use pdbedit: adding a user account,
|
|---|
| 6 | removing a user account, modifing a user account, listing user
|
|---|
| 7 | accounts, importing users accounts.</p></div><div class="refsect1" title="OPTIONS"><a name="id2489611"></a><h2>OPTIONS</h2><div class="variablelist"><dl><dt><span class="term">-L</span></dt><dd><p>This option lists all the user accounts
|
|---|
| 8 | present in the users database.
|
|---|
| 9 | This option prints a list of user/uid pairs separated by
|
|---|
| 10 | the ':' character.</p><p>Example: <code class="literal">pdbedit -L</code></p><pre class="programlisting">
|
|---|
| 11 | sorce:500:Simo Sorce
|
|---|
| 12 | samba:45:Test User
|
|---|
| 13 | </pre></dd><dt><span class="term">-v</span></dt><dd><p>This option enables the verbose listing format.
|
|---|
| 14 | It causes pdbedit to list the users in the database, printing
|
|---|
| 15 | out the account fields in a descriptive format.</p><p>Example: <code class="literal">pdbedit -L -v</code></p><pre class="programlisting">
|
|---|
| 16 | ---------------
|
|---|
| 17 | username: sorce
|
|---|
| 18 | user ID/Group: 500/500
|
|---|
| 19 | user RID/GRID: 2000/2001
|
|---|
| 20 | Full Name: Simo Sorce
|
|---|
| 21 | Home Directory: \\BERSERKER\sorce
|
|---|
| 22 | HomeDir Drive: H:
|
|---|
| 23 | Logon Script: \\BERSERKER\netlogon\sorce.bat
|
|---|
| 24 | Profile Path: \\BERSERKER\profile
|
|---|
| 25 | ---------------
|
|---|
| 26 | username: samba
|
|---|
| 27 | user ID/Group: 45/45
|
|---|
| 28 | user RID/GRID: 1090/1091
|
|---|
| 29 | Full Name: Test User
|
|---|
| 30 | Home Directory: \\BERSERKER\samba
|
|---|
| 31 | HomeDir Drive:
|
|---|
| 32 | Logon Script:
|
|---|
| 33 | Profile Path: \\BERSERKER\profile
|
|---|
| 34 | </pre></dd><dt><span class="term">-w</span></dt><dd><p>This option sets the "smbpasswd" listing format.
|
|---|
| 35 | It will make pdbedit list the users in the database, printing
|
|---|
| 36 | out the account fields in a format compatible with the
|
|---|
| 37 | <code class="filename">smbpasswd</code> file format. (see the
|
|---|
| 38 | <a class="citerefentry" href="smbpasswd.5.html"><span class="citerefentry"><span class="refentrytitle">smbpasswd</span>(5)</span></a> for details)</p><p>Example: <code class="literal">pdbedit -L -w</code></p><pre class="programlisting">
|
|---|
| 39 | sorce:500:508818B733CE64BEAAD3B435B51404EE:
|
|---|
| 40 | D2A2418EFC466A8A0F6B1DBB5C3DB80C:
|
|---|
| 41 | [UX ]:LCT-00000000:
|
|---|
| 42 | samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:
|
|---|
| 43 | BC281CE3F53B6A5146629CD4751D3490:
|
|---|
| 44 | [UX ]:LCT-3BFA1E8D:
|
|---|
| 45 | </pre></dd><dt><span class="term">-u username</span></dt><dd><p>This option specifies the username to be
|
|---|
| 46 | used for the operation requested (listing, adding, removing).
|
|---|
| 47 | It is <span class="emphasis"><em>required</em></span> in add, remove and modify
|
|---|
| 48 | operations and <span class="emphasis"><em>optional</em></span> in list
|
|---|
| 49 | operations.</p></dd><dt><span class="term">-f fullname</span></dt><dd><p>This option can be used while adding or
|
|---|
| 50 | modifing a user account. It will specify the user's full
|
|---|
| 51 | name. </p><p>Example: <code class="literal">-f "Simo Sorce"</code></p></dd><dt><span class="term">-h homedir</span></dt><dd><p>This option can be used while adding or
|
|---|
| 52 | modifing a user account. It will specify the user's home
|
|---|
| 53 | directory network path.</p><p>Example: <code class="literal">-h "\\\\BERSERKER\\sorce"</code>
|
|---|
| 54 | </p></dd><dt><span class="term">-D drive</span></dt><dd><p>This option can be used while adding or
|
|---|
| 55 | modifing a user account. It will specify the windows drive
|
|---|
| 56 | letter to be used to map the home directory.</p><p>Example: <code class="literal">-D "H:"</code>
|
|---|
| 57 | </p></dd><dt><span class="term">-S script</span></dt><dd><p>This option can be used while adding or
|
|---|
| 58 | modifing a user account. It will specify the user's logon
|
|---|
| 59 | script path.</p><p>Example: <code class="literal">-S "\\\\BERSERKER\\netlogon\\sorce.bat"</code>
|
|---|
| 60 | </p></dd><dt><span class="term">-p profile</span></dt><dd><p>This option can be used while adding or
|
|---|
| 61 | modifing a user account. It will specify the user's profile
|
|---|
| 62 | directory.</p><p>Example: <code class="literal">-p "\\\\BERSERKER\\netlogon"</code>
|
|---|
| 63 | </p></dd><dt><span class="term">-G SID|rid</span></dt><dd><p>
|
|---|
| 64 | This option can be used while adding or modifying a user account. It
|
|---|
| 65 | will specify the users' new primary group SID (Security Identifier) or
|
|---|
| 66 | rid. </p><p>Example: <code class="literal">-G S-1-5-21-2447931902-1787058256-3961074038-1201</code></p></dd><dt><span class="term">-U SID|rid</span></dt><dd><p>
|
|---|
| 67 | This option can be used while adding or modifying a user account. It
|
|---|
| 68 | will specify the users' new SID (Security Identifier) or
|
|---|
| 69 | rid. </p><p>Example: <code class="literal">-U S-1-5-21-2447931902-1787058256-3961074038-5004</code></p></dd><dt><span class="term">-c account-control</span></dt><dd><p>This option can be used while adding or modifying a user
|
|---|
| 70 | account. It will specify the users' account control property. Possible flags are listed below.
|
|---|
| 71 | </p><p>
|
|---|
| 72 | </p><div class="itemizedlist"><ul class="itemizedlist" type="disc"><li class="listitem"><p>N: No password required</p></li><li class="listitem"><p>D: Account disabled</p></li><li class="listitem"><p>H: Home directory required</p></li><li class="listitem"><p>T: Temporary duplicate of other account</p></li><li class="listitem"><p>U: Regular user account</p></li><li class="listitem"><p>M: MNS logon user account</p></li><li class="listitem"><p>W: Workstation Trust Account</p></li><li class="listitem"><p>S: Server Trust Account</p></li><li class="listitem"><p>L: Automatic Locking</p></li><li class="listitem"><p>X: Password does not expire</p></li><li class="listitem"><p>I: Domain Trust Account</p></li></ul></div><p>
|
|---|
| 73 | </p><p>Example: <code class="literal">-c "[X ]"</code></p></dd><dt><span class="term">-a</span></dt><dd><p>This option is used to add a user into the
|
|---|
| 74 | database. This command needs a user name specified with
|
|---|
| 75 | the -u switch. When adding a new user, pdbedit will also
|
|---|
| 76 | ask for the password to be used.</p><p>Example: <code class="literal">pdbedit -a -u sorce</code>
|
|---|
| 77 | </p><pre class="programlisting">new password:
|
|---|
| 78 | retype new password
|
|---|
| 79 | </pre><p>
|
|---|
| 80 | </p><div class="note" title="Note" style="margin-left: 0.5in; margin-right: 0.5in;"><h3 class="title">Note</h3><p>pdbedit does not call the unix password syncronisation
|
|---|
| 81 | script if <a class="link" href="smb.conf.5.html#UNIXPASSWORDSYNC" target="_top">unix password sync</a>
|
|---|
| 82 | has been set. It only updates the data in the Samba
|
|---|
| 83 | user database.
|
|---|
| 84 | </p><p>If you wish to add a user and synchronise the password
|
|---|
| 85 | that immediately, use <code class="literal">smbpasswd</code>'s <code class="option">-a</code> option.
|
|---|
| 86 | </p></div></dd><dt><span class="term">-t, --password-from-stdin</span></dt><dd><p>This option causes pdbedit to read the password
|
|---|
| 87 | from standard input, rather than from /dev/tty (like the
|
|---|
| 88 | <code class="literal">passwd(1)</code> program does). The password has
|
|---|
| 89 | to be submitted twice and terminated by a newline each.</p></dd><dt><span class="term">-r</span></dt><dd><p>This option is used to modify an existing user
|
|---|
| 90 | in the database. This command needs a user name specified with the -u
|
|---|
| 91 | switch. Other options can be specified to modify the properties of
|
|---|
| 92 | the specified user. This flag is kept for backwards compatibility, but
|
|---|
| 93 | it is no longer necessary to specify it.
|
|---|
| 94 | </p></dd><dt><span class="term">-m</span></dt><dd><p>This option may only be used in conjunction
|
|---|
| 95 | with the <em class="parameter"><code>-a</code></em> option. It will make
|
|---|
| 96 | pdbedit to add a machine trust account instead of a user
|
|---|
| 97 | account (-u username will provide the machine name).</p><p>Example: <code class="literal">pdbedit -a -m -u w2k-wks</code>
|
|---|
|
|---|
