Table of Contents
cmaccount - list and manipulate SnapshotCM accounts
cmaccount
-u [-AcmqrvwDELQV] -a{-/+}group_account[,...]] [-ddescription] [-eemail] [-ffullname]
[-hHost] [-llocation] [-nnewName] [-pphone] -t[+]tLogin@tHost[,...] [-Wpassword]
[user_account]...
cmaccount -g [-cmxqrvLQV] -a{-/+}user_account[,...]] [-ddescription] [-hHost] [-nnewName]
[group_account]...
cmaccount lists, modifies, removes or disables
existing SnapshotCM accounts, and creates new SnapshotCM accounts. cmaccount
can be used to script the import of pre-existing account information (such
as from a password or group file), script the updating of existing SnapshotCM
account information, and allows individual users to change their passwords.
Only one type of account can be operated on at a time. Use option -g to operate
on group accounts and -u to operate on user accounts. One of these is required.
To create a new account, use the -c option. To modify an account, use the
-m option. To remove a group account, use the -x option. To disable a user
account, use the -D option. If none of -c, -m or -x is specified, account information
will be listed. When listing, the account name can be omitted and all accounts
of the specified type will be listed.
The -L option displays license usage
info by users (with -u) or groups (with -g). The plus sign before a user account
name means that user holds a license. The NA under the lastUse means they
have either not used the account in 999 days or they haven't used it since
the server was restarted.
- -a [+|-]account[,account[,...]]
- Add or remove
user accounts from one or more group accounts. If operating on a group account,
the list specifies SnapshotCM user accounts to add or remove from the group.
If operating on a user account, the list specifies SnapshotCM group accounts
to which to add or remove the user. Prefix the member list with a minus
('-') to remove or a plus ('+') to add.
- -A
- Enable listing of disabled accounts.
Normally, disabled user accounts are not listed.
- -c
- Create a new account.
Specify the account name in the -n option. The selected account name must
not already exist and one of -u or -g is required to specify the type of
account to create. Any omitted attribute values will be initialized empty.
- -ddescription
- Set a new description string for the selected user or group
account.
- -D
- Disable the specified user account. A disabled account cannot
be used for SnapshotCM access, and is not normally listed (see -A), but
preserves the account id to name mapping for lock and change history display.
A disabled account can also be re-enabled (see -E).
- -eemail
- Set a new value
for the E-mail field of the user account.
- -E
- Re-enable the specified user
account.
- -ffullName
- Set a new value for the Full Name field of the user
account.
- -g
- Operate on group accounts.
- -hHost
- Operate on the database running
on Host. If omitted, the default is to operate on the database on the local
host.
- -llocation
- Set a new value for the Location field of the user account.
- -L
- List License Information. One of -u or -g is required to specify the type
of report to display. Add the -v option to list more verbose output.
- -m
- Modify
an existing account. One of -u or -g is required to specify the type of account
to access. Specified attribute values will be set or modified. Set a value
to the empty string to clear. Omitted attribute values will be left unchanged.
- -n newName
- Set a new name for the selected user or group account.
- -pphone
- Set a new value for the Phone field of the user account.
- -q
- Quiet, suppress
normal success output.
- -Q
- Place output values in double quotes and escape
all shell patterns so the resulting line is a valid shell environment variable
expression.
- -r
- Display sorted output in reverse order.
- -t [+]tLogin@tHost[,tLogin@tHost[,...]]
- Set new values for the Trusted Logins/Hosts fields. If the trusted login/host
pattern is preceded by a plus ('+'), the trusted login/host pattern will
be added to any existing patterns. Otherwise, the new pattern list will
replace any existing list. This option may be repeated and the action is
as if all patterns were given in a single list. In particular, if any pattern
includes a plus, all patterns will be added to any existing patterns.
Each
pattern consists of two fields separated by an '@' character. The first
field is a shell pattern matching the user's login on their client system
which is to be granted trusted access to the selected SnapshotCM user account.
The second field is either a shell pattern matching the full client domain
name, or the IP address or address range of the machine from which the
user is to be granted access to the SnapshotCM user account.
The first example grants the user logging in to the client system as "paul"
access to the SnapshotCM database from any machine in the "domain.com" domain.
The second and third examples grant the user logging in to the client system
OS access to the SnapshotCM database from any system with an IP address
in the range listed.
paul@*.domain.com
sally@192.168.1-7.*
sarah@10.*
- -u
- Operate on user accounts.
- -V
- Print internal command version.
- -v
- Print all account attributes.
- -w
- Set a new password for the selected
user account. You will be prompted to enter the old password if you do not
have account modify privileges. You will be prompted to enter the new password.
- -Wpassword
- Set password as the new password for the selected user account.
You will be prompted to enter the old password if you do not have account
modify privileges.
- -x
- Remove the specified group account.
Exit
status is 0 if the operation succeeded, 1 if there was an error performing
the operation, and 2 if there was a bad option or network error.
cmacl(1)
, cmadmin(1)
, cmconfig(1)
Table of Contents