Sun Identity Manager 8.1 Resources Reference

Account Attributes

The following table lists the AIX user account attributes. All attributes are Strings. Attributes are optional unless noted in the description.

Resource User Attribute  

mkuser Equivalent  

Description  

accountId 

login_name 

Required. The user’s login name. 

account_locked 

account_locked=[true | false] 

Indicates if the user account is locked. 

admin 

admin=[true|false] 

Defines the administrative status of the user. 

daemon 

daemon=[true|false] 

Indicates whether the user can run programs using the cron or src daemon. 

expires 

expires=MMDDhhmmyy 

The expiration date of the account. 

gecos 

gecos=String 

General information about the user. 

groups 

groups=GroupNames 

A comma-separated list of group names the user belongs to. 

home 

home=PathName 

The full path to the user’s home directory. Any value specified in this account attribute takes precedence over a value specified in the Home Base Directory resource attribute.

id 

id=Integer 

A unique integer string that specifies the user ID. 

login 

login=[true | false] 

Indicates whether the user can log in to the system with the login command. 

loginretries 

loginretries=attempts 

The number of unsuccessful login attempts allowed after the last successful login before the system locks the account. 

maxage 

maxage=weeks 

The maximum age, in weeks, of a password. 

maxexpired 

maxexpired=weeks 

The maximum time, in weeks, beyond the maxage value that a user can change an expired password. 

pgrp 

pgrp=GroupName 

The user’s primary group. 

rlogin 

rlogin=[true | false] 

Permits access to the account from a remote location with the telnet or rlogin commands. 

shell 

shell=PathName 

The program run for the user at session initiation. 

If you are provisioning to an NIS master, the value of the user shell will be checked on the NIS master only. Checks against other machines the user may log on to will not be performed. 

su 

su=[true | false] 

Indicates whether another user can switch to the specified user account with the su command. 

umask 

umask=Value 

Sets file permissions.