IMPORT_PASSWD(8)                Domain/OS BSD                 IMPORT_PASSWD(8)




NAME
     import_passwd - create registry entries based on information in UNIX
     group and password files

SYNOPSIS
     /etc/import_passwd [-i] [-a | -f] [-c] [ -o org ] -s pathname [ -v ]

DESCRIPTION
     import_passwd is a mechanism for creating Apollo registry entries that
     are consistent with foreign password and group file entries.  You should
     use import_passwd to ensure consistency between Apollo and foreign
     protection mechanisms when you

     ⊕  Attach Apollo node(s) to an existing UNIX network

     ⊕  Attach UNIX node(s) to an Apollo network

     ⊕  Connect Apollo and UNIX networks

     If the foreign password and group file entries do not exist in the Apollo
     registry, import_passwd will create them.  If there are duplicate
     entries, import_passwd will follow your directions on how to handle them.
     (Note that reserved names and reserved UNIX IDs cannot be reassigned.)

The Process
     The Apollo registry must exist before you can use import_passwd. If you
     are simply adding a few Apollo nodes to a foreign network, you can create
     a new, but empty, registry to meet this requirement.  Once the registry
     exists, the registry server must be running, and you must be logged on as
     root.

     As import_passwd processes, it

     1. Examines the foreign group file and creates group entries in the
        registry.

     2. Examines the foreign passwd file and creates person, organization, and
        account entries in the registry. The organization assigned is
        specified as input to import_passwd.

     3. Reexamines the foreign group file and creates membership lists.

Conflicts
     During this process, import_password may find conflicts in name strings
     (for example, in the foreign network, joe 102; in Apollo, joe 555) and in
     UNIX IDs (for example, in the foreign network, joe 102; in Apollo, ann
     102).  import_passwd provides a number of options to help resolve these
     conflicts.

The Favored Entry
     The -a (favor Apollo entry) or -f (favor foreign entry) options specify
     which entry should be favored. A favored entry is retained as is.  You
     are prompted to modify non-favored entries. (Note, however, that in some
     cases you may be prompted to modify a favored entry.  For example, if the
     non-favored entry is a reserved name, you will be prompted to modify the
     favored entry.)

Name Conflicts
     The -i option specifies that duplicate names are not in conflict but in
     fact, represent the same identity.  Therefore, when duplicate names

     arise, no action is necessary.   If you do not use the -i option,
     import_passwd resolves the name conflict by prompting for a name string
     for the non-favored entry.

UNIX ID Conflicts
     The resolution of UNIX ID conflicts is also determined by the favored
     entry.  If a conflict exits, you are prompted for a new UNIX ID for the
     non-favored entry.

Other Registry Entries
     Except for names and UNIX IDs, all other information stored in the Apollo
     registry for an existing identity is retained.

     New registry entries created by import_passwd are assigned the following
     values:

     For Person and Group Entries:

          fullname = " (empty)

          owner = Same as the owner of the organization specified with the -o
          option. If no organization is specified, then the owner of the
          organization named "none".

          alias/primary = Primary for first entry; alias for subsequent ones.

          projlist_ok = Yes.

          passwd = For groups only, taken from the group file.

          membership list = For new groups only, all persons listed in the
          group file, and all persons with accounts in the password file with
          that group.

     For Account Entries:

          abbreviation = Shortest possible abbreviation that does not conflict
          with pre-existing Apollo accounts.

          acount_valid = True.

          gecos = Same as UNIX password file.

          homedir = Same as UNIX password file.

          shell = Same as UNIX password file.

          passwd = Same as UNIX password file. Note that you must modify or
          reset imported passwords before user authentication is possible and
          for the account to be usable in a pre-SR10 registry.

          passwd_dtm = Date and time import_passwd was run.

          passwd_valid = True.

OPTIONS
     -i        Name strings are not in conflict, but represent the same
               identity.

     -a (default)
               Favor Apollo entries for conflicts.

     -f        Favor foreign entries for conflicts.

     -c        Run in check mode:  Process the command, showing all conflicts,
               but make no requests for resolution.

     -o org    org is the name of an Apollo organization to be assigned to all
               imported entries.

     -s pathname
               pathname is the path to the directory containing the foreign
               password and group files to be imported.

     -v        Run in verbose mode: Generate a verbose transcript of.
               import_passwd activity.


SEE ALSO
     edrgy(8), rgy_admin(8), rgy_merge(8), rgyd(8)