mirror of
https://git.openafs.org/openafs.git
synced 2025-01-19 07:20:11 +00:00
1cc8feb6fc
There were several different real and made-up hostnames and company names used throughout our documentation examples. The IETF has reserved "example.com" and other "example" TLDs for use in examples (RFC 2606). Replace almost all references to ABC Corporation, DEF Corporation, and State University, as well as "abc.com", "bigcell.com", "def.com", "def.gov", "ghi.com", "ghi.gov", "jkl.com", "mit.edu", "stanford.edu", "state.edu", "stateu.edu", "uncc.edu", and "xyz.com". Standardize on "Example Corporation", "Example Network", "Example Organization" (example.com, example.net, and example.org). The Scout documentation in the Admin Guide contains PNG images that contain the old cell names, so I left those references until the images can be replaced. Change-Id: I4e44815b2d2ffe204810b7fd850842248f67c367 Reviewed-on: http://gerrit.openafs.org/6697 Reviewed-by: Jeffrey Altman <jaltman@secure-endpoints.com> Tested-by: Jeffrey Altman <jaltman@secure-endpoints.com>
157 lines
5.0 KiB
Plaintext
157 lines
5.0 KiB
Plaintext
=head1 NAME
|
|
|
|
uss_delete - Deletes a user account (deprecated)
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
=for html
|
|
<div class="synopsis">
|
|
|
|
B<uss delete> S<<< B<-user> <I<login name>> >>>
|
|
S<<< [B<-mountpoint> <I<mountpoint for user's volume>>] >>>
|
|
[B<-savevolume>] [B<-verbose>] S<<< [B<-cell> <I<cell name>>] >>>
|
|
S<<< [B<-admin> <I<administrator to authenticate>>] >>> [B<-dryrun>]
|
|
[B<-skipauth>] [B<-help>]
|
|
|
|
B<uss d> S<<< B<-u> <I<login name>> >>> S<<< [B<-m> <I<mountpoint for user's volume>>] >>>
|
|
[B<-sa>] [B<-v>] S<<< [B<-c> <I<cell name>>] >>>
|
|
S<<< [B<-a> <I<administrator to authenticate>>] >>> [B<-d>] [B<-sk>] [B<-h>]
|
|
|
|
=for html
|
|
</div>
|
|
|
|
=head1 CAUTIONS
|
|
|
|
The B<uss> command suite is currently designed for cells using the
|
|
obsolete Authentication Server, and therefore is primarily useful for
|
|
sites that have not yet migrated to a Kerberos version 5 KDC. The
|
|
Authentication Server and supporting commands will be removed in a future
|
|
version of OpenAFS, which may include B<uss> unless someone who finds it
|
|
useful converts it to work with a Kerberos version 5 KDC.
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The B<uss delete> command removes the Authentication Database and
|
|
Protection Database entries for the user named by B<-user> argument. In
|
|
addition, it can remove the user's home volume and associated VLDB entry,
|
|
a mount point for the volume or both, depending on whether the
|
|
B<-mountpoint> and B<-savevolume> options are provided.
|
|
|
|
=over 4
|
|
|
|
=item *
|
|
|
|
To remove both the volume and mount point, use the B<-mountpoint> argument
|
|
to name the user's home directory. It is best to create a tape backup of a
|
|
volume before deleting it. Note that other mount points for the volume are
|
|
not removed, if they exist.
|
|
|
|
=item *
|
|
|
|
To remove the mount point only, provide both the B<-mountpoint> and
|
|
B<-savevolume> options.
|
|
|
|
=item *
|
|
|
|
To preserve both the volume and mount point, omit the B<-mountpoint>
|
|
argument (or both it and the B<-savevolume> flag).
|
|
|
|
=back
|
|
|
|
=head1 OPTIONS
|
|
|
|
=over 4
|
|
|
|
=item B<-user> <I<login name>>
|
|
|
|
Names the entry to delete from the Protection and Authentication
|
|
Databases.
|
|
|
|
=item B<-mountpoint> <I<mountpoint for the user's volume>>
|
|
|
|
Specifies the pathname to the user's home directory, which is deleted from
|
|
the filespace. By default, the volume referenced by the mount point is
|
|
also removed from the file server machine that houses it, along with its
|
|
Volume Location Database (VLDB) entry. To retain the volume and VLDB
|
|
entry, include the B<-savevolume> flag. Partial pathnames are interpreted
|
|
relative to the current working directory.
|
|
|
|
Specify the read/write path to the mount point, to avoid the failure that
|
|
results from attempting to remove a mount point from a read-only
|
|
volume. By convention, the read/write path is indicated by placing a
|
|
period before the cell name at the pathname's second level (for example,
|
|
F</afs/.example.com>). For further discussion of the concept of read/write and
|
|
read-only paths through the filespace, see the B<fs mkmount> reference
|
|
page.
|
|
|
|
=item B<-savevolume>
|
|
|
|
Preserves the user's volume and VLDB entry.
|
|
|
|
=item B<-verbose>
|
|
|
|
Produces on the standard output stream a detailed trace of the command's
|
|
execution. If this argument is omitted, only warnings and error messages
|
|
appear.
|
|
|
|
=item B<-cell> <I<cell name>>
|
|
|
|
Specifies the cell in which to run the command. For more details, see
|
|
L<uss(8)>.
|
|
|
|
=item B<-admin> <I<administrator to authenticate>>
|
|
|
|
Specifies the AFS user name under which to establish authenticated
|
|
connections to the AFS server processes that maintain the various
|
|
components of a user account. For more details, see L<uss(8)>.
|
|
|
|
=item B<-dryrun>
|
|
|
|
Reports actions that the command interpreter needs to perform while
|
|
executing the command, without actually performing them. For more details,
|
|
see L<uss(8)>.
|
|
|
|
=item B<-skipauth>
|
|
|
|
Prevents authentication with the AFS Authentication Server, allowing a
|
|
site using Kerberos to substitute that form of authentication.
|
|
|
|
=item B<-help>
|
|
|
|
Prints the online help for this command. All other valid options are
|
|
ignored.
|
|
|
|
=back
|
|
|
|
=head1 EXAMPLES
|
|
|
|
The following command removes smith's user account from the C<example.com>
|
|
cell. The B<-savevolume> argument retains the C<user.smith> volume on its
|
|
file server machine.
|
|
|
|
% uss delete smith -mountpoint /afs/example.com/usr/smith -savevolume
|
|
|
|
=head1 PRIVILEGE REQUIRED
|
|
|
|
The issuer (or the user named by B<-admin> argument) must belong to the
|
|
system:administrators group in the Protection Database, must have the
|
|
C<ADMIN> flag turned on in his or her Authentication Database entry, and
|
|
must have at least C<a> (administer) and C<d> (delete) permissions on the
|
|
access control list (ACL) of the mount point's parent directory. If the
|
|
B<-savevolume> flag is not included, the issuer must also be listed in the
|
|
F</usr/afs/etc/UserList> file.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<UserList(5)>,
|
|
L<fs_mkmount(1)>,
|
|
L<uss(8)>
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
IBM Corporation 2000. <http://www.ibm.com/> All Rights Reserved.
|
|
|
|
This documentation is covered by the IBM Public License Version 1.0. It was
|
|
converted from HTML to POD by software written by Chas Williams and Russ
|
|
Allbery, based on work by Alf Wachsmann and Elizabeth Cassell.
|