Section 8: administration and privileged commands
sss_userdel – delete a user account Synopsis sss_userdel [options] LOGIN Description sss_userdel deletes a user identified by login name LOGIN from the system. Options -?,–help Display help message and exit. -r,–remove Files in the user’s home directory will be removed along with the home directory itself and the user’s mail spool. Overrides the configuration. -R,–no-remove…
sss_useradd – create a new user Synopsis sss_useradd [options] LOGIN Description sss_useradd creates a new user account using the values specified on the command line plus the default values from the system. Options -u,–uid UID Set the UID of the user to the value of UID. If not given, it is chosen automatically. -c,–gecos COMMENT…
sss_seed – seed the SSSD cache with a user Synopsis sss_seed [options] -D DOMAIN -n USER Description sss_seed seeds the SSSD cache with a user entry and temporary password. If a user entry is already present in the SSSD cache then the entry is updated with the temporary password. Options -D,–domain DOMAIN Provide the name of the…
sss_override – create local overrides of user and group attributes Synopsis sss_override COMMAND [options] Description sss_override enables to create a client-side view and allows to change selected values of specific user and groups. This change takes effect only on local machine. Overrides data are stored in the SSSD cache. If the cache is deleted, all…
sss_obfuscate – obfuscate a clear text password Synopsis sss_obfuscate [options] [PASSWORD] Description sss_obfuscate converts a given password into human-unreadable format and places it into appropriate domain section of the SSSD config file. The cleartext password is read from standard input or entered interactively. The obfuscated password is put into “ldap_default_authtok” parameter of a given SSSD…
sss_groupshow – print properties of a group Synopsis sss_groupshow [options] GROUP Description sss_groupshow displays information about a group identified by its name GROUP. The information includes the group ID number, members of the group and the parent group. Options -R,–recursive Also print indirect group members in a tree-like hierarchy. Note that this also affects printing…
sss_groupmod – modify a group Synopsis sss_groupmod [options] GROUP Description sss_groupmod modifies the group to reflect the changes that are specified on the command line. Options -a,–append-group GROUPS Append this group to groups specified by the GROUPS parameter. The GROUPS parameter is a comma separated list of group names. -r,–remove-group GROUPS Remove this group from…
sss_groupdel – delete a group Synopsis sss_groupdel [options] GROUP Description sss_groupdel deletes a group identified by its name GROUP from the system. Options -?,–help Display help message and exit. The Local Domain In order to function correctly, a domain with “id_provider=local” must be created and the SSSD must be running. The administrator might want to…
sss_groupadd – create a new group Synopsis sss_groupadd [options] GROUP Description sss_groupadd creates a new group. These groups are compatible with POSIX groups, with the additional feature that they can contain other groups as members. Options -g,–gid GID Set the GID of the group to the value of GID. If not given, it is chosen…
sss_debuglevel – change debug level while SSSD is running Synopsis sss_debuglevel [options] NEW_DEBUG_LEVEL Description sss_debuglevel changes debug level of SSSD monitor and providers to NEW_DEBUG_LEVEL while SSSD is running. Options -c,–config Specify a non-default config file. The default is /etc/sssd/sssd.conf. For reference on the config file syntax and options, consult the sssd.conf(5) manual page. NEW_DEBUG_LEVEL…
sss_cache – perform cache cleanup Synopsis sss_cache [options] Description sss_cache invalidates records in SSSD cache. Invalidated records are forced to be reloaded from server as soon as related SSSD backend is online. Options that invalidate a single object only accept a single provided argument. Options -E,–everything Invalidate all cached entries. -u,–user login Invalidate specific user….
ssmtp, sendmail – send a message using smtp Synopsis ssmtp [ flags ] [ address … ] /usr/lib/sendmail [ flags ] [ address … ] Description ssmtp is a send-only sendmail emulator for machines which normally pick their mail up from a centralized mailhub (via pop, imap, nfs mounts or other means). It provides the…
ssm – System Storage Manager: a single tool to manage your storage Synopsis ssm [-h] [–version] [-v] [-f] [-b BACKEND] [-n] {check,resize,create,list,add,remove,snapshot,mount} … ssm create [-h] [-s SIZE] [-n NAME] [–fstype FSTYPE] [-r LEVEL] [-I STRIPESIZE] [-i STRIPES] [-p POOL] [-e [{luks,plain}]] [-o MNT_OPTIONS] [-v VIRTUAL_SIZE] [device [device …]] [mount] ssm list [-h] [{volumes,vol,dev,devices,pool,pools,fs,filesystems,snap,snapshots}] ssm…
sslh – protocol demultiplexer Synopsis sslh [-F config file] [ -t num ] [–transparent] [-p listening address [-p listening address …] [–ssl target address for SSL] [–ssh target address for SSH] [–openvpn target address for OpenVPN] [–http target address for HTTP] [–anyprot default target address] [–on-timeout protocol name] [-u username] [-P pidfile] [-v] [-i] [-V]…
ssl_crtd – SSL certificate generator for Squid. Version 1.0 Synopsis ssl_crtd [-dhv] ssl_crtd [-d] -s directory [-M size ] ssl_crtd [-d] -c -s directory [-n] serial number ssl_crtd [-d] -g -s directory Description ssl_crtd is an installed binary. Because the generation and signing of SSL certificates takes time Squid must use external process to handle…
sshuttle – a transparent proxy-based VPN using ssh Synopsis sshuttle [options…] [-r [username@]sshserver[:port]] \<subnets…> Description sshuttle allows you to create a VPN connection from your machine to any remote server that you can connect to via ssh, as long as that server has python 2.3 or higher. To work, you must have root access on…
sshow – SSH traffic analysis tool Synopsis sshow [-d] [-i interface | -p pcapfile] [expression] Description sshow analyzes encrypted SSH-1 and SSH-2 traffic, identifying authentication attempts, the lengths of passwords entered in interactive sessions, and command line lengths. The following advisory describes the attacks implemented by sshow in detail: http://www.openwall.com/advisories/OW-003-ssh-traffic-analysis.txt Options -d Enable verbose debugging…
sshmitm – SSH monkey-in-the-middle Synopsis sshmitm [-d] [-I] [-p port] host [port] Description sshmitm proxies and sniffs SSH traffic redirected by dnsspoof(8), capturing SSH password logins, and optionally hijacking interactive sessions. Only SSH protocol version 1 is (or ever will be) supported – this program is far too evil already. Options -d Enable verbose debugging…
sshd_selinux – Security Enhanced Linux Policy for the sshd processes Description Security-Enhanced Linux secures the sshd processes via flexible mandatory access control. The sshd processes execute with the sshd_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
sshd_sandbox_selinux – Security Enhanced Linux Policy for the sshd_sandbox processes Description Security-Enhanced Linux secures the sshd_sandbox processes via flexible mandatory access control. The sshd_sandbox processes execute with the sshd_sandbox_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…