gsscred(1M)gsscred(1M)NAMEgsscred - add, remove and list gsscred table entries
user oid] uid]] comment]
user oid]] uid] mech]
user oid]] uid] mech]
The utility is used to create and maintain a mapping between a security
principal name and a local UNIX uid. The format of the user name is
assumed to be You can use the option to specify the object identifier
of the name type. The OID must be specified in dot-separated notation,
The table is used on server machines to lookup the uid of incoming
clients connected using
When adding users, if no user name is specified, an entry is created in
the table for each user from the passwd table. If no comment is speci‐
fied, the utility inserts a comment that specifies the user name as an
ASCII string and the GSS-API security mechanism that applies to it.
The security mechanism will be in string representation as defined in
The parameters are interpreted the same way by the utility to delete
users as they are to create users. At least one of the following
options must be specified: or If no security mechanism is specified,
then all entries will be deleted for the user identified by either the
uid or user name. If only the security mechanism is specified, then
all user entries for that security mechanism will be deleted.
Again, the parameters are interpreted the same way by the utility to
search for users as they are to create users. If no options are speci‐
fied, then the entire table is returned. If the user name or uid is
specified, then all entries for that user are returned. If a security
mechanism is specified, then all user entries for that security mecha‐
nism are returned.
Add a table entry.
Insert comment about this table entry.
Search table for entry.
Specify the mechanism for which this name is to be translated.
Specify the optional principal name.
Specify the OID indicating the name type of the user.
Remove the entry from the table.
Specify the uid for the user if the user is not local.
Example 1: Creating a gsscred Table
The following shows how to create a table for the Kerberos Security
Mechanism(V5). obtains user names and uid's from the passwd table to
populate the table.
Example 2: Adding an Entry
The following shows how to add an entry for with a specified uid of 0
for the Kerberos Security Mechanism(V5).
Example 3: Listing All User Mappings
The following lists all user mappings for the Kerberos Security Mecha‐
Example 4: Lising All Mappings for a Specified User
The following lists all mappings for all security mechanisms for the
The following exit values are returned:
0 Successful completion.
>0 An error occurred.
The mapping table.
Tables of GSS-API based security mechanism installed.
SEE ALSOgssd(1M), gsscred_clean(1M).