Filter
Top Products
112 Chapter 8 Working with Users and Groups
4 Authenticate as an administrator by entering the following command, replacing
adminusername with your administrator user name, and entering your administrator
password when prompted:
> auth
adminusername
5 Create a new group, replacing officegroup with the new group account’s short name
and specify the group ID, replacing 600 with the primary group ID.
> create
officegroup
PrimaryGroupID
600
6 Review the settings of your new group by entering the following command, replacing
officegroup with the new group account’s short name.
> read
officegroup
dscl displays the settings for your new group account, similar to the following output:
apple-generateduid:4B3A5678-E9C1-2EC3-4567-891D234E5678
cn: officegroup
gidNumber: 600
objectClass: posixGroup apple-group extensibleObject top
AppleMetaNodeLocation: /LDAPv3/ipaddress
GeneratedUID:4B3A5678-E9C1-2EC3-4567-891D234E5678
PasswordPlus:********
PrimaryGroupID: 600
RecordName: officegroup
RecordType: dsRecTypeStandard:Groups
7 Quit the dscl tool.
>quit
See the dscl man page for more information about using the dscl command-line tool.
Removing a Group Account
You can remove group accounts by using the dscl tool.
To remove a group account:
1 Start the dscl tool in interactive mode, specifying the computer you are using as the
source of directory service data:
$ dscl localhost
>
2 Change the current folder to /LDAPv3/ipaddress/Groups by entering the path at the
prompt:
> cd /LDAPv3/
ipaddress
/Groups
Replace
ipaddress
with the IP address of your directory server. If using a NetInfo
directory domain, enter
cd /NetInfo/root/Groups at the prompt.