Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
HP-UX Reference > R

rbacdbchk(1M)

HP-UX 11i Version 3: February 2007
» 

Technical documentation

» Feedback
Content starts here

 » Table of Contents

 » Index

NAME

rbacdbchk — Verifies the syntax of the Role-Based Access Control (RBAC) database files

SYNOPSIS

rbacdbck [-r | -a | -u | -R | -c | -x]

DESCRIPTION

rbacdbck verifies that there are no conflicting or inconsistent entries in and amongst the RBAC database files. rbacdbck also checks the syntax of the database files and prints messages indicating which lines contain errors. rbacdbchk returns zero output if no errors are present in the database files.

All the RBAC database files (/etc/rbac/roles, /etc/rbac/auths, /etc/rbac/user_role, /etc/rbac/role_auth, and /etc/rbac/cmd_priv) are verified. See rbac(5) for more information on these RBAC database files.

Options

rbacdbchk supports the following options:

-r

Checks the /etc/rbac/roles database.

-a

Checks the /etc/rbac/auths database.

-u

Checks the /etc/rbac/user_role database.

-R

Checks the /etc/rback/role_auth database.

-c

Checks the /etc/rbac/cmd_priv database.

-x

Cross reference checks all databases.

EXTERNAL INFLUENCES

Environment Variables

LC_MESSAGES determines the language in which messages are displayed.

International Code Set Support

Single-byte character code set is supported.

RETURN VALUE

0.

Success

1.

Incorrect syntax

EXAMPLES

The following example finds an error that user John is an invalid user

# rbacdbchk [/etc/rbac/user_role] John: Administrator invalid user The value 'John' for the Username field is bad.

The following example finds a syntax error, an extra colon (:), at the end of a line:

# rbacdbchk [/etc/rbac/user_role] root: Administrator: invalid name: Not alphanumeric The value 'Administrator:' for the Rolename field is bad. [Role in role_auth DB with no assigned user in user_role DB] Administrator:(hpux.*, *)

The following example finds a field missing:

# rbacdbchk [/etc/rbac/roles] : my comment invalid name: <empty> The value '' for the Rolename field is bad.

The following example finds a bad role:

# rbacdbchk [Role in role_auth DB with no assigned user in user_role DB] blah:(hpux.*, *) [Invalid Role in role_auth DB. Role 'blah' does not exist in the roles DB] blah:(hpux.*, *)

The following example finds a bad group name:

# rbacdbchk [/etc/rbac/user_role] &blah: Administrator invalid group The value 'blah' for the Group name field is bad.

FILES

/etc/rbac/roles

Database containing valid definitions of all roles.

/etc/rbac/auths

Database containing definitions of all valid authorizations.

/etc/rbac/user_role

Database specifying the roles for each specified user.

/etc/rbac/role_auth

Database that defines the authorizations for each role.

/etc/rbac/cmd_priv

Database containing the authorization to execute specified commands, and the privileges to alter uid and gid for command execution.

/etc/rbac/aud_filter

Database that defines the role-to-authorization to audit

Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© 1983-2007 Hewlett-Packard Development Company, L.P.