smbldap-groupmod man page
smbldap-groupmod — Modify a group
smbldap-groupmod [-g gid [-o]] [-a] [-r rid] [-s sid] [-t group type] [-n group_name ] [-m members(,)] [-x members (,)] group
The smbldap-groupmod command modifies the system account files to reflect the changes that are specified on the command line. The options which apply to the smbldap-groupmod command are
-g gid The numerical value of the group's ID. This value must be unique, unless the -o option is used. The value must be non negative. Any files which the old group ID is the file roup ID must have the file group ID changed manually.
The name of the group will be changed from group to group_name.
The members to be added to the group in comma-delimeted form.
The members to be removed from the group in comma-delimted form.
add an automatic Security ID for the group (SID).
set the group SID.
The SID must be unique and defined with the domain Security ID ($SID) like sid=$SID-rid where rid is the group rid.
set the group rid.
The SID is then calculated as sid=$SID-rid where
$SID is the domain Security ID.
-t group type
set the NT Group type for the new group. Available values are 2 (domain group), 4 (local group) and 5 (builtin group). The default group type is 2.
smbldap-groupmod -g 253 development This will change the GID of the 'development' group to '253'.
smbldap-groupmod -n Idiots Managers This will change the name of the 'Managers' group to 'Idiots'.
smbldap-groupmod -m "jdoe,jsmith" "Domain Admins" This will add 'jdoe' and 'jsmith' to the 'Domain Admins' group.
smbldap-groupmod -x "jdoe,jsmith" "Domain Admins" This will remove 'jdoe' and 'jsmith' from the 'Domain Admins' group.