Package shadow-utils

Utilities for managing accounts and shadow password files

http://pkg-shadow.alioth.debian.org/

The shadow-utils package includes the necessary programs for
converting UNIX password files to the shadow password format, plus
programs for managing user and group accounts. The pwconv command
converts passwords to the shadow password format. The pwunconv command
unconverts shadow passwords and generates a passwd file (a standard
UNIX password file). The pwck command checks the integrity of password
and shadow files. The lastlog command prints out the last login times
for all users. The useradd, userdel, and usermod commands are used for
managing user accounts. The groupadd, groupdel, and groupmod commands
are used for managing group accounts.

General Commands (Section 1)
chage
The chage command changes the number of days between password changes and the date of the last password change. This information is used by the system to...
gpasswd
The gpasswd command is used to administer /etc/group, and /etc/gshadow. Every group can have administrators, members and a password. System administrators can...
newgidmap
The newgidmap sets /proc/[pid]/gid_map based on its command line arguments and the gids allowed in /etc/subgid. Note that the root user is not exempted from the...
newgrp
The newgrp command is used to change the current group ID during a login session. If the optional - flag is given, the user's environment will be reinitialized...
newuidmap
The newuidmap sets /proc/[pid]/uid_map based on its command line arguments and the uids allowed in /etc/subuid. Note that the root user is not exempted from the...
sg
The sg command works similar to newgrp but accepts a command. The command will be executed with the /bin/sh shell. With most shells you may run sg from, you...
Library Functions (Section 3)
shadow
shadow manipulates the contents of the shadow password file, /etc/shadow.
File Formats (Section 5)
gshadow
/etc/gshadow contains the shadowed information for group accounts. This file must not be readable by regular users if password security is to be maintained...
login.defs
The /etc/login.defs file defines the site-specific configuration for the shadow password suite. This file is required. Absence of this file will not prevent...
shadow
shadow is a file which contains the password information for the system's accounts and optional aging information. This file must not be readable by regular...
subgid
Each line in /etc/subgid contains a user name and a range of subordinate group ids that user is allowed to use. This is specified with three fields delimited by...
subuid
Each line in /etc/subuid contains a user name and a range of subordinate user ids that user is allowed to use. This is specified with three fields delimited by...
System Administration (Section 8)
chgpasswd
The chgpasswd command reads a list of group name and password pairs from standard input and uses this information to update a set of existing groups. Each line...
chpasswd
The chpasswd command reads a list of user name and password pairs from standard input and uses this information to update a group of existing users. Each line...
groupadd
The groupadd command creates a new group account using the values specified on the command line plus the default values from the system. The new group will be...
groupdel
The groupdel command modifies the system account files, deleting all entries that refer to GROUP. The named group must exist.
groupmems
The groupmems command allows a user to administer his/her own group membership list without the requirement of superuser privileges. The groupmems utility is...
groupmod
The groupmod command modifies the definition of the specified GROUP by modifying the appropriate entry in the group database.
grpck
The grpck command verifies the integrity of the groups information. It checks that all entries in /etc/group and /etc/gshadow have the proper format and contain...
lastlog
lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, port, and last login time will be printed. The default (no...
newusers
The newusers command reads a file (or the standard input by default) and uses this information to update a set of existing users or to create new users. Each...
pwck
The pwck command verifies the integrity of the users and authentication information. It checks that all entries in /etc/passwd and /etc/shadow have the proper...
pwconv
The pwconv command creates shadow from passwd and an optionally existing shadow. The pwunconv command creates passwd from passwd and shadow and then removes...
useradd
When invoked without the -D option, the useradd command creates a new user account using the values specified on the command line plus the default values from...
userdel
The userdel command modifies the system account files, deleting all entries that refer to the user name LOGIN. The named user must exist.
usermod
The usermod command modifies the system account files to reflect the changes that are specified on the command line.
vipw
The vipw and vigr commands edits the files /etc/passwd and /etc/group, respectively. With the -s flag, they will edit the shadow versions of those files...