CRPASSWD(8)
NAME
crpasswd − create password and group files
USAGE
/etc/crpasswd
DESCRIPTION
The DOMAIN/IX command crpasswd creates UNIX password and group files from the DOMAIN network registry’s person, project, organization (PPO) file and the site directory’s ACCOUNT (ACCT) file. All changes to /etc/passwd and /etc/group must be made using crpasswd. The sole exception to this rule is the “shell” field of /etc/passwd, which cannot be derived from information in the registry and must be added by hand. To prevent discrepancies between /etc/passwd and /etc/passwd.map, run crpasswd after modifying the shell field of /etc/passwd.
The crpasswd command also creates the file /etc/passwd.map. The system calls getuid and getgid use this file to map DOMAIN subject identifiers to user and group IDs (and vice versa).
You must invoke crpasswd each the time you update the network registry. Otherwise, getuid and getgid will return a value of -1 for users not entered in /etc/passwd and /etc/group. The system administrator will usually have cron run crpasswd once a day.
NOTES TO DOMAIN/IX USERS
Do not delete the /etc/passwd and /etc/group files before you run crpasswd, as crpasswd can create new entries in these files without affecting the existing ones. Deleting these files will have unpleasant effects.
Cron uses setuid(3) to run as “root,” so that you can have cron run crpasswd to modify password and group files owned by “root.”