aa_update(1M)            DG/UX B2 Security R4.12MU02           aa_update(1M)


NAME
       aaupdate - update user and group A&A accounts to the current format

SYNOPSIS
       aaupdate  [-v] [-g] [-m modeluser] [-u userlist] [olddatabase]

       aaupdate [-v] [-g] [-m modeluser] [-U userfile] [olddatabase]

   where:
       modeluser    A model username

       userlist      A comma-separated list of usernames to convert

       userfile      The name of a file containing a list of usernames to
                     convert.  Each line of the file should contain one
                     username.

       olddatabase  A pathname specifying the root of the A&A database to
                     be converted.  For example, if an old account was in
                     /oldaa/user/fred, olddatabase would be oldaa.

DESCRIPTION
       The aaupdate command converts the specified user and group accounts,
       provided the account or group is not shipped with DG/UX, into the
       proper format for the current revision.  If olddatabase is not
       specified, the user and group accounts will be taken from the current
       A&A database.  If olddatabase is specified, the user and group
       accounts will be taken from olddatabase.  The values for account
       attributes that are required for the new format but do not exist in
       the old account are taken from the model user, modeluser, if it is
       specified.  If modeluser is not specified, the values are set to
       defaults contained in the aaupdate program.

       All user accounts in the specified database that are not shipped with
       DG/UX are converted unless one of the -u or -U options is used.  If
       so, then only the users specified in the argument to -u or -U are
       converted.

       Appropriate privilege is required to use the aaupdate command.  On
       systems without the DG/UX capability option, appropriate privilege
       means having a UID of zero (root).  See the appropriateprivilege(5)
       man page for more information.  On systems with the DG/UX capability
       option, appropriate privilege means having one or more specific
       capabilities enabled in your effective capability set.  See
       capdefaults(5) for the default capabilities needed for this command.

   Options
       -v     Write to standard output the user names being processed.

       -g     If this option is specified, groups are converted; otherwise
              they are not.

       -m modeluser
              Values for account attributes that are required for the new
              format but do not exist in the existing account are taken from
              modeluser, if specified.

       -u userlist
              Convert only the user accounts specified in userlist.

       -U userfile
              Convert only the user accounts contained in userfile.

DIAGNOSTICS
       aaupdate writes all diagnostic and statistical messages to standard
       error.

       aaupdate exits with one of the following values:

       0    All user and group accounts converted.

       1    One or more user or group accounts were not successfully
            converted.

       2    User lacks appropriate privilege to use aaupdate

       3    Usage error.

SEE ALSO
       authck(1M), capdefaults(5), appropriateprivilege(5).

NOTES
       Before installing the latest revision of DG/UX security software,
       make sure to run authck(1M) to verify that the old format version of
       the A&A database is in a consistent state.

       Always run authck(1M) after aaupdate successfully completes.


Licensed material--property of copyright holder(s)