ReadGetpwnam

The ReadGetpwnam plug-in reads data from the UNIX getaway() system call. The values of the UNIX password fields (name, passwd, uid, gid, gecos, dir, and shell) are made available for mapping into variables. The getaway() system call allows the UNIX operating system to locate the user password entry in whatever logical source may be defined. (In Solaris the source is defined in /etc/nsswitch.conf, other UNIX variants have similar capabilities.)  This may be the actual /etc/passwd file, NIS, NIS+, PAM or some other facility. Note: This plug-in is only available on supported Solaris, HP-UX, OSF1 and Linux platforms.

Plug-in Type

Authentication only

Example

system Method-Type = ReadGetpwnam Method-Next = local

ReadGetpwnam-Map = "${check.Password} = ${passwd};"

ReadGetpwnam-Map = "${user.Password-Gid} = ${gid};"

ReadGetpwnam-Map = "${user.Password-Shell} = ${shell};"

Syntax

MethodInstanceName Method-Type = ReadGetpwnam [ Control Properties ]

ReadGetpwnam-Map = mapping text

[ ReadGetpwnam-SearchKey = dynamic string ]

[ ReadGetpwnam-NewUser = boolean ]

Method Properties

ReadGetpwnam-Map (Required)

ReadGetpwnam-Map specifies the mapping of fields from the password entry to NavisRadius variables. All password fields are available for mapping into variables. The common password field name—name, passwd, uid, gid, gecos, dir, and shell—are referenced on the right hand side of the map. Multiple ReadGetpwnam-Map properties are allowed in a method definition. To include mapping information from a file, place an '@' character followed by the name of the file as the value of the property.

Default

None

Example

ReadGetpwnam-Map = "${check.Password} = ${passwd};"

ReadGetpwnam-Map = "${user.Service-Class} = ${gid};"

ReadGetpwnam-Map = "@Password.map"

ReadGetpwnam-SearchKey (Optional)

ReadGetpwnam-SearchKey specifies a dynamic string to use for selecting the password entry.

Default

${packet.Base-User-Name}

Example

ReadGetpwnam-SearchKey = ${request.User-Name}

ReadGetpwnam-NewUser (Optional)

ReadGetpwnam-NewUser specifies whether the read is for a new user. Setting this value to TRUE clears out the reply, check, and user variable groups. To add variables to the existing variables in the reply, check, and user variable groups, either set this property to FALSE or do not include it in the configuration properties.

Default

FALSE

Example

ReadGetpwnam-NewUser = TRUE