pts_removeuser1
Removes a user from a protection database group
Usage
pts removeuser
-user
<user
name>+
-group
<group
name>+
[-cell
<cell
name>]
[-noauth]
[-localauth]
[-force]
[-help]
[-auth]
[-encrypt]
[-config
<config
directory>]
pts rem
-u
<user
name>+
-g
<group
name>+
[-c
<cell
name>]
[-n]
[-l]
[-f]
[-h]
[-a]
[-e]
[-co
<config
directory>]
Overview
The pts removeuser command removes each user or machine named by the -user argument from each group named by the -group argument.
To add users to a group, use the pts adduser command. To list group membership, use the pts membership command. To remove users from a group and delete the group's entry completely in a single step, use the pts delete command.
Cautions
AFS compiles each user's group membership as he or she authenticates. Any users who have valid tokens when they are removed from a group retain the privileges extended to that group's members until they discard their tokens or reauthenticate.
Options
-user<user name>+-
Specifies the name of each user entry or the IP address (complete or wildcard-style) of each machine entry to remove.
-group<group name>+-
Names each group from which to remove members.
-
-auth -
Use the calling user's tokens to communicate with the Protection Server. For more details, see pts(1).
|
Names the cell in which to run the command. For more details, see pts(1). |
|---|---|
|
Use an alternate config directory. For more details, see pts(1). |
-
-encrypt -
Encrypts any communication with the Protection Server. For more details, see pts(1).
-
-force -
Enables the command to continue executing as far as possible when errors or other problems occur, rather than halting execution at the first error.
-
-help -
Prints the online help for this command. All other valid options are ignored.
-
-localauth -
Constructs a server ticket using a key from the local /etc/openafs/server/KeyFile file. Do not combine this flag with the
-cellor-noauthoptions. For more details, see pts(1).
-
-noauth -
Assigns the unprivileged identity anonymous to the issuer. For more details, see pts(1).
Examples
The following example removes user smith from the groups "staff" and "staff:finance". Note that no switch names are necessary because only a single instance is provided for the first argument (the username).
% pts removeuser smith staff staff:financeThe following example removes three machine entries, which represent all machines in the Example Corporation network, from the group "bin-prot":
% pts removeuser -user 138.255.0.0 192.12.105.0 192.12.106.0 -group bin-protPrivilege required
The required privilege depends on the setting of the fifth privacy flag in the Protection Database for the group named by the -group argument (use the pts examine command to display the flags):
- •
-
If it is the hyphen, only the group's owner and members of the system:administrators group can remove members.
- •
-
If it is lowercase
"r", members of the group can also remove other members.
(It is not possible to set the fifth flag to uppercase "R".)
Releases
10 releases since Debian 4.0 (Etch); the text changed 9 times.
-auth since Debian 10 (Buster);
-encrypt since Debian 10 (Buster);
-localauth since Debian 5.0 (Lenny).