selang command: Looking for 'unix' parameter clarification

We have an etrust enabled Solaris 11 host. I was looking at one of the scripts created by our Engineering team which has below command lines.

selang -s -c  "ng grp1 owner(etrust) ***unix*** groupid(1234)"

selang -s -c "nu user1 ***unix*** homedir(/export/home/user1) shellprog(/bin/ksh) userid(5678) pgroup(user1) gecos(New user creation for test purpose)"

When I looked at the available selang environments, I see AC is the default environment.

Would like to know if creating user and group with unix argument in above selang commands is same as creating local user and group on unix system? If so, is unix argument just being used as server is etrust enabled?

Thanks and Regards


Asked By: Akshay


Yes. The ng and nu commands create a group or user in the server’s local eTrust database. When you specify the unix option to either of them, a local user or group will also be created using the options that follow. It’s just a shortcut, and you could just as easily omit the unix options and create the local group or account outside of selang using native OS tools (e.g., groupadd or useradd).

The unix options are not stored in the eTrust database.

Answered By: James Sneeringer
Categories: Answers Tags: ,
Answers are sorted by their score. The answer accepted by the question owner as the best is marked with
at the top-right corner.