smbldap−groupmod − Modify a group
smbldap-groupmod [−g gid [−o]] [−a] [−r rid] [−s sid] [−t group type] [−n group_name ] [−m members(,)] [−x members (,)] group
The smbldap-groupmod command modifies the system account files to reflect the changes that are specified on the command line. The options which apply to the smbldap-groupmod command are
−g gid The numerical value of the group’s ID . This value must be unique, unless the −o option is used. The value must be non negative. Any files which the old group ID is the file roup ID must have the file group ID changed manually.
−n group_name
The name of the group will be changed from group to group_name.
−m members
The members to be added to the group in comma-delimeted form.
−x members
The members to be removed from the group in comma-delimted form.
−a
add an automatic Security ID for the group ( SID ). The rid of the group is calculated from the gidNumber of the group as rid=2*gidNumber+1001. Thus the resulted SID of the group is $SID−$rid where $SID and $rid are the domain SID and the group rid
−s sid
set the group SID .
The SID must be unique and defined with the domain Security ID ($SID) like sid=$SID−rid where rid is the group rid.
−r rid
set the group rid.
The SID is then calculated as sid=$SID−rid where $SID is the domain Security ID .
−t group type
set the NT Group type for the new group. Available values are 2 (domain group), 4 (local group) and 5 (builtin group). The default group type is 2.
smbldap-groupmod −g 253 development This will change the GID of the ’development’ group to ’253’.
smbldap-groupmod −n Idiots Managers This will change the name of the ’Managers’ group to ’Idiots’.
smbldap-groupmod −m "jdoe,jsmith" "Domain Admins" This will add ’jdoe’ and ’jsmith’ to the ’Domain Admins’ group.
smbldap-groupmod −x "jdoe,jsmith" "Domain Admins" This will remove ’jdoe’ and ’jsmith’ from the ’Domain Admins’ group.