PowerScaleOneFS CLI Command Reference

Syntax

isi auth file create <name>
  [--password-file <path>]
  [--group-file <path>]
  [--authentication {yes | no}]
  [--create-home-directory {yes | no}]
  [--enabled {yes | no}]
  [--enumerate-groups {yes | no}]
  [--enumerate-users {yes | no}]
  [--findable-groups <string>]
  [--findable-users <string>]
  [--group-domain <string>]
  [--home-directory-template <path>]
  [--listable-groups <string>]
  [--listable-users <string>]
  [--login-shell <path>]
  [--modifiable-groups <string>]
  [--modifiable-users <string>]
  [--netgroup-file <path>]
  [--password-hash-type {NTHash | SHA256 | SHA512}
  [--normalize-groups {yes | no}]
  [--normalize-users {yes | no}]
  [--ntlm-support {all | v2only | none}]
  [--provider-domain <string>]
  [--restrict-findable {yes | no}]
  [--restrict-listable {yes | no}]
  [--restrict-modifiable {yes | no}]
  [--unfindable-groups <string>]
  [--unfindable-users <string>]
  [--unlistable-groups <string>]
  [--unlistable-users <string>]
  [--unmodifiable-groups <string>]
  [--unmodifiable-users <string>]
  [--user-domain <string>]
  [--verbose]

Options

<name>

Sets the file provider name.

--password-file <path>

Specifies the path to a passwd.db replacement file.

--group-file <path>

Specifies the path to a group replacement file.

--authentication {yes | no}

Enables or disables the use of the provider for authentication as well as identity. The default value is yes.

--create-home-directory {yes | no}

Specifies whether to create a home directory the first time a user logs in, if a home directory does not already exist for the user.

--enabled {yes | no}

Enables or disables the provider.

--findable-groups <string>

Specifies a list of groups that can be found in this provider if --restrict-findable is enabled. Repeat this option to specify each additional findable group. If populated, groups that are not included in this list cannot be resolved.

--findable-users <string>

Specifies a list of users that can be found in this provider if --restrict-findable is enabled. Repeat this option to specify each additional findable user. If populated, users that are not included in this list cannot be resolved.

--group-domain <string>

Specifies the domain that this provider will use to qualify groups. The default group domain is FILE_GROUPS.

--home-directory-template <path>

Specifies the path to use as a template for naming home directories. The path must begin with /ifs and can include special character sequences that are dynamically replaced with strings at home directory creation time that represent specific variables. For example, %U, %D, and %Z are replaced with the user name, provider domain name, and zone name, respectively. For more information, see the Home directories section.

--listable-groups <string>

Specifies a group that can be listed if --restrict-listable is enabled. Repeat this option to specify multiple list items. If populated, any groups that are not included in this list cannot be listed.

--listable-users <string>

Specifies a user that can be listed in this provider if --restrict-listable is enabled. Repeat this option to specify multiple list items. If populated, any users that are not included in this list cannot be listed.

--login-shell <path>

Specifies the path to the user's login shell. This setting applies only to users who access the file system through SSH.

--modifiable-groups <string>

Specifies a group that can be modified in this provider if --restrict-modifiable is enabled. Repeat this option to specify multiple list items. If populated, any groups that are not included in this list cannot be modified.

--modifiable-users <string>

Specifies a user that can be modified in this provider if --restrict-modifiable is enabled. Repeat this option to specify multiple list items. If populated, any users that are not included in this list cannot be modified.

--netgroup-file <path>

Specifies the path to a netgroup replacement file.

--password-hash-type {NThash | SHA256 | SHA512}

Specifies which password hash algorithm to use.

--normalize-groups {yes | no}

Normalizes group names to lowercase before lookup.

--normalize-users {yes | no}

Normalizes user names to lowercase before lookup.

--ntlm-support {all | v2only | none}

For users with NTLM-compatible credentials, specifies which NTLM versions to support. Valid values are all, v2only, and none. NTLMv2 provides additional security over NTLM.

--provider-domain <string>

Specifies the domain that the provider will use to qualify user and group names.

--restrict-findable {yes | no}

Specifies whether to check the provider for filtered lists of findable and unfindable users and groups.

--restrict-listable {yes | no}

Specifies whether to check the provider for filtered lists of listable and unlistable users and groups.

--restrict-modifiable {yes | no}

Specifies whether to check the provider for filtered lists of modifiable and unmodifiable users and groups.

--unfindable-groups <string>

If --restrict-findable is enabled and the findable groups list is empty, specifies a group that cannot be resolved by this provider. Repeat this option to specify multiple list items.

--unfindable-users <string>

If --restrict-findable is enabled and the findable users list is empty, specifies a user that cannot be resolved by this provider. Repeat this option to specify multiple list items.

--unlistable-groups <string>

If --restrict-listable is enabled and the listable groups list is empty, specifies a group that cannot be listed by this provider. Repeat this option to specify multiple list items.

--unlistable-users <string>

If --restrict-listable is enabled and the listable users list is empty, specifies a user that cannot be listed by this provider. Repeat this option to specify multiple list items.

--unmodifiable-groups <string>

If --restrict-modifiable is enabled and the modifiable groups list is empty, specifies a group that cannot be modified. Repeat this option to specify multiple list items.

--unmodifiable-users <string>

If --restrict-modifiable is enabled and the modifiable users list is empty, specifies a user that cannot be modified. Repeat this option to specify multiple list items.

--user-domain <string>

Specifies the domain that this provider will use to qualify users. The default user domain is FILE_USERS.

{--verbose | -v}

Displays more detailed information.