manpages.info - online man pages   

SunOS man pages : roles (1)

User Commands                                            roles(1)

NAME

roles - print roles granted to a user

SYNOPSIS

roles [ user ... ]

DESCRIPTION

The command roles prints on standard output the roles that you or the optionally-specified user have been granted. Roles are special accounts that correspond to a functional responsibility rather than to an actual person (referred to as a normal user). Each user may have zero or more roles. Roles have most of the attributes of normal users and are identified like nor- mal users in passwd(4) and shadow(4). Each role must have an entry in the user_attr(4) file that identifies it as a role. Roles can have their own authorizations and profiles. See auths(1) and profiles(1). Roles are not allowed to log into a system as a primary user. Instead, a user must log in as him or herself and assume the role. The actions of a role are attributable to the normal user. When auditing is enabled, the audited events of the role contain the audit ID of the original user who assumed the role. Roles must have valid passwords and one of the shells that interprets profiles: either pfcsh, pfksh, or pfsh. See pfexec(1). Role assumption may be performed using su(1M), rlogin(1), or some other service that supports the PAM_RUSER variable. Successful assumption requires knowledge of the role's pass- word and membership in the role. Role assignments are speci- fied in user_attr(4).

EXAMPLES

Example 1: Sample output The output of the roles command has the following form: example% roles tester01 tester02 tester01 : admin tester02 : secadmin, root example%

EXIT STATUS

The following exit values are returned: 0 Successful completion. SunOS 5.8 Last change: 10 Sep 1999 1 User Commands roles(1) 1 An error occurred.

FILES

/etc/user_attr /etc/security/auth_attr /etc/security/prof_attr

ATTRIBUTES

See attributes(5) for descriptions of the following attri- butes: ____________________________________________________________ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | |_____________________________|_____________________________| | Availability | SUNWcsu | |_____________________________|_____________________________|

SEE ALSO

auths(1), pfexec(1), profiles(1), rlogin(1), su(1M), getauusernam(3BSM), auth_attr(4), passwd(4), shadow(4), user_attr(4), attributes(5) SunOS 5.8 Last change: 10 Sep 1999 2