MKGROUP(1) CYGWIN MKGROUP(1)NAME
- Print /etc/group file to stdout
SYNOPSISmkgroup [OPTION]...
OPTIONS-l,--local [machine[,offset]]
print local groups with gid offset offset (from local machine if
no machine specified)
-L,--Local [machine[,offset]]
ditto, but generate groupname with machine prefix
-d,--domain [domain[,offset]]
print domain groups with gid offset offset (from current domain
if no domain specified)
-D,--Domain [domain[,offset]]
ditto, but generate groupname with machine prefix
-c,--current
print current group
-C,--Current
ditto, but generate groupname with machine or domain prefix
-S,--separator char
for -L, -D, -C use character char as domain\group separator in
groupname instead of the default '\'
-o,--id-offset offset
change the default offset (10000) added to gids in domain or
foreign server accounts.
-g,--group groupname
only return information for the specified group one of -l, -L,
-d, -D must be specified, too
-b,--no-builtin
don't print BUILTIN groups
-U,--unix grouplist
additionally print UNIX groups when using -l or -L on a UNIX
Samba server grouplist is a comma-separated list of groupnames
or gid ranges (root,-25,50-100).
(enumerating large ranges can take a long time!)
-s,--no-sids
(ignored)
-u,--users
(ignored)
-h,--help
print this message
-v,--version
print version information and exit
Default is to print local groups on stand-alone machines, plus domain
groups on domain controllers and domain member machines.
DESCRIPTION
The mkgroup program can be used to help configure Cygwin by creating a
/etc/group file. Its use is essential to include Windows security
information.
The command is initially called by setup.exe to create a default
/etc/group. This should be sufficient in most circumstances. However,
especially when working in a multi-domain environment, you can use
mkgroup manually to create a more complete /etc/group file for all
domains. Especially when you have the same group name used on multiple
machines or in multiple domains, you can use the -D, -L and -C
options to create unique domain\group style groupnames.
Note that this information is static. If you change the group
information in your system, you'll need to regenerate the group file
for it to have the new information.
The -d/-D and -l/-L options allow you to specify where the informa‐
tion comes from, the local SAM of a machine or from the domain, or
both. With the -d/-D options the program contacts a Domain Controller,
which my be unreachable or have restricted access. Comma-separated from
the machine or domain, you can specify an offset which is used as base
added to the group's RID to compute the gid (offset + RID = gid). This
allows you to create the same gids every time you re-run mkgroup. For
very simple needs, an entry for the current user's group can be created
by using the option -c or -C. If you want to use one of the -D, -L
or -C options, but you don't like the backslash as domain/group sepa‐
rator, you can specify another separator using the -S option, for
instance:
$ mkgroup-C -S+ > /etc/group
$ cat /etc/group
DOMAIN+my_group:S-1-5-21-2913048732-1697188782-3448811101-1144:11144:
The -o option allows for special cases (such as multiple domains)
where the GIDs might match otherwise. The -g option only prints the
information for one group. The -U option allows you to enumerate the
standard UNIX groups on a Samba machine. It's used together with -l
samba-server or -L samba-server. The normal UNIX groups are usually
not enumerated, but they can show up as a group in ls -l output.
COPYRIGHT
Cygwin is Copyright (C) 1995-2010 Red Hat, Inc.
Cygwin is Free software; for complete licensing information, refer to:
http://cygwin.com/licensing.html
SEE ALSO
The full documentation to the Cygwin API is maintained on the web at:
http://cygwin.com/cygwin-api/cygwin-api.html
The website is updated more frequently than the man pages and should be
considered the authoritative source of information.
April 2010 MKGROUP(1)
