On Unix-like operating systems, the gpasswd command edits the passwords of groups.
Group passwords are stored in the files /etc/group and /etc/gshadow./etc/group contains group information, and /etc/gshadow contains encrypted versions of the group information.
(Except for the -A and -M options, the following options cannot be combined.)
-a, --add user
Add user to the named group.
-d, --delete user
Remove user from the named group.
-h, --help
Display help message and exit.
-Q, --root CHROOT_DIR
Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory.
-r, --remove-password group
Remove the password from the named group. The group password will be empty. Only group members will be allowed to use newgrp to join the named group.
-R, --restrict group
Restrict the access to the named group. The group password is set to "!". Only group members with a password will be allowed to use newgrp to join the named group.
-A, --administratorsuser,...
Set the list of administrative users.
-M, --members user,...
Set the list of group members.
Configuration
The following configuration variables in /etc/login.defs change the behavior of gpasswd:
name
type
description
ENCRYPT_METHOD
string
This defines the system default encryption algorithm for encrypting passwords (if no algorithm is specified on the command line).
It can take one of these values: DES(default), MD5, SHA256, SHA512.
This parameter overrides the MD5_CRYPT_ENAB variable.
Note: This only affect the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
MAX_MEMBERS_PER_GROUP
number
Maximum members per group entry. When the maximum is reached, a new group entry (line) is started in /etc/group (with the same name, same password, and same GID).
The default value is 0, meaning that there are no limits in the number of members in a group.
This feature (split group) permits to limit the length of lines in the group file. This is useful to make sure that lines for NIS groups are not larger than 1024 characters.
If you need to enforce such limit, you can use 25.
Note: split groups may not be supported by all tools (even in the Shadow toolsuite). You should not use this variable unless you really need it.
MD5_CRYPT_ENAB
boolean
Indicate if passwords must be encrypted using the MD5-based algorithm. If set to yes, new passwords will be encrypted using the MD5-based algorithm compatible with the one used by recent releases of FreeBSD. It supports passwords of unlimited length and longer salt strings. Set to no if you need to copy encrypted passwords to other systems which don't understand the new algorithm. Default value is no.
This variable is superseded by the ENCRYPT_METHOD variable or by any command line option used to configure the encryption algorithm.
This variable is deprecated. You should use ENCRYPT_METHOD instead.
Note: This only affects the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
SHA_CRYPT_MIN_ROUNDSor SHA_CRYPT_MAX_ROUNDS
number
When ENCRYPT_METHOD is set to SHA256 or SHA512, this defines the number of SHA rounds used by the encryption algorithm by default (when the number of rounds is not specified on the command line). With a lot of rounds, it is more difficult to brute forcethe password. But note also that more CPU resources will be needed to authenticate users.
If not specified, the libc will choose the default number of rounds (5000).
The values must be inside the 1000—999,999,999 range.
If only one of the SHA_CRYPT_MIN_ROUNDS or SHA_CRYPT_MAX_ROUNDS values is set, then this value will be used.
If SHA_CRYPT_MIN_ROUNDS is greater than SHA_CRYPT_MAX_ROUNDS, the highest value will be used.
Note: This only affects the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
查看英文版
查看中文版
gpasswd 示例
gpasswd -a mozart musicians
將用戶莫扎特添加到音樂家組。
gpasswd -A george mathematicians
向用戶george授予組數學家的管理權限。
希望洋基隊
從洋基隊中移除用戶希望。
gpasswd -a mozart musicians
Adds the user mozart to the group musicians.
gpasswd -A george mathematicians
Give user george administrative rights to the group mathematicians.
gpasswd (編輯組的密碼)
在類Unix的操作系統上，gpasswd命令編輯組的密碼。 組密碼存儲在/etc/Group和/etc/gshadow中。/etc/Group包含組信息，/etc/gshadow包含組信息的加密版本。
On Unix-like operating systems, the gpasswd command edits the passwords of groups. Group passwords are stored in the files /etc/group and /etc/gshadow./etc/group contains group information, and /etc/gshadow contains encrypted versions of the group information.
查看英文版
查看中文版
1 gpasswd 運行系統環境
2 gpasswd 語法
3 gpasswd 示例
gpasswd 運行系統環境
unix
gpasswd 語法
（除了-A和-M選項，以下選項不能合并。）
-a, --add user
將用戶添加到命名組。
-d, --delete user
從命名組中刪除用戶。
-h，--help
顯示幫助消息并退出。
-Q，--root CHROOT_DIR
在應用更改CHROOT_DIR目錄，并從使用配置文件CHROOT_DIR目錄。
-r, --remove-password group
從命名組中刪除密碼。組密碼將為空。僅允許組成員使用newgrp加入命名組。
-R，-- restrict group
限制對命名組的訪問。組密碼設置為“ ！ ”。只有具有密碼的組成員才能被允許使用newgrp加入命名組。
-A，-- administrators 用戶， ...
設置管理用戶列表。
-M, --members user,...
設置組成員列表。
在下面的配置變量/etc/login.defs的改變的行為gpasswd：
ENCRYPT_METHOD
string
這定義了用于加密密碼的系統默認加密算法（如果在命令行上未指定算法）。
它可以采用以下值之一：DES（默認值），MD5，SHA256和SHA512。
此參數將覆蓋MD5_CRYPT_ENAB變量。
注意：這僅影響組密碼的生成。用戶密碼的生成由PAM完成，并受制于PAM配置。建議將此變量設置為與PAM配置一致。
MAX_MEMBERS_PER_GROUP
number
每個組條目的最大成員數。當達到最大值時，將在/ etc / group中啟動一個新的組條目（行）（具有相同的名稱，相同的密碼和相同的GID）。
默認值為0，表示組中的成員數量沒有限制。
此功能（拆分組）允許限制組文件中的行長。確保NIS組的行不超過1024個字符非常有用。
如果您需要強制執行此限制，則可以使用25。
注意：并非所有工具都支持拆分組（即使在Shadow工具套件中也是如此）。除非確實需要，否則不應使用此變量。
MD5_CRYPT_ENAB
boolean
指明是否必須使用基于MD5的算法對密碼進行加密。如果設置為yes，將使用與最新版本的FreeBSD兼容的基于MD5的算法對新密碼進行加密。它支持無限長度和更長鹽字符串的密碼。如果您需要將加密的密碼復制到其他不了解新算法的系統，請設置為no。默認值為no。
該變量由ENCRYPT_METHOD變量或用于配置加密算法的任何命令行選項所取代。
不建議使用此變量。您應該改為使用ENCRYPT_METHOD。
注意：這僅影響組密碼的生成。用戶密碼的生成由PAM完成，并受制于PAM配置。建議將此變量設置為與PAM配置一致。
SHA_CRYPT_MIN_ROUNDS或SHA_CRYPT_MAX_ROUNDS
number
當ENCRYPT_METHOD設置為SHA256或SHA512時，這將定義默認情況下加密算法使用的SHA輪數（當未在命令行上指定輪數時）。經過很多回合，暴力破解密碼更加困難。但也請注意，將需要更多的CPU資源來驗證用戶身份。
如果未指定，libc將選擇默認的回合數（5000）。
值必須在1000-999,999,999范圍內。
如果僅設置SHA_CRYPT_MIN_ROUNDS或SHA_CRYPT_MAX_ROUNDS值之一，則將使用此值。
如果SHA_CRYPT_MIN_ROUNDS大于SHA_CRYPT_MAX_ROUNDS，將使用最大值。
注意：這僅影響組密碼的生成。用戶密碼的生成由PAM完成，并受制于PAM配置。建議將此變量設置為與PAM配置一致。
(Except for the -A and -M options, the following options cannot be combined.)
-a, --add user
Add user to the named group.
-d, --delete user
Remove user from the named group.
-h, --help
Display help message and exit.
-Q, --root CHROOT_DIR
Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory.
-r, --remove-password group
Remove the password from the named group. The group password will be empty. Only group members will be allowed to use newgrp to join the named group.
-R, --restrict group
Restrict the access to the named group. The group password is set to "!". Only group members with a password will be allowed to use newgrp to join the named group.
-A, --administratorsuser,...
Set the list of administrative users.
-M, --members user,...
Set the list of group members.
The following configuration variables in /etc/login.defs change the behavior of gpasswd:
ENCRYPT_METHOD
string
This defines the system default encryption algorithm for encrypting passwords (if no algorithm is specified on the command line).
It can take one of these values: DES(default), MD5, SHA256, SHA512.
This parameter overrides the MD5_CRYPT_ENAB variable.
Note: This only affect the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
MAX_MEMBERS_PER_GROUP
number
Maximum members per group entry. When the maximum is reached, a new group entry (line) is started in /etc/group (with the same name, same password, and same GID).
The default value is 0, meaning that there are no limits in the number of members in a group.
This feature (split group) permits to limit the length of lines in the group file. This is useful to make sure that lines for NIS groups are not larger than 1024 characters.
If you need to enforce such limit, you can use 25.
Note: split groups may not be supported by all tools (even in the Shadow toolsuite). You should not use this variable unless you really need it.
MD5_CRYPT_ENAB
boolean
Indicate if passwords must be encrypted using the MD5-based algorithm. If set to yes, new passwords will be encrypted using the MD5-based algorithm compatible with the one used by recent releases of FreeBSD. It supports passwords of unlimited length and longer salt strings. Set to no if you need to copy encrypted passwords to other systems which don't understand the new algorithm. Default value is no.
This variable is superseded by the ENCRYPT_METHOD variable or by any command line option used to configure the encryption algorithm.
This variable is deprecated. You should use ENCRYPT_METHOD instead.
Note: This only affects the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
SHA_CRYPT_MIN_ROUNDSor SHA_CRYPT_MAX_ROUNDS
number
When ENCRYPT_METHOD is set to SHA256 or SHA512, this defines the number of SHA rounds used by the encryption algorithm by default (when the number of rounds is not specified on the command line). With a lot of rounds, it is more difficult to brute forcethe password. But note also that more CPU resources will be needed to authenticate users.
If not specified, the libc will choose the default number of rounds (5000).
The values must be inside the 1000—999,999,999 range.
If only one of the SHA_CRYPT_MIN_ROUNDS or SHA_CRYPT_MAX_ROUNDS values is set, then this value will be used.
If SHA_CRYPT_MIN_ROUNDS is greater than SHA_CRYPT_MAX_ROUNDS, the highest value will be used.
Note: This only affects the generation of group passwords. The generation of user passwords is done by PAM and subject to the PAM configuration. It is recommended to set this variable consistently with the PAM configuration.
查看英文版
查看中文版
gpasswd 示例
將用戶莫扎特添加到音樂家組。
向用戶george授予組數學家的管理權限。
希望洋基隊
從洋基隊中移除用戶希望。
Adds the user mozart to the group musicians.
Give user george administrative rights to the group mathematicians.
gpasswd -d hope yankees
Remove user hope from the group yankees.
查看英文版
查看中文版
其他命令行
gzip,gunzip and zcat | gawk | getfacl | gprof | grep | groupadd | groupdel | groupmod |