| ## Ensuring Consistent Local Files The passwd_export command makes the standard /etc/passwd and /etc/group files on the local machine consistent with the registry database. Run the passwd_export command on a regular, but staggered, basis preferably as part of cron processing. If passwd_export succeeds in creating the new password and group files, it saves the current files as backups that are named passwd.bak and group.bak. If it fails, it leaves the current files as is. The passwd_export command has the following syntax: passwd_export [-n][-d directory_name] [-x] [-m max_entries] [-s] | [-h[elp] [-v] where: -n Specifies that passwd_override and group_override file entries should be ignored. Without this flag, passwd_export applies the override entries from both files to the local password and group files that it creates. -d directory_name Specifies the name of a directory in which to store the local password and group files that are created by passwd_export. If you do not enter this option, the files are stored by default in the /etc directory on the local node. For example, to store the files in the directory that is called /etc/locals, enter the command in the following form: dceshared/bin/passwd_export -d/etc/locals -x Prohibits the creation of entries for users with password or group overrides (on the local machine) that specify OMIT as their encrypted password. Use the -x option to exclude "omitted'' users or groups from the password and group files that are created by passwd_export . To omit a user, you must create an override entry for the user and enter the word OMIT as the user's password field entry. Omitted users are unable to log into the local machine. (See Omitting Users from the Local Password Files .) To omit a group, create an override entry for the group and enter the word OMIT as the group's password field entry. -m max_entries Sets the maximum number of registry entries that are put in the /etc/passwd and /etc/group files. -s Sorts the entries in the /etc/passwd and /etc/group files by UNIX number. If this option is not specified, the entries are in the random order in which they are retrieved from the registry. -h[elp] Displays help information. -v Runs in verbose mode. ##