MKGROUP(1)

NAME
 - Print /etc/group file to stdout

SYNOPSIS
mkgroup [OPTION]...

OPTIONS

-l,--local [machine[,offset]]
    print local groups with gid offset offset (from local machine if no machine specified)

-L,--Local [machine[,offset]]
    ditto, but generate groupname with machine prefix

-d,--domain [domain[,offset]]
    print domain groups with gid offset offset (from current domain if no domain specified)

-D,--Domain [domain[,offset]]
    ditto, but generate groupname with machine prefix

-c,--current
    print current group

-C,--Current
    ditto, but generate groupname with machine or domain prefix

-S,--separator char
    for -L, -D, -C use character char as domain\group separator in groupname instead of the default '\'

-o,--id-offset offset
    change the default offset (10000) added to gids in domain or foreign server accounts.

-g,--group groupname
    only return information for the specified group one of -l, -L, -d, -D must be specified, too

-b,--no-builtin
    don't print BUILTIN groups

-U,--unix grouplist
    additionally print UNIX groups when using -l or -L on a UNIX Samba server grouplist is a comma-separated list of groupnames or gid ranges (root,-25,50-100).

               (enumerating large ranges can take a long time!)

-s,--no-sids
    (ignored)

-u,--users
    (ignored)

-h,--help
    print this message

-v,--version
    print version information and exit

Default is to print local groups on stand-alone machines, plus domain groups on domain controllers and domain member machines.

DESCRIPTION
The mkgroup program can be used to help configure Cygwin by creating a /etc/group file. Its use is essential to include Windows security information.

The command is initially called by setup.exe to create a default /etc/group. This should be sufficient in most circumstances. However, especially when working in a multi-domain environment, you can use mkgroup manually to create a more complete /etc/group file for all domains. Especially when you have the same group name used on multiple machines or in multiple domains, you can use the -D, -L and -C options to create unique domain\group style groupnames.

   Note that this information is static. If you change the group information in your system, you'll need to regenerate the group file for it to have the new information.

The -d/-D and -l/-L options allow you to specify where the information comes from, the local SAM of a machine or from the domain, or both. With the -d/-D options the program contacts a Domain Controller, which my be unreachable or have restricted access. Comma-separated from the machine or domain, you can specify an offset which is used as base added to the group's RID to compute the gid (offset + RID = gid). This allows you to create the same gids every time you re-run mkgroup. For very simple needs, an entry for the current user's group can be created by using the option -c or -C. If you want to use one of the -D, -L or -C options, but you don't like the backslash as domain/group separator, you can specify another separator using the -S option, for instance:

$ mkgroup -C -S+ > /etc/group
$ cat /etc/group
DOMAIN+my_group:S-1-5-21-2913048732-1697188782-3448811101-1144:11144:

The -o option allows for special cases (such as multiple domains) where the GIDs might match otherwise. The -g option only prints the information for one group. The -U option allows you to enumerate the standard UNIX groups on a Samba machine. It's used together with -l samba-server or -L samba-server. The normal UNIX groups are usually not enumerated, but they can show up as a group in ls -l output.

COPYRIGHT
Cygwin is Copyright (C) 1995-2010 Red Hat, Inc.

Cygwin is Free software; for complete licensing information, refer to: http://cygwin.com/licensing.html

SEE ALSO
The full documentation to the Cygwin API is maintained on the web at: http://cygwin.com/cygwin-api/cygwin-api.html The website is updated more frequently than the man pages and should be considered the authoritative source of information.