title: unixgroupadmin.conf
section: 5
author: Panu Kalliokoski
w_man_desc(global configuration file for Unixgroupadmin)

! SYNOPSIS

*PAR_CONFIG*

! DESCRIPTION

The unixgroupadmin.conf file specifies policies for group administration
permissions.  It also specifies the locations of different files used by
Unixgroupadmin.

The file consists of three kinds of lines: permission stanzas, parameter
stanzas and comments.  Comments start with a hash sign (''#'') and
extend to the end of line.  The other two kinds are documented below.

!! Permission stanzas

All permission stanzas take the form:
{{{
allow <operation> by <role>
}}}

Here, operation is one of *group* subcommands (create, join, part or
setresp), and <role> is a user name.  There are also these special
values for <role>:

anyone::
	the operation can be performed by anyone.  (Note that in any
	case, only members of the group can be made as the person
	responsible for the group.)

self::
	the operation can be performed by anyone, as long as the user
	joined, parted, or set responsible is the performer of the
	operation.  (Note that in any case, only members of the group
	can be made as the person responsible for the group.)

member::
	the operation can be performed by all members of the group in
	question.

responsible::
	the operation can be performed only by the person responsible
	for the group.

When an operation is attempted, it is allowed if any applicable
permission stanza is found in unixgroupadmin.conf.  If no such stanza
exists, the operation is denied.

!! Parameter stanzas

All parameter stanzas take the form:
{{{
PARAMETER=value
}}}

Currently, the only parameters are:

LIBDIR::
	the directory where various Unixgroupadmin scripts are
	installed.

LOGFILE::
	the file where Unixgroupadmin will log all performed actions and
	outcomes.

GROUPFILE::
	the file which Unixgroupadmin will edit in order to implement
	the group (and membership) changes.

! EXAMPLES

Here is a simple unixgroupadmin.conf file that allows the user "lucille"
to manage groups and anyone to part from their groups:

{{{
LIBDIR=/usr/lib/unixgroupadmin
LOGFILE=/var/log/unixgroupadmin.log
GROUPFILE=/etc/group
allow create by lucille
allow join by lucille
allow part by lucille
allow part by self
allow setresp by lucille
}}}

Other examples can be found in ''/usr/share/doc/unixgroupadmin''.

! SEE ALSO

group(1), ''/usr/share/doc/unixgroupadmin/config.*''

! AUTHOR

Written by w_author.