The passwd_override File Format

principal_name:passwd:principal_uid:group_uid:GECOS:home_dir:shell

where:

principal_name
A keyfield that contains a principal name that identifies the principal to whose account the override applies. Enter principal_name to apply the override only to the account for the principal's primary name and not to any accounts for the principal's aliases.

You must enter one of the keyfields (principal_name, principal_uid, or group_uid) to identify the account(s) to which the override applies.

passwd
The encrypted password. If you specify an override, the password that you enter here is in effect for this local machine only.

You can also specify OMIT in the passwd field to disallow login on the local machine. The use of OMIT in conjunction with an option to the passwd_export command prevents the inclusion of the user in the password file created by passwd_export. (See Omitting Users from the Local Password Files.)

principal_uid
The principal_uid field, which contains a UNIX ID that specifies the local identity of a principal, can function as a keyfield when the principal_name keyfield is not entered, or as a field containing an override when entered in conjunction with principal_name.

Enter principal_uid and not principal_name when you want to apply the overrides to all of a principal's accounts, including any accounts for the principal's aliases. The principal_uid keyfield is especially useful for overrides to root. For example, if root has an alias of virtuoso, an override that is keyed by principal name applies only when root logs in as root. An override that is keyed by root's principal_uid applies when root logs in as root, as virtuoso, and under any other alias.

Enter principal_uid and principal_name to override the UNIX ID of the named principal.

group_uid
The group_uid field, which contains a group UNIX ID, can function as a keyfield when no other keyfields are entered, or as a field containing an override when entered in conjunction with principal_name or principal_uid.

Enter group_uid and no other keyfield (principal_name or principal_uid) to apply the override to all members of the group that is identified by group_uid. In this instance, the group_uid field functions as a keyfield, identifying the accounts to which to apply the overrides; that is, accounts whose principal is a member of the specified group.

Enter group_uid and principal_name to change the group of the principal that is identified by principal_name to the group that is identified by group_uid. The change applies only to the account for the principal's primary name, not to any accounts for the principal's aliases. Enter group_uid and principal_uid to apply the group override to all of the principal's accounts, including any for the principal's aliases. In these instances, the group_uid field functions as a field that supplies override information, not as a keyfield.

GECOS
The account's GECOS field. If you specify an override, it is reflected in the information that is displayed by the UNIX finger command.

home_dir
The account's home directory. If you specify an override, the directory that you specify is the account's home directory on this machine only.

shell
The shell that is invoked when the account logs in. If you specify an override, the shell that you specify is invoked at login to this machine.