AIX 6 加密文件系统（Encrypted File System），第 5 部分：组管理

核心提示： 现在，可以成功地创建 group1 的密钥存储库，AIX 6 加密文件系统（Encrypted File System），第 5 部分：组管理(3)， 自动地将 group1 密钥存储库的访问密钥发送到 user3 密钥存储库，当 user3 登录时

现在，可以成功地创建 group1 的密钥存储库。

自动地将 group1 密钥存储库的访问密钥发送到 user3 密钥存储库。当 user3 登录时，将自动地加载 group1 密钥存储库的访问密钥。

示例 3 创建组密钥存储库

# mkgroup group1
# lsgroup -a id users adms group1
group1 id=207 users=
# ls -al /var/efs/groups total 0
drwx------ 4 root system 256 May 02 14:12 .
drwxr-xr-x 5 root system 256 May 02 13:34 ..
-rw------- 1 root system 0 May 02 13:34 .lock
drwx------ 2 root system 256 May 02 14:12 group1
drwx------ 2 root system 256 May 02 13:34 security
# ls -al /var/efs/groups/group1
total 0
drwx------ 2 root system 256 May 02 14:12 .
drwx------ 4 root system 256 May 02 14:12 ..
-rw------- 1 root system 0 May 02 14:12 .lock
# efskeymgr -C group1
Encryption framework returned an error:
(The group does not contain any member with EFS crypto info)
kernel:The system call does not exist on this system.
# mkuser user3;chgroup users=user3 group1;lsgroup -a id users adms group1
group1 id=207 users=user3
# efskeymgr -C group1
Encryption framework returned an error:
(The group does not contain any member with EFS crypto info)
kernel:The system call does not exist on this system.
# passwd user3
Changing password for "user3"
user3's New password:
Enter the new password again:
# efskeymgr -C group1
# ls -al /var/efs/groups/group1
total 8
drwx------ 2 root system 256 May 02 14:27 .
drwx------ 4 root system 256 May 02 14:12 ..
-rw------- 1 root system 0 May 02 14:12 .lock
-rw------- 1 root system 1914 May 02 14:27 keystore
$ id uid=209(user3) gid=1(staff) groups=207(group1)
$ efskeymgr -v user3's EFS password:
Keystore content:
Keystore owner ............: uid 209
Keystore mode .............: admin:managed by EFS administrator
Password changed last on ..: 05/02/07 at 14:27:21
Private key:
Algorithm :RSA_1024
Fingerprint :7dc53a23:b8d1d7f0:c6f43e88:ae7be372:f585f4e4
Validity :This key is valid.
Access key to keystore group/group1