SUMMARY: netgroups FAQ?

From: Thomas Lewis (tlewis@everest.hunter.cuny.edu)
Date: Tue Feb 02 1999 - 10:09:14 CST


Thanks for the following people who responded to my question:

Guru Prasad <z90311@hpadmin1.reliastar.com>
Mark Hargrave <hargrme@wisdom.maf.nasa.gov>
Bill.Sherman@bridge.bellsouth.com
Bismark Espinoza <bismark@alta.jpl.nasa.gov>
Sun System Admin <sysadm@its.brooklyn.cuny.edu>
Jochen Bern <bern@penthesilea.uni-trier.de>
Akash X Dhama <dhama_akash@jpmorgan.com>
Sebastian Benoit <benoit@Mathematik.Uni-Marburg.de>

Original Question

Date: Mon, 1 Feb 1999 11:32:05 -0500 (EST)
From: Thomas Lewis <tlewis@everest.hunter.cuny.edu>
To: sun-managers@sunmanagers.ececs.uc.edu
Subject: netgroups FAQ?

Hello guru's. I need to restrict access to a few machines from users on
an NIS network using netgroups but don't know how to do this. We have
though restricted what machines can mount external file systems via netgroups.
I need advice/tips on how to do this.

Answer

On Your NIS server create a file named /etc/netgroup. Create a users
group with the following syntax...

users (,usr1,) (,user2,)

Push the map then go to your client machines. On your client machine
add this line to the end of your /etc/passwd and /etc/shadow files...

+@users::::::

The final thing to do is to edit your /etc/nsswitch.conf file. Change
your passwd and group entries from using nis to compat...

passwd: files compat
group: files compat

Following this model will allow you to restrict user access to client
machines as you deem necessary.

-------------------------------------------------
Thomas Lewis
UNIX & NT Systems Administrator
Geography Department & Computer Science Department
Hunter College of the City University of New York
695 Park Avenue
New York, NY 10021

(212)772-4535 Office
(212)772-5268 Fax
tlewis@everest.hunter.cuny.edu



This archive was generated by hypermail 2.1.2 : Fri Sep 28 2001 - 23:13:14 CDT